Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-16 21:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Merge remote-tracking branch 'origin/topic/robin/spicy-news'

Browse source 
* origin/topic/robin/spicy-news:
  Add Spicy updates to NEWS for 6.0.

(cherry picked from commit f3b306a2ec)
This commit is contained in:
Arne Welzel 2023-06-15 18:42:44 +02:00 • committed by Tim Wojtulewicz
parent 7ef1099d37
commit 9b0947f918
1 changed files with 13 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

13
NEWS
View file

@ -91,6 +91,19 @@ New Functionality
To disable this functionality, pass ``--disable-javascript`` to configure.
- Zeek now comes with Spicy support built in, meaning it can now
leverage any analyzers written in Spicy out of the box. While the
interface layer connecting Zeek and Spicy used to be implemented
through an external Zeek plugin, that code has now moved into the
Zeek code base itself. We also added infrastructure to Zeek that
enables its built-in standard analyzers to use Spicy instead of
Binpac. As initial (simple) examples, Zeek's Syslog and Finger
analyzers are now implemented in Spicy. While their legacy versions
remain available as fallbacks for now in case Spicy gets explicitly
disabled at build time, their use is deprecated and their code won't
be maintained any further. (Some of these Spicy updates were part of
Zeek 5.2 already, but hadn't been included in its NEWS section.)
- Zeek events now hold network timestamps. For scheduled events, the timestamp
represents the network time for which the event was scheduled for, otherwise
it is the network time at event creation. A new bif ``current_event_time()``