Robin Sommer
6e74dc4dca
Merge branch 'master' into topic/robin/metrics-merge
2013-04-29 21:27:29 -07:00
Robin Sommer
a201d2e033
Fixing more memory leaks.
2013-04-29 21:21:05 -07:00
Robin Sommer
1a41bfa0ef
Fixing memory leak in CompHash.
...
Amazing what code still has memory leaks ...
Closes #987 .
2013-04-29 21:18:55 -07:00
Robin Sommer
e8c9c2ee0b
Fixing more memory leaks.
2013-04-29 21:14:11 -07:00
Robin Sommer
95cf662ff5
Fixing memory leak in CompHash.
...
Amazing what code still has memory leaks ...
Closes #987 .
2013-04-29 21:14:11 -07:00
Robin Sommer
7f0e25bdef
Replacing cluster leak test.
...
The former one used the old metrics framework, now switching to
sumstats.
2013-04-29 21:14:11 -07:00
Bernhard Amann
321dfadaab
Merge remote-tracking branch 'origin/topic/robin/metrics-merge' into topic/bernhard/topk
2013-04-29 14:08:17 -07:00
Jon Siwek
0141f51801
FileAnalysis: load custom mime magic database just once.
...
This works around a bug in libmagic since version 5.12 (current at
time of writing is 5.14) -- second call to magic_load() w/ non-default
database segfaults.
2013-04-29 12:49:22 -05:00
Seth Hall
07b53e9fe2
Merge remote-tracking branch 'origin/master' into topic/seth/file-analysis-exe-analyzer
2013-04-29 13:33:44 -04:00
Bernhard Amann
b968103c92
Merge remote-tracking branch 'origin/master' into topic/bernhard/sqlite
2013-04-28 22:06:34 -07:00
Bernhard Amann
8fd502c458
Merge remote-tracking branch 'origin/topic/seth/metrics-merge' into topic/bernhard/topk
2013-04-28 21:56:23 -07:00
Bernhard Amann
160da6f1a6
add sum function that can be used to get the number of total
...
observed elements.
Add methods to merge with and without pruning (before only merge
method was with pruning, which invalidates the number of total
observed elements)
2013-04-28 21:55:06 -07:00
Bernhard Amann
6beaefd207
Merge remote-tracking branch 'origin/topic/bernhard/topk' into topic/bernhard/topk
2013-04-28 21:22:13 -07:00
Bernhard Amann
07ecd31bbd
in cluster settings, the resultvals can apparently
...
been uninitialized in some special cases
2013-04-28 21:21:22 -07:00
Robin Sommer
c1f08cc435
Updating test for removed metric_* log fields.
2013-04-28 15:36:49 -07:00
Robin Sommer
b9249ecf9d
Layout tweaks for the sumstats code, and preliminary updates for NEWS.
...
The layout changes are mostly whitespace and some comment rewrapping.
No functional changes.
2013-04-28 15:35:21 -07:00
Robin Sommer
1e40a2f88c
Merge remote-tracking branch 'origin/topic/seth/metrics-merge'
...
* origin/topic/seth/metrics-merge: (70 commits)
Added protocol to the traceroute detection script.
Added an automatic state limiter for threshold based SumStats.
Removed some dead code in scan.bro
Renamed a plugin hook in sumstats framework.
Move loading variance back to where it should be alphabetically.
Fix a bug with path building in FTP. Came up when changing the path utils.
Fix a few tests.
SumStats test checkpoint.
SumStats tests pass.
Checkpoint for SumStats rename.
Fix another occasional reporter error.
Small updates to hopefully correct reporter errors leading to lost memory.
Trying to fix a state maintenance issue.
Updating DocSourcesList
Updated FTP bruteforce detection and a few other small changes.
Test updates and cleanup.
Fixed the measurement "sample" plugin.
Fix path compression to include removing "/./".
Removed the example metrics scripts. Better real world examples exist now.
Measurement framework is ready for testing.
...
2013-04-28 13:21:46 -07:00
Scott Runnels
4f9869fe5c
Spelling corrections.
2013-04-28 15:50:03 -04:00
Scott Runnels
cb3e05edd4
Include Notice Policy shortcuts in the Scripting User Manual.
...
Include two tests and baselines for the RST output.
2013-04-28 15:48:44 -04:00
Robin Sommer
424025fb04
Updating submodule(s).
...
[nomail]
2013-04-27 15:07:35 -07:00
Robin Sommer
5fb716a724
Merge remote-tracking branch 'origin/fastpath'
...
* origin/fastpath:
Fixed a bug in the vulnerable software script and added a test.
2013-04-27 15:03:29 -07:00
Bernhard Amann
1accee41ed
fix memory leaks
2013-04-26 14:06:38 -07:00
Bernhard Amann
fd2e050306
fix warnings
2013-04-26 11:34:07 -07:00
Seth Hall
04410237c2
Added protocol to the traceroute detection script.
2013-04-26 12:24:46 -04:00
Bernhard Amann
5608caf79a
make error rate configureable
2013-04-25 14:20:13 -07:00
Bernhard Amann
9802e2332d
Merge branch 'topic/bernhard/hyperloglog-with-measurement' into topic/bernhard/hyperloglog
2013-04-25 13:46:36 -07:00
Bernhard Amann
32620952d0
Merge remote-tracking branch 'origin/topic/seth/metrics-merge' into topic/bernhard/hyperloglog
2013-04-25 13:45:30 -07:00
Bernhard Amann
166fc4765a
Merge remote-tracking branch 'origin/topic/seth/metrics-merge' into topic/bernhard/topk
2013-04-25 13:21:18 -07:00
Seth Hall
4bddcd2379
Fixed a bug in the vulnerable software script and added a test.
2013-04-25 14:56:14 -04:00
Seth Hall
41967a8d0f
Merge remote-tracking branch 'origin/topic/jsiwek/file-analysis' into topic/seth/file-analysis-exe-analyzer
2013-04-25 13:44:18 -04:00
Seth Hall
317252b5ae
Another checkpoint
2013-04-25 13:44:12 -04:00
Seth Hall
48cbb31747
Added an automatic state limiter for threshold based SumStats.
2013-04-25 12:51:55 -04:00
Bernhard Amann
f2967f485b
add persistence test not using predetermined random seeds.
...
This is failing at the moment.
2013-04-24 16:03:40 -07:00
Bernhard Amann
f69db71f57
Merge remote-tracking branch 'origin/master' into topic/bernhard/hyperloglog
2013-04-24 16:01:05 -07:00
Bernhard Amann
12cbf20ce0
add topk cluster test
2013-04-24 15:30:24 -07:00
Bernhard Amann
dbd53a09a6
Merge remote-tracking branch 'origin/master' into topic/bernhard/topk
2013-04-24 15:02:19 -07:00
Bernhard Amann
c0890f2a0f
make size of topk-list configureable when using sumstats
2013-04-24 15:01:06 -07:00
Jon Siwek
d22f30e9a1
Improve a libmagic-related error message.
2013-04-24 12:57:51 -05:00
Seth Hall
d72980828f
Merge remote-tracking branch 'origin/topic/jsiwek/file-analysis' into topic/seth/file-analysis-exe-analyzer
...
Conflicts:
src/file_analysis/ActionSet.cc
src/types.bif
2013-04-24 13:01:39 -04:00
Seth Hall
4cc9ca4243
Checkpoint
2013-04-24 12:56:20 -04:00
Bernhard Amann
2f48008c42
implement merging for top-k.
...
I am not (entirely) sure that this is mathematically correct, but
I am (more and more) getting the feeling that it... might be.
In any case - this was the last step and now it should work
in cluster settings.
2013-04-24 06:17:51 -07:00
Bernhard Amann
6f863d2259
add serialization for topk
2013-04-23 23:24:02 -07:00
Robin Sommer
e986247ff2
Merge remote-tracking branch 'origin/topic/jsiwek/974'
...
Closes #974 .
* origin/topic/jsiwek/974:
Fix schedule statements used outside event handlers (addresses #974 ).
2013-04-23 20:38:21 -07:00
Robin Sommer
f6f00924fc
Merge remote-tracking branch 'origin/topic/jsiwek/973'
...
Closes #973 .
* origin/topic/jsiwek/973:
Fix record coercion for default inner record fields (addresses #973 ).
2013-04-23 20:37:08 -07:00
Robin Sommer
71591d706e
Small tweaks for bytestring_to_count().
...
Closes #968 .
2013-04-23 20:32:57 -07:00
Yun Zheng Hu
3fff71b37a
Add bytestring_to_count function to bro.bif
2013-04-23 20:18:38 -07:00
Bernhard Amann
a426c76122
make the get function const
2013-04-23 18:23:34 -07:00
Bernhard Amann
567fee6439
Merge remote-tracking branch 'origin/topic/seth/metrics-merge' into topic/bernhard/hyperloglog-with-measurement
...
Conflicts:
scripts/base/frameworks/sumstats/plugins/__load__.bro
2013-04-23 15:27:17 -07:00
Bernhard Amann
de5769a88f
topk for sumstats
2013-04-23 15:19:01 -07:00
Scott Runnels
59405af804
Notice::policy hooks and tests.
...
Include explanation of various Notice::policy hook actions.
Add two btest scripts. framework_notice_hook_01.bro shows adding an
action to the n$action set while framework_notice_suppression.bro shows
how to add a custom n$suppress_for value for a notice through a policy
hook. While both scripts include an @load directive, it is left out in
RST document so as to avoid confusion.
2013-04-23 17:02:42 -04:00
