Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 06:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Merge branch 'topic/christian/fix-zeekygen-quic-warning'

Browse source 
* topic/christian/fix-zeekygen-quic-warning:
  Fix Zeekygen warning for QUIC::unrecognized_version event
This commit is contained in:
Christian Kreibich 2024-05-24 15:04:27 -07:00
commit e6b41defa0
3 changed files with 19 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

4
CHANGES
View file

@ -1,3 +1,7 @@
7.0.0-dev.284 | 2024-05-24 15:04:27 -0700
* Fix Zeekygen warning for QUIC::unrecognized_version event (Christian Kreibich, Corelight)
7.0.0-dev.282 | 2024-05-24 10:49:31 -0700 7.0.0-dev.282 | 2024-05-24 10:49:31 -0700
* Update TLS consts, mainly new named curves. (Johanna Amann, Corelight) * Update TLS consts, mainly new named curves. (Johanna Amann, Corelight)

2
VERSION
View file

@ -1 +1 @@
7.0.0-dev.282 7.0.0-dev.284

14
scripts/base/protocols/quic/spicy-events.zeek
View file

@ -80,3 +80,17 @@ global QUIC::zero_rtt_packet: event(c: connection, is_orig: bool, version: count
## ##
## .. note:: Packets with CONNECTION_CLOSE frames are usually encrypted after connection establishment and not visible to Zeek. ## .. note:: Packets with CONNECTION_CLOSE frames are usually encrypted after connection establishment and not visible to Zeek.
global QUIC::connection_close_frame: event(c: connection, is_orig: bool, version: count, dcid: string, scid: string, error_code: count, reason_phrase: string); global QUIC::connection_close_frame: event(c: connection, is_orig: bool, version: count, dcid: string, scid: string, error_code: count, reason_phrase: string);
## Generated for an unrecognized QUIC version.
##
## c: The connection.
##
## is_orig: True if the packet is from the the connection's originator.
##
## version: The Version field.
##
## dcid: The Destination Connection ID field.
##
## scid: The Source Connection ID field.
global QUIC::unhandled_version: event(c: connection, is_orig: bool, version: count, dcid: string, scid: string);