table/set indices.
This addresses #367. In principle, the fix is quite straightford.
However, it turns out that sometimes record fields lost their
attributes on assignment, and then the hashing can't decide anymore
whether a field is optional or not. So that needed to be fixed as
well.
I got the last fix wrong and I was still misunderstanding
one behavior of the existing do_split function. When a
separator match goes to the last character of the string,
a blank string element should be appended to the
string_array to indicate that a successful split occurred.
Analyzer can cope with zero length client and server
certificates. It does still generate a weird though.
Extended cipherspec_size weirds are not thrown anymore,
they are incredibly overwhelming and should be handled
completely at the scripting in my opinion.
Integrated and expanded on patch Rmkml from ticket #209
that fixes problem with not parsing or expecting SSL
extensions. SSL extensions still are not extracted
and passed to script land, but the analyzer doesn't
fail anymore.
Added an extra dependency to the dce_rpc pac files
and running binpac with the -q (quiet) flag which
requires changes to binpac which will be committed
soon.
* remotes/origin/topic/bro_dns_fake_message:
Reworded BRO_DNS_FAKE message.
Added a BRO_DNS_FAKE message to the help output.
Changed to show on/off rather than the variable's content.
* origin/fastpath:
Removing noisy output about doing incremental serialization. Addresses #292.
Loading scan.bro in portmappter.bro, per #330.
Connection compressor fix from #338.
Working around not being able to do lookup_addr() for IPv6 addresses.
IPv6 UDP checksum calculation was broken. (Matti Mantere)
Fix for portmapper analyzer segfaulting when parsing portmap dump replies. (Gregor Maier)
Keep buffering state across file rotation (Justin Azoff)
The pre/post install scripts for RPMs should not perform any logic
to backup config files, instead relying on the standard logic
that RPMs normally do.
For Mac packages, when an existing config file differs from the package's
version, the previous version is always kept and an alert is displayed to
the user explaining the situation.