Bernhard Amann
35fa52ea48
update baseline
2011-12-07 13:10:35 -08:00
Robin Sommer
f1e132cd1a
Adding missing script.
2011-12-07 10:28:56 -08:00
Robin Sommer
3c2fa085d4
Adapting diff-all so that it expands globs in both current and
...
baseline directory.
This way, it now spots if a Baseline file isn't produced anymore.
Closes #677 .
2011-12-07 10:03:44 -08:00
Bernhard Amann
9f32f68a13
make test more robust.
2011-12-06 10:50:36 -08:00
Bernhard Amann
4a690484ec
make port annotation work and ascii input reader way more rebust with better error messages.
2011-12-06 10:42:37 -08:00
Bernhard Amann
949ec6897a
Merge remote-tracking branch 'origin/master' into topic/bernhard/localnet
2011-12-03 20:15:05 -08:00
Robin Sommer
f59c766858
Portability fix for new patch.
2011-12-02 17:00:08 -08:00
Robin Sommer
1e45910b25
Merge remote-tracking branch 'origin/topic/jsiwek/bro-log-suffix'
...
* origin/topic/jsiwek/bro-log-suffix:
Teach LogWriterAscii to use BRO_LOG_SUFFIX env. var. (addresses #704 )
Closes #704 .
2011-12-02 16:52:18 -08:00
Robin Sommer
03b7ebfb5b
Merge remote-tracking branch 'origin/topic/jsiwek/fix-dns-double-free'
...
* origin/topic/jsiwek/fix-dns-double-free:
Fix double-free of DNS_Mgr_Request object (addresses #661 )
Closes #661 .
2011-12-01 16:40:07 -08:00
Robin Sommer
df3ae4b30d
Merge remote-tracking branch 'origin/topic/jsiwek/remote-log-peer'
...
* origin/topic/jsiwek/remote-log-peer:
Add a remote_log_peer event which contains an event_peer record param.
Closes #493 .
2011-12-01 16:02:11 -08:00
Jon Siwek
edc0a451f8
Teach LogWriterAscii to use BRO_LOG_SUFFIX env. var. (addresses #704 )
2011-12-01 16:18:56 -06:00
Jon Siwek
0c8b5a712d
Add a remote_log_peer event which contains an event_peer record param.
...
Addresses #493 .
2011-12-01 14:07:08 -06:00
Jon Siwek
2913a990c4
Merge branch 'master' into fastpath
2011-12-01 09:12:42 -06:00
Jon Siwek
4444c56a94
Fix double-free of DNS_Mgr_Request object (addresses #661 )
...
In DNS::Resolve, they could be deleted once from where they were
stored in the nb_dns_info cookie and once again from where they
were stored in the DNS_Mgr::requests list. Before commit
bd9c937236
2011-11-30 13:31:54 -06:00
Jon Siwek
9be652f8ff
Rearrange packet filter and dpd documentation.
2011-11-30 10:13:20 -06:00
Seth Hall
bb47289bfa
Some updates to the base DNS script.
...
- Answers and TTLs are now vectors.
- The warning that was being generated (dns_reply_seen_after_done)
from transaction ID reuse is fixed.
- Updated the single failing btest baseline.
2011-11-30 10:19:41 -05:00
Robin Sommer
ebd15cf12e
Fixing ASCII logger to escape the unset-field place-holder if written
...
out literally.
2011-11-29 17:01:47 -08:00
Bernhard Amann
a68e6b9fa4
allow sets to be read from files, convenience function for reading a file once,
...
bug in destructor that could lead to a segfault.
2011-11-29 15:05:09 -08:00
Bernhard Amann
4975584e01
change Log enum to Input enum.
2011-11-28 13:45:00 -08:00
Bernhard Amann
3c40f00a53
make filters pointers (for inheritance)
2011-11-22 16:09:13 -08:00
Bernhard Amann
3035eb2b21
fix a little bug that prevented several simultaneous filters from working.
2011-11-21 19:30:16 -08:00
Bernhard Amann
53af0544cc
re-enable table events
2011-11-21 19:03:35 -08:00
Bernhard Amann
77a517f2b5
camel-casing for types
2011-11-21 15:45:27 -08:00
Bernhard Amann
92b3723b09
add very basic predicate test.
2011-11-21 15:36:03 -08:00
Bernhard Amann
bfe90199bd
Merge remote-tracking branch 'origin/master' into topic/bernhard/input
2011-11-21 15:21:20 -08:00
Bernhard Amann
18591b53d4
rename filter to tablefilter in preparation of event filters...
2011-11-21 15:20:52 -08:00
Bernhard Amann
f0e5303330
make want_record field for tablefilter work...
2011-11-21 15:09:00 -08:00
Bernhard Amann
029871e48c
first test.
2011-11-20 13:42:02 -08:00
Jon Siwek
305621672f
Teach Broxygen the .. bro:see:: directive
2011-11-19 07:19:57 -06:00
Robin Sommer
0b8428d1bb
Merge branch 'master' into topic/robin/pp-alarms
2011-11-17 15:26:15 -08:00
Jon Siwek
5227eb73c8
Teach Broxygen :bro:see: role for referencing any identifier in Bro domain.
2011-11-17 16:55:51 -06:00
Robin Sommer
7696c8b365
Merge remote-tracking branch 'origin/topic/jsiwek/require-libmagic-libz'
...
* origin/topic/jsiwek/require-libmagic-libz:
Promote libz and libmagic to required dependencies.
Conflicts:
doc/quickstart.rst
Closes #674
2011-11-15 17:08:24 -08:00
Robin Sommer
8de3614afa
Merge remote-tracking branch 'origin/topic/jsiwek/custom-b64-alphabet'
...
* origin/topic/jsiwek/custom-b64-alphabet:
Add decode_base64_custom BiF to allow alternate base64 alphabets.
Simplified the code a little bit.
Closes #670 .
2011-11-15 17:03:23 -08:00
Robin Sommer
dacc019f1f
Adding test for alarm mail.
...
Can't test all the functionality, so skipping DNS lookup and the
actual mailing via sendmail.
2011-11-15 08:51:48 -08:00
Seth Hall
d14349a6f8
Merge remote-tracking branch 'origin/master' into fastpath
2011-11-14 16:06:44 -05:00
Seth Hall
b12d2c768e
Tiny bugfix for http file extraction along with test.
2011-11-14 15:24:15 -05:00
Jon Siwek
5865bf3850
Add decode_base64_custom BiF to allow alternate base64 alphabets.
...
Addresses #670
2011-11-11 13:48:11 -06:00
Jon Siwek
d750c3ba74
Promote libz and libmagic to required dependencies.
2011-11-11 12:39:00 -06:00
Robin Sommer
9aef0c0f5a
Fixing packet filter test.
...
Adapting the IPv6 one as well, though I believe that's already
broken anyway ...
2011-11-03 17:42:06 -07:00
Robin Sommer
5b79d2b15f
Baseline updates.
...
Also a small tweak to the genDocSourcesList.sh as I was seein
non-consistent output order.
2011-10-26 15:27:03 -07:00
Seth Hall
098134d2fa
Updated unit test baselines.
...
- Some (all?) of the DNS servers aren't being detected
anymore because the test tracefile isn't long enough.
Logging servers is delayed a 5 minutes in case a better
result comes in.
2011-10-26 09:36:04 -04:00
Robin Sommer
4cdff8ffd8
Extending .gitignore other external test-suites as well.
2011-10-25 16:33:17 -07:00
Seth Hall
3d6d75b647
Updating test baselines for recent changes.
2011-10-25 14:51:32 -04:00
Seth Hall
320739e183
Updated/fixed MSIE version parsing in the software framework.
2011-10-25 09:30:06 -04:00
Robin Sommer
c8dfdb4492
Merge remote-tracking branch 'origin/topic/robin/interpreter-exceptions'
...
* origin/topic/robin/interpreter-exceptions:
Adding test for new error handling.
Experimental code to better handle interpreter errors.
This seems to work fine and it catches some potentially nasty crashes
so I'm merging it in even though it's not the final word on error
handling yet. #646 tracks the work scheduled for later.
2011-10-21 10:35:32 -07:00
Jon Siwek
24f3eb7fc2
Fix test failure due to some platforms joining stderr/stdout differently.
2011-10-17 13:53:10 -05:00
Jon Siwek
556b88e322
Tweaking notice suppression disable and notice policy order tests.
...
They should be less sensitive to script-layer changes now.
2011-10-14 10:47:32 -05:00
Robin Sommer
c81d428256
Adding test for new error handling.
2011-10-09 20:41:55 -07:00
Robin Sommer
bd9c937236
Fixing DNS memory leaks.
...
Some of the changes only clean up at termination to make perftools
happt, but there were some "real" leaks as well.
This fixes all DNS leaks I could reproducem, including most likely
what's reported in #534 . Closing #534 .
I'm also adding a new btest subdir core/leaks with tests requiring
perftools support. These don't compare against base lines but abort
whenever perftools reports a leak (with stack information to track it
down). Right now, these are passing.
2011-10-09 17:00:57 -07:00
Seth Hall
0803df2e14
Changed communication option from listen_encrypted to listen_ssl.
...
- Robin pointed out that SSL is providing authentication
as well as encryption so listen_ssl is a more
proper variable name.
2011-10-07 23:57:08 -04:00
