6 commits

Author	SHA1	Message	Date
Tim Wojtulewicz	f7e3556a67	Store a single map of Sessions instead of split maps of Connections. ... This commit also includes: - Storing the transport protocol in ConnID and ConnIDKey to allow tcp and udp connections from the same IP/Port combinations. This happens in the core.cisco-fabric-path test, for example. - Lots of test updates. The reasons for these are two fold. First, with the change to only store a single map means that TCP, UDP, and ICMP connections are now mixed. When Zeek drains the map at shutdown, it drains each of those protocols together instead of separately. The second is because of how Sessions are stored in the map. We're now storing them keyed by the hash of the key stored by the Session objects, which causes them to again be in the map in a different order.	2021-04-29 10:24:45 -07:00
Christian Kreibich	0b674eb851	Baseline refresh to reflect btest 0.64	2020-12-06 20:19:49 -08:00
Tim Wojtulewicz	01207c0720	Fix unit tests for new ordering from NetSessions::Drain	2019-08-21 09:24:02 -04:00
Jon Siwek	2fa74e4bcb	Change default value of peer_description "zeek"	2019-06-06 19:49:30 -07:00
Johanna Amann	6f9524e082	Make tunnel_parents in conn.log optional. ... This makes conn.logs a bit prettier (and smaller) because all lines that do not use a tunnel will now have a "-" instead of the "(empty)" for tunnel_parents.	2018-01-12 13:46:00 -08:00
Seth Hall	79e49e1ab5	Change the function for log extension to take a path only and update tests. ... We were having stack overflow issues creep in with the self-referential field for the log extension function.	2016-08-10 13:53:27 -04:00