Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 06:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1
19573 commits 387 branches 195 tags 255 MiB
Commit graph

19573 commits

This branch
This branch
All branches
Author SHA1 Message Date
Robin Sommer
0dbbee46ae Teaching bifcl to accept scoped IDs. 2011-02-07 14:46:28 -08:00
Robin Sommer
0d9de7d719 Updating submodule(s). 2011-02-07 14:07:29 -08:00
Robin Sommer
abc365e38f Merge remote branch 'origin/topic/robin/work' 
* origin/topic/robin/work:
  Smarter way to increase the parent/child pipe's socket buffer. (Craig Leres).
  Fixing bug with defining bro_int_t and bro_uint_t as 64-bit in some platforms.
 2011-02-07 13:44:45 -08:00
Seth Hall
205d84b651 Merge remote branch 'origin/topic/robin/optional-fields' into topic/logging-framework 2011-02-06 00:24:11 -05:00
Robin Sommer
4d12ac861d Smarter way to increase the parent/child pipe's socket buffer. (Craig 
Leres).

This is from #383.
 2011-02-04 17:58:19 -08:00
Robin Sommer
51b3efbb1a Fixing bug with defining bro_int_t and bro_uint_t as 64-bit in some 
platforms.
 2011-02-04 17:39:38 -08:00
Robin Sommer
ee6abcba72 Updating submodule(s). 2011-02-03 21:57:11 -08:00
Robin Sommer
7abd8f177f Fixing a problem with records having optional fields when used as 
table/set indices.

This addresses #367. In principle, the fix is quite straightford.
However, it turns out that sometimes record fields lost their
attributes on assignment, and then the hashing can't decide anymore
whether a field is optional or not. So that needed to be fixed as
well.
 2011-02-02 18:06:02 -08:00
Robin Sommer
e00acaddd8 Login's confused messages now go through weird.bro. 2011-01-31 16:42:36 -08:00
Robin Sommer
88b31a04d0 Updating submodule(s). 2011-01-31 15:36:01 -08:00
Seth Hall
65687d86d8 *Now* this passes the test suite. 
I got the last fix wrong and I was still misunderstanding
one behavior of the existing do_split function.  When a
separator match goes to the last character of the string,
a blank string element should be appended to the
string_array to indicate that a successful split occurred.
 2011-01-31 12:19:11 -05:00
Robin Sommer
7432761558 Updating submodule(s). 2011-01-31 08:48:41 -08:00
Robin Sommer
7de348da11 Merge remote branch 'origin/topic/jsiwek/missing-config-options' 
* origin/topic/jsiwek/missing-config-options:
  Adding more configure options for finding dependencies

Conflicts:
	aux/binpac
 2011-01-31 08:48:12 -08:00
Seth Hall
1ccfca09ac Fixes to SSL/TLS analyzer 
Analyzer can cope with zero length client and server
certificates.  It does still generate a weird though.
Extended cipherspec_size weirds are not thrown anymore,
they are incredibly overwhelming and should be handled
completely at the scripting in my opinion.

Integrated and expanded on patch Rmkml from ticket #209
that fixes problem with not parsing or expecting SSL
extensions.  SSL extensions still are not extracted
and passed to script land, but the analyzer doesn't
fail anymore.
 2011-01-28 16:24:07 -05:00
Seth Hall
c8076619ce Added new TLS ciphers 2011-01-28 16:18:57 -05:00
Robin Sommer
4b77164e04 Merge remote branch 'origin/fastpath' 
* origin/fastpath:
  Fix typo in PCAPTests.cmake
 2011-01-28 08:14:34 -08:00
Jon Siwek
da3fb85e5c Adding more configure options for finding dependencies 2011-01-28 10:10:16 -06:00
Jon Siwek
a19391b94b Fix typo in PCAPTests.cmake 
With this correction, the configure tests should now be pulling
in the correct user-specified libpcap headers
 2011-01-27 11:35:35 -06:00
Seth Hall
d2628d30fa Logging framework core functionality now implemented. 2011-01-26 15:29:20 -05:00
Robin Sommer
91d7c48ced Updating submodule(s). 2011-01-25 17:58:09 -08:00
Robin Sommer
50181edd84 Significant edit pass over ICMPv6 code. 
Matti, more per mail.
 2011-01-25 17:57:34 -08:00
Robin Sommer
8974265d39 Fixing bug in SMB analyzer. 2011-01-24 15:29:40 -08:00
Robin Sommer
2bf7461d9c Updating submodule(s). 2011-01-24 15:21:39 -08:00
Robin Sommer
f4c6642f4d Merge remote branch 'origin/topic/jsiwek/reconfigure' 
* origin/topic/jsiwek/reconfigure:
  Configure wrapper now deletes previous CMake cache
  Fix for the --with-binpac configure option
 2011-01-24 14:56:58 -08:00
Seth Hall
6418283371 Two more small compile time error fixes. 2011-01-24 13:43:49 -05:00
Jon Siwek
4817f7de4e Configure wrapper now deletes previous CMake cache 2011-01-24 11:26:29 -06:00
Jon Siwek
4da36217b7 Fix for the --with-binpac configure option 
Compiling from existing sources no longer overrides this option.
 2011-01-24 11:02:16 -06:00
Seth Hall
0fe30453cf Removing some apparently unnecessary lines. 2011-01-21 20:59:51 -05:00
Seth Hall
4df961aa60 Log specific event and debug log printing is working! 
This is mostly a code checkpoint though.
 2011-01-21 16:46:06 -05:00
Robin Sommer
fa87a81a96 Merge remote branch 'origin/topic/jsiwek/add-config-status' 
* origin/topic/jsiwek/add-config-status:
  Changed configure wrapper to create config.status
 2011-01-20 16:35:24 -08:00
Robin Sommer
2951e9c97c Merge remote branch 'origin/topic/small_remote_connection_fix' 
Closes #86.

* origin/topic/small_remote_connection_fix:
  Fixed a small problem in the remote serialization code.
 2011-01-20 16:31:07 -08:00
Robin Sommer
668824d1b6 A few smaller tweaks. 2011-01-20 14:36:07 -08:00
Robin Sommer
5035a4346a Fixing inconsistent CHANGES layout. 2011-01-20 13:57:04 -08:00
Robin Sommer
9cea6c5b01 Some small tweaks to the HTTP analyzer. 
From ticket #339.
 2011-01-20 13:54:54 -08:00
Seth Hall
2be835c4e8 Merge branch 'master' into topic/logging-framework 2011-01-20 16:32:29 -05:00
Seth Hall
05f27c5441 Fixed a small problem in the remote serialization code. 
This is from ticket #86.  It needs verified, but everything
seemed to work the same (except for the bug!) with the
change.
 2011-01-20 16:30:16 -05:00
Seth Hall
be5027c316 Merge branch 'master' into topic/seth/fix-compiler-warnings 2011-01-20 15:15:13 -05:00
Seth Hall
fbf7d5ccc0 Cleaned up the output from running binpac. 
Added an extra dependency to the dce_rpc pac files
and running binpac with the -q (quiet) flag which
requires changes to binpac which will be committed
soon.
 2011-01-20 15:10:31 -05:00
Seth Hall
b7b29c6f92 Added line to expect shift/reduce errors in parse.in 
This is the resolution that Gregor brought up in
December, 2010 on the bro-dev list.
 2011-01-20 15:08:54 -05:00
Seth Hall
ef1650f6a2 Cleaned up g++ warnings. 2011-01-20 15:07:24 -05:00
Jon Siwek
bbe078e06c Changed configure wrapper to create config.status 2011-01-20 12:37:38 -06:00
Robin Sommer
0a3f84681a Updating submodules. 2011-01-19 18:12:41 -08:00
Robin Sommer
814cb0f091 Merge remote branch 'origin/topic/jsiwek/macports-fink-fix' 
Conflicts:
	aux/broccoli
	aux/broctl
 2011-01-19 18:09:58 -08:00
Robin Sommer
420d8ac4b7 Merge remote branch 'origin/topic/jsiwek/packaging' 
* origin/topic/jsiwek/packaging:
  Changed behavior of how binary packaging installs config files.
 2011-01-19 18:07:38 -08:00
Robin Sommer
75335b933e Removing global_attrs from parser, per #11, and also record 
attributes. Both aren't used anywhere. Along with these goes some
more now unused code.

Closes #11.
 2011-01-19 18:00:09 -08:00
Seth Hall
e1ab9b1c69 Pattern construction BiFs will now work if no packets have been read. 2011-01-19 18:00:01 -08:00
Robin Sommer
fa7654ec75 Merge remote branch 'origin/topic/robin/entropy' 
* origin/topic/robin/entropy:
  A few smaller tweaks.
  Applying Seth's patch from #265 adding entropy BiFs.
 2011-01-19 17:38:29 -08:00
Robin Sommer
8e7d0617a1 Merge remote branch 'remotes/origin/topic/bro_dns_fake_message' 
* remotes/origin/topic/bro_dns_fake_message:
  Reworded BRO_DNS_FAKE message.
  Added a BRO_DNS_FAKE message to the help output.

Changed to show on/off rather than the variable's content.
 2011-01-19 17:31:00 -08:00
Robin Sommer
3bc2a26ea6 Merge remote branch 'origin/fastpath' 
* origin/fastpath:
  Removing noisy output about doing incremental serialization. Addresses #292.
  Loading scan.bro in portmappter.bro, per #330.
  Connection compressor fix from #338.
  Working around not being able to do lookup_addr() for IPv6 addresses.
  IPv6 UDP checksum calculation was broken. (Matti Mantere)
  Fix for portmapper analyzer segfaulting when parsing portmap dump replies. (Gregor Maier)
  Keep buffering state across file rotation (Justin Azoff)
 2011-01-19 17:05:04 -08:00
Robin Sommer
1e407b433c Merge branch 'fastpath' of ssh://envoy.icir.org/bro into fastpath 2011-01-19 16:48:25 -08:00