Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 06:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1
17325 commits 387 branches 195 tags 255 MiB
Commit graph

17325 commits

This branch
This branch
All branches
Author SHA1 Message Date
Benjamin Bannier
730316fc8a Remove support for building against Spicy versions before 1.8 
zeek-6.0 shipped with spicy-1.8, but we still have dedicated handling
for earlier versions of Spicy in the code. This patch cleans them up
since these versions are unsupported.
 2024-11-28 15:26:15 +01:00
Benjamin Bannier
0c55fb4dd7 Bump auxil/spicy to latest development snapshot 2024-11-28 15:26:15 +01:00
zeek-bot
a2a47ba334 Update doc submodule [nomail] [skip ci] 2024-11-28 00:11:24 +00:00
Tim Wojtulewicz
8d625715ca Merge remote-tracking branch 'origin/topic/johanna/jq-guard' 
* origin/topic/johanna/jq-guard:
  Add TEST-REQUIRES: which jq to two new tests that are using jq
 2024-11-27 12:31:59 -07:00
Johanna Amann
079581aa6b Add TEST-REQUIRES: which jq to two new tests that are using jq 2024-11-27 16:52:15 +00:00
Johanna Amann
e52bad6192 Merge remote-tracking branch 'origin/topic/johanna/modbus-test-comment' 
* origin/topic/johanna/modbus-test-comment:
  Explain why modbus test does not work with the Spicy SSL analyzer
 2024-11-27 15:52:51 +00:00
Johanna Amann
3523d393bf Explain why modbus test does not work with the Spicy SSL analyzer 
This took a _long_ time to figure out.
 2024-11-27 14:51:26 +00:00
Johanna Amann
7b582bc345 Merge remote-tracking branch 'origin/topic/johanna/sqlite-pragmas' 
* origin/topic/johanna/sqlite-pragmas:
  Options for SQLite log writer, eliminate duplicate definitions
  Test synchronous/journal mode options for SQLite log writer
  Added default options for synchronous and journal mode
  Support for synchronous and journal_mode
 2024-11-27 08:32:08 +00:00
zeek-bot
9e62c31421 Update doc submodule [nomail] [skip ci] 2024-11-27 00:23:50 +00:00
Arne Welzel
3ce41f1eff Merge remote-tracking branch 'origin/topic/awelzel/pluggable-cluster-backends-part2' 
* origin/topic/awelzel/pluggable-cluster-backends-part2:
  ci/test.sh: Run doctest with TZ=UTC
  cluster/setup-connections: Switch to Cluster::subscribe(), short-circuit broker
  cluster/serializer: Add Broker based event serializers
  cluster: Add Cluster scoped bifs
  Reporter: Add ScriptLocationScope helper
  init-bare/zeek-setup: Add Cluster::backend const &redef
  broker: Implement cluster::Backend interface
  Broker: Fix some error messages
  broker: Remove MakeEvent(ArgsSpan)
 2024-11-26 18:01:28 +01:00
Johanna Amann
35ad35ad0f Options for SQLite log writer, eliminate duplicate definitions 
Patch provided by Arne Welzel, see GH-4063
 2024-11-26 16:31:13 +00:00
Johanna Amann
35acbbfd03 Update 3dparty submodule 
[nomail]
 2024-11-26 16:28:54 +00:00
Arne Welzel
c3b30b187e Merge remote-tracking branch 'origin/topic/vern/zam-exception-leaks' 
* origin/topic/vern/zam-exception-leaks:
  More robust memory management for ZAM execution - fixes #4052
 2024-11-26 17:17:10 +01:00
Vern Paxson
847fcc66d6 More robust memory management for ZAM execution - fixes #4052 2024-11-26 17:05:38 +01:00
Johanna Amann
dec9eeafbd Merge remote-tracking branch 'origin/topic/johanna/sqlite3.47.1' 
* origin/topic/johanna/sqlite3.47.1:
  Update SQLite to 3.47.1
 2024-11-26 14:57:07 +00:00
Arne Welzel
f65c4f0b7e Merge remote-tracking branch 'origin/topic/awelzel/deprecate-val-list-to-args' 
* origin/topic/awelzel/deprecate-val-list-to-args:
  ZeekArgs: Deprecate val_list_to_args()
 2024-11-26 15:25:25 +01:00
Johanna Amann
d592942ccb Test synchronous/journal mode options for SQLite log writer 
Also adds some small tweaks and adds the new feature to NEWS.
 2024-11-26 12:26:38 +00:00
Arne Welzel
3de52c27e0 ci/test.sh: Run doctest with TZ=UTC 
Broker's JSON serialization is TZ dependent (which seems a bug). For now
do the same as we do in btest.cfg and run doctests with TZ set to UTC.

Reported in zeek/broker#434.
 2024-11-26 12:58:23 +01:00
Arne Welzel
fc12be1f17 cluster/setup-connections: Switch to Cluster::subscribe(), short-circuit broker 
For the time being, this is easiest, otherwise we'd need to
conditionally load a broker-specific policy script based on
Cluster::backend being set.
 2024-11-26 12:58:23 +01:00
Arne Welzel
9ec872d161 cluster/serializer: Add Broker based event serializers 
This adds the first event serializers that use
broker functionality. Binary and JSON formats.
 2024-11-26 12:58:23 +01:00
Arne Welzel
ef04a199c8 cluster: Add Cluster scoped bifs 
... and a broker based test using Cluster::publish() and
Cluster::subscribe().
 2024-11-26 12:58:23 +01:00
Arne Welzel
27e6d87331 Reporter: Add ScriptLocationScope helper 2024-11-26 12:13:14 +01:00
Arne Welzel
c7c96610e3 init-bare/zeek-setup: Add Cluster::backend const &redef 2024-11-26 12:13:14 +01:00
Arne Welzel
68a391d767 broker: Implement cluster::Backend interface 2024-11-26 12:13:14 +01:00
Arne Welzel
91a8fd0c63 Broker: Fix some error messages 2024-11-26 12:12:48 +01:00
Arne Welzel
a233b50be1 broker: Remove MakeEvent(ArgsSpan) 
This was added previously in the 7.1 cycle. Now that MakeEvent() was
removed from cluster::Backend, there's no need for Broker to provide
this version.
 2024-11-26 12:12:48 +01:00
Mymaqn
3ca56f7e0f Added default options for synchronous and journal mode 
Added enum options SQLITE_SYNCHRONOUS_DEFAULT and SQLITE_JOURNAL_MODE_DEFAULT
and changed the default to be these instead.
 2024-11-26 11:08:30 +00:00
Mymaqn
6e026ba313 Support for synchronous and journal_mode 2024-11-26 11:08:18 +00:00
Johanna Amann
fb864ab9b4 Update SQLite to 3.47.1 2024-11-26 11:04:40 +00:00
zeek-bot
a1d64ad6ae Update doc submodule [nomail] [skip ci] 2024-11-23 00:20:35 +00:00
Arne Welzel
40a780bb24 Merge remote-tracking branch 'origin/topic/awelzel/test-init-hooks-plugin' 
* origin/topic/awelzel/test-init-hooks-plugin:
  btest/plugins: Add a plugin testing Init and Done hooks
 2024-11-22 18:38:06 +01:00
Arne Welzel
542640db00 Merge remote-tracking branch 'origin/topic/awelzel/skip-core-expr-error' 
* origin/topic/awelzel/skip-core-expr-error:
  Disable core.expr-execption btest under ZAM to fix CI builds
 2024-11-22 15:29:48 +01:00
Tim Wojtulewicz
24d913c0a9 Disable core.expr-execption btest under ZAM to fix CI builds 
Relates to #4052.
 2024-11-22 15:28:14 +01:00
Arne Welzel
39b43e8dd6 btest/plugins: Add a plugin testing Init and Done hooks 
Follow-up for #4047.
 2024-11-22 13:37:03 +01:00
Arne Welzel
97f05b2f8c Merge remote-tracking branch 'origin/topic/awelzel/pluggable-cluster-backends-part1' 
* origin/topic/awelzel/pluggable-cluster-backends-part1:
  btest: Test Broker::make_event() together with Cluster::publish_hrw()
  btest: Add cluster dir, minimal test for enum value
  broker: Add shim plugin adding a backend component
  zeek-setup: Instantiate backend::manager
  cluster: Add to src/CMakeLists.txt
  cluster: Add Components and ComponentManager for new components
  cluster/Backend: Interface for cluster backends
  cluster/Serializer: Interface for event and log serializers
  logging: Introduce logging/Types.h
  SerialTypes/Field: Allow default construction and add move constructor
  DebugLogger: Add cluster debugging stream
  plugin: Add component enums for pluggable cluster backends
  broker: Pass frame to MakeEvent()
 2024-11-22 12:53:23 +01:00
Arne Welzel
baca6ba769 btest: Test Broker::make_event() together with Cluster::publish_hrw() 2024-11-22 10:43:55 +01:00
Arne Welzel
de9d39cd01 btest: Add cluster dir, minimal test for enum value 2024-11-22 10:43:55 +01:00
Arne Welzel
6fb73aa9da broker: Add shim plugin adding a backend component 
For broker, this isn't really functioning, but at least makes the
CLUSTER_BACKEND_BROKER enum available.
 2024-11-22 10:43:55 +01:00
Arne Welzel
60b5cf9730 zeek-setup: Instantiate backend::manager 
Required to allow registration of cluster components.
 2024-11-22 10:43:55 +01:00
Arne Welzel
ac9594ffae cluster: Add to src/CMakeLists.txt 2024-11-22 10:43:55 +01:00
Arne Welzel
23ca625c03 cluster: Add Components and ComponentManager for new components 2024-11-22 10:43:54 +01:00
Arne Welzel
fb23a06f6f cluster/Backend: Interface for cluster backends 2024-11-22 10:43:50 +01:00
Arne Welzel
e94e30616d cluster/Serializer: Interface for event and log serializers 2024-11-22 10:06:59 +01:00
Arne Welzel
a946b27faf logging: Introduce logging/Types.h 
Header and implementation for types shared between the cluster and
logging framework. The logging framework will be adapted later to
use these. For now, the new cluster components will simply reference
them.
 2024-11-22 10:06:59 +01:00
Arne Welzel
60fb212f17 SerialTypes/Field: Allow default construction and add move constructor 
This is in preparation of using SerialTypes to serialize and
unserialize complete log batches which include Field instances
and not just Value's.
 2024-11-22 10:06:59 +01:00
Arne Welzel
d2633163bd DebugLogger: Add cluster debugging stream 2024-11-22 10:06:59 +01:00
Arne Welzel
35eadf0ceb plugin: Add component enums for pluggable cluster backends 2024-11-22 10:06:59 +01:00
Arne Welzel
349d88153f broker: Pass frame to MakeEvent() 
This was lost in a prior change.
 2024-11-22 10:06:59 +01:00
zeek-bot
66aec5ba2f Update doc submodule [nomail] [skip ci] 2024-11-22 00:20:09 +00:00
Arne Welzel
9883b3a917 Merge remote-tracking branch 'origin/topic/awelzel/sumstats-non-cluster-final-epoch' 
* origin/topic/awelzel/sumstats-non-cluster-final-epoch:
  sumstat/non-cluster: Move last epoch processing to zeek_done()
 2024-11-21 16:39:18 +01:00