Bernhard Amann
3c40f00a53
make filters pointers (for inheritance)
2011-11-22 16:09:13 -08:00
Bernhard Amann
f82bf3f35f
re-enable direct event sending from input readers
2011-11-22 11:09:06 -08:00
Matthias Vallentin
c04b261376
Remove redundant connection_record() BiF.
...
The function lookup_connection() provides the same functionality and has more
graceful failure semantics.
2011-11-21 23:03:46 -08:00
Matthias Vallentin
1179c1a598
Remove redundant active_connection() BiF.
...
The BiF connection_exists has a more intuitive name and provides the same
functionality, thus we can remove active_connection().
2011-11-21 22:55:14 -08:00
Matthias Vallentin
6a563c8829
Make exit() parameterizable.
...
The exit() BiF used to have no arguments and always invoked exit(0) from libc.
This small fix allows for non-zero exit values of the Bro process.
2011-11-21 22:30:53 -08:00
Bernhard Amann
3035eb2b21
fix a little bug that prevented several simultaneous filters from working.
2011-11-21 19:30:16 -08:00
Bernhard Amann
53af0544cc
re-enable table events
2011-11-21 19:03:35 -08:00
Bernhard Amann
a16454b151
vector entries also have to be atomic.
2011-11-21 15:55:45 -08:00
Bernhard Amann
77a517f2b5
camel-casing for types
2011-11-21 15:45:27 -08:00
Bernhard Amann
92b3723b09
add very basic predicate test.
2011-11-21 15:36:03 -08:00
Bernhard Amann
bfe90199bd
Merge remote-tracking branch 'origin/master' into topic/bernhard/input
2011-11-21 15:21:20 -08:00
Bernhard Amann
18591b53d4
rename filter to tablefilter in preparation of event filters...
2011-11-21 15:20:52 -08:00
Bernhard Amann
f0e5303330
make want_record field for tablefilter work...
2011-11-21 15:09:00 -08:00
Matthias Vallentin
0325b5ea32
to_port() now parses a string instead of a count.
...
Addresses #684 .
2011-11-20 21:41:41 -08:00
Bernhard Amann
029871e48c
first test.
2011-11-20 13:42:02 -08:00
Bernhard Amann
7eb4d99341
very basic functionality kind of works again
2011-11-20 12:27:34 -08:00
Bernhard Amann
b3f01915fb
compiles with basic new filter framework - but crashes on use.
2011-11-20 12:07:50 -08:00
Robin Sommer
fa8fccc7b1
Merge remote-tracking branch 'origin/master' into topic/script-reference
2011-11-19 15:07:18 -08:00
Robin Sommer
c8839da069
Updating submodule(s).
...
[nomail]
2011-11-19 14:58:27 -08:00
Robin Sommer
15eadb90b5
Merge remote-tracking branch 'origin/topic/jsiwek/parallel-make-recursion'
...
* origin/topic/jsiwek/parallel-make-recursion:
Fix parallel make portability
Revert "Fix parallel make from top-level to work on more platforms"
Closes #687 .
2011-11-19 14:58:09 -08:00
Robin Sommer
b4cadd8f26
Merge remote-tracking branch 'origin/topic/jsiwek/broxygen-cleanup'
...
* origin/topic/jsiwek/broxygen-cleanup:
Teach Broxygen the .. bro:see:: directive
More Broxygen stylesheet tweaks.
Change external Broxygen links to render same as internals.
Teach Broxygen to generate an index of Bro notices
Teach Broxygen :bro:see: role for referencing any identifier in Bro domain.
Add a "last updated date" to Broxygen docs.
Closes #650 .
2011-11-19 14:56:23 -08:00
Jon Siwek
305621672f
Teach Broxygen the .. bro:see:: directive
2011-11-19 07:19:57 -06:00
Robin Sommer
ab30a3d866
Checkpointing event.bif
...
Slowly working through ...
2011-11-18 14:47:28 -08:00
Jon Siwek
d3d09b798a
More Broxygen stylesheet tweaks.
2011-11-18 16:06:21 -06:00
Jon Siwek
05d107db17
Change external Broxygen links to render same as internals.
2011-11-18 14:06:44 -06:00
Jon Siwek
8d8f5dd006
Teach Broxygen to generate an index of Bro notices
2011-11-18 13:58:23 -06:00
Bernhard Amann
e2c521fc4e
start reworking input framework...
...
does not compile at the moment, but there are a few uncommitted changes that will be reverted in the next commit.
2011-11-18 10:49:20 -08:00
Jon Siwek
1ab266222e
Fix parallel make portability
2011-11-18 11:43:53 -06:00
Jon Siwek
4ee05d32db
Revert "Fix parallel make from top-level to work on more platforms"
...
This reverts commit a92592d08d
2011-11-18 11:20:25 -06:00
Robin Sommer
e81cf3bb73
Adding some first doc strings to event.bif.
...
Still trying to find the right style.
2011-11-17 16:59:53 -08:00
Robin Sommer
0b8428d1bb
Merge branch 'master' into topic/robin/pp-alarms
2011-11-17 15:26:15 -08:00
Jon Siwek
5227eb73c8
Teach Broxygen :bro:see: role for referencing any identifier in Bro domain.
2011-11-17 16:55:51 -06:00
Jon Siwek
ec33453d2d
Add a "last updated date" to Broxygen docs.
2011-11-17 16:51:27 -06:00
Bernhard Amann
988f859761
Merge remote-tracking branch 'origin/master' into topic/bernhard/input
2011-11-16 23:55:02 -08:00
Bernhard Amann
4dd95fcf3c
support for uninitialized fields & empty sets and tables.
...
The only snag is... with the default output format of the log-file writer, the input reader cannot tell if a table or set is empty or uninitialized (both cases use the same character by default). In this case, by default it is assumed that the field/vector is uninitalized.
2011-11-16 23:51:51 -08:00
Bernhard Amann
4fef1e3f8c
set & entry separator configuration (with the restriction that they have to be exactly one character long)
2011-11-16 22:47:28 -08:00
Bernhard Amann
ab68d84007
reading of enum types (thanks, Seth)
2011-11-16 22:13:36 -08:00
Robin Sommer
5fbebe1e22
Merge remote-tracking branch 'origin/fastpath'
...
* origin/fastpath:
Fix small bug: sets that are written to logfiles may only contain atomic types. (trying to write sets of records, etc. leads to a bro segfault)
2011-11-16 08:40:09 -08:00
Robin Sommer
fc7ebbe8d7
Updating submodule(s).
...
[nomail]
2011-11-15 17:52:42 -08:00
Robin Sommer
7696c8b365
Merge remote-tracking branch 'origin/topic/jsiwek/require-libmagic-libz'
...
* origin/topic/jsiwek/require-libmagic-libz:
Promote libz and libmagic to required dependencies.
Conflicts:
doc/quickstart.rst
Closes #674
2011-11-15 17:08:24 -08:00
Robin Sommer
6b70f340aa
Merge remote-tracking branch 'origin/topic/jsiwek/parallel-make-recursion'
...
* origin/topic/jsiwek/parallel-make-recursion:
Fix parallel make from top-level to work on more platforms
Closes #673 .
2011-11-15 17:04:55 -08:00
Robin Sommer
8de3614afa
Merge remote-tracking branch 'origin/topic/jsiwek/custom-b64-alphabet'
...
* origin/topic/jsiwek/custom-b64-alphabet:
Add decode_base64_custom BiF to allow alternate base64 alphabets.
Simplified the code a little bit.
Closes #670 .
2011-11-15 17:03:23 -08:00
Robin Sommer
6b207c9c95
Merge remote-tracking branch 'origin/topic/jsiwek/broxygen-cleanup'
...
* origin/topic/jsiwek/broxygen-cleanup:
Fix documentation interlinkage and normalize console directive bodies.
Adapt more www niceties to broxygen (stylesheets, pygments); add more docs
Finished dissolving the sphinx source directory into doc/ and doc/scripts/
Move sphinx source tree up a level.
Broxygen doc style tweaks.
Better adaptation of Bro website style in Broxygen docs.
Start Broxygen cleanup with crude adaptation of website styles.
Closes #650 .
2011-11-15 16:47:13 -08:00
Robin Sommer
c35094ea0b
Update missing in last commit to this branch.
2011-11-15 16:42:23 -08:00
Bernhard Amann
821878835a
read vector.
...
still missing: enums, empty fields for optional parameters.
2011-11-15 16:32:35 -08:00
Bernhard Amann
fb5f26e7fc
make default values work (thanks to robin)
2011-11-15 15:23:46 -08:00
Jon Siwek
72aa13968b
Fix documentation interlinkage and normalize console directive bodies.
2011-11-15 16:27:06 -06:00
Jon Siwek
ea2c89f2d7
Adapt more www niceties to broxygen (stylesheets, pygments); add more docs
2011-11-15 15:39:31 -06:00
Bernhard Amann
5e8dd4f06a
Fix small bug: sets that are written to logfiles may only contain atomic types.
...
(trying to write sets of records, etc. leads to a bro segfault)
2011-11-15 12:07:31 -08:00
Bernhard Amann
3d0162bcdc
isCompatibleType works correctly for tables.
2011-11-15 11:18:48 -08:00
