Arne Welzel
586b7b94cb
QUIC: Introduce discarded_packet() event
...
And include its occurrence into the history as X. The event raising is
configurable with a new const redef QUIC::max_discarded_packet_events.
2025-10-09 13:11:24 +02:00
Benjamin Bannier
d5fd29edcd
Prefer explicit construction to coercion in record initialization
...
While we support initializing records via coercion from an expression
list, e.g.,
local x: X = [$x1=1, $x2=2];
this can sometimes obscure the code to readers, e.g., when assigning to
value declared and typed elsewhere. The language runtime has a similar
overhead since instead of just constructing a known type it needs to
check at runtime that the coercion from the expression list is valid;
this can be slower than just writing the readible code in the first
place, see #4559 .
With this patch we use explicit construction, e.g.,
local x = X($x1=1, $x2=2);
2025-07-11 16:28:37 -07:00
Christian Kreibich
98c203b8cb
Add "U" to QUIC history docstrings and expand version string docs
...
Looks like we overlooked documenting "U" in zeek/zeek#3526 .
2025-03-27 13:29:40 -07:00
Christian Kreibich
2199cb1ddd
Remove "experimental" from the QUIC history field's comment string [skip ci]
...
We're unlikely to fundamentally change (or remove) this field at this point, and
some users wondered whether we might do so, given the labeling.
2025-03-26 14:03:52 -07:00
Christian Kreibich
3d88918071
Fix Zeekygen warning for QUIC::unrecognized_version event
...
Docs updates have been warning about being unable to locate that identifier, and
it's because we've not defined it alongside the other QUIC events.
2024-05-24 14:30:42 -07:00
Arne Welzel
1c516f738c
quic: Log client's source connection id, too.
...
Seem reasonable give we log the server SCID. Interestingly, the Chromium
examples actually have zero length (empty) source connection IDs. I wonder
if that's part of their "protocol ossification avoidance" effort.
2024-01-30 21:46:38 +01:00
Arne Welzel
ac524b4a33
quic: Rename set_conn() to set_session()
...
set_conn() should be about the c$conn record. Most other base scripts
for protocols use set_session(), so do the same.
2024-01-30 21:46:38 +01:00
Arne Welzel
ec9ed81250
quic: Handle and log unhandled_version
2024-01-09 17:10:11 +01:00
Arne Welzel
4ca6f690d7
quic: Support decryption of a few more versions
2024-01-09 17:10:11 +01:00
Arne Welzel
dabe85ebbf
quic: analyzer: Support QUIC v2
...
QUIC v2 changed the version *and* the packet type enumeration to prevent
protocol ossification. Use an intermediary unit to handle the difference.
2024-01-05 11:36:57 +01:00
Arne Welzel
6604010a05
quic: Bump maximum history length, make configurable
...
From zeek/spicy-quic#15
2023-10-20 20:42:30 +02:00
Arne Welzel
2389f6f6c5
quic: Add spicy-events.zeek
2023-10-19 10:48:24 +02:00
Arne Welzel
ee827eecf7
quic: Integrate as default analyzer
2023-10-11 14:10:22 +02:00
Arne Welzel
359f8d2ae6
quic: Squashed follow-ups: quic.log, tests, various fixes, performance
2023-10-11 14:10:22 +02:00
Joost
44d7c45723
quic: Initial implementation
2023-10-11 14:10:22 +02:00
