Commit graph

7932 commits

Author SHA1 Message Date
Johanna Amann
81d6b4c645 Updating submodule(s).
[nomail]
2018-06-01 15:09:07 -07:00
Johanna Amann
3a9575bf8a Make kerberos initialization static.
There does not seem to be any reason to initialize the members more than
once globally.
2018-06-01 13:49:08 -07:00
Jon Siwek
1b4e0116f4 Allow BRO_DEFAULT_LISTEN_ADDRESS to control broker listen address
This environment variable is now set to listen only on IPv4 loopback
when running unit tests (instead of using the default INADDR_ANY).

This also moves some of the @loads out from init-bare.bro into a new
init-frameworks-and-bifs.bro in order to better support calling BIFs
(like `getenv`) from variable initializations in those particular
frameworks.
2018-06-01 15:38:11 -05:00
Johanna Amann
6f3ccd507b Allow setting KRB5 root dir in configure 2018-06-01 12:48:38 -07:00
Johanna Amann
327acf6555 KRB: do not set keytab by default.
Only enable decryption if a user purposefully sets a keytab.
2018-06-01 12:46:26 -07:00
Johanna Amann
8bb76cd3c1 KRB: do not set authentication info to nouser.
Simply do not set it at all in this case - it is an optional after
all...
2018-06-01 12:32:34 -07:00
Johanna Amann
5d5dd65cab Merge branch 'krb_changes2' of https://github.com/jwallior/bro
I did some cleanup work.
2018-06-01 12:28:45 -07:00
Jon Siwek
55f14c2eb8 Relocate temporary script coverage files
So they don't clutter the top-level of unit test .tmp/ dir.
2018-06-01 11:30:36 -05:00
Jon Siwek
f9e5777e6f BIT-1635: fix make doc warnings
References to Input::Reader and Log::Writer enum types no longer emit
warnings as they are now hardcoded to be documented as part of their
associated framework scripts and so links to them now work.
2018-06-01 10:08:44 -05:00
Johanna Amann
b2dc7ffb26 Merge branch 'smb2-updates' of https://github.com/dtrejod/bro 2018-05-31 21:13:20 -07:00
Johanna Amann
7e801563a0 Merge branch 'topic/p-l-/add-badarp-tests' of https://github.com/p-l-/bro
* 'topic/p-l-/add-badarp-tests' of https://github.com/p-l-/bro:
  Add bad ARP tests
2018-05-31 15:06:33 -07:00
Johanna Amann
1fec186c39 Fix SCT validation when invalid certificates are in chain.
At the moment it would try to access an unset optional in this case.
2018-05-31 14:58:46 -07:00
Jon Siwek
224ee790e2 Add Broker::publish_and_relay BIF
Like Broker::relay, except the relaying-node also calls event handlers.
2018-05-31 15:26:22 -05:00
Jon Siwek
08c64112f0 Document variable argument list BIFs using ellipsis
Instead of a single parameter: "va_args: any".
2018-05-31 13:14:57 -05:00
Jon Siwek
3679b0d963 Teach Option::set to unwrap Broker::Data values 2018-05-31 12:45:44 -05:00
Jon Siwek
5bb72d2972 Merge branch 'topic/jsiwek/broker-misc' into topic/jsiwek/config-cluster 2018-05-31 11:01:10 -05:00
Jon Siwek
d873acc9e3 Support unserializing broker data into type 'any'
The receiver side will wrap the data as a Broker::Data value, which
can then be type-checked/cast via 'is' or 'as' operators to a specific
Bro type.  For example:

Sender:

    Broker::publish("topic", my_event, "hello")

Receiver:

    event my_event(arg: any)
        {
        if ( arg is string )
            print arg as string;
        }
2018-05-31 10:39:40 -05:00
Jon Siwek
bd3c16c6d7 Fix a bug in broker data type-casting check 2018-05-31 10:05:18 -05:00
Jon Siwek
6489b54deb Remove dead code in broker data/val conversion function 2018-05-31 08:58:34 -05:00
Johanna Amann
44dfcb7c6a Start clusterizing configuration framework.
This is not finished and currently does not work due Broker not liking
to serialize into any types.
2018-05-29 14:08:05 -07:00
Jon Siwek
84c1d9c808 Fix NEWS file formatting 2018-05-29 10:17:04 -05:00
Jon Siwek
9511daf5d2 Merge branch 'topic/dopheide/broker-docs' of https://github.com/dopheide-esnet/bro
* 'topic/dopheide/broker-docs' of https://github.com/dopheide-esnet/bro:
  A suggestion for reminding folks about calling events in Module namespaces.

I've changed this to include more accurate examples
2018-05-29 10:05:56 -05:00
Michael Dopheide
bbd65bcc74 A suggestion for reminding folks about calling events in Module namespaces. 2018-05-27 20:49:15 -05:00
Jon Siwek
7327c87c0a Updating submodule(s).
[nomail]
2018-05-25 12:20:45 -05:00
Jon Siwek
5c283e0a2e Updating submodule(s).
[nomail]
2018-05-25 08:56:13 -05:00
Jon Siwek
fe478877c6 Change Intel framework to round-robin insertion events across proxies 2018-05-24 14:36:22 -05:00
Jon Siwek
45178f3051 Add a counter for number of alive nodes within a given cluster pool 2018-05-24 14:33:35 -05:00
Jon Siwek
95ea84e60e Fix how cluster framework tracks worker count 2018-05-24 14:32:45 -05:00
Jon Siwek
186d47c762 Fix a typo in docs 2018-05-24 13:23:52 -05:00
Jon Siwek
85c82b13ef Updating submodule(s).
[nomail]
2018-05-24 12:06:59 -05:00
Jon Siwek
04eaafd4eb Updating submodule(s).
[nomail]
2018-05-24 09:41:46 -05:00
Jon Siwek
63251e9937 Updating submodule(s).
[nomail]
2018-05-24 09:40:07 -05:00
Jon Siwek
b2923f5528 Documentation improvements/fixes 2018-05-23 16:50:31 -05:00
Jon Siwek
58864c358c Add NCP::max_frame_size tuning option
This helps prevent excessive allocations based on message lengths
taken from NCP headers.
2018-05-22 18:27:52 -05:00
Jon Siwek
e35da5f592 Migrate NCP analyzer to use latest analyzer API
It was possibly never updated for newer Analyzer API changes, as simply
attaching the NCP analyzer to a connection would result in null pointer
derefernces and also support analyzers were not attached.
2018-05-22 16:27:07 -05:00
Jon Siwek
de029dd430 Merge remote-tracking branch 'origin/topic/jsiwek/binpac-fixes'
* origin/topic/jsiwek/binpac-fixes:
  Update test baseline for binpac changes
  Update test baseline for optimized binpac static-size array parsing
  Fixes for MySQL and SMB protocol parsers
  BIT-1829: add unit test for modbus parser issue
2018-05-22 15:06:51 -05:00
Jon Siwek
c9bf16e172 Updating submodule(s).
[nomail]
2018-05-22 13:31:48 -05:00
Jon Siwek
c1871b0f0b Update test baseline for binpac changes 2018-05-22 12:46:30 -05:00
Jon Siwek
477d3fc0e2 Updating submodule(s).
[nomail]
2018-05-22 09:48:17 -05:00
Jon Siwek
436a93b38a Make Reassembler::TotalSize a constant time operation 2018-05-22 09:20:44 -05:00
Robin Sommer
647fe3f494 Updating submodule(s).
[nomail]
2018-05-21 22:36:44 +00:00
Robin Sommer
d6cddffe32 Merge remote-tracking branch 'origin/master'
* origin/master:
  Update link to flex pattern docs
2018-05-21 21:38:19 +00:00
Robin Sommer
eaf5f4a9bb Whitespace changes. 2018-05-21 20:31:29 +00:00
Robin Sommer
593000be57 Updating submodules. 2018-05-21 20:31:29 +00:00
Robin Sommer
ad1978f698 Updating NEWS and CHANGES. 2018-05-21 20:31:29 +00:00
Robin Sommer
87552390e5 Bring Broccoli back for the time being.
It's deprecated and now disabled by default, but can be reenabled by
configuring with --enable-broccoli.
2018-05-21 18:38:25 +00:00
Jon Siwek
ed7b0b3503 Update link to flex pattern docs 2018-05-21 13:38:04 -05:00
Robin Sommer
fe7e1ee7f0 Merge topic/actor-system throug a squashed commit. 2018-05-18 22:39:23 +00:00
Robin Sommer
7a6f5020f6 Updating submodule(s).
[nomail]
2018-05-18 22:39:22 +00:00
Seth Hall
aa5d784d48 Merge branch 'p-l--topic/p-l-/fix-arp-tests' 2018-05-18 12:20:46 -04:00