Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 06:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Merge branch 'topic/jgras/connection-packet-threshold' of https://github.com/J-Gras/zeek

Browse source 
* 'topic/jgras/connection-packet-threshold' of https://github.com/J-Gras/zeek:
  Add NEWS entry for generic packet thresholds
  Allow for multiple generic packet thresholds
  Add btest for conn_generic_packet_threshold_crossed event
  Update dump-events btest baseline
  Add conn_generic_packet_threshold_crossed event
This commit is contained in:
Arne Welzel 2025-07-08 17:53:56 +02:00
commit 0c60f2a70a
11 changed files with 140 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

18
CHANGES
View file

@ -1,3 +1,21 @@
8.0.0-dev.615 | 2025-07-08 17:53:56 +0200
* Add NEWS entry for generic packet thresholds (Jan Grashoefer, Corelight)
* Allow for multiple generic packet thresholds (Jan Grashoefer, Corelight)
Co-authored-by: Arne Welzel <arne.welzel@corelight.com>
* Add btest for conn_generic_packet_threshold_crossed event (Jan Grashoefer, Corelight)
* Update dump-events btest baseline (Jan Grashoefer, Corelight)
Changes in endpoint stats are a side-effect caused by the ConnSize
analyzer updating the conn record triggering the threshold event. The
phenomenon is described in https://github.com/zeek/zeek/issues/4214.
* Add conn_generic_packet_threshold_crossed event (Jan Grashoefer, Corelight)
8.0.0-dev.609 | 2025-07-08 11:42:05 +0100
* PPPoE: don't forward more bytes than header indicates (Johanna Amann, Corelight)