Jon Siwek
1e57e3f026
Use .zeek file suffix in unit tests
2019-04-16 16:08:57 -07:00
Jon Siwek
71ef5c8428
Merge branch 'fatemabw/bro' of https://github.com/fatemabw/bro into dev/2.7
...
* 'fatemabw/bro' of https://github.com/fatemabw/bro :
DNSSEC support in Bro
I made several changes:
- renamed event/record types
- reformatted the info added to dns.log
- removed the "addl" scripts that added extended dnssec info to dns.log
- simplifications/improvements to the internal parsing logic
2018-09-21 16:40:41 -05:00
fatema
ff5c11975d
DNSSEC support in Bro
2018-09-05 14:12:07 -04:00
Johanna Amann
a705b2c08d
Add DNS tests for huge TLL and CAA
2016-04-25 15:43:20 -07:00
Jon Siwek
8efaae96cd
BIT-788: use DNS QR field to better identify flow direction.
2015-03-19 11:53:40 -05:00
Jon Siwek
dde0ce234f
Fix possible buffer over-read in DNS TSIG parsing
2014-09-02 14:22:26 -05:00
Robin Sommer
7f9a6f51ca
Merge remote-tracking branch 'origin/topic/jsiwek/bit-1156'
...
I've added a unit test.
* origin/topic/jsiwek/bit-1156:
BIT-1156: Fix parsing of DNS TXT RRs w/ multiple character-strings.
BIT-1156 #merged
2014-04-24 16:36:47 -07:00
Robin Sommer
64fc80d7e4
Adding a trace with a DNSKEY RR.
...
Still had this sitting in my inbox, but seems Bro is doing everything
right.
2013-07-29 14:08:33 -07:00
Seth Hall
1e32100fed
Fixing a dns reporter message in master.
2013-07-18 09:24:22 -04:00
Seth Hall
db62369508
Fix for DNS log problem when a DNS response is seen with 0 RRs.
2012-10-05 13:48:49 -04:00
