diff --git a/CHANGES b/CHANGES index b4c96ec840..c79c7cac38 100644 --- a/CHANGES +++ b/CHANGES @@ -1,3 +1,7 @@ +6.0.0-dev.150 | 2023-03-02 12:49:16 -0700 + + * Default known stores to false to avoid Broker stores (Tim Wojtulewicz, Corelight) + 6.0.0-dev.148 | 2023-03-02 10:05:06 +0100 * logging/Manager: Remove unused variable (Arne Welzel, Corelight) diff --git a/VERSION b/VERSION index bf95e5f05e..9ee217336a 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -6.0.0-dev.148 +6.0.0-dev.150 diff --git a/scripts/policy/protocols/conn/known-hosts.zeek b/scripts/policy/protocols/conn/known-hosts.zeek index 4bd123abdd..822bd26ad5 100644 --- a/scripts/policy/protocols/conn/known-hosts.zeek +++ b/scripts/policy/protocols/conn/known-hosts.zeek @@ -28,7 +28,7 @@ export { ## When true, use a Broker data store, else use a regular Zeek set ## with keys uniformly distributed over proxy nodes in cluster ## operation. - const use_host_store = T &redef; + const use_host_store = F &redef; ## The hosts whose existence should be logged and tracked. ## See :zeek:type:`Host` for possible choices. diff --git a/scripts/policy/protocols/conn/known-services.zeek b/scripts/policy/protocols/conn/known-services.zeek index c8017911bd..3c323525fd 100644 --- a/scripts/policy/protocols/conn/known-services.zeek +++ b/scripts/policy/protocols/conn/known-services.zeek @@ -37,7 +37,7 @@ export { ## When true, use a Broker data store, else use a regular Zeek set ## with keys uniformly distributed over proxy nodes in cluster ## operation. - const use_service_store = T &redef; + const use_service_store = F &redef; ## Require UDP server to respond before considering it an "active service". option service_udp_requires_response = T; diff --git a/scripts/policy/protocols/ssl/known-certs.zeek b/scripts/policy/protocols/ssl/known-certs.zeek index cd4fa23ccd..a5dd1d2382 100644 --- a/scripts/policy/protocols/ssl/known-certs.zeek +++ b/scripts/policy/protocols/ssl/known-certs.zeek @@ -37,7 +37,7 @@ export { ## When true, use a Broker data store, else use a regular Zeek set ## with keys uniformly distributed over proxy nodes in cluster ## operation. - const use_cert_store = T &redef; + const use_cert_store = F &redef; type AddrCertHashPair: record { host: addr; diff --git a/testing/external/commit-hash.zeek-testing-private b/testing/external/commit-hash.zeek-testing-private index 496448b15b..c87cbed312 100644 --- a/testing/external/commit-hash.zeek-testing-private +++ b/testing/external/commit-hash.zeek-testing-private @@ -1 +1 @@ -41f6eb60c626316f0554548fcfa1ab07ddcf61a0 +db9ce1c0c2aa9df87126061763f0e4faf749a8cb \ No newline at end of file