Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-13 12:08:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Move Conn::set_conn() from connection_state_remove to new_connection

Browse source 
c$conn is often needed for connection events, but it being established
in connection_state_removed can be a problem because event handlers have
to remember to call Con::set_conn().

This commit moves to call Conn::set_conn() in new_connection.

Addresses GH-4202

update logs
This commit is contained in:
Johanna Amann 2025-07-23 09:06:55 +01:00
parent 96f9cc73c3
commit 3e4f67e67c
26 changed files with 4188 additions and 4112 deletions
Download patch file Download diff file Expand all files Collapse all files

2
scripts/policy/protocols/conn/failed-service-logging.zeek
View file

@ -30,8 +30,6 @@ event analyzer_failed(ts: time, atype: AllAnalyzers::Tag, info: AnalyzerViolatio
if ( analyzer_name !in c$service || analyzer_name in c$failed_analyzers )
return;
set_conn(c, F);
local aname = to_lower(Analyzer::name(atype));
# No duplicate logging
if ( c$conn?$failed_service && aname in c$conn$failed_service )