3 commits

Author	SHA1	Message	Date
Arne Welzel	7ed6cbeee5	Make connection$service_violation a set[string] ... To stay consistent with connection$service.	2022-09-20 23:07:26 +02:00
Arne Welzel	31aeb58e10	dpd: Replace negated service fmt() magic with dedicated field ... ...the only known cases where the `-` for `connection$service` was handled is to skip/ignore these analyzers. Slight suspicion that join_string_set() should maybe become a bif now determine_service() runs once for each connection. Closes #2388	2022-09-20 23:07:26 +02:00
Arne Welzel	9e7f2a04c1	frameworks/dpd: Move to frameworks/analyzer/dpd, load by default ... * Because frameworks/analyzer is loaded via init-frameworks-and-bifs the dpd functionality (really just dpd.log and disabling of analyzers) is now enabled even in bare mode. * Not sure we need to keep frameworks/base/dpd/__load__.zeek around or can just remove it right away.	2022-08-31 16:50:47 +02:00

Renamed from scripts/base/frameworks/dpd/main.zeek (Browse further)