Tim Wojtulewicz
a27dee6370
Fix comparison against CapLen results in IPTunnel
2025-06-23 08:35:24 -07:00
Tim Wojtulewicz
479c4be08b
Set ip_proto when creating new tunnel encapsulations
2025-03-06 09:25:03 -07:00
Tim Wojtulewicz
19d22ad53b
Fix Coverity findings from recent IPTunnel dumping changes
2025-03-03 19:14:29 -07:00
Tim Wojtulewicz
bcecc6ea51
Merge remote-tracking branch 'mnhsrj/innerPktResults'
...
* mnhsrj/innerPktResults:
Set original/outer packet flags to reflect inner packet results
2025-02-20 16:41:05 -07:00
mnhsrj
0257b6cd32
Set original/outer packet flags to reflect inner packet results
...
Propagate inner packet flags such as 'processed', 'dump_packet', 'dump_size'
to outer packet for packets involving tunneled data.
2025-02-12 09:43:44 -05:00
Tim Wojtulewicz
8977f49665
Remove setting non-existent session history for IPTunnel
2024-01-23 12:39:58 -07:00
Arne Welzel
7325bc945f
tunnels: Add 'X' to history when reaching Tunnel::max_depth
2024-01-11 10:22:44 +01:00
Tim Wojtulewicz
ef5b169acd
Add some uses of std::move in constructors and simple functions for pass-by-value arguments
2023-11-28 13:40:28 -07:00
Arne Welzel
0c19e6fc54
build_inner_connection: Use the outer packet's timestamp
...
Don't construct the timeval based on run_state, just use the timestamp
of the outer packet to avoid the extra int/double conversions required.
2023-11-01 12:03:55 +01:00
Arne Welzel
d08e347e5e
build_inner_connection: Avoid one extra Init()
...
Packet::Init() is not so cheap as one might think: It computes a
timestamp from { 0, 0 } using double division. Just avoid this
by not initializing an empty Packet.
2023-11-01 12:03:55 +01:00
Benjamin Bannier
f5a76c1aed
Reformat Zeek in Spicy style
...
This largely copies over Spicy's `.clang-format` configuration file. The
one place where we deviate is header include order since Zeek depends on
headers being included in a certain order.
2023-10-30 09:40:55 +01:00
Tim Wojtulewicz
4229af6820
Remove deprecations tagged for v6.1
2023-06-14 10:07:22 -07:00
Arne Welzel
c4d159d1ff
Address wire/capture length feedback
2023-05-25 09:48:14 +02:00
Arne Welzel
5654f81dee
IPTunnel: Compute inner wire length based on cap_len differences.
2023-05-24 16:31:08 +02:00
Tim Wojtulewicz
aa79356963
Make result of IP::ParsePacket easier to understand
2022-08-22 10:56:20 -07:00
Tim Wojtulewicz
5f81c50e0f
GH-1125: Support GRE ARUBA headers
2021-12-09 14:58:09 -07:00
Tim Wojtulewicz
7bffd2eccd
Add utility function for tunnel analyzers to setup encapsulation
2021-11-23 19:36:50 -07:00
Tim Wojtulewicz
1dede6dd70
Fix error text in IPTunnel analyzer
2021-11-23 19:36:49 -07:00
Tim Wojtulewicz
ed798c6aba
Change Packet::ip_hdr to be a shared_ptr so it can be copied into EncapsulatingConn
2021-11-23 19:36:49 -07:00
Tim Wojtulewicz
b2f171ec69
Reformat the world
2021-09-16 15:35:39 -07:00
Tim Wojtulewicz
3e1692676d
Move SessionManager::ParseIPPacket to IP analyzer's namespace
2021-05-18 11:52:03 -07:00
Tim Wojtulewicz
0b7ca5e7bc
Remove Session prefix from some session-related classes and files
2021-04-29 11:09:35 -07:00
Tim Wojtulewicz
18c6aaaa33
Move session code into new directory and into zeek::session namespace
2021-04-29 11:09:35 -07:00
Tim Wojtulewicz
db1d753b35
Rename NetSessions to SessionManager
...
This also includes:
- Deprecating the NetSessions name.
- Renaming the zeek::sessions global to zeek::session_mgr and deprecating the old name.
- Renaming Sessions.{h,cc} to SessionManager.{h,cc}.
2021-04-29 10:24:45 -07:00
Tim Wojtulewicz
e27008ef26
GH-1184: Add 'source' field to weird log denoting where the weird was reported
2020-12-01 09:34:37 -07:00
Tim Wojtulewicz
96d9115360
GH-1079: Use full paths starting with zeek/ when including files
2020-11-12 12:15:26 -07:00
Tim Wojtulewicz
b3eb63c48a
GH-1186: Remove Packet::hdr_size and uses of it.
...
This change also removes Packet::IP(), since Packet now contains an ip_hdr member
that points at the IP header if it exists.
2020-11-09 10:49:57 -07:00
Tim Wojtulewicz
a99b540e46
Rework Sessions::Weird
2020-10-15 13:03:11 -07:00
Tim Wojtulewicz
ecd970ffde
Store packet's ip header as unique_ptr
2020-10-15 12:49:08 -07:00
Tim Wojtulewicz
41dcd0cde0
Use shared_ptr for encapsulation data instead of raw pointer
2020-10-15 12:49:05 -07:00
Tim Wojtulewicz
7d2c35174f
Change to store data in packet directly instead of keystore
2020-10-15 12:18:32 -07:00
Tim Wojtulewicz
1cf251d1ca
Move IP and IP tunnel code from Sessions into packet analyzers
2020-10-15 12:18:30 -07:00
