Commit graph

1825 commits

Author SHA1 Message Date
Robin Sommer
d3bb0f4901 Updating submodule(s).
[nomail]
2015-07-30 07:23:54 -07:00
Robin Sommer
46e584daa2 Adding tests for Flash version parsing and plugin detection.
(The plugin detection isn't testing the Chrome behaviour actually,
don't have a trace for that.)
2015-07-30 07:23:14 -07:00
Robin Sommer
e4da8c49c2 Updating submodule(s).
[nomail]
2015-07-28 12:26:50 -07:00
Robin Sommer
0172557dee Updating submodule(s).
[nomail]
2015-07-28 12:14:44 -07:00
Robin Sommer
30bb17ea8d Baseline update. 2015-07-24 15:07:03 -07:00
Robin Sommer
fb848f795d Merge branch 'master' of https://github.com/aaronmbr/bro
* 'master' of https://github.com/aaronmbr/bro:
  Copy-paste issue
  Allow for logging of the VLAN data about a connection in conn.log
  Save the inner vlan in the Packet object for Q-in-Q setups
2015-07-23 13:05:28 -07:00
Jon Siwek
871b340ade Fix broker python bindings install location to track --prefix. 2015-07-22 10:58:09 -05:00
Robin Sommer
93846d428f Requiring a C++11 compiler, and turning on C++11 support. 2015-07-21 13:19:18 -07:00
Robin Sommer
e4c6779a67 Fixing compiler warning. 2015-07-21 08:36:23 -07:00
Robin Sommer
fcf8cef949 Updating submodule(s).
[nomail]
2015-07-20 16:23:10 -07:00
Robin Sommer
c72d191ab5 Refactoring L2 parsing code to reside in the Packet class.
That way it can be reused more easily. This also avoid having to
change the serialization structure for packets, which is a problem as
external sources of packets (via Broccoli) wouldn't have the new
attributes available to send.

Also moving Packet.{h,cc} and Layer2.{h,cc} into iosource/, and
removing header size from properties that packet sources have to
provide, as we can now compute that easily from the link type.

Plus some more cleanup.
2015-07-20 16:21:34 -07:00
Robin Sommer
fe3579f1b4 Merge branch 'topic/rework-packets' of https://github.com/jsbarber/bro
* 'topic/rework-packets' of https://github.com/jsbarber/bro:
  One more tinker to Packet -- ensure no uninitialized values
  Packet::IP()-created IP_Hdr should not free
  Make enums work for non-C++11 config
  Refactor to make bro use a common Packet object. Do a better job of parsing layer 2 and keeping track of layer 3 proto. Add support for raw packet event, including Layer2 headers.

Conflicts:
	aux/plugins
2015-07-17 12:56:04 -07:00
Robin Sommer
924549bd4d Updating submodule(s).
[nomail]
2015-07-15 13:32:17 -07:00
Robin Sommer
70d222135b Merge remote-tracking branch 'origin/fastpath'
* origin/fastpath:
  Correct perl package name on freebsd
2015-07-14 08:05:03 -07:00
Robin Sommer
85b433b13f Adding a weird for when truncated packets lead TCP reassembly to
ignore content.

(Private test suite has a bunch of test cases.)
2015-07-03 11:06:05 -07:00
Robin Sommer
de3932bc42 A bit more cleanup for the new overlap detection. 2015-07-03 09:05:44 -07:00
Robin Sommer
c1f060be63 Merge branch 'topic/yunzheng/bit-1314'
I've worked on this a bit more:

    - Added tcp_max_old_segments to init-bare.bro.
    - Removed the existing call to Overlap() as that now led to
      duplicate events.
    - Fixed the code checking for overlaps, as it didn't catch all the
      cases.

BIT-1314 #merged
GitHub #31 merged

* topic/yunzheng/bit-1314:
  BIT-1314: Added QI test for rexmit_inconsistency
  BIT-1314: Add detection for Quantum Insert attacks
2015-07-03 08:40:12 -07:00
Robin Sommer
46fc3db8cc Merge remote-tracking branch 'origin/topic/jsiwek/mime-multipart-boundary-leniency'
* origin/topic/jsiwek/mime-multipart-boundary-leniency:
  Allow '<' and '>' in MIME multipart boundaries.

BIT-1400 #merged
2015-06-28 12:31:47 -07:00
Robin Sommer
264a824fcc Merge remote-tracking branch 'origin/topic/seth/deflate-missing-headers-fix'
I've changed the dynamic allocation of the unzipbuf back to stack
allocation, hope I'm not not missing the reason for doing that ...

* origin/topic/seth/deflate-missing-headers-fix:
  Fixes an issue with missing zlib headers on deflated HTTP content.

BIT-1399 #merged
2015-06-28 12:23:36 -07:00
Robin Sommer
0ac506fd1a Merge remote-tracking branch 'origin/fastpath'
* origin/fastpath:
  Correct the name used in the header identifier
2015-06-25 07:12:08 -07:00
Robin Sommer
408c0d8ac3 Merge remote-tracking branch 'origin/fastpath'
* origin/fastpath:
  Restore the --load-seeds cmd-line option
2015-06-24 07:51:08 -07:00
Robin Sommer
b98708bf14 Removing dead code for no longer supported -G switch. 2015-06-19 16:27:08 -07:00
Robin Sommer
ffa254acd0 Merge remote-tracking branch 'origin/topic/seth/modbus_dpd_fix'
* origin/topic/seth/modbus_dpd_fix:
  Call ProtocolConfirmed on modbus
2015-06-19 14:08:13 -07:00
Johanna Amann
8402ec3b1c Updating submodule(s) and tagging release. 2015-06-08 13:28:17 -07:00
Robin Sommer
582da62d04 Fix reporter errors with GridFTP traffic. 2015-06-08 09:42:06 -07:00
Robin Sommer
795a3b8ad8 PE Analyzer: Change how we calculate the rva_table size. 2015-06-06 08:21:27 -07:00
Jon Siwek
7de83e0cf0 Fix a unit test to check for Broker requirement. 2015-06-05 09:10:50 -05:00
Robin Sommer
74c83058e6 Test for Broker termination. 2015-06-04 14:48:58 -07:00
Robin Sommer
476a5dbc34 Merge remote-tracking branch 'origin/topic/jsiwek/bit-1408'
BIT-1408 #merged

* origin/topic/jsiwek/bit-1408:
  BIT-1408: improve I/O loop and Broker IOSource.
2015-06-04 14:46:30 -07:00
Robin Sommer
a6618eb964 Merge branch 'master' of git.bro.org:bro 2015-06-02 10:37:31 -07:00
Robin Sommer
26d10d88d2 Merge remote-tracking branch 'origin/topic/dnthayer/doc-improvements-2.4'
Lots of good stuff! Thanks for catchign the plugin doc inconsistencies!

* origin/topic/dnthayer/doc-improvements-2.4:
  Add missing documentation on the "Bro Package Index" page
  More improvements to the Logging Framework doc
  Fix documentation typo
  Update the "Log Files" documentation
  Add links in the logging framework doc
  Add a link to the bro-plugins documentation
  Update bro man page
  Update script language reference documentation
  Fix typos in the "writing bro plugins" doc
  Fix a "make doc" warning
  Improve logging framework doc
  Add link to broctl doc from the quickstart doc
  Update install documentation and fix some typos
  Minor improvements to logging framework documentation
  Correct a minor typo in the docs
2015-06-02 09:44:51 -07:00
Robin Sommer
6791c9a81d Merge remote-tracking branch 'origin/topic/vladg/bit-1410'
BIT-1410 #merged

* origin/topic/vladg/bit-1410:
  Add memleak btest for attachments over SMTP.
  BIT-1410: Add btest
  BIT-1410: Update baselines
  BIT-1410: Propagate is_orig to MIME_Mail
2015-06-02 09:18:40 -07:00
Robin Sommer
2b1cd66f17 Updating CHANGES and VERSION. 2015-05-28 13:37:52 -07:00
Robin Sommer
a3290d194c Fix segfault when DNS is not available.
Based on patch by Frank Meier.

BIT-1387 #merged
2015-05-28 11:52:54 -07:00
Johanna Amann
ae74f37696 Updating CHANGES and VERSION. 2015-05-07 13:57:03 -07:00
Robin Sommer
1e66c6718a Merge remote-tracking branch 'origin/fastpath'
* origin/fastpath:
  Add /sbin to PATH in btest.cfg
2015-05-06 09:58:30 -07:00
Robin Sommer
190df47c4b Merge remote-tracking branch 'origin/fastpath'
* origin/fastpath:
  Update usage output and list of cmd-line options
  A small fix to ssh/geo-data.bro. ssh can now be unset for local-local or remote-remote, so make the script deal with this.
2015-05-04 09:58:57 -07:00
Robin Sommer
488acbb961 Merge remote-tracking branch 'origin/topic/seth/sip-fixes'
* origin/topic/seth/sip-fixes:
  Improve SIP logging and remove reporter messages.

BIT-1391 #merged
2015-04-29 17:02:23 -07:00
Robin Sommer
501dc821bf Merge remote-tracking branch 'origin/topic/jsiwek/bit-1350'
* origin/topic/jsiwek/bit-1350:
  BIT-1350: improve record coercion type checking.

BIT-1350 #merged
2015-04-27 17:28:29 -07:00
Robin Sommer
8f95a38885 Merge remote-tracking branch 'origin/topic/jsiwek/bit-1384'
* origin/topic/jsiwek/bit-1384:
  BIT-1384: Remove -O (optimize scripts) command-line option.

BIT-1384 #merged
2015-04-27 17:26:12 -07:00
Robin Sommer
d0d8c7a03a Merge remote-tracking branch 'origin/fastpath'
* origin/fastpath:
  Fix the -J/--set-seed cmd-line option
  Remove unused -l, -L, and -Z cmd-line options
  Fix the --time and --re-level cmd-line options
  Update NEWS with changes to Bro cmd-line options
  Minor corrections and clarifications to NEWS

Conflicts:
	NEWS
2015-04-27 17:23:07 -07:00
Robin Sommer
54c28fc207 Merge remote-tracking branch 'origin/fastpath'
* origin/fastpath:
  Fix typos in the broker BIF documentation
  update installation instructions and remove outdated references.
2015-04-27 08:22:49 -07:00
Jon Siwek
f73b4f2a21 Fix some outdated documentation unit tests. 2015-04-23 12:30:54 -05:00
Robin Sommer
7d95ebb48a Fix -N option to work with builtin plugins as well. 2015-04-23 07:10:55 -07:00
Robin Sommer
0cc49b8769 Updating submodule(s).
[nomail]
2015-04-23 06:59:56 -07:00
Jon Siwek
9bc411ebb0 Fix compile errors. 2015-04-22 10:39:26 -05:00
Johanna Amann
3251e6ba3f Fix another compiler warning in DTLS. 2015-04-22 08:21:51 -07:00
Robin Sommer
aacbe8ecdf Adding missing include.
(I believe).
2015-04-21 20:14:49 -07:00
Robin Sommer
27885e8f0d Attempt at fixing BIT-1337.
Can't say if this is the cause, but it could be.
2015-04-21 16:42:23 -07:00
Robin Sommer
91212ad64e Merge branch 'master' of git.bro.org:bro 2015-04-21 16:09:44 -07:00