Commit graph

6015 commits

Author SHA1 Message Date
Johanna Amann
14d265482a add information about server chosen protocol to ssl.log, if provided by alpn.
This is e.g. used to negotiate spdy or http/2
2014-08-04 22:16:09 -07:00
Johanna Amann
026233d1f2 change SSL log to contain a boolean flag signaling if a session was resumed
instead of the (usually not really that useful) session ID the client sent.
2014-08-04 11:15:42 -07:00
Jon Siwek
f8bb17bcb8 Fix possible null ptr derefs reported by Coverity. 2014-08-04 10:53:36 -05:00
Robin Sommer
ccfd081437 Fixing PATH to bro-cut in BTest configuration. 2014-08-01 14:35:26 -07:00
Robin Sommer
8d936e593f Updating submodule(s).
[nomail]
2014-08-01 14:19:46 -07:00
Robin Sommer
c68e281832 Merge remote-tracking branch 'origin/topic/johanna/dhcp-log'
BIT-1223 #merged

* origin/topic/johanna/dhcp-log:
  small change to documentation. In server->client messages the host name may differ from the one requested by the client.
  Split dhcp log writing from record creation.
2014-08-01 14:07:53 -07:00
Robin Sommer
2ed79639fe Updating submodule(s).
[nomail]
2014-08-01 14:06:13 -07:00
Robin Sommer
25b8efeeb2 Merge remote-tracking branch 'origin/topic/dnthayer/ticket1215'
* origin/topic/dnthayer/ticket1215:
  Update PATH so that documentation btests can find bro-cut
  Remove gawk from list of optional packages in documentation
2014-08-01 14:06:07 -07:00
Johanna Amann
605a49f9bd small change to documentation. In server->client messages the host name may differ from the one requested by the client. 2014-08-01 11:19:05 -07:00
Johanna Amann
fe60d5e9dd Split dhcp log writing from record creation.
This allows users to customize dhcp.log by changing the record in their own
dhcp_ack event.
2014-08-01 11:07:32 -07:00
Robin Sommer
ffd3d9d185 More polishing. 2014-07-31 15:08:45 -07:00
Robin Sommer
0ba4b768cd Merge remote-tracking branch 'origin/master' into topic/robin/reader-writer-plugins 2014-07-31 14:45:38 -07:00
Robin Sommer
2e3b217667 Fix for redefining built-in constants.
Turns out redefs weren't visibile to core-land due to initialization
order.
2014-07-31 14:38:24 -07:00
Jon Siwek
597edcd3b6 Fix reference counting bug in Tag::operator= 2014-07-31 14:32:10 -05:00
Robin Sommer
3d1442e86b Test case for a dynamic input reader. 2014-07-31 12:07:34 -07:00
Robin Sommer
f45526f373 Test case for a dynamic log writer. 2014-07-31 11:40:25 -07:00
Robin Sommer
aa731eeaec Final fixes, preparing for merge. 2014-07-31 10:49:50 -07:00
Robin Sommer
2b505b07c1 Merge remote-tracking branch 'origin/master' into topic/robin/reader-writer-plugins 2014-07-31 10:10:39 -07:00
Robin Sommer
382b946098 Adding missing check that a plugin's API version matches what Bro defines. 2014-07-31 10:09:03 -07:00
Robin Sommer
024c26d982 Adding NEWS entry for plugins.
Also editing the plugin CHANGES somewhat.
2014-07-31 09:02:59 -07:00
Daniel Thayer
22aa821506 Split the types and attributes reference doc into two docs
Also moved them up in the index so that the more fundamental material
comes before the more advanced material in the table of contents.
2014-07-31 10:49:33 -05:00
Jon Siwek
69b1ba653d Minor adjustments to plugin code/docs.
Mostly whitespace/typos.
Moved some Plugin methods out from public access.
2014-07-30 16:48:23 -05:00
Jon Siwek
3ee64ff2ce Merge remote-tracking branch 'origin/topic/robin/dynamic-plugins-2.3'
* origin/topic/robin/dynamic-plugins-2.3: (51 commits)
  Moving Broccoli to master.
  Moving binpac module to master.
  Re-adding missing baseline.
  Adding a plugin test that checks that "make install" works.
  The HOOK_CALL_FUNCTION plugin hook is now also triggered for builtin functions.
  Adding note to plugin docs on how init-plugin treats existing files.
  Adapting plugin tests to use the new split Plugin.{h,cc} structure that init-plugin now generates.
  Updating submodule.
  Allow to activate plugins from the command line by specifying their fully-qualified name.
  Adding Files::register_for_mime_type() to associate a file analyzer with a MIME type.
  Updating cmake module.
  Moving component's CanonicalName() method into base class.
  Further polishing and cleanup in preparation for merge.
  Updating submodule.
  Plugin fixes for FreeBSD.
  Doc tweak.
  Adding missing method implementation.
  Updating plugin hook test.
  Adding a test building a file analyzer plugin.
  Enabling to specific a set of plugins with the -N option.
  ...
2014-07-30 16:24:01 -05:00
Vlad Grigorescu
ca55d203cb Kerberos analyzer 2014-07-24 21:55:41 -04:00
Vlad Grigorescu
101d340b18 MySQL analyzer 2014-07-24 15:52:42 -04:00
Robin Sommer
58bd8bb737 Merge remote-tracking branch 'origin/master' into topic/robin/dynamic-plugins-2.3 2014-07-23 17:00:37 -07:00
Robin Sommer
0461d15167 Moving Broccoli to master. 2014-07-23 16:34:36 -07:00
Robin Sommer
07a968cddc Moving binpac module to master. 2014-07-23 14:20:04 -07:00
Jon Siwek
555b5cfe1b Updating submodule(s).
[nomail]
2014-07-23 10:20:36 -05:00
Robin Sommer
ceb13cf3bb Re-adding missing baseline.
Not sure when this got lost ...
2014-07-22 20:31:07 -07:00
Robin Sommer
c6e204fbe2 Merge remote-tracking branch 'origin/master' into topic/robin/dynamic-plugins-2.3
Conflicts:
	aux/btest
2014-07-22 20:27:00 -07:00
Robin Sommer
e3adce83ee Adding a plugin test that checks that "make install" works. 2014-07-22 20:25:31 -07:00
Robin Sommer
a6901a6b86 Updating submodule(s).
[nomail]
2014-07-22 17:41:21 -07:00
Robin Sommer
3e6193921a Merge remote-tracking branch 'origin/topic/robin/modbus-events-merge'
* origin/topic/robin/modbus-events-merge:
  adding another trace file to test read and write coil function codes
  add/update test file and baseline result
  add implementation of bytestring_to_coils for modbusy analyzer
  adding a missing field in record ModbusHeaders
  add event handlers for modbus
2014-07-22 17:34:11 -07:00
Robin Sommer
48b251abd1 Merge branch 'topic/robin/dynamic-plugins-2.3' into topic/robin/reader-writer-plugins 2014-07-22 17:27:16 -07:00
Robin Sommer
fa1ba06414 Merge remote-tracking branch 'origin/topic/hui/modbus-events'
* origin/topic/hui/modbus-events:
  adding another trace file to test read and write coil function codes
  add/update test file and baseline result
  add implementation of bytestring_to_coils for modbusy analyzer
  adding a missing field in record ModbusHeaders
  add event handlers for modbus
2014-07-22 01:03:48 +02:00
Robin Sommer
9e74fcaf2a The HOOK_CALL_FUNCTION plugin hook is now also triggered for builtin
functions.
2014-07-22 00:26:20 +02:00
Robin Sommer
8ea8359607 Adding note to plugin docs on how init-plugin treats existing files. 2014-07-21 22:58:41 +02:00
Robin Sommer
ca1b882761 Adapting plugin tests to use the new split Plugin.{h,cc} structure
that init-plugin now generates.

Also adding new test that makes sure the the skeleton created by
init-plugin compiles on its own withoyt any further changes.
2014-07-21 22:55:57 +02:00
Robin Sommer
2a49932911 Updating submodule. 2014-07-21 17:05:39 +02:00
Robin Sommer
38c69f9cd0 Allow to activate plugins from the command line by specifying their
fully-qualified name.
2014-07-21 16:58:10 +02:00
Robin Sommer
c9524757d2 Adding Files::register_for_mime_type() to associate a file analyzer
with a MIME type.

Whenever that MIME is detected, Bro will now automatically activate
the analyzer. The interface mimics how well-known ports are defined
for protocol analyzers.

This isn't actually used by any existing file analyzer (because we
don't have any yet that target a specific file format), but there's a
test making sure it works.
2014-07-21 16:31:22 +02:00
Robin Sommer
ab3d214a90 Updating cmake module. 2014-07-21 15:41:48 +02:00
Robin Sommer
f4cbcb9b03 Converting log writers and input readers to plugins. 2014-07-20 19:17:58 +02:00
Robin Sommer
6d9e261384 Moving component's CanonicalName() method into base class. 2014-07-12 18:31:00 -07:00
Robin Sommer
9616cd8e61 Further polishing and cleanup in preparation for merge. 2014-07-12 18:12:09 -07:00
Robin Sommer
aeb8e71e8c Merge remote-tracking branch 'origin/master' into topic/robin/dynamic-plugins-2.3
Conflicts:
	aux/bro-aux
	aux/broccoli
2014-07-10 20:11:52 -07:00
Jon Siwek
3cea6ab1eb Include yield of vectors in Broxygen's type descriptions.
BIT-1217 #close
2014-07-10 19:23:49 -05:00
Robin Sommer
a7746afa0a Fixing DataSeries, which was using a now illegal value as default
compression level.
2014-07-10 14:50:15 -07:00
Daniel Thayer
10f202b627 Update PATH so that documentation btests can find bro-cut 2014-07-09 23:50:59 -05:00