6 commits

Author	SHA1	Message	Date
Tim Wojtulewicz	5e5aceb6f7	Rename protocol_id field to ip_proto and similar renaming for name field	2024-11-13 12:02:00 -07:00
Tim Wojtulewicz	35ec9733c0	Add conn.log entries for connections with unhandled IP protocols	2024-11-13 11:25:40 -07:00
Christian Kreibich	1843e2daae	Update btest baselines to reflect the use of local address ranges.	2023-03-15 17:11:04 -07:00
Tim Wojtulewicz	f7e3556a67	Store a single map of Sessions instead of split maps of Connections. ... This commit also includes: - Storing the transport protocol in ConnID and ConnIDKey to allow tcp and udp connections from the same IP/Port combinations. This happens in the core.cisco-fabric-path test, for example. - Lots of test updates. The reasons for these are two fold. First, with the change to only store a single map means that TCP, UDP, and ICMP connections are now mixed. When Zeek drains the map at shutdown, it drains each of those protocols together instead of separately. The second is because of how Sessions are stored in the map. We're now storing them keyed by the hash of the key stored by the Session objects, which causes them to again be in the map in a different order.	2021-04-29 10:24:45 -07:00
Christian Kreibich	0b674eb851	Baseline refresh to reflect btest 0.64	2020-12-06 20:19:49 -08:00
Jan Grashoefer	aa4506ad06	Add skip analyzer test and update baselines.	2020-09-23 11:13:28 -07:00