Commit graph

11634 commits

Author SHA1 Message Date
Dale Lakes
3c765731b3 Refactor to use consistent numeric type in dce_rpc. Add missing DNS query type codes 2018-10-15 19:17:53 -04:00
Jon Siwek
c8637b7430 Merge branch 'master' of https://github.com/spitfire55/bro
* 'master' of https://github.com/spitfire55/bro:
  Add DCE_RPC exchange_mapi operations to relevant consts.bro file
2018-10-15 16:43:50 -05:00
Dale Lakes
a8efaf3a7e Add DCE_RPC exchange_mapi operations to relevant consts.bro file
New operations names and opnums come from the MSDN documentation
and OpenChange Project.
2018-10-15 16:47:10 -04:00
Jon Siwek
70233148be GH-186: fix JSON formatting of timestamps before Unix epoch 2018-10-12 21:34:28 +00:00
Jon Siwek
f05ef0cb1e Fix test baseline for plugin skeleton update 2018-10-12 12:51:53 -04:00
Jon Siwek
dc7bdc4ca6 Merge remote-tracking branch 'origin/topic/johanna/local-nets-option'
* origin/topic/johanna/local-nets-option:
  Convert site::local_nets, etc. into options.
2018-10-12 12:18:53 -04:00
Jon Siwek
8792f5545c Fix crash when modifying a table from within its &expire_func 2018-10-12 08:35:25 -04:00
Johanna Amann
005bf5b6a4 Convert site::local_nets, etc. into options.
These are probably some of the most desired options to be dynamically
changeable; since they only are accessed in script-land there should not
be any problems with them changing on the fly.
2018-10-09 16:33:26 -07:00
Jon Siwek
0f55080625 GH-184: add bro-config --build_type, outputs CMake build type 2018-10-05 14:27:12 -05:00
Jon Siwek
0dfc79c64d Updating submodule(s).
[nomail]
2018-10-05 11:43:06 -05:00
Jon Siwek
0350004f1e Add return value checks for some RPC parsing functions 2018-10-04 11:33:57 -05:00
Jon Siwek
1be7ac509c Add 'fallthrough' comment to a switch/case block 2018-10-04 11:28:56 -05:00
Jon Siwek
894b24d180 Improve broker.remote_id unit test 2018-10-03 15:50:07 -05:00
Jon Siwek
be609cff41 Increase broker unit test timeout intervals 2018-10-03 15:47:09 -05:00
Jon Siwek
92739c1b44 Merge branch 'issues/152' of https://github.com/JonZeolla/bro into dev/2.7
* 'issues/152' of https://github.com/JonZeolla/bro:
  Bro plugins should support a patch version (x.y.z)
2018-10-03 14:32:10 -05:00
Jon Siwek
03e63be8ad Merge remote-tracking branch 'origin/master' into dev/2.7
* origin/master:
  Fix memory leak in broker type checking
  Update testing/btest/README
  Updating submodule(s).
  Updating submodule(s).
2018-10-03 13:29:54 -05:00
Jon Siwek
3c395aa22d Fix memory leak in broker type checking 2018-10-03 11:10:32 -05:00
Jon Siwek
98181dd67c Update testing/btest/README 2018-10-02 16:05:38 -05:00
Jon Zeolla
615ff78282 Bro plugins should support a patch version (x.y.z) 2018-09-30 20:30:22 -04:00
Jon Siwek
35d0a4d38e Updating submodule(s).
[nomail]
2018-09-27 14:03:33 -05:00
Jon Siwek
6db0ae5432 Updating submodule(s).
[nomail]
2018-09-26 10:33:08 -05:00
Jon Siwek
43aab5be7b Merge remote-tracking branch 'origin/master' into dev/2.7 2018-09-25 16:47:01 -05:00
Jon Siwek
0c02b11226 Merge remote-tracking branch 'origin/fastpath'
* origin/fastpath:
  Add some missing @TEST-REQUIRES to a few tests
2018-09-25 16:38:50 -05:00
Daniel Thayer
5ebed9158f Add some missing @TEST-REQUIRES to a few tests 2018-09-25 15:52:19 -05:00
Jon Siwek
1ea9c8eb40 GH-148: add priority to DNSSEC event handlers 2018-09-24 15:34:16 -05:00
Jon Siwek
c32b359e7e Merge branch 'master' of https://github.com/Neverlord/bro
* 'master' of https://github.com/Neverlord/bro:
  Fix BasicThread::SetOSName on FreeBSD
2018-09-24 10:56:31 -05:00
Dominik Charousset
5e33942864 Fix BasicThread::SetOSName on FreeBSD 2018-09-22 08:09:27 +02:00
Jon Siwek
71ef5c8428 Merge branch 'fatemabw/bro' of https://github.com/fatemabw/bro into dev/2.7
* 'fatemabw/bro' of https://github.com/fatemabw/bro:
  DNSSEC support in Bro

I made several changes:

  - renamed event/record types
  - reformatted the info added to dns.log
  - removed the "addl" scripts that added extended dnssec info to dns.log
  - simplifications/improvements to the internal parsing logic
2018-09-21 16:40:41 -05:00
Jon Siwek
f7da111d1c Merge remote-tracking branch 'origin/fastpath'
* origin/fastpath:
  Fix some broken @TEST-REQUIRES
2018-09-21 13:29:44 -05:00
Jon Siwek
2ede95422b Emit missing GeoIP database errors only once at startup
Instead of one error per lookup.
2018-09-21 13:27:27 -05:00
Daniel Thayer
5161165c8a Fix some broken @TEST-REQUIRES
Some tests were always being skipped because config.h was renamed to
bro-config.h a long time ago.
2018-09-21 12:35:13 -05:00
Jon Siwek
d7097635f4 Fix compile error in MMDB GeoIP code
Seems to be from the ambiguity addressed via [1].  In C++11,
the compiler could treat it as an initializer list ctor instead
of a copy constructor for a single-element list.

[1] http://open-std.org/JTC1/SC22/WG21/docs/cwg_defects.html#1467
2018-09-21 10:22:03 -05:00
Jon Siwek
c75d1d0521 Merge remote-tracking branch 'origin/fastpath'
* origin/fastpath:
  Add a missing "break" in OSFinger.cc
  Fix buffer sizes in the rotate_file function
2018-09-20 13:16:04 -05:00
Daniel Thayer
096a7f4f5e Add a missing "break" in OSFinger.cc
This appears to be an error introduced when the original C code was
converted to C++.
2018-09-19 15:50:19 -05:00
Daniel Thayer
38ff76a176 Fix buffer sizes in the rotate_file function
The "tmpname" contains a longer string than "newname", so adjust sizes
accordingly.
2018-09-19 15:45:53 -05:00
Jon Siwek
c2c5754e28 Merge branch 'topic/jazoff/sqli-policy-hook' of https://github.com/JustinAzoff/bro
* 'topic/jazoff/sqli-policy-hook' of https://github.com/JustinAzoff/bro:
  add sqli_policy hook
2018-09-19 15:22:45 -05:00
Justin Azoff
a599c5d997 add sqli_policy hook
Add a hook that can be used to prevent specific requests from being
counted towards SQL injection.
2018-09-19 14:11:45 -04:00
Jon Siwek
abcf2808f9 Updating submodule(s).
[nomail]
2018-09-19 09:57:44 -05:00
Jon Siwek
3a66bc7c9d Updating CHANGES and VERSION. 2018-09-18 16:54:20 -05:00
Jon Siwek
9b8520f967 Updating submodule(s).
[nomail]
2018-09-18 16:52:34 -05:00
Jon Siwek
43363ce51b Updating CHANGES and VERSION. 2018-09-18 15:21:31 -05:00
Jon Siwek
ff5800d897 Updating submodule(s).
[nomail]
2018-09-18 15:05:24 -05:00
Jon Siwek
9dc89e417b Updating submodule(s).
[nomail]
2018-09-18 14:50:41 -05:00
Jon Siwek
42968f1b6c Updating submodule(s).
[nomail]
2018-09-17 10:56:25 -05:00
Jon Siwek
114cd2c860 Updating CHANGES and VERSION. 2018-09-12 20:19:51 -05:00
Jon Siwek
c2b18849f8 Fix IRC names command parsing 2018-09-12 19:47:57 -05:00
Jon Siwek
5ce7fe615a Updating submodule(s).
[nomail]
2018-09-12 10:55:21 -05:00
Jon Siwek
2e7ac63a86 Updating submodule(s).
[nomail]
2018-09-11 16:12:27 -05:00
Jon Siwek
b0ecb01773 Updating submodule(s).
[nomail]
2018-09-11 14:27:54 -05:00
Jon Siwek
88ea5aa9a3 Updating submodule(s).
[nomail]
2018-09-11 13:24:59 -05:00