Commit graph

1647 commits

Author SHA1 Message Date
Robin Sommer
f3dc92e7b4 Fixing link. 2011-10-21 12:29:57 -07:00
Seth Hall
d96bb4216f Light spellchecking. 2011-10-21 15:06:26 -04:00
Robin Sommer
4379c41926 Updating submodule(s). 2011-10-21 11:43:24 -07:00
Robin Sommer
6e14e9b805 Merge branch 'master' of ssh://git.bro-ids.org/bro 2011-10-21 11:42:35 -07:00
Robin Sommer
4d0d49ecc1 Merge branch 'master' of ssh://git.bro-ids.org/bro 2011-10-21 11:38:40 -07:00
Robin Sommer
f573881c58 Pass over upgrade guide. 2011-10-21 11:38:19 -07:00
Seth Hall
29bace02b2 More small weird refinements to reduce overload attacks. 2011-10-21 14:31:40 -04:00
Seth Hall
0cdcf490d6 Restoring former default weird behavior for unsolicited_SYN_response. 2011-10-21 14:17:54 -04:00
Seth Hall
f0b32b21ee weird.bro rewrite.
- I want to test it for a short while before committing it to
  master just to make sure it is a sane modification.
2011-10-21 14:08:54 -04:00
Seth Hall
892245316f Merge branch 'master' of ssh://git.bro-ids.org/bro 2011-10-21 14:03:43 -04:00
Seth Hall
8b56c54348 Slightly restructured http file hashing to fix a bug. 2011-10-21 14:03:31 -04:00
Seth Hall
43da40f2c6 Changed the notice name for interesting ssh logins to correctly reflect semantics of the notice.
- SSH::Login_From_Interesting_Hostname is now SSH::Interesting_Hostname_Login

- Added some documentation.
2011-10-21 14:03:03 -04:00
Seth Hall
3900d88e60 Field name change to notice framwork. $result -> $action
- $result is renamed to $action to reflect changes to the notice framework
  since there is already another result-like field ($suppress_for) and
  there may be more in the future.

- Slipped in a change to add connection information to notice emails too.
2011-10-21 14:01:39 -04:00
Seth Hall
8661abe9d9 Small script refinements and documentation updates. 2011-10-21 13:58:58 -04:00
Robin Sommer
5e5e29f345 Fixing crash with unknown debug streams.
Closes #643.
2011-10-21 10:48:46 -07:00
Robin Sommer
c8dfdb4492 Merge remote-tracking branch 'origin/topic/robin/interpreter-exceptions'
* origin/topic/robin/interpreter-exceptions:
  Adding test for new error handling.
  Experimental code to better handle interpreter errors.

This seems to work fine and it catches some potentially nasty crashes
so I'm merging it in even though it's not the final word on error
handling yet. #646 tracks the work scheduled for later.
2011-10-21 10:35:32 -07:00
Jon Siwek
59015da59f make dist now cleans the copied source 2011-10-19 15:39:49 -05:00
Jon Siwek
b32d8fd00f Remove old make-src-packages script. 2011-10-19 11:40:40 -05:00
Jon Siwek
fb7649a8e2 Adding note to quickstart about MacPorts swig packages. 2011-10-19 11:39:42 -05:00
Jon Siwek
edf8b3a5fc Update submodules 2011-10-19 11:35:53 -05:00
Jon Siwek
792b7afddb Update submodules 2011-10-18 23:08:47 -05:00
Jon Siwek
b21eb81977 Update submodules 2011-10-18 22:57:15 -05:00
Jon Siwek
be7ca62384 New make dist/distclean targets 2011-10-18 22:06:26 -05:00
Robin Sommer
dac72fe614 Updating submodule(s). 2011-10-18 19:45:52 -07:00
Robin Sommer
63b46a0ae2 Fixing a bunch of format strings.
Also leveraging GCC if available to check format specificier.

Closes #567.
2011-10-18 17:39:40 -07:00
Robin Sommer
d86525ce61 Merge branch 'topic/robin/cleanup'
* topic/robin/cleanup:
  Cleaning up some distribution files.
2011-10-18 14:21:54 -07:00
Robin Sommer
aa6fb0a02b Merge branch 'master' of ssh://git.bro-ids.org/bro 2011-10-18 12:01:13 -07:00
Robin Sommer
194c9c21d1 Distribution cleanup and documentation setupt tweaks. 2011-10-18 12:00:28 -07:00
Jon Siwek
24f3eb7fc2 Fix test failure due to some platforms joining stderr/stdout differently. 2011-10-17 13:53:10 -05:00
Jon Siwek
556b88e322 Tweaking notice suppression disable and notice policy order tests.
They should be less sensitive to script-layer changes now.
2011-10-14 10:47:32 -05:00
Jon Siwek
d84de52ee0 Don't install test-all-policy.bro script as it's for testing only.
Addresses #622
2011-10-12 12:42:12 -05:00
Seth Hall
da28a41512 Merge branch 'master' of ssh://git.bro-ids.org/bro 2011-10-11 11:57:22 -04:00
Seth Hall
6506e17fca Updating broctl submodule. 2011-10-11 11:57:08 -04:00
Robin Sommer
3f286c2fc1 Merge remote-tracking branch 'origin/fastpath'
* origin/fastpath:
  Fix ref counting bug in dummy ID creation code for script docs.
2011-10-10 19:14:59 -07:00
Robin Sommer
7257a5ddeb Removing notice docs.
These are outdated.
2011-10-10 18:56:01 -07:00
Robin Sommer
4f8a7c95aa Moving docs from web server into distribution.
Note that while these aren't remove yet from www, they will be soon
and these are now the authorative files.
2011-10-10 18:54:13 -07:00
Robin Sommer
de999fb0dd Updating submodule(s). 2011-10-09 21:05:46 -07:00
Robin Sommer
775d0a5c29 Updating submodule(s). 2011-10-09 21:05:00 -07:00
Robin Sommer
c81d428256 Adding test for new error handling. 2011-10-09 20:41:55 -07:00
Robin Sommer
15ab287436 Experimental code to better handle interpreter errors.
Currently, a lot of interpreter runtime errors, such as an access to
an unset optional record field, cause Bro to abort with an internal
error. This is an experimental branch that turns such errors into
non-fatal runtime errors by internally raising exceptions. These are
caught upstream and processing continues afterwards.

For now, not many errors actually raise exceptions (the example above
does though). We'll need to go through them eventually and adapt the
current Internal() calls (and potentially others). More generally, at
some point we should cleanup the interpreter error handling (unifying
errors reported at parse- and runtime; and switching to exceptions for
all Expr/Stmt/Vals). But that's a larger change and left for later.

The main question for now is if this code is already helpful enough to
go into 2.0. It will quite likely prevent a number of crashes due to
script errors.
2011-10-09 20:28:06 -07:00
Robin Sommer
0ec1fa6a53 Fixing more (small) memory leaks. 2011-10-09 17:01:35 -07:00
Robin Sommer
df4a22a27d Profiling support for DNS_Mgr and triggers.
With misc/profiling.bro, both now report a line in prof.log with some
counters on usage.
2011-10-09 17:01:04 -07:00
Robin Sommer
bd9c937236 Fixing DNS memory leaks.
Some of the changes only clean up at termination to make perftools
happt, but there were some "real" leaks as well.

This fixes all DNS leaks I could reproducem, including most likely
what's reported in #534. Closing #534.

I'm also adding a new btest subdir core/leaks with tests requiring
perftools support. These don't compare against base lines but abort
whenever perftools reports a leak (with stack information to track it
down). Right now, these are passing.
2011-10-09 17:00:57 -07:00
Seth Hall
8627b87b3e Fixing another "field missing" error reported by Martin. 2011-10-08 00:13:20 -04:00
Seth Hall
b5aa88dae6 Merge branch 'master' of ssh://git.bro-ids.org/bro
Conflicts:
	aux/broccoli
2011-10-07 23:58:33 -04:00
Seth Hall
0803df2e14 Changed communication option from listen_encrypted to listen_ssl.
- Robin pointed out that SSL is providing authentication
  as well as encryption so listen_ssl is a more
  proper variable name.
2011-10-07 23:57:08 -04:00
Robin Sommer
8fa059fb10 Fix in code for disabling analyzers.
Plus some refactoring.

Closes #577.
2011-10-07 17:19:36 -07:00
Seth Hall
6ae9da5aad Updating the broccoli submodule. 2011-10-07 16:06:05 -04:00
Jon Siwek
58692ef9e0 Fix ref counting bug in dummy ID creation code for script docs. 2011-10-07 15:05:13 -05:00
Seth Hall
a9eb4c15a0 Updated DocSourcesList with the change to the communication API. 2011-10-07 15:02:44 -04:00