Move c$service_violation to deprecated-dpd-log.zeek

This moves c$service_violation to the deprecated-dpd-log policy script.

This is the only script in the distribution that uses the field, and it
is unlikely to be used externally. It is also responsible for a
significant amount of memory use by itself.

This also restores the field being populated, which was broken in
GH-4362
This commit is contained in:
Johanna Amann 2025-07-24 10:34:20 +01:00
parent 86ab82c0df
commit 8de178d923
15 changed files with 3977 additions and 3973 deletions

View file

@ -25,10 +25,6 @@ export {
}
redef record connection += {
## The set of services (analyzers) for which Zeek has observed a
## violation after the same service had previously been confirmed.
service_violation: set[string] &default=set() &ordered &deprecated="Remove in v8.1. Consider using failed_analyzers instead";
## The set of prototol analyzers that were removed due to a protocol
## violation after the same analyzer had previously been confirmed.
failed_analyzers: set[string] &default=set() &ordered;