Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-04 07:38:19 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2
10798 commits 385 branches 195 tags 258 MiB
Commit graph

10798 commits

This branch
This branch
All branches
Author SHA1 Message Date
Dominik Charousset
d7927622e9 Upgrade to latest Broker changes for CAF 0.18 2020-05-19 10:24:13 +02:00
Jon Siwek
d7ca63c1be Switch RPC analyzers to use IntrusivePtr 2020-05-18 23:53:10 -07:00
Jon Siwek
cda4738407 Switch RecordVal::CoerceTo() to use IntrusivePtr 2020-05-18 17:52:54 -07:00
Jon Siwek
fcaade6e31 Deprecate TableEntryVal::Value(), replace with GetVal() 2020-05-18 17:09:27 -07:00
Johanna Amann
e7f25aa2ff Merge remote-tracking branch 'origin/master' into topic/johanna/table-changes 
Includes code-changes needed to make this compile again.
 2020-05-18 16:12:21 -07:00
Jon Siwek
5742810293 Switch OpaqueVal::SerializeType() to IntrusivePtr 2020-05-18 16:10:10 -07:00
Jon Siwek
377c8a4762 Switch BlommFilterVal/CardinalityVal to use IntrusivePtr<BroType> 2020-05-18 16:07:26 -07:00
Jon Siwek
aa9d9c904f Switch some TopkVal methods to use IntrusivePtr 2020-05-18 15:55:30 -07:00
Jon Siwek
d35e5520f8 Switch TopkVal to store IntrusivePtr<BroType> 2020-05-18 15:37:00 -07:00
Jon Siwek
43f513ca44 Switch OpaqueVal::UnserializeType() to return IntrusivePtr 2020-05-18 15:25:46 -07:00
Tim Wojtulewicz
aafced6b19 Include pcap.h instead of pcap/dlt.h in packet-fuzzer 2020-05-18 14:58:52 -07:00
Johanna Amann
034304b9d5 Make SendEvent callable from all threads 
This commit refactors the SendEvent call and moves it from the Input
ReaderBackend to to MsgThread. This allows all other types of threads
to access this functionality.

This necessitated a few more changes. Most importantly, one of the
ValueToVal methods was moved over to SerialTypes. Whereit arguably
belongs - there was nothing that was input-framework specific in
that method - and the functionality could come in useful in a number
of cases.
 2020-05-18 14:38:10 -07:00
Jon Siwek
2bac702a72 Merge remote-tracking branch 'origin/topic/jazoff/packet-fuzzer' 
* origin/topic/jazoff/packet-fuzzer:
  Update src/fuzzers/packet-fuzzer.cc
  Update src/fuzzers/packet-fuzzer.cc
  add initial packet corpus
  add packet fuzzer
 2020-05-18 10:48:22 -07:00
Jon Siwek
c325757c32 Merge remote-tracking branch 'origin/topic/jsiwek/fix-macos-fuzz-target-build' 
* origin/topic/jsiwek/fix-macos-fuzz-target-build:
  Fix building fuzz targets on macOS
 2020-05-18 10:47:09 -07:00
Jon Siwek
83f1a911d7 Deprecate FuncType::ArgTypes(), replace with ParamList() 2020-05-15 19:15:24 -07:00
Jon Siwek
40153cc5cb Deprecate FuncType::Args(), replace with Params() 2020-05-15 19:04:31 -07:00
Jon Siwek
938ad35a43 Deprecate EventHandler::FType(), replace with GetType() 2020-05-15 18:37:48 -07:00
Jon Siwek
6aa1d0468d Deprecate BroFile::FType(), replace with GetType() 2020-05-15 18:25:45 -07:00
Jon Siwek
688bed97bc Deprecate Func::FType(), replace with Func::GetType() 2020-05-15 18:21:06 -07:00
Jon Siwek
0f5bb4b83d Change {Get,Set}ContentsFile() to use IntrusivePtr 2020-05-15 17:45:39 -07:00
Jon Siwek
599eec297c Deprecate BroFile::GetFile(), replace with BroFile::Get() 2020-05-15 17:22:16 -07:00
Jon Siwek
65aad4922d Deprecate Val(BroFile*) ctor, replace with one using IntrusivePtr 2020-05-15 17:11:05 -07:00
Jon Siwek
a031f5b727 Deprecate Val(Func*) ctor, replace with one using IntrusivePtr 2020-05-15 16:24:53 -07:00
Justin
afde8a9596
Update src/fuzzers/packet-fuzzer.cc 
Use a constant timestamp for packets

Co-authored-by: Jon Siwek <jsiwek@corelight.com>
 2020-05-15 16:05:21 -04:00
Justin
e78a5be17d
Update src/fuzzers/packet-fuzzer.cc 
Remove unused #includes

Co-authored-by: Tim Wojtulewicz <tim@corelight.com>
 2020-05-15 15:59:46 -04:00
Johanna Amann
9dec370048 Highwayhash: small build fix 
Turns out that hh_neon should not be compiled on generic arm CPUs.
That one is only for aarch64.
 2020-05-15 19:57:32 +00:00
Johanna Amann
781c3e5914 Merge branch 'replace-bzero' of https://github.com/brimsec/zeek 
* 'replace-bzero' of https://github.com/brimsec/zeek:
  Replace bzero() with memset()
 2020-05-15 19:48:47 +00:00
Jon Siwek
23a543f509 Update submodule(s) 
[nomail]
 2020-05-15 12:39:03 -07:00
Jon Siwek
c4d41dcfbb Fix building fuzz targets on macOS 2020-05-15 11:25:14 -07:00
Jon Siwek
48153ba12f Update submodule(s) 
[nomail]
 2020-05-15 10:38:17 -07:00
Justin Azoff
dd458a810e add initial packet corpus 
This contains converted files from the test suite:
    dns53.cap
    ipv6-fragmented-dns.trace.cap
    ipv6-hbh-routing0.trace.cap
    ipv6-http-atomic-frag.trace.cap
    ipv6_zero_len_ah.trace.cap

and a new one I made:
    syn_packet.cap
 2020-05-15 11:56:07 -04:00
Justin Azoff
48ee85df0b add packet fuzzer 2020-05-15 11:56:07 -04:00
Jon Siwek
4a2221b878 Deprecate OpaqueVal/HashVal ctors that take OpaqueType* 
Replaced with ones that take IntrusivePtr
 2020-05-14 23:31:47 -07:00
Jon Siwek
8fc89491bf fixup! Deprecate Scope::Lookup(), replace with Scope::Find() 2020-05-14 23:04:50 -07:00
Jon Siwek
5272079e79 Change Coverity action to output build log 2020-05-14 22:51:37 -07:00
Jon Siwek
62282c0226 Switch EnumType::GetVal() to return const-ref 2020-05-14 22:15:12 -07:00
Jon Siwek
902f93671c Change protected EnumVal ctor to use IntrusivePtr 2020-05-14 20:44:38 -07:00
Jon Siwek
440b0623ac Deprecate RecordVal(RecordType*) ctor 
Replaced with one that takes IntrusivePtr
 2020-05-14 19:31:43 -07:00
Jon Siwek
4debad8caf Switch zeek:🆔:lookup to zeek:🆔:find 
For parity with Scope since it now uses Find instead of Lookup
 2020-05-14 18:00:18 -07:00
Jon Siwek
7843416e51 Use zeek::BifEvent:: for enqueue_ functions instead of BifEvent:: 2020-05-14 17:27:42 -07:00
Jon Siwek
ca1e5fe4be Replace deprecated usage of BifFunc:: with zeek::BifFunc:: 
Names of functions also changed slightly, like bro_fmt -> fmt_bif.

Should generally be unusual/unexpected to see somone calling these
directly from C++ in their plugin, but since technically possible in
previous versions, I also removed the "private" restriction on accessing
the BifReturnVal member.
 2020-05-14 17:26:30 -07:00
Jon Siwek
0db5c920f2 Deprecate names in BifConst, replace with zeek::BifConst 
Some Val* types are also replaced with IntrusivePtr at the new location
 2020-05-14 17:26:00 -07:00
Jon Siwek
eedeb07550 Deprecate all BroType* in BifType:: namespace 
Replaced with equivalently named IntrusivePtr in zeek::BifType::
 2020-05-14 17:25:35 -07:00
Jon Siwek
dca587c604 Change EventRegistry/EventHandler methods to use std::string{_view} 2020-05-14 17:25:08 -07:00
Jon Siwek
78e3267c44 Deprecate internal_handler(), replace with EventRegistry::Register() 
Added a couple explicit event declarations that were missing: "net_done"
and "dns_mapping_name_changed".
 2020-05-14 17:25:02 -07:00
Jon Siwek
f1e8289caa Deprecate remaining "opt_internal" functions in Var.h 2020-05-14 17:24:21 -07:00
Jon Siwek
c509149c86 Remove signal_val declaration from Var.h 2020-05-14 17:24:21 -07:00
Jon Siwek
3bcf55ce41 Change zeek:🆔:lookup functions to use std::string_view 2020-05-14 17:24:21 -07:00
Jon Siwek
86cbab3b7f Change Scope::Find() and Scope::Remove() to use std::string_view 2020-05-14 17:24:21 -07:00
Jon Siwek
0af7f8141b Change lookup_ID() to return a const-reference 2020-05-14 17:24:21 -07:00