Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 06:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1
19028 commits 387 branches 195 tags 255 MiB
Commit graph

19028 commits

This branch
This branch
All branches
Author SHA1 Message Date
Tim Wojtulewicz
2f38ff6c87 Merge remote-tracking branch 'origin/topic/bbannier/issue-3266' 
* origin/topic/bbannier/issue-3266:
  Fix installation of symlink with `DESTDIR`

(cherry picked from commit d7db612b0f)
 2025-08-26 09:05:29 -07:00
Tim Wojtulewicz
708f914524 Update zeekctl submodule for docs fixes [nomail] [skip ci] 2025-08-26 08:57:51 -07:00
Tim Wojtulewicz
f5d549fe9d Update docs submodule for v8.0.1 [nomail] [skip ci] 2025-08-25 19:42:32 +00:00
Christian Kreibich
9e66cf873b Merge branch 'topic/christian/news-typos' 
* topic/christian/news-typos:
  Minor fixes to a few NEWS entries.

(cherry picked from commit 2929f1eb17)
 2025-08-25 12:32:14 -07:00
Tim Wojtulewicz
53b88d33b6 Bump zeekctl submodule for MetricsAddr docs 2025-08-25 12:30:33 -07:00
Arne Welzel
c0a80fe610 Merge remote-tracking branch 'origin/topic/awelzel/cluster-event-metadata-fixes-for-8.0' 
* origin/topic/awelzel/cluster-event-metadata-fixes-for-8.0:
  cluster/Backend: Fallback to current network time when current event has not timestamp
  cluster/serializer/broker: Do not send empty metadata vectors around

(cherry picked from commit 3e89e6b328)
 2025-08-22 09:25:39 -07:00
Arne Welzel
4bfac4a087 Merge remote-tracking branch 'origin/topic/awelzel/4754-double-wrapped-broker-data-records' 
* origin/topic/awelzel/4754-double-wrapped-broker-data-records:
  cluster/serializer/broker: Do not special case Broker::Data anymore
  broker/Data: Support unwrapping Broker::Data records

(cherry picked from commit 3d6a064ecc)
 2025-08-22 09:24:47 -07:00
Arne Welzel
5de3ea1e2f Merge remote-tracking branch 'origin/topic/awelzel/docker-trixie' 
* origin/topic/awelzel/docker-trixie:
  ci: Run zeekctl and builtin tasks with Debian 13, too
  ci: Prepend timestamps to output
  ci: Enable Spicy for arm_debian13
  ci: Add Debian 13.0 (trixie)
  docker: Bump to debian:trixie-slim

(cherry picked from commit 63574b9fd4)
 2025-08-22 09:22:04 -07:00
Arne Welzel
abfb6ca156 Merge remote-tracking branch 'amazing-pp/t/psql-login-no-role' 
* amazing-pp/t/psql-login-no-role:
  Report PostgreSQL login success only after ReadyForQuery

(cherry picked from commit e04f725523)
 2025-08-22 09:19:15 -07:00
Tim Wojtulewicz
1cb6519ba7 Merge remote-tracking branch 'origin/topic/timw/event-constructor-deprecation-message' into release/8.0 
* origin/topic/timw/event-constructor-deprecation-message:
  Clarify Event constructor deprectation message
 2025-08-18 14:44:33 -07:00
Tim Wojtulewicz
f07a59d32c Updating CHANGES and VERSION. 2025-08-18 18:01:55 +00:00
Tim Wojtulewicz
ef6999ed62 Update docs submodule for 8.0.0 [nomail] [skip ci] 2025-08-18 17:08:25 +00:00
Tim Wojtulewicz
8a6a24cb70 Merge remote-tracking branch 'origin/topic/etyp/update-news-record-vec-deprecation' 
* origin/topic/etyp/update-news-record-vec-deprecation:
  Add `record_type_to_vector` deprecation to NEWS

(cherry picked from commit a4da8d3f7b)
 2025-08-18 16:42:13 +00:00
Arne Welzel
69dc9209b5 Merge remote-tracking branch 'origin/topic/vern/stmt-line-numbers' 
* origin/topic/vern/stmt-line-numbers:
  maintenance updates for ZAM BiF-tracking
  fix line numbers associated with "if" and initialization statements

(cherry picked from commit c0a863cba0)
 2025-08-18 16:37:06 +00:00
Tim Wojtulewicz
7fdb266b24 Fix ci/update-zeekygen-docs to agree with ruff-format 2025-08-18 16:36:43 +00:00
Tim Wojtulewicz
4d64c955ac Merge remote-tracking branch 'origin/topic/bbannier/bump-spicy-8.0' into release/8.0 
* origin/topic/bbannier/bump-spicy-8.0:
  Bump auxil/spicy to spicy-1.14.0
 2025-08-18 08:23:28 -07:00
Benjamin Bannier
26bdaf94d8 Bump auxil/spicy to spicy-1.14.0 2025-08-18 12:57:24 +02:00
Tim Wojtulewicz
b2bd588740 Clarify Event constructor deprectation message 2025-08-17 13:56:48 -07:00
Tim Wojtulewicz
56e55ba3ee Updating CHANGES and VERSION. 2025-08-12 12:43:40 -07:00
Tim Wojtulewicz
04c4d792d1 Merge remote-tracking branch 'origin/topic/bbannier/bump-spicy' 
* origin/topic/bbannier/bump-spicy:
  Bump pre-commit hooks
  Bump auxil/spicy to latest development snapshot

(cherry picked from commit cc59bfa5d8)
 2025-08-12 12:42:54 -07:00
Tim Wojtulewicz
84d28bc30c Update docs submodule with 8.0.0-rc2 changes [nomail] [skip ci] 2025-08-12 11:07:04 -07:00
Tim Wojtulewicz
fcdfe2aca2 Merge remote-tracking branch 'origin/topic/awelzel/4730-smb-read-response-data-offset' 
* origin/topic/awelzel/4730-smb-read-response-data-offset:
  smb2/read: Parse only 1 byte for data_offset, ignore reserved1

(cherry picked from commit 76289a8022)
 2025-08-11 11:39:22 -07:00
Arne Welzel
1511ca00df Merge remote-tracking branch 'origin/topic/awelzel/4176-cluster-on-sub-unsub-hooks' 
* origin/topic/awelzel/4176-cluster-on-sub-unsub-hooks:
  cluster: Add on_subscribe() and on_unsubscribe() hooks

(cherry picked from commit 13f613eb1d)
 2025-08-11 11:36:42 -07:00
Johanna Amann
a76b2148c6 Merge remote-tracking branch 'origin/topic/johanna/analyzer-log-proto' 
* origin/topic/johanna/analyzer-log-proto:
  Add proto to analyzer.log

(cherry picked from commit 2f2f328a72)
 2025-08-11 11:34:08 -07:00
Tim Wojtulewicz
8e7482de4b Update zeek-aux submodule with c++20 changes 2025-08-07 08:33:44 -07:00
Tim Wojtulewicz
1addeab4fe Updating CHANGES and VERSION. 2025-08-04 09:44:48 -07:00
Christian Kreibich
c1cb1a2e5f Compile contributors for Zeek 8.0 in the NEWS file 
(cherry picked from commit 4fdd83f3f5)
 2025-08-04 09:39:08 -07:00
Arne Welzel
4ecc62322e Merge remote-tracking branch 'origin/topic/awelzel/depend-on-libzmq' 
* origin/topic/awelzel/depend-on-libzmq:
  ci/windows: No ZeroMQ cluster backend
  cluster/zeromq: Bail on missing ZeroMQ by default
 2025-08-01 17:10:32 +02:00
Arne Welzel
3c2d01e19e Merge remote-tracking branch 'origin/topic/neverlord/std-span' 
* origin/topic/neverlord/std-span:
  Remove zeek::Span and use std::span instead
 2025-08-01 14:50:02 +02:00
Arne Welzel
7a68208ecf ci/windows: No ZeroMQ cluster backend 
Doesn't seems there's libzmq available, so just skip building.
 2025-08-01 10:17:13 +02:00
Arne Welzel
993502e0b6 cluster/zeromq: Bail on missing ZeroMQ by default 2025-08-01 09:46:06 +02:00
zeek-bot
aabb36abf7 Update doc submodule [nomail] [skip ci] 2025-08-01 00:28:48 +00:00
Tim Wojtulewicz
f2e155d7fa Merge remote-tracking branch 'origin/topic/timw/update-ct-ca-lists' 
* origin/topic/timw/update-ct-ca-lists:
  Update CT/CA lists to versions from NSS 3.114
 2025-07-31 14:32:21 -07:00
Tim Wojtulewicz
528f0d9766 Merge remote-tracking branch 'origin/topic/timw/update-submodules-ahead-of-8.0' 
* origin/topic/timw/update-submodules-ahead-of-8.0:
  Updating submodule(s) [nomail]
 2025-07-31 14:29:48 -07:00
Tim Wojtulewicz
1daead9edd Update CT/CA lists to versions from NSS 3.114 2025-07-31 11:34:23 -07:00
Tim Wojtulewicz
74a3fe5856 Updating submodule(s) [nomail] 2025-07-31 10:37:45 -07:00
Tim Wojtulewicz
b9a5a635bd Merge remote-tracking branch 'origin/topic/timw/clang-tidy-fix' 
* origin/topic/timw/clang-tidy-fix:
  Fix use-after-move reported by clang-tidy
 2025-07-31 10:34:58 -07:00
Tim Wojtulewicz
647da4f970 Fix use-after-move reported by clang-tidy 
This was introduced by 9eb94ee151.
 2025-07-31 09:55:43 -07:00
Johanna Amann
136bdb43fd Merge remote-tracking branch 'origin/topic/johanna/gh-4694' 
* origin/topic/johanna/gh-4694:
  Add tests for the deprecated-dpd-log.zeek policy script
  Move c$service_violation to deprecated-dpd-log.zeek
 2025-07-31 16:11:00 +01:00
Tim Wojtulewicz
3e0012ea30 Merge remote-tracking branch 'origin/topic/bbannier/bump-spicy' 
* origin/topic/bbannier/bump-spicy:
  Bump `auxil/spicy` to latest development snapshot
 2025-07-31 07:58:05 -07:00
Benjamin Bannier
c0ce3f19fb Bump auxil/spicy to latest development snapshot 2025-07-31 13:47:32 +02:00
zeek-bot
defc0c96d8 Update doc submodule [nomail] [skip ci] 2025-07-31 00:18:15 +00:00
Arne Welzel
10e7f14f78 Merge remote-tracking branch 'origin/topic/awelzel/defer-more-stuff' 
* origin/topic/awelzel/defer-more-stuff:
  RecordType: Ensure &default fields are always re-initialized
  Attr: Deprecate using &default and &optional together on record fields
  RecordType: Allow deferring &default=vector(), set(), table() fields
 2025-07-30 10:35:56 +02:00
Arne Welzel
9eb94ee151 RecordType: Ensure &default fields are always re-initialized 
This started working partly after the deferral logic introduced with
Zeek 6.0 so this finishes it :-)
 2025-07-30 10:26:06 +02:00
Arne Welzel
473723cc47 Attr: Deprecate using &default and &optional together on record fields 
If &default implies re-initialization of the field, using them together
doesn't make much sense.
 2025-07-30 10:26:06 +02:00
Arne Welzel
23181e4811 RecordType: Allow deferring &default=vector(), set(), table() fields 2025-07-30 10:26:06 +02:00
Arne Welzel
d7fbd49d9e Merge remote-tracking branch 'origin/topic/vern/zam-record-fields-fixes' 
* origin/topic/vern/zam-record-fields-fixes:
  fixes for specialized ZAM operations needing to check whether record fields exist
 2025-07-30 10:08:21 +02:00
Johanna Amann
a90969800c Add tests for the deprecated-dpd-log.zeek policy script 
This re-adds baselines for the old dpd.log to check functionality until
its removal in 8.1
 2025-07-30 07:58:36 +01:00
Johanna Amann
8de178d923 Move c$service_violation to deprecated-dpd-log.zeek 
This moves c$service_violation to the deprecated-dpd-log policy script.

This is the only script in the distribution that uses the field, and it
is unlikely to be used externally. It is also responsible for a
significant amount of memory use by itself.

This also restores the field being populated, which was broken in
GH-4362
 2025-07-30 07:58:36 +01:00
Vern Paxson
47bf6af6a5 fixes for specialized ZAM operations needing to check whether record fields exist 2025-07-30 08:36:04 +02:00