6 commits

Author	SHA1	Message	Date
Jon Siwek	51e738a1c0	GH-998: Fix Reporter::conn_weird() to handle expired connections ... This introduces a new sampling state-map for expired connections to fix segfaults that previously occured when passing in a `connection` record to `Reporter::conn_weird()` for which the internal `Connection` object had already been expired and deleted. This also introduces a new event called `expired_conn_weird`, which is similar to `conn_weird`, except the full `connection` record is no longer available, just the `conn_id` and UID string.	2020-06-15 12:57:47 -07:00
Jon Siwek	2d7c926291	GH-545: add "addl" parameter to flow_weird and net_weird events	2019-08-20 22:45:22 -04:00
Daniel Thayer	be182aac83	More bro-to-zeek renaming in scripts and other files	2019-05-16 02:36:41 -05:00
Jon Siwek	a994be9eeb	Merge remote-tracking branch 'origin/topic/seth/zeek_init' ... * origin/topic/seth/zeek_init: Some more testing fixes. Update docs and tests for bro_(init|done) -> zeek_(init|done) Implement the zeek_init handler.	2019-04-19 11:24:29 -07:00
Daniel Thayer	9cbeb44986	Merge remote-tracking branch 'upstream/master'	2019-04-14 01:35:50 -05:00
Daniel Thayer	18bd74454b	Rename all scripts to have ".zeek" file extension	2019-04-11 21:12:40 -05:00

Renamed from scripts/base/frameworks/notice/weird.bro (Browse further)