Merge remote-tracking branch 'origin/topic/robin/gh-3440-file-handles'

* origin/topic/robin/gh-3440-file-handles:
  Spicy: Query Zeek scriptland for file handles.
This commit is contained in:
Robin Sommer 2024-05-07 09:44:41 +02:00
commit 083c682878
No known key found for this signature in database
GPG key ID: D8187293B3FFE5D0
8 changed files with 86 additions and 32 deletions

7
NEWS
View file

@ -71,6 +71,13 @@ Changed Functionality
now timeout after 5 minutes by default instead of no timeout, and extracted
files now have a default size limit of 100MB instead of unlimited.
- If a Spicy protocol analyzers feeds data into file analysis, it now
needs to call Zeek's `Files::register_protocol()` and provide a
callback for computing file handles. If that's missing, Zeek will
issue a warning. While this was not necessary in previous versions,
it aligns with the same requirement for traditional analyzers and
enables customizing file handles for protocol-specific semantics.
Removed Functionality
---------------------