Commit graph

275 commits

Author SHA1 Message Date
Benjamin Bannier
d796b3dd57 Bump Spicy to the latest development version. 2022-06-09 15:48:10 +02:00
Christian Kreibich
763b0c8d10 Merge branch 'topic/christian/management-auto-assign-ports'
* topic/christian/management-auto-assign-ports:
  Management framework: bump zeek-client to pull in relaxed port handling
  Management framework: bump external cluster testsuite
  Management framework: also use send_set_configuration_response_error elsewhere
  Management framework: minor log formatting tweak, for consistency
  Management framework: support auto-assignment of ports in cluster nodes
2022-06-08 13:44:29 -07:00
Christian Kreibich
d8605884ff Management framework: bump zeek-client to pull in relaxed port handling 2022-06-08 13:29:25 -07:00
Tim Wojtulewicz
4a569b6c68 Update submodules [nomail] 2022-06-03 12:09:34 -07:00
Tim Wojtulewicz
0952340447 Updating submodule(s) [nomail] 2022-06-03 11:22:05 -07:00
Christian Kreibich
43f9c27b75 Management framework: bump zeek-client to bring back to master 2022-06-03 10:37:54 -07:00
Tim Wojtulewicz
febdc97f09 Merge remote-tracking branch 'origin/topic/christian/management-instance-handling'
* origin/topic/christian/management-instance-handling:
  Management framework: bump zeek-client to pull in rendering tweaks
  Management framework: bump external cluster testsuite
  Management framework: improve address and port handling
  Management framework: broaden get_instances response data to connected instances
  Management framework: expand notify_agent_hello event arguments
  Management framework: comment-only tweaks and typo fixes
2022-06-03 09:50:21 -07:00
Christian Kreibich
47f4342821 Management framework: bump zeek-client to pull in rendering tweaks 2022-06-03 02:18:35 -07:00
Tim Wojtulewicz
d3cba26974 Updating submodule(s) [nomail] 2022-06-02 11:49:55 -07:00
Robin Sommer
d99f041ac5
Add WebSocket support for exchanging events with external clients.
This exposes Broker's new WebSocket support in Zeek. To enable it,
call `Broker::listen_websocket()`. Zeek will then start listening on
port 9997 for incoming WebSocket connections.

See the Broker documentation for a description of the message format
expected over these WebSocket connections.
2022-06-02 10:31:52 +02:00
Christian Kreibich
e98a194869 Update auxil/package-manager submodule [nomail] 2022-06-01 09:54:49 -07:00
Tim Wojtulewicz
050e94f5c7 Update submodule(s) [nomail] 2022-06-01 09:47:10 -07:00
Christian Kreibich
65589c9bcb Merge branch 'topic/christian/management-verify-nodestarts'
* topic/christian/management-verify-nodestarts:
  Management framework: bump external cluster testsuite
  Management framework: bump zeek-client to pull in set-config rendering
  Management framework: enable stdout/stderr reporting
  Management framework: Supervisor extensions for stdout/stderr handling
  Management framework: disambiguate redef field names in agent and controller
  Management framework: move to ResultVec in agent's set_configuration response
  Management framework: tune request timeout granularity and interval
  Management framework: verify node starts when deploying a configuration
  Management framework: a bit of debug-level logging for troubleshooting
2022-05-31 12:59:18 -07:00
Christian Kreibich
3320e46132 Management framework: bump zeek-client to pull in set-config rendering 2022-05-31 12:55:21 -07:00
Tim Wojtulewicz
5a07aa9a0b Merge remote-tracking branch 'origin/topic/vern/find-unused'
* origin/topic/vern/find-unused:
  Update spicy-plugin with change that checks for zeek version
  deprecation messages for unused base script functions
  clearer messages for warning about unused functions
  Fixes from review, post-rebase
  code formatting and more btest updates
  baseline & btest updates
  annotate orphan base script components with &deprecated
  annotate base scripts with &is_used as needed
  --no-usage-warnings flag to suppress analysis
  support for associating &is_used attributes with functions
  classes for evaluating function/hook/event usage
  broader support for AST traversal, including Attr and Attributes objects
  include attributes in descriptions of sets and tables
  low-level tidying
2022-05-31 11:14:22 -07:00
Tim Wojtulewicz
7c9d6c1f3f Update spicy-plugin with change that checks for zeek version 2022-05-31 10:19:22 -07:00
Tim Wojtulewicz
bdfa7e70f5 Merge remote-tracking branch 'origin/topic/timw/fix-rst-warning'
* origin/topic/timw/fix-rst-warning:
  Update zeek-aux submodule to fix a compiler warning
2022-05-27 14:34:01 -07:00
Tim Wojtulewicz
9372c4453b Update zeek-aux submodule to fix a compiler warning 2022-05-27 09:51:51 -07:00
Vern Paxson
9f05fe5bfa code formatting and more btest updates 2022-05-26 18:15:48 -07:00
Christian Kreibich
415bbe17d6 Merge branch 'topic/christian/management-cluster-dirs'
* topic/christian/management-cluster-dirs:
  Management framework: bump zeek-client to pull in instance serialization fixes
  Management framework: bump external cluster testsuite
  Management framework: update agent-checkin test to reflect recent changes
  Management framework: place each Zeek process in its own working dir
  Management framework: set defaults for log rotation and persistent state
  Management framework: add spool and state directory config settings
  Management framework: establish stdout/stderr files also for cluster nodes
  Management framework: default to having agents check in with the (local) controller
  Management framework: move role variable from logging into framework-wide config
  Management framework: distinguish supervisor/supervisee when loading agent/controller
  Management framework: simplify agent and controller stdout/stderr files
  Management framework: prefix the management logs with "management-"
  Management framework: comment and layouting tweaks, no functional change
  Management framework: rename env var that labels agents/controllers
  Management framework: increase robustness of agent/controller naming
2022-05-26 16:10:14 -07:00
Christian Kreibich
1165193df8 Management framework: bump zeek-client to pull in instance serialization fixes 2022-05-26 13:32:08 -07:00
Benjamin Bannier
8672c953e1 Bump Spicy and spicy-plugin. 2022-05-25 15:01:46 +02:00
Tim Wojtulewicz
69e6554f10 Update broker submodule [nomail] 2022-05-23 14:20:01 -07:00
Benjamin Bannier
95aff9a1e3 Include spicy in build. 2022-05-16 09:07:11 +02:00
Johanna Amann
d5c2a0caaa Update submodules
[nomail]
2022-05-11 18:51:02 +01:00
Christian Kreibich
8d101f21be Merge branch 'topic/christian/management-consistency-tweaks'
* topic/christian/management-consistency-tweaks:
  Management framework: consistency tweaks in zeek-client, plus test updates
2022-05-06 15:28:48 -07:00
Christian Kreibich
8c76af6ab9 Management framework: consistency tweaks in zeek-client, plus test updates
A minor changeset that reflects zeek-client updates, with some effects on
its output and hence test cases.
2022-05-06 11:22:48 -07:00
Christian Kreibich
7198c847e8 Merge branch 'topic/christian/management-get-config'
* topic/christian/management-get-config:
  Management framework: add get_configuration_request/response transaction
2022-05-05 18:10:46 -07:00
Christian Kreibich
001de561fc Management framework: add get_configuration_request/response transaction
Includes submodule bumps for Broker (to pull in better handling of data
structures that are difficult to unserialize in Python), zeek-client (for the
get-config command), and a commit hash update for the external testsuite.
2022-05-05 16:09:21 -07:00
Christian Kreibich
6fb5c1fe5c Update zeek-archiver submodule [nomail] [skip ci] 2022-05-05 12:10:10 -07:00
Tim Wojtulewicz
03bcc3523b Merge remote-tracking branch 'origin/topic/neverlord/alm'
* origin/topic/neverlord/alm:
  Fix build on CentOS 7
  Initialize OpenSSL on startup
  Increase memory for CI jobs
  Fix formatting
  Avoid double-initialization of OpenSSL
  Canonify intel.log in read-file-dist-cluster test
  Fix formatting
  Port Zeek to latest Broker API
2022-04-28 19:52:41 +00:00
Dominik Charousset
bb5d3c682a Avoid double-initialization of OpenSSL 2022-04-27 23:02:27 +02:00
Dominik Charousset
4ea1a593a9 Port Zeek to latest Broker API 2022-04-27 23:02:27 +02:00
Tim Wojtulewicz
c2bf602d94 Add out_ptr, use for c-ares interface calls 2022-04-22 13:10:37 -07:00
Tim Wojtulewicz
336c6ae5c2 Replace nb_dns library with C-Ares 2022-04-22 13:10:37 -07:00
Tim Wojtulewicz
ba3b142183 Update libkqueue for Coverity and build warning fixes 2022-04-20 16:18:06 -07:00
Christian Kreibich
2d73edb04c Merge branch 'topic/christian/management-print-cmd'
* topic/christian/management-print-cmd:
  Management framework: bump external testsuite
  Management framework: allow selecting cluster nodes in get_id_value
  Management framework: minor tweaks to logging component
  Management framework: bump zeek-client to pull in get-id-value command
  Avoid whitespace around function type strings in JSON rendering
  Management framework: improve handling of node run states
  Management framework: add get_id_value dispatch
  Management framework: allow dispatching "actions" on cluster nodes.
  Management framework: some renaming to avoid the term "data cluster"
  Management framework: allow agents to communicate with cluster nodes
2022-04-18 16:40:49 -07:00
Christian Kreibich
748db5cf73 Management framework: bump zeek-client to pull in get-id-value command 2022-04-18 12:38:18 -07:00
Christian Kreibich
acaa9ec01e Bump gen-zam submodule to pull in GCC 12 fix [nomail] 2022-04-14 14:26:47 -07:00
Tim Wojtulewicz
3b50d810de Update libkqueue to 2.6.0 release [skip ci] [nomail] 2022-04-08 21:43:38 +00:00
Christian Kreibich
b17c992b47 Merge branch 'topic/christian/fix-install-symlink'
* topic/christian/fix-install-symlink:
  Bump submodules to pull in InstallSymlink fix [nomail]
2022-04-08 11:31:57 -07:00
Christian Kreibich
21b3bcea2b Bump submodules to pull in InstallSymlink fix [nomail] 2022-04-07 13:39:02 -07:00
Christian Kreibich
aa8f11fa17 Merge branch 'topic/christian/gh-1963'
* topic/christian/gh-1963:
  Add cmake-time reporting of bifcl, binpac, and gen-zam used for build
  Build Gen-ZAM from a submodule and support use of pre-existing executable
2022-03-28 17:05:09 -07:00
Christian Kreibich
e403dd5fe1 Build Gen-ZAM from a submodule and support use of pre-existing executable
This separates Gen-ZAM from the main Zeek distribution and places it in a
submodule at auxil/gen-zam, reflecting binpac and bifcl. Configuring with
--with-gen-zam=... allws reuse of an existing executable.
2022-03-21 15:30:07 -07:00
Christian Kreibich
40fa1a0769 Merge branch 'topic/christian/controller-renaming'
* topic/christian/controller-renaming:
  Bump external cluster testsuite to reflect Management framework reorg
  Bump zeek-client to reflect Management framework reorg
  Reorg of the cluster controller to new "Management framework" layout
2022-02-10 18:10:08 -08:00
Christian Kreibich
c77cbc5c58 Bump zeek-client to reflect Management framework reorg 2022-02-09 18:09:46 -08:00
Christian Kreibich
41abf8f422 Bump zeek-client for Broker enum fix/workaround 2022-02-08 10:02:57 -08:00
Tim Wojtulewicz
0a70595d44 Update submodule(s) [nomail] [skip ci] 2022-02-08 09:55:16 -07:00
Tim Wojtulewicz
5bcccbd90e Update submodule(s) [nomail] [skip ci] 2022-02-07 10:05:29 -07:00
Robin Sommer
5f1f005142
Merge remote-tracking branch 'origin/topic/neverlord/hide-caf'
* origin/topic/neverlord/hide-caf:
  Fix GCC builds and string output for Broker errors
  Update to latest Broker without public CAF dep
2022-02-07 16:25:22 +01:00