Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 14:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Merge branch 'topic/christian/news-typos'

Browse source 
* topic/christian/news-typos:
  Minor fixes to a few NEWS entries.

(cherry picked from commit 2929f1eb17)
This commit is contained in:
Christian Kreibich 2025-08-21 17:10:05 -07:00 • committed by Tim Wojtulewicz
parent 53b88d33b6
commit 9e66cf873b
3 changed files with 16 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

11
CHANGES
View file

@ -1,3 +1,14 @@
8.0.0-8 | 2025-08-25 12:31:35 -0700
* Merge branch 'topic/christian/news-typos' (Christian Kreibich, Corelight)
* topic/christian/news-typos:
Minor fixes to a few NEWS entries.
(cherry picked from commit 2929f1eb175e86799c8926ac8b0f1eeb5c9eac3d)
* Bump zeekctl submodule for MetricsAddr docs (Tim Wojtulewicz, Corelight)
8.0.0-6 | 2025-08-22 09:25:14 -0700 8.0.0-6 | 2025-08-22 09:25:14 -0700
* cluster/Backend: Fallback to current network time when current event has not timestamp (Arne Welzel, Corelight) * cluster/Backend: Fallback to current network time when current event has not timestamp (Arne Welzel, Corelight)

8
NEWS
View file

@ -288,7 +288,7 @@ New Functionality
- Zeek now supports extracting the PPPoE session ID. The ``PacketAnalyzer::PPPoE::session_id`` - Zeek now supports extracting the PPPoE session ID. The ``PacketAnalyzer::PPPoE::session_id``
BiF can be used to get the session ID of the current packet. BiF can be used to get the session ID of the current packet.
The ``onn/pppoe-session-id-logging.zeek`` policy script adds pppoe session IDs to the The ``conn/pppoe-session-id-logging.zeek`` policy script adds pppoe session IDs to the
connection log. connection log.
The ``get_conn_stats()`` function's return value now includes the number of packets The ``get_conn_stats()`` function's return value now includes the number of packets
@ -362,7 +362,7 @@ Changed Functionality
times in X509 certificates as local times. times in X509 certificates as local times.
- The PPPoE parser now respects the size value given in the PPPoE header. Data - The PPPoE parser now respects the size value given in the PPPoE header. Data
beyon the size given in the header will be truncated. beyond the size given in the header will be truncated.
- Record fields with ``&default`` attributes initializing empty ``vector``, ``table`` - Record fields with ``&default`` attributes initializing empty ``vector``, ``table``
or ``set`` instances are now deferred until they are accessed, potentially or ``set`` instances are now deferred until they are accessed, potentially
@ -754,7 +754,7 @@ New Functionality
some updates to Zeek's internal DNS resolver due to changes in the c-ares some updates to Zeek's internal DNS resolver due to changes in the c-ares
API. At least version v1.28.0 is now required to build Zeek. API. At least version v1.28.0 is now required to build Zeek.
- Python 3.9 is now required for Zeek and all of it's associated subprojects. - Python 3.9 is now required for Zeek and all of its associated subprojects.
- IP-based connections that were previously not logged due to using an unknown - IP-based connections that were previously not logged due to using an unknown
IP protocol (e.g. not TCP, UDP, or ICMP) now appear in conn.log. All conn.log IP protocol (e.g. not TCP, UDP, or ICMP) now appear in conn.log. All conn.log
@ -845,7 +845,7 @@ New Functionality
analyzer used for processing the packet when the event is raised. The analyzer used for processing the packet when the event is raised. The
``unknown_protocol.log`` file was extended to include this information. ``unknown_protocol.log`` file was extended to include this information.
- The MySQL analyzer now generates a ``mysql_user_change()`` event when the user - The MySQL analyzer now generates a ``mysql_change_user()`` event when the user
changes mid-session via the ``COM_USER_CHANGE`` command. changes mid-session via the ``COM_USER_CHANGE`` command.
- The DNS analyzer was extended to support TKEY RRs (RFC 2390). A corresponding - The DNS analyzer was extended to support TKEY RRs (RFC 2390). A corresponding

2
VERSION
View file

@ -1 +1 @@
8.0.0-6 8.0.0-8