Robin Sommer
f573881c58
Pass over upgrade guide.
2011-10-21 11:38:19 -07:00
Seth Hall
29bace02b2
More small weird refinements to reduce overload attacks.
2011-10-21 14:31:40 -04:00
Seth Hall
0cdcf490d6
Restoring former default weird behavior for unsolicited_SYN_response.
2011-10-21 14:17:54 -04:00
Seth Hall
f0b32b21ee
weird.bro rewrite.
...
- I want to test it for a short while before committing it to
master just to make sure it is a sane modification.
2011-10-21 14:08:54 -04:00
Seth Hall
892245316f
Merge branch 'master' of ssh://git.bro-ids.org/bro
2011-10-21 14:03:43 -04:00
Seth Hall
8b56c54348
Slightly restructured http file hashing to fix a bug.
2011-10-21 14:03:31 -04:00
Seth Hall
43da40f2c6
Changed the notice name for interesting ssh logins to correctly reflect semantics of the notice.
...
- SSH::Login_From_Interesting_Hostname is now SSH::Interesting_Hostname_Login
- Added some documentation.
2011-10-21 14:03:03 -04:00
Seth Hall
3900d88e60
Field name change to notice framwork. $result -> $action
...
- $result is renamed to $action to reflect changes to the notice framework
since there is already another result-like field ($suppress_for) and
there may be more in the future.
- Slipped in a change to add connection information to notice emails too.
2011-10-21 14:01:39 -04:00
Seth Hall
8661abe9d9
Small script refinements and documentation updates.
2011-10-21 13:58:58 -04:00
Robin Sommer
5e5e29f345
Fixing crash with unknown debug streams.
...
Closes #643 .
2011-10-21 10:48:46 -07:00
Robin Sommer
c8dfdb4492
Merge remote-tracking branch 'origin/topic/robin/interpreter-exceptions'
...
* origin/topic/robin/interpreter-exceptions:
Adding test for new error handling.
Experimental code to better handle interpreter errors.
This seems to work fine and it catches some potentially nasty crashes
so I'm merging it in even though it's not the final word on error
handling yet. #646 tracks the work scheduled for later.
2011-10-21 10:35:32 -07:00
Jon Siwek
59015da59f
make dist now cleans the copied source
2011-10-19 15:39:49 -05:00
Jon Siwek
b32d8fd00f
Remove old make-src-packages script.
2011-10-19 11:40:40 -05:00
Jon Siwek
fb7649a8e2
Adding note to quickstart about MacPorts swig packages.
2011-10-19 11:39:42 -05:00
Jon Siwek
edf8b3a5fc
Update submodules
2011-10-19 11:35:53 -05:00
Jon Siwek
792b7afddb
Update submodules
2011-10-18 23:08:47 -05:00
Jon Siwek
b21eb81977
Update submodules
2011-10-18 22:57:15 -05:00
Jon Siwek
be7ca62384
New make dist/distclean targets
2011-10-18 22:06:26 -05:00
Robin Sommer
dac72fe614
Updating submodule(s).
2011-10-18 19:45:52 -07:00
Robin Sommer
63b46a0ae2
Fixing a bunch of format strings.
...
Also leveraging GCC if available to check format specificier.
Closes #567 .
2011-10-18 17:39:40 -07:00
Robin Sommer
d86525ce61
Merge branch 'topic/robin/cleanup'
...
* topic/robin/cleanup:
Cleaning up some distribution files.
2011-10-18 14:21:54 -07:00
Robin Sommer
aa6fb0a02b
Merge branch 'master' of ssh://git.bro-ids.org/bro
2011-10-18 12:01:13 -07:00
Robin Sommer
194c9c21d1
Distribution cleanup and documentation setupt tweaks.
2011-10-18 12:00:28 -07:00
Jon Siwek
24f3eb7fc2
Fix test failure due to some platforms joining stderr/stdout differently.
2011-10-17 13:53:10 -05:00
Jon Siwek
556b88e322
Tweaking notice suppression disable and notice policy order tests.
...
They should be less sensitive to script-layer changes now.
2011-10-14 10:47:32 -05:00
Jon Siwek
d84de52ee0
Don't install test-all-policy.bro script as it's for testing only.
...
Addresses #622
2011-10-12 12:42:12 -05:00
Seth Hall
da28a41512
Merge branch 'master' of ssh://git.bro-ids.org/bro
2011-10-11 11:57:22 -04:00
Seth Hall
6506e17fca
Updating broctl submodule.
2011-10-11 11:57:08 -04:00
Robin Sommer
3f286c2fc1
Merge remote-tracking branch 'origin/fastpath'
...
* origin/fastpath:
Fix ref counting bug in dummy ID creation code for script docs.
2011-10-10 19:14:59 -07:00
Robin Sommer
7257a5ddeb
Removing notice docs.
...
These are outdated.
2011-10-10 18:56:01 -07:00
Robin Sommer
4f8a7c95aa
Moving docs from web server into distribution.
...
Note that while these aren't remove yet from www, they will be soon
and these are now the authorative files.
2011-10-10 18:54:13 -07:00
Robin Sommer
de999fb0dd
Updating submodule(s).
2011-10-09 21:05:46 -07:00
Robin Sommer
775d0a5c29
Updating submodule(s).
2011-10-09 21:05:00 -07:00
Robin Sommer
c81d428256
Adding test for new error handling.
2011-10-09 20:41:55 -07:00
Robin Sommer
15ab287436
Experimental code to better handle interpreter errors.
...
Currently, a lot of interpreter runtime errors, such as an access to
an unset optional record field, cause Bro to abort with an internal
error. This is an experimental branch that turns such errors into
non-fatal runtime errors by internally raising exceptions. These are
caught upstream and processing continues afterwards.
For now, not many errors actually raise exceptions (the example above
does though). We'll need to go through them eventually and adapt the
current Internal() calls (and potentially others). More generally, at
some point we should cleanup the interpreter error handling (unifying
errors reported at parse- and runtime; and switching to exceptions for
all Expr/Stmt/Vals). But that's a larger change and left for later.
The main question for now is if this code is already helpful enough to
go into 2.0. It will quite likely prevent a number of crashes due to
script errors.
2011-10-09 20:28:06 -07:00
Robin Sommer
0ec1fa6a53
Fixing more (small) memory leaks.
2011-10-09 17:01:35 -07:00
Robin Sommer
df4a22a27d
Profiling support for DNS_Mgr and triggers.
...
With misc/profiling.bro, both now report a line in prof.log with some
counters on usage.
2011-10-09 17:01:04 -07:00
Robin Sommer
bd9c937236
Fixing DNS memory leaks.
...
Some of the changes only clean up at termination to make perftools
happt, but there were some "real" leaks as well.
This fixes all DNS leaks I could reproducem, including most likely
what's reported in #534 . Closing #534 .
I'm also adding a new btest subdir core/leaks with tests requiring
perftools support. These don't compare against base lines but abort
whenever perftools reports a leak (with stack information to track it
down). Right now, these are passing.
2011-10-09 17:00:57 -07:00
Seth Hall
8627b87b3e
Fixing another "field missing" error reported by Martin.
2011-10-08 00:13:20 -04:00
Seth Hall
b5aa88dae6
Merge branch 'master' of ssh://git.bro-ids.org/bro
...
Conflicts:
aux/broccoli
2011-10-07 23:58:33 -04:00
Seth Hall
0803df2e14
Changed communication option from listen_encrypted to listen_ssl.
...
- Robin pointed out that SSL is providing authentication
as well as encryption so listen_ssl is a more
proper variable name.
2011-10-07 23:57:08 -04:00
Robin Sommer
8fa059fb10
Fix in code for disabling analyzers.
...
Plus some refactoring.
Closes #577 .
2011-10-07 17:19:36 -07:00
Seth Hall
6ae9da5aad
Updating the broccoli submodule.
2011-10-07 16:06:05 -04:00
Jon Siwek
58692ef9e0
Fix ref counting bug in dummy ID creation code for script docs.
2011-10-07 15:05:13 -05:00
Seth Hall
a9eb4c15a0
Updated DocSourcesList with the change to the communication API.
2011-10-07 15:02:44 -04:00
Seth Hall
9fd43d472b
Merge branch 'master' of ssh://git.bro-ids.org/bro
2011-10-07 13:46:46 -04:00
Seth Hall
6d67f7830d
Added to the likely_server_ports set for protocols with analyzers.
...
- Updated some tests since Bro is getting the direction
correct now.
- Updated BPF filter test since I added a few ports to IRC
as well.
2011-10-07 13:44:28 -04:00
Seth Hall
686946d0dd
Internal simplication for FTP analysis scripts.
2011-10-07 13:36:02 -04:00
Seth Hall
8600b676e6
Fixed a TODO in the DNS analysis script.
2011-10-07 13:32:44 -04:00
Seth Hall
acc4d6ccd3
Removed unused script code from init-bare.bro
2011-10-07 13:31:28 -04:00
