Commit graph

1621 commits

Author SHA1 Message Date
Robin Sommer
38876ac899 Updating submodule(s). 2011-10-27 13:00:33 -07:00
Robin Sommer
69b61be0ef Merge branch 'master' of ssh://git.bro-ids.org/bro
Conflicts:
	scripts/policy/frameworks/control/controller.bro
2011-10-27 12:41:18 -07:00
Seth Hall
75e470ac9a The control framework no longer sends functions with the configuration_update command. 2011-10-27 15:29:28 -04:00
Robin Sommer
9762591993 Updating submodule(s). 2011-10-27 11:57:11 -07:00
Robin Sommer
efbb950fcf Updating submodule(s). 2011-10-27 11:26:57 -07:00
Robin Sommer
6ff90d443d Merge branch 'master' of ssh://git.bro-ids.org/bro 2011-10-27 11:23:56 -07:00
Robin Sommer
ff32f5f833 Fixing send_id() problem.
We no longer update &redef functions. Updating code on the fly isn't
fully supported.
2011-10-27 11:22:10 -07:00
Seth Hall
ae3ae9a75b Awful fix for SSH login detection.
- We need a counted measure of payload bytes (not ack tracking and
  not with the IP header which is what we have now).
2011-10-27 09:41:34 -04:00
Seth Hall
cbc9df5942 Updating bro-aux submodule. It was causing an error. 2011-10-27 09:08:59 -04:00
Robin Sommer
f3ed235ba7 Tuning the format of the pretty-printed alarm summaries.
Turns out the old format doesn't work well with the new scripts.
2011-10-26 21:12:16 -07:00
Robin Sommer
bf9a4345b5 Updating submodule(s). 2011-10-26 17:25:48 -07:00
Robin Sommer
5b79d2b15f Baseline updates.
Also a small tweak to the genDocSourcesList.sh as I was seein
non-consistent output order.
2011-10-26 15:27:03 -07:00
Robin Sommer
3ec7cc168f Updating submodule(s). 2011-10-26 14:50:59 -07:00
Robin Sommer
ec2a8d7904 Merge remote-tracking branch 'origin/topic/robin/pp-alarms'
* origin/topic/robin/pp-alarms:
  Removing debugging code.
  Now actually pretty-printing the notices.
  Small fixes, and new option to specify a different dest address.
  A new notice script that pretty-prints alarms in the summary email.
  Adding a dummy log writer WRITER_NONE that just discards everything.
2011-10-26 14:44:46 -07:00
Robin Sommer
314e9c41f9 Removing debugging code. 2011-10-26 14:39:07 -07:00
Robin Sommer
4df60fdea8 Updating submodule(s). 2011-10-26 14:32:10 -07:00
Robin Sommer
351b0b2aaa Adding instructions to local.bro how to do ACTION_ALARM by default. 2011-10-26 14:30:50 -07:00
Robin Sommer
1d3babf9b3 Updating submodule(s). 2011-10-26 13:59:58 -07:00
Robin Sommer
0b2efd71b1 Updating CHANGES and VERSION. 2011-10-26 13:48:52 -07:00
Robin Sommer
eb6313adcb Now actually pretty-printing the notices.
Output is similar to Bro 1.x.
2011-10-26 13:42:42 -07:00
Robin Sommer
39ed489028 Small fixes, and new option to specify a different dest address. 2011-10-26 11:12:50 -07:00
Robin Sommer
73d5643302 A new notice script that pretty-prints alarms in the summary email.
It works already, but the actual pretty-printing is still missing.
2011-10-26 10:40:12 -07:00
Robin Sommer
2f2fad1f80 Adding a dummy log writer WRITER_NONE that just discards everything.
This can be handy when oen doesn't want any output but still get
access to filter functionality, including rotation; and also for
general testing.
2011-10-26 10:39:56 -07:00
Jon Siwek
f98dac9571 Update submodules 2011-10-26 10:15:58 -05:00
Jon Siwek
fe5d876364 Update bro-aux submodule 2011-10-26 09:47:08 -05:00
Robin Sommer
06d9eb5fa0 Updating submodule(s). 2011-10-26 07:39:46 -07:00
Seth Hall
098134d2fa Updated unit test baselines.
- Some (all?) of the DNS servers aren't being detected
  anymore because the test tracefile isn't long enough.
  Logging servers is delayed a 5 minutes in case a better
  result comes in.
2011-10-26 09:36:04 -04:00
Robin Sommer
e620d33efc Updating submodule(s). 2011-10-25 20:23:22 -07:00
Robin Sommer
cbc357e6b5 Updating submodule(s). 2011-10-25 20:20:22 -07:00
Robin Sommer
d429001ace Updating submodule(s). 2011-10-25 20:17:41 -07:00
Robin Sommer
1d5d1780c7 Updating submodule(s). 2011-10-25 20:17:03 -07:00
Robin Sommer
f0f19ac06b Ignore tmp dir. 2011-10-25 19:59:25 -07:00
Robin Sommer
603bcf8243 Updating submodule(s). 2011-10-25 19:58:50 -07:00
Robin Sommer
7cda6bd5ed Updating submodule(s). 2011-10-25 19:58:00 -07:00
Robin Sommer
aaff687db7 Updating submodule(s). 2011-10-25 19:54:46 -07:00
Robin Sommer
5968168ee8 Updating submodule(s). 2011-10-25 19:53:42 -07:00
Robin Sommer
f61fcf219a Fixing bug in log managers predicate evaluation. 2011-10-25 19:08:56 -07:00
Robin Sommer
e78a3c35e5 Updating submodule(s). 2011-10-25 18:17:25 -07:00
Robin Sommer
fc9f5be313 Updating submodule(s). 2011-10-25 18:16:18 -07:00
Robin Sommer
c0ff6ca2ff Updating submodule(s). 2011-10-25 18:12:28 -07:00
Robin Sommer
0335b9c8f6 Updating submodule(s). 2011-10-25 18:11:47 -07:00
Robin Sommer
563b0040e0 Updating submodule(s). 2011-10-25 17:58:30 -07:00
Robin Sommer
f25cd967a0 Updating submodule(s). 2011-10-25 17:57:53 -07:00
Robin Sommer
544497b4c5 Updating submodule(s). 2011-10-25 17:50:10 -07:00
Robin Sommer
8eb6b84c53 Updating submodule(s). 2011-10-25 17:46:24 -07:00
Robin Sommer
a0ff75ecd6 Different way to figure out the repository name.
My directory was called 'master' so I got 'master-1.6.tar.gz'.
2011-10-25 17:35:49 -07:00
Robin Sommer
4cdff8ffd8 Extending .gitignore other external test-suites as well. 2011-10-25 16:33:17 -07:00
Robin Sommer
7a63191a06 Updating submodule(s). 2011-10-25 16:31:05 -07:00
Seth Hall
17d03c9936 Fix a problem with DNS servers being logged that aren't actually servers. 2011-10-25 16:20:29 -04:00
Seth Hall
3d6d75b647 Updating test baselines for recent changes. 2011-10-25 14:51:32 -04:00