Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-06 08:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2
9059 commits 387 branches 195 tags 258 MiB
Commit graph

9059 commits

This branch
This branch
All branches
Author SHA1 Message Date
Jon Siwek
c32b359e7e Merge branch 'master' of https://github.com/Neverlord/bro 
* 'master' of https://github.com/Neverlord/bro:
  Fix BasicThread::SetOSName on FreeBSD
 2018-09-24 10:56:31 -05:00
Dominik Charousset
5e33942864 Fix BasicThread::SetOSName on FreeBSD 2018-09-22 08:09:27 +02:00
Jon Siwek
71ef5c8428 Merge branch 'fatemabw/bro' of https://github.com/fatemabw/bro into dev/2.7 
* 'fatemabw/bro' of https://github.com/fatemabw/bro:
  DNSSEC support in Bro

I made several changes:

  - renamed event/record types
  - reformatted the info added to dns.log
  - removed the "addl" scripts that added extended dnssec info to dns.log
  - simplifications/improvements to the internal parsing logic
 2018-09-21 16:40:41 -05:00
Jon Siwek
f7da111d1c Merge remote-tracking branch 'origin/fastpath' 
* origin/fastpath:
  Fix some broken @TEST-REQUIRES
 2018-09-21 13:29:44 -05:00
Jon Siwek
2ede95422b Emit missing GeoIP database errors only once at startup 
Instead of one error per lookup.
 2018-09-21 13:27:27 -05:00
Daniel Thayer
5161165c8a Fix some broken @TEST-REQUIRES 
Some tests were always being skipped because config.h was renamed to
bro-config.h a long time ago.
 2018-09-21 12:35:13 -05:00
Jon Siwek
d7097635f4 Fix compile error in MMDB GeoIP code 
Seems to be from the ambiguity addressed via [1].  In C++11,
the compiler could treat it as an initializer list ctor instead
of a copy constructor for a single-element list.

[1] http://open-std.org/JTC1/SC22/WG21/docs/cwg_defects.html#1467
 2018-09-21 10:22:03 -05:00
Jon Siwek
c75d1d0521 Merge remote-tracking branch 'origin/fastpath' 
* origin/fastpath:
  Add a missing "break" in OSFinger.cc
  Fix buffer sizes in the rotate_file function
 2018-09-20 13:16:04 -05:00
Daniel Thayer
096a7f4f5e Add a missing "break" in OSFinger.cc 
This appears to be an error introduced when the original C code was
converted to C++.
 2018-09-19 15:50:19 -05:00
Daniel Thayer
38ff76a176 Fix buffer sizes in the rotate_file function 
The "tmpname" contains a longer string than "newname", so adjust sizes
accordingly.
 2018-09-19 15:45:53 -05:00
Jon Siwek
c2c5754e28 Merge branch 'topic/jazoff/sqli-policy-hook' of https://github.com/JustinAzoff/bro 
* 'topic/jazoff/sqli-policy-hook' of https://github.com/JustinAzoff/bro:
  add sqli_policy hook
 2018-09-19 15:22:45 -05:00
Justin Azoff
a599c5d997 add sqli_policy hook 
Add a hook that can be used to prevent specific requests from being
counted towards SQL injection.
 2018-09-19 14:11:45 -04:00
Jon Siwek
abcf2808f9 Updating submodule(s). 
[nomail]
 2018-09-19 09:57:44 -05:00
Jon Siwek
3a66bc7c9d Updating CHANGES and VERSION. 2018-09-18 16:54:20 -05:00
Jon Siwek
9b8520f967 Updating submodule(s). 
[nomail]
 2018-09-18 16:52:34 -05:00
Jon Siwek
43363ce51b Updating CHANGES and VERSION. 2018-09-18 15:21:31 -05:00
Jon Siwek
ff5800d897 Updating submodule(s). 
[nomail]
 2018-09-18 15:05:24 -05:00
Jon Siwek
9dc89e417b Updating submodule(s). 
[nomail]
 2018-09-18 14:50:41 -05:00
Jon Siwek
42968f1b6c Updating submodule(s). 
[nomail]
 2018-09-17 10:56:25 -05:00
Jon Siwek
114cd2c860 Updating CHANGES and VERSION. 2018-09-12 20:19:51 -05:00
Jon Siwek
c2b18849f8 Fix IRC names command parsing 2018-09-12 19:47:57 -05:00
Jon Siwek
5ce7fe615a Updating submodule(s). 
[nomail]
 2018-09-12 10:55:21 -05:00
Jon Siwek
2e7ac63a86 Updating submodule(s). 
[nomail]
 2018-09-11 16:12:27 -05:00
Jon Siwek
b0ecb01773 Updating submodule(s). 
[nomail]
 2018-09-11 14:27:54 -05:00
Jon Siwek
88ea5aa9a3 Updating submodule(s). 
[nomail]
 2018-09-11 13:24:59 -05:00
Jon Siwek
161aae828a Merge remote-tracking branch 'origin/topic/seth/fix-raw-reader-subprocess-exit' 
* origin/topic/seth/fix-raw-reader-subprocess-exit:
  Fix an issue with raw reader culling streams for dead processes.

Updated the 'exec' utility to no longer remove input streams for
processes that are finished as the core C++ code will take care of that
(and trying to remove a stream multiple times emits a warning message).
 2018-09-11 13:05:40 -05:00
Seth Hall
caab893fbe Fix an issue with raw reader culling streams for dead processes. 
Input streams weren't being reaped when the raw reader was running
a subprocess and the subprocess died.  The subprocess would still
go away from Bro would never get rid of the input stream.
 2018-09-11 11:21:31 -04:00
Jon Siwek
13483e4892 Try to fix a rare broker test instability 2018-09-10 19:47:53 -05:00
Jon Siwek
c89c09fda3 Fix invalid memory free when using Log::default_field_name_map 2018-09-10 19:06:35 -05:00
Jon Siwek
4d7b0387ea Stabilize a unit test. 2018-09-10 18:35:08 -05:00
Jon Siwek
34d0cf886c Fix potential memory leak in Kerberos scripts 
Reported by Maksim Shudrak.
 2018-09-10 18:06:07 -05:00
Jon Siwek
7e26bfe07f Fix recursive type checks/casts of broker data into type 'any' 2018-09-10 14:55:50 -05:00
Jon Siwek
3a824a06ed Fix is/as operators on vector values 2018-09-10 14:54:54 -05:00
Jon Siwek
4bd6da7186 Update default Broker/CAF thread tuning 2018-09-07 17:50:28 -05:00
Jon Siwek
9af0255ef7 Merge remote-tracking branch 'origin/fastpath' 
* origin/fastpath:
  Update NEWS explaining Bro runs as 1 process instead of 2
  Update NEWS for changes to broctl "top" command output
 2018-09-07 11:24:57 -05:00
Daniel Thayer
359cb0e255 Update NEWS explaining Bro runs as 1 process instead of 2 2018-09-07 10:58:48 -05:00
Daniel Thayer
e0d782d038 Update NEWS for changes to broctl "top" command output 2018-09-07 10:37:47 -05:00
Jon Siwek
73c8cf733a Give Cluster::rr_topic "key" argument a default value 2018-09-07 09:58:57 -05:00
Jon Siwek
c73bb8fdc4 Disable broker message forwarding by default 
Still finding it to not be foolproof enough to enable generally for all
nodes in a cluster.  Specific/advanced use-cases may still consider
enabling, possibly just for specific nodes.
 2018-09-06 18:32:22 -05:00
Jon Siwek
ddcd7f3405 Merge remote-tracking branch 'origin/fastpath' 
* origin/fastpath:
  Added a documentation comment for the Input::Event type
  Update NEWS
  Update the install documentation
  Fix a typo and indentation in the configure script
  Add krb5 devel package to Travis docker containers
 2018-09-06 08:59:43 -05:00
Daniel Thayer
d1ed09bddb Added a documentation comment for the Input::Event type 2018-09-05 22:27:15 -05:00
Daniel Thayer
35241fc1f1 Update NEWS 
Listed the bro package website (packages.bro.org) instead of
github.com/bro/packages, as the bro package website is much
easier to use when browsing the list of available packages.

Also wrapped a long line in the text.
 2018-09-05 21:42:32 -05:00
Daniel Thayer
d3347bc90f Update the install documentation 
Added krb5 headers and libraries to the list of optional dependencies.

Removed an obsolete section on installing a new compiler on old FreeBSD
versions.  The system compiler can build Bro on all currently supported
versions of FreeBSD.
 2018-09-05 20:47:18 -05:00
Daniel Thayer
563fc8c6ae Fix a typo and indentation in the configure script 2018-09-05 20:46:09 -05:00
Daniel Thayer
65a4c8ab92 Merge remote-tracking branch 'origin/master' into fastpath 2018-09-05 20:15:11 -05:00
Daniel Thayer
3f3344d007 Add krb5 devel package to Travis docker containers 
Added the kerberos devel package to the debian-based docker containers
so that fewer tests are skipped.
 2018-09-05 18:07:42 -05:00
Jon Siwek
b99be6458b Merge remote-tracking branch 'origin/topic/johanna/weird-options' 
* origin/topic/johanna/weird-options:
  Update test baselines (weird options)
  Weird settings: make constants into options.
  Permit weird sampling rate of 0.
 2018-09-05 16:57:08 -05:00
Jon Siwek
f896bec05a Merge remote-tracking branch 'origin/topic/robin/uint64-packet-stats' 
* origin/topic/robin/uint64-packet-stats:
  Switch packet stats to uint64.
 2018-09-05 16:24:04 -05:00
Johanna Amann
9f0e422bec Update test baselines (weird options) 2018-09-05 13:33:56 -07:00
Robin Sommer
c8aa6f757e Switch packet stats to uint64. 2018-09-05 20:33:30 +00:00