Arne Welzel
1c516f738c
quic: Log client's source connection id, too.
...
Seem reasonable give we log the server SCID. Interestingly, the Chromium
examples actually have zero length (empty) source connection IDs. I wonder
if that's part of their "protocol ossification avoidance" effort.
2024-01-30 21:46:38 +01:00
Arne Welzel
ac524b4a33
quic: Rename set_conn() to set_session()
...
set_conn() should be about the c$conn record. Most other base scripts
for protocols use set_session(), so do the same.
2024-01-30 21:46:38 +01:00
Arne Welzel
ec9ed81250
quic: Handle and log unhandled_version
2024-01-09 17:10:11 +01:00
Arne Welzel
4ca6f690d7
quic: Support decryption of a few more versions
2024-01-09 17:10:11 +01:00
Arne Welzel
dabe85ebbf
quic: analyzer: Support QUIC v2
...
QUIC v2 changed the version *and* the packet type enumeration to prevent
protocol ossification. Use an intermediary unit to handle the difference.
2024-01-05 11:36:57 +01:00
Arne Welzel
6604010a05
quic: Bump maximum history length, make configurable
...
From zeek/spicy-quic#15
2023-10-20 20:42:30 +02:00
Arne Welzel
2389f6f6c5
quic: Add spicy-events.zeek
2023-10-19 10:48:24 +02:00
Arne Welzel
ee827eecf7
quic: Integrate as default analyzer
2023-10-11 14:10:22 +02:00
Arne Welzel
359f8d2ae6
quic: Squashed follow-ups: quic.log, tests, various fixes, performance
2023-10-11 14:10:22 +02:00
Joost
44d7c45723
quic: Initial implementation
2023-10-11 14:10:22 +02:00