Merge branch 'known_services_multiprotocols' of https://github.com/mauropalumbo75/zeek

Browse source

* 'known_services_multiprotocols' of https://github.com/mauropalumbo75/zeek:
  improve logging with broker store
  drop services starting with -
  remove service from key for Cluster::publish_hrw
  remove check for empty services
  update tests
  order list of services in store key
  remove repeated services in logs if already seen
  add multiprotocol known_services when Known::use_service_store = T
  remove hyphen in front of some services (for example -HTTP, -SSL)   In some cases, there is an hyphen before the protocol name in the field   connection$service. This can cause problems in known_services and   is removed here. It originates probably in some analyzer where it   would be better removed in the future.
  add multiprotocol known_services when Known::use_service_store = F

Changes during merge:
  * whitespace
  * add unit test

...

This commit is contained in:

Jon Siwek 2019-08-09 10:43:28 -07:00

parent a68c9f6b71 e206347d1a

commit bf9b983f00

10 changed files with 119 additions and 30 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

BIN

testing/btest/Traces/ssl-and-ssh-using-sslh.trace Normal file

View file

Binary file not shown.