We now support selecting which fields of a unit type get exported into
the automatically created Zeek record; as well as selecting which
fields get a `&log` attribute added automatically to either all fields
or to selected fields.
Syntax:
- To export only selected fields:
export Foo::X with { field1, field3 };
- To export all but selected fields:
export Foo::X without { field2, field3 };
- To `&log` all fields:
export Foo::X &log;
- To `&log` only selected fields:
export Foo::X with { field1 &log, field3 }; # exports (only) field1 and field3, and marks field1 for logging
Syntax is still subject to change.
Closes#3218.
Closes#3219.
* origin/topic/timw/3059-set-vector-conversion:
Fix conversion with record types
Add conversion between set and vector using 'as' keyword
Add std::move for a couple of variables passed by value
This commit switchexisd the Raw reader to use posix_spawn, instead of
the combination of fork + exec. This should be much more efficient, and
also makes the code smaller, and easier to read and understand.
* origin/topic/timw/3184-modbus-extensions:
Pass parsed file record information with ReadFile/WriteFile events
Add length field from header to ModbusHeaders record type
Modbus: Add support for Encapsulation Interface Transport (FC=2B) requests and responses
Modbus: Add support for Diagnostics (FC=8) requests and responses
* origin/topic/timw/3184-modbus-extensions:
Pass parsed file record information with ReadFile/WriteFile events
Add length field from header to ModbusHeaders record type
Modbus: Add support for Encapsulation Interface Transport (FC=2B) requests and responses
Modbus: Add support for Diagnostics (FC=8) requests and responses
* origin/topic/timw/cmake-find-package:
Change VERSION variable in CMake config to ZEEK_VERSION_FULL
Update bifcl and binpac for FindPackage fixes
Remove usage of FindRequiredPackage
Update zeekctl and cmake to deprecate FindRequiredPackage
Update broker submodule for pybind11 + cmake changes
Failing currently with:
Failed to start an instance! Failed to pull null image! Repository does not exist or may require authentication.
Container errored with 'ImagePullBackOff: Back-off pulling image "gcr.io/cirrus-ci-community/zeek/zeek/ci/centos-7/dockerfile:a0c25357a3a7dc08f6c1e61e6f81ad36"'