Mirror/zeek - git.uphillsecurity.com: We code.

Mirror/zeek

Fork 0

mirror of https://github.com/zeek/zeek.git synced 2025-10-02 14:48:21 +00:00

Commit graph

Author	SHA1	Message	Date
Jan Grashoefer	df5d9adfb4	Fixed insertion of nested subnets. When inserting, existance of the given subnet is checked using exact matching instead of longest prefix matching. Before, inserting a subnet would have updated the subnet item, which is the longest prefix of the inserted subnet, if present.	2016-06-22 21:14:06 +02:00
Jan Grashoefer	cafae5351b	Added support for subnets to intel-framework. The intel-framework now supports the new indicator type Intel::SUBNET. As subnets are matched against seen addresses, the field matched was introduced to indicate which indicator types caused the hit. A testcase for subents was added and the old ones have been updated accordingly.	2016-03-22 19:16:51 +01:00

Author

SHA1

Message

Date

Jan Grashoefer

df5d9adfb4

Fixed insertion of nested subnets.

When inserting, existance of the given subnet is checked using exact
matching instead of longest prefix matching. Before, inserting a subnet
would have updated the subnet item, which is the longest prefix of the
inserted subnet, if present.

2016-06-22 21:14:06 +02:00

Jan Grashoefer

cafae5351b

Added support for subnets to intel-framework.

The intel-framework now supports the new indicator type Intel::SUBNET.
As subnets are matched against seen addresses, the field matched was
introduced to indicate which indicator types caused the hit. A testcase
for subents was added and the old ones have been updated accordingly.

2016-03-22 19:16:51 +01:00

2 commits