6 commits

Author	SHA1	Message	Date
Christian Kreibich	8b39e59572	Btests: don't use -C in Zeek invocations that don't actually need it	2025-06-06 13:46:45 -07:00
Robin Sommer	0d3296590d	Spicy: Register well-known ports through an event handler. ... This avoids the earlier problem of not tracking ports correctly in scriptland, while still supporting `port` in EVT files and `%port` in Spicy files. As it turns out we are already following the same approach for file analyzers' MIME types, so I'm applying the same pattern: it's one event per port, without further customization points. That leaves the patch pretty small after all while fixing the original issue.	2024-08-22 10:24:55 +02:00
Robin Sommer	547144d07e	Revert "Remove deprecated port/ports fields for spicy analyzers" ... This reverts commit 15d404dd19.	2024-08-19 09:57:04 +02:00
Tim Wojtulewicz	15d404dd19	Remove deprecated port/ports fields for spicy analyzers	2024-08-07 11:58:22 -07:00
Arne Welzel	62928ddb61	btest/spicy: Remove most port usages	2024-03-15 17:36:11 +01:00
Arne Welzel	8cd2eceed1	spicy: Do not register port N+1 for port N in .evt file ... Closes #3278	2023-09-07 12:58:34 +02:00