Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-08 09:38:19 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Updating baselines and NEWS.

Browse source
This commit is contained in:
Robin Sommer 2012-06-18 15:58:52 -07:00
parent ce1b9eb8ff
commit cf593f13e0
3 changed files with 8 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

4
NEWS
View file

@ -60,8 +60,8 @@ Bro 2.1
signature_files constant, this can be used to load signatures signature_files constant, this can be used to load signatures
relative to the current script (e.g., "@load-sigs ./foo.sig"). relative to the current script (e.g., "@load-sigs ./foo.sig").
- The options encap_hdr_size and tunnel_port have been removed. Bro - The options "tunnel_port" and "parse_udp_tunnels" have been removed.
now supports decapsulating tunnels directly for protocols it Bro now supports decapsulating tunnels directly for protocols it
understands. understands.
TODO: Extend. TODO: Extend.

6
testing/btest/Baseline/scripts.base.frameworks.logging.dataseries.time-as-int/conn.ds.txt
View file

@ -28,7 +28,7 @@
<field type="int64" name="orig_ip_bytes" /> <field type="int64" name="orig_ip_bytes" />
<field type="int64" name="resp_pkts" /> <field type="int64" name="resp_pkts" />
<field type="int64" name="resp_ip_bytes" /> <field type="int64" name="resp_ip_bytes" />
<field type="variable32" name="parents" pack_unique="yes"/> <field type="variable32" name="tunnel_parents" pack_unique="yes"/>
</ExtentType> </ExtentType>
<!-- ts : time --> <!-- ts : time -->
<!-- uid : string --> <!-- uid : string -->
@ -49,10 +49,10 @@
<!-- orig_ip_bytes : count --> <!-- orig_ip_bytes : count -->
<!-- resp_pkts : count --> <!-- resp_pkts : count -->
<!-- resp_ip_bytes : count --> <!-- resp_ip_bytes : count -->
<!-- parents : table[string] --> <!-- tunnel_parents : table[string] -->
# Extent, type='conn' # Extent, type='conn'
ts uid id.orig_h id.orig_p id.resp_h id.resp_p proto service duration orig_bytes resp_bytes conn_state local_orig missed_bytes history orig_pkts orig_ip_bytes resp_pkts resp_ip_bytes parents ts uid id.orig_h id.orig_p id.resp_h id.resp_p proto service duration orig_bytes resp_bytes conn_state local_orig missed_bytes history orig_pkts orig_ip_bytes resp_pkts resp_ip_bytes tunnel_parents
1300475167096535 UWkUyAuUGXf 141.142.220.202 5353 224.0.0.251 5353 udp dns 0 0 0 S0 F 0 D 1 73 0 0 1300475167096535 UWkUyAuUGXf 141.142.220.202 5353 224.0.0.251 5353 udp dns 0 0 0 S0 F 0 D 1 73 0 0
1300475167097012 arKYeMETxOg fe80::217:f2ff:fed7:cf65 5353 ff02::fb 5353 udp 0 0 0 S0 F 0 D 1 199 0 0 1300475167097012 arKYeMETxOg fe80::217:f2ff:fed7:cf65 5353 ff02::fb 5353 udp 0 0 0 S0 F 0 D 1 199 0 0
1300475167099816 k6kgXLOoSKl 141.142.220.50 5353 224.0.0.251 5353 udp 0 0 0 S0 F 0 D 1 179 0 0 1300475167099816 k6kgXLOoSKl 141.142.220.50 5353 224.0.0.251 5353 udp 0 0 0 S0 F 0 D 1 179 0 0

6
testing/btest/Baseline/scripts.base.frameworks.logging.dataseries.wikipedia/conn.ds.txt
View file

@ -28,7 +28,7 @@
<field type="int64" name="orig_ip_bytes" /> <field type="int64" name="orig_ip_bytes" />
<field type="int64" name="resp_pkts" /> <field type="int64" name="resp_pkts" />
<field type="int64" name="resp_ip_bytes" /> <field type="int64" name="resp_ip_bytes" />
<field type="variable32" name="parents" pack_unique="yes"/> <field type="variable32" name="tunnel_parents" pack_unique="yes"/>
</ExtentType> </ExtentType>
<!-- ts : time --> <!-- ts : time -->
<!-- uid : string --> <!-- uid : string -->
@ -49,10 +49,10 @@
<!-- orig_ip_bytes : count --> <!-- orig_ip_bytes : count -->
<!-- resp_pkts : count --> <!-- resp_pkts : count -->
<!-- resp_ip_bytes : count --> <!-- resp_ip_bytes : count -->
<!-- parents : table[string] --> <!-- tunnel_parents : table[string] -->
# Extent, type='conn' # Extent, type='conn'
ts uid id.orig_h id.orig_p id.resp_h id.resp_p proto service duration orig_bytes resp_bytes conn_state local_orig missed_bytes history orig_pkts orig_ip_bytes resp_pkts resp_ip_bytes parents ts uid id.orig_h id.orig_p id.resp_h id.resp_p proto service duration orig_bytes resp_bytes conn_state local_orig missed_bytes history orig_pkts orig_ip_bytes resp_pkts resp_ip_bytes tunnel_parents
1300475167.096535 UWkUyAuUGXf 141.142.220.202 5353 224.0.0.251 5353 udp dns 0.000000 0 0 S0 F 0 D 1 73 0 0 1300475167.096535 UWkUyAuUGXf 141.142.220.202 5353 224.0.0.251 5353 udp dns 0.000000 0 0 S0 F 0 D 1 73 0 0
1300475167.097012 arKYeMETxOg fe80::217:f2ff:fed7:cf65 5353 ff02::fb 5353 udp 0.000000 0 0 S0 F 0 D 1 199 0 0 1300475167.097012 arKYeMETxOg fe80::217:f2ff:fed7:cf65 5353 ff02::fb 5353 udp 0.000000 0 0 S0 F 0 D 1 199 0 0
1300475167.099816 k6kgXLOoSKl 141.142.220.50 5353 224.0.0.251 5353 udp 0.000000 0 0 S0 F 0 D 1 179 0 0 1300475167.099816 k6kgXLOoSKl 141.142.220.50 5353 224.0.0.251 5353 udp 0.000000 0 0 S0 F 0 D 1 179 0 0