zeek/testing/btest/Baseline
Arne Welzel 01666df3d7 cluster/zeromq: Fix Cluster::subscribe() block if not initialized
If Cluster::init() hasn't been invoked yet, Cluster::subscribe() with the
ZeroMQ backend would block because the main_inproc socket didn't
yet have a connection from the child thread. Prevent this by connecting
the main and child socket pair at construction time.

This will queue the subscriptions and start processing them once the
child thread has started.
2025-09-25 18:58:35 +02:00
..
af_packet.plugin
bifs.addr_count_conversion
bifs.addr_to_ptr_name
bifs.addr_version
bifs.all_set
bifs.analyzer_name
bifs.any_set
bifs.backtrace
bifs.bare_mode
bifs.bloomfilter
bifs.bloomfilter-seed
bifs.bytestring_to_count
bifs.bytestring_to_double
bifs.bytestring_to_float
bifs.bytestring_to_hexstr
bifs.cat
bifs.cat_sep_errors zeek.bif: Remove cat_sep() fully var_arg changes 2023-04-19 19:30:46 +02:00
bifs.cat_sep_errors-2 zeek.bif: Remove cat_sep() fully var_arg changes 2023-04-19 19:30:46 +02:00
bifs.cat_sep_errors-3 zeek.bif: Remove cat_sep() fully var_arg changes 2023-04-19 19:30:46 +02:00
bifs.cat_sep_errors-4 zeek.bif: Remove cat_sep() fully var_arg changes 2023-04-19 19:30:46 +02:00
bifs.cat_sep_errors-5 zeek.bif: Remove cat_sep() fully var_arg changes 2023-04-19 19:30:46 +02:00
bifs.check_subnet
bifs.clear_table
bifs.clear_table_expire_func
bifs.community_id.run-pcaps btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
bifs.community_id.v1 btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
bifs.compress_path
bifs.convert_for_pattern
bifs.count_to_addr
bifs.create_file
bifs.decode_base64
bifs.decode_base64_conn
bifs.decode_base64_errors btest/decode_base_errors: Avoid binary output in baseline 2023-02-02 18:49:00 +01:00
bifs.directory_operations Downgrade internal errors to reporter warnings in file/directory BiFs 2025-02-05 17:49:37 -08:00
bifs.disable_analyzer btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
bifs.disable_analyzer-early btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
bifs.disable_analyzer-for-conn DPD: change handling of pre-confirmation violations, remove max_violations 2025-01-30 16:59:44 +00:00
bifs.disable_analyzer-for-conn-2 Add btests for the lookup_connection_analyzer_id() BiF. 2024-05-30 16:38:09 -07:00
bifs.disable_analyzer-for-conn-3 Add btests for the lookup_connection_analyzer_id() BiF. 2024-05-30 16:38:09 -07:00
bifs.disable_analyzer-hook btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
bifs.disable_analyzer-hook-module analyzer: Move disabling_analyzer() hook into Analyzer module 2023-01-23 12:22:05 +01:00
bifs.disable_analyzer-invalid-aid More precise error reporting for the disable_analyzer() BiF 2024-05-30 16:38:22 -07:00
bifs.disable_analyzer-tcp-packet-children btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
bifs.do_find_str
bifs.dump_current_packet
bifs.edit
bifs.enable_raw_output
bifs.encode_base64
bifs.entropy_test
bifs.enum_names
bifs.enum_to_int
bifs.escape_string
bifs.event-handler-stats telemetry: Invoke Telemetry::sync() only at scrape/collection time 2024-10-22 18:49:11 +02:00
bifs.exit
bifs.file_mode
bifs.filter_subnet_table
bifs.find_all Add max_size argument for find_all/find_all_ordered BIFs 2023-02-21 12:27:54 -07:00
bifs.find_all_ordered Add max_size argument for find_all/find_all_ordered BIFs 2023-02-21 12:27:54 -07:00
bifs.find_entropy
bifs.find_first Add baseline for find_first test, update comments, and reorder function imports 2025-05-02 11:51:45 +08:00
bifs.find_in_zeekpath zeek.bif: Add find_in_zeekpath() helper 2024-02-22 11:33:03 +01:00
bifs.find_last
bifs.fmt
bifs.fmt_ftp_port
bifs.fnv1a_hash Improvements in FNV1A hash functions 2024-10-22 16:07:12 +02:00
bifs.footprint refine Val "footprint" to equate long strings with multiple objects 2024-04-29 12:39:36 -07:00
bifs.from_json Change from_json to return an error rather than print it. 2025-04-23 15:56:12 -07:00
bifs.from_json-2 Change from_json to return an error rather than print it. 2025-04-23 15:56:12 -07:00
bifs.from_json-3 Change from_json to return an error rather than print it. 2025-04-23 15:56:12 -07:00
bifs.from_json-4 Change from_json to return an error rather than print it. 2025-04-23 15:56:12 -07:00
bifs.from_json-5 Change from_json to return an error rather than print it. 2025-04-23 15:56:12 -07:00
bifs.from_json-6 Change from_json to return an error rather than print it. 2025-04-23 15:56:12 -07:00
bifs.from_json-7 Change from_json to return an error rather than print it. 2025-04-23 15:56:12 -07:00
bifs.from_json-8 Change from_json to return an error rather than print it. 2025-04-23 15:56:12 -07:00
bifs.from_json-9 Change from_json to return an error rather than print it. 2025-04-23 15:56:12 -07:00
bifs.from_json-10 Change from_json to return an error rather than print it. 2025-04-23 15:56:12 -07:00
bifs.from_json-11 Change from_json to return an error rather than print it. 2025-04-23 15:56:12 -07:00
bifs.from_json-12 Change from_json to return an error rather than print it. 2025-04-23 15:56:12 -07:00
bifs.from_json-13 Change from_json to return an error rather than print it. 2025-04-23 15:56:12 -07:00
bifs.from_json-14 Add test with MUD example 2023-06-29 15:57:52 +02:00
bifs.get_current_packet_header
bifs.get_dns_stats get_dns_stats: Expose total cache size and cached text entries 2023-03-10 09:22:45 +01:00
bifs.get_plugin_components Added Baseline 2025-06-25 21:22:21 +05:30
bifs.get_port_transport_proto
bifs.getsetenv
bifs.global_ids global_ids: Align script_id$type_name field with type_name() 2024-02-23 17:26:56 +01:00
bifs.global_ids-modules global_ids(): Include module names 2023-07-05 14:09:20 +02:00
bifs.haversine_distance Use std::numbers::pi instead of hard-coded value 2025-09-02 16:51:23 +00:00
bifs.hexdump
bifs.hexstr_to_bytestring
bifs.hll_cardinality
bifs.hll_cluster btest remaining: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
bifs.hll_large_estimate
bifs.icmp_connection_exists conn_key/fivetuple: Handle one-way ICMP conns in DoConnKeyFromVal() 2025-07-24 09:48:33 +02:00
bifs.identify_data
bifs.install_src_addr_filter btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
bifs.is_ascii
bifs.is_event_handled Address review comments and small updates for DNS warnings 2025-01-14 09:33:48 +00:00
bifs.is_local_interface
bifs.is_port
bifs.join_string
bifs.levenshtein_distance
bifs.lookup_connection btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
bifs.lookup_ID
bifs.lowerupper
bifs.lstrip
bifs.mask_addr
bifs.matching_subnets
bifs.math zeek.bif: Add log2() and ceil() 2023-05-09 18:57:57 +02:00
bifs.md5
bifs.net_stats_trace Add optional packet filtered statistics for packet sources 2023-04-06 09:47:04 -07:00
bifs.netbios-functions netbios_decode: use unsigned char for result 2023-02-02 15:48:58 +01:00
bifs.order
bifs.packet_sources
bifs.parse_ftp bifs/parse_eftp: Prevent reporter warnings/errors on invalid input 2023-01-16 15:20:02 +01:00
bifs.piped_exec
bifs.print_raw
bifs.ptr_name_to_addr
bifs.rand
bifs.raw_bytes_to_v4_addr
bifs.raw_bytes_to_v6_addr
bifs.reading_traces
bifs.records_fields Type/RecordType: Make table returned by GetRecordFieldsVal() ordered 2025-07-22 16:58:40 +02:00
bifs.remask_addr
bifs.resize
bifs.reverse
bifs.rotate_file
bifs.rotate_file_by_name
bifs.routing0_data_to_addrs
bifs.rstrip
bifs.safe_shell_quote
bifs.same_object
bifs.sha1
bifs.sha256
bifs.sleep Add sleep() BiF. 2024-12-07 00:36:45 -08:00
bifs.sort
bifs.split_string strings.bif/do_split_string: Pass bol and eol to MatchPrefix() 2023-11-16 08:36:08 +01:00
bifs.strcmp
bifs.strftime
bifs.string_fill
bifs.string_to_pattern
bifs.string_utils Convert remove_prefix/suffix BIFs to use std::string_view 2024-01-23 10:38:56 -07:00
bifs.string_utils_errors
bifs.strip
bifs.strptime
bifs.strstr
bifs.sub strings.bif/sub,gsub: Respect anchors in pattern 2023-11-17 14:37:25 +01:00
bifs.sub_bytes BTest updates for ZAM regularization changes 2024-08-16 11:18:58 +02:00
bifs.subnet_to_addr
bifs.subnet_version
bifs.subst_string
bifs.system
bifs.system_env
bifs.table_keys
bifs.table_values
bifs.to_addr
bifs.to_count Merge remote-tracking branch 'markoverholser/master' 2025-02-24 11:38:11 -07:00
bifs.to_double
bifs.to_double_from_string
bifs.to_int Merge remote-tracking branch 'markoverholser/master' 2025-02-24 11:38:11 -07:00
bifs.to_interval
bifs.to_port
bifs.to_subnet
bifs.to_time
bifs.topk
bifs.type_aliases
bifs.type_name Var/Func: Render function parameters using comma, not semicolon 2023-10-04 17:42:30 +02:00
bifs.unique_id
bifs.unique_id-rnd
bifs.uuid_to_string
bifs.x509_check_hostname
bifs.x509_parse_dn SSL/TLS: Parse CertificateRequest message 2023-03-09 09:12:29 +01:00
bifs.x509_verify btest/x509_verify: Drop OpenSSL 1.0 hack 2025-02-04 09:44:03 +01:00
bifs.zeek_args
broker.connect-on-retry
broker.disconnect
broker.error
broker.opaque Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
broker.peering-directionality Expand Broker APIs to allow tracking directionality of peering establishment 2025-04-21 14:08:42 -07:00
broker.publish-errors btest/broker/publish-errors: Avoid exit(0) 2025-06-24 19:06:52 +02:00
broker.publish_unspecified_table broker: Support publish() of unspecified set() / table() 2024-11-06 15:27:26 +01:00
broker.python-bindings btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
broker.remote_event base/frameworks/spicy: Do not load base/misc/version 2023-10-24 13:15:21 +02:00
broker.remote_event_any base/frameworks/spicy: Do not load base/misc/version 2023-10-24 13:15:21 +02:00
broker.remote_event_index_types BTest baseline update for more complete function/lambda names 2024-09-27 14:16:10 -07:00
broker.remote_event_schedule_ts Prevent event timestamps set to future 2025-04-11 13:06:33 +02:00
broker.remote_event_ssl_auth base/frameworks/spicy: Do not load base/misc/version 2023-10-24 13:15:21 +02:00
broker.remote_event_ts Add timestamps to manually published broker events. 2023-05-11 12:53:52 +02:00
broker.remote_event_ts_compat Add compatibility tests for timestamped events. 2023-05-11 12:54:11 +02:00
broker.remote_event_vector_any
broker.remote_id
broker.remote_log
broker.remote_log_batch
broker.remote_log_late_join
broker.remote_log_types BTest baseline update for more complete function/lambda names 2024-09-27 14:16:10 -07:00
broker.ssl-mismatch
broker.ssl_auth_failure
broker.store.brokerstore-attr-clone
broker.store.brokerstore-attr-expire
broker.store.brokerstore-attr-persistence
broker.store.brokerstore-attr-persistence-clone
broker.store.brokerstore-attr-simple
broker.store.brokerstore-backend-delete-composite-key btest/broker: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
broker.store.brokerstore-backend-invalid
broker.store.brokerstore-backend-simple
broker.store.brokerstore-backend-simple-incompatible
broker.store.brokerstore-backend-simple-reverse
broker.store.brokerstore-backend-sqlite
broker.store.brokerstore-backend-sqlite-corrupt-delete broker/store: Extend SQLiteOptions around data safety and performance 2023-01-30 10:25:37 +01:00
broker.store.brokerstore-backend-sqlite-corrupt-fail broker/store: Extend SQLiteOptions around data safety and performance 2023-01-30 10:25:37 +01:00
broker.store.brokerstore-backend-sqlite-incompatible
broker.store.brokerstore-backend-sqlite-integrity-check broker/store: Extend SQLiteOptions around data safety and performance 2023-01-30 10:25:37 +01:00
broker.store.brokerstore-backend-sqlite-wal-mode broker/store: Extend SQLiteOptions around data safety and performance 2023-01-30 10:25:37 +01:00
broker.store.clone
broker.store.create-failure
broker.store.create-global-failure Return a warning and fail if creating a store at global scope 2024-12-17 11:32:43 -07:00
broker.store.handle-copy
broker.store.invalid-handle added a space when rendering some expressions so they're more readable 2024-05-29 12:40:05 -07:00
broker.store.local
broker.store.ops
broker.store.record
broker.store.set
broker.store.sqlite
broker.store.table
broker.store.type-conversion
broker.store.vector
broker.telemetry telemetry: Rename endpoint label to node label 2025-06-25 09:33:01 +02:00
broker.unpeer
cluster.backend-enum broker: Add WebSocketShim backend 2025-04-23 14:27:43 +02:00
cluster.broker.cluster-hello-zero-network-timestamp btest: Add test for Cluster::hello zero-timestamp 2025-05-26 16:08:27 +02:00
cluster.broker.cluster-publish cluster: Add Cluster scoped bifs 2024-11-26 12:58:23 +01:00
cluster.broker.logging btest/cluster: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
cluster.broker.publish-any cluster: Fix Cluster::publish() of Broker::Data 2024-12-12 17:54:37 +01:00
cluster.broker.publish-warning Broker::publish: Warn on using Broker::publish() when inactive 2024-12-11 17:20:42 +01:00
cluster.generic.cluster-publish-errors cluster: Move publish_hrw() and publish_rr() to cluster.bif 2024-12-10 20:33:02 +01:00
cluster.generic.errors cluster: Add Cluster scoped bifs 2024-11-26 12:58:23 +01:00
cluster.generic.logging-rr btest/generic: Add publish_hrw(), publish_rr() and logging tests 2024-12-10 20:33:02 +01:00
cluster.generic.make_event cluster: Add Cluster scoped bifs 2024-11-26 12:58:23 +01:00
cluster.generic.on-subscribe-unsubscribe cluster: Add on_subscribe() and on_unsubscribe() hooks 2025-08-01 14:06:19 +02:00
cluster.generic.publish-any cluster/serializer/broker: Do not special case Broker::Data anymore 2025-08-17 16:56:20 +02:00
cluster.generic.publish-hrw btest/generic: Add publish_hrw(), publish_rr() and logging tests 2024-12-10 20:33:02 +01:00
cluster.generic.publish-no-handler cluster/serializer/broker: Fix handler lookup 2025-02-05 10:39:56 +01:00
cluster.generic.publish-rr btest/generic: Add publish_hrw(), publish_rr() and logging tests 2024-12-10 20:33:02 +01:00
cluster.generic.publish-unspecified cluster/Backend: Handle unspecified table/set 2024-12-12 17:54:42 +01:00
cluster.generic.publish-vec-hole broker/Data/data_to_val: Fail on vectors/lists with holes 2025-04-28 18:23:37 +02:00
cluster.serializer-enum cluster/serializer: Add binary-serialization-format 2024-12-04 12:40:35 +01:00
cluster.telemetry.two-nodes btest/cluster/telemetry: Add smoke testing for telemetry 2025-06-25 17:13:01 +02:00
cluster.telemetry.ws btest/cluster/telemetry: Add smoke testing for telemetry 2025-06-25 17:13:01 +02:00
cluster.telemetry.ws-app btest/cluster/telemetry: Add smoke testing for telemetry 2025-06-25 17:13:01 +02:00
cluster.telemetry.ws-invalid-app RE: Add MatchAll() and MatchSet() for std::string_view 2025-06-30 13:22:31 +02:00
cluster.websocket.bad-event-args Align WebSocket error in cluster with one in Broker 2025-06-21 18:13:09 +02:00
cluster.websocket.bad-subscriptions Align WebSocket error in cluster with one in Broker 2025-06-21 18:13:09 +02:00
cluster.websocket.bad-url Align WebSocket error in cluster with one in Broker 2025-06-21 18:13:09 +02:00
cluster.websocket.broker.manager-recvs btest/cluster/websocket: Add tests using broker 2025-04-23 14:27:43 +02:00
cluster.websocket.broker.manager-sends btest/cluster/websocket: Add tests using broker 2025-04-23 14:27:43 +02:00
cluster.websocket.broker.manager-worker-ping-pong btest/cluster/websocket: Add tests using broker 2025-04-23 14:27:43 +02:00
cluster.websocket.broker.no-subscriptions btest/cluster/websocket: Move no-subscriptions test 2025-04-25 10:01:23 +00:00
cluster.websocket.broker.oneshot cluster/zeromq: Attempt publish during termination 2025-04-23 14:27:43 +02:00
cluster.websocket.cluster-log cluster/WebSocket: Include X-Application-Name in cluster.log 2025-06-30 17:55:24 +02:00
cluster.websocket.listen-idempotent cluster/websocket: Make websocket dispatcher queue size configurable 2025-04-23 14:27:43 +02:00
cluster.websocket.metadata cluster/Backend: Fallback to current network time when current event has not timestamp 2025-08-20 19:56:50 +02:00
cluster.websocket.one cluster/websocket: Implement WebSocket server 2025-03-10 17:07:30 +01:00
cluster.websocket.one-ipv6 cluster/websocket: Deprecate $listen_host, introduce $listen_addr 2025-05-30 11:02:41 +02:00
cluster.websocket.one-pipelining cluster/websocket: Implement WebSocket server 2025-03-10 17:07:30 +01:00
cluster.websocket.ping-timeout cluster/websocket: Propagate code and reason to websocket_client_lost() 2025-05-13 18:26:03 +02:00
cluster.websocket.terminate-while-queuing Websocket: Close onloop during Terminate() 2025-05-06 14:19:08 +02:00
cluster.websocket.three btest/cluster/websocket: Harden multi-client tests 2025-03-24 18:36:26 +01:00
cluster.websocket.tls cluster/websocket: Implement WebSocket server 2025-03-10 17:07:30 +01:00
cluster.websocket.tls-nocert btest/cluster/websocket: Add cert-less test 2025-06-16 13:47:33 +02:00
cluster.websocket.tls-usage-error cluster/websocket: Deprecate $listen_host, introduce $listen_addr 2025-05-30 11:02:41 +02:00
cluster.websocket.two-pipelining btest/cluster/websocket: Harden multi-client tests 2025-03-24 18:36:26 +01:00
cluster.websocket.zeromq.manager-worker-ping-pong btest/cluster/websocket: Move ZeroMQ test and use wstest.py 2025-04-23 14:27:43 +02:00
cluster.websocket.zeromq.no-subscriptions btest/cluster/websocket: Move no-subscriptions test 2025-04-25 10:01:23 +00:00
cluster.websocket.zeromq.oneshot cluster/zeromq: Attempt publish during termination 2025-04-23 14:27:43 +02:00
cluster.zeromq.ipv6-error cluster/zeromq: Hook up and enable IPV6 by default 2025-06-24 17:12:45 +02:00
cluster.zeromq.ipv6-logging cluster/zeromq: Hook up and enable IPV6 by default 2025-06-24 17:12:45 +02:00
cluster.zeromq.logging cluster/backend/zeromq: Add ZeroMQ based cluster backend 2024-12-10 20:33:02 +01:00
cluster.zeromq.manager-is-logger cluster/backend/zeromq: Add ZeroMQ based cluster backend 2024-12-10 20:33:02 +01:00
cluster.zeromq.node-topic-prefix cluster/zeromq: Fix node_topic() and nodeid_topic() 2025-03-24 18:36:26 +01:00
cluster.zeromq.overload-drop btest/cluster/zeromq: Add tests for overload behavior 2025-07-29 11:23:53 +02:00
cluster.zeromq.overload-no-drop btest/cluster/zeromq: Add tests for overload behavior 2025-07-29 11:23:53 +02:00
cluster.zeromq.overload-worker-proxy-topic-drop btest/cluster/zeromq: Add tests for overload behavior 2025-07-29 11:23:53 +02:00
cluster.zeromq.overload-worker-proxy-topic-no-drop btest/cluster/zeromq: Add tests for overload behavior 2025-07-29 11:23:53 +02:00
cluster.zeromq.subscribe-before-init cluster/zeromq: Fix Cluster::subscribe() block if not initialized 2025-09-25 18:58:35 +02:00
cluster.zeromq.supervisor cluster/backend/zeromq: Add ZeroMQ based cluster backend 2024-12-10 20:33:02 +01:00
cluster.zeromq.supervisor-runs-zmq-proxy cluster/zeromq: Improve EINTR handling 2025-09-25 13:52:12 +02:00
cluster.zeromq.two-nodes cluster/backend/zeromq: Add ZeroMQ based cluster backend 2024-12-10 20:33:02 +01:00
cluster.zeromq.unsubscribe cluster/zeromq: Fix Unsubscribe() bug caused by \x00 prefix 2025-02-05 10:39:56 +01:00
cluster.zeromq.unsubscribe-two-workers cluster/zeromq: Fix unsubscription visibility 2025-03-24 18:36:16 +01:00
core.analyzer-confirmation-violation-info PPPoE: don't forward more bytes than header indicates 2025-07-08 10:20:59 +01:00
core.analyzer-confirmation-violation-info-ftp btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.analyzer-stream-event protocol: Add StreamEvent analyzer 2024-12-06 16:12:40 +01:00
core.analyzer-stream-event-disable protocol: Add StreamEvent analyzer 2024-12-06 16:12:40 +01:00
core.bits_per_uid btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.check-unused-event-handlers EventRegistry: Deprecate UsedHandlers() and UnusedHandlers() 2023-11-07 16:06:17 +01:00
core.checksums
core.checksums-cli Add btest for "-C" flag vs the script-layer ignore_checksums global. 2023-04-24 21:19:05 -07:00
core.checksums_ignore_nets Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.checksums_ignore_nets_runtime_update
core.cisco-fabric-path Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.command-line-option-redefs
core.conn-generic-packet-threshold Merge branch 'topic/jgras/connection-packet-threshold' of https://github.com/J-Gras/zeek 2025-07-08 17:54:27 +02:00
core.conn-size-threshold Add support for ircv3 tags 2025-07-28 14:06:33 -07:00
core.conn-stats ConnStats: Expose num_packets_unprocessed 2025-07-28 14:10:53 +02:00
core.conn-uid btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.connection_flip_roles btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.connection_flipped btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.connection_status_update btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.disable-mobile-ipv6
core.discarder btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.div-by-zero
core.dns-init Remove deprecations tagged for v8.1 2025-08-12 10:19:03 -07:00
core.embedded-null
core.erspan
core.erspanI Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.erspanII Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.erspanIII Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.ether-addrs
core.event-arg-reuse
core.event-groups.basic
core.event-groups.errors
core.event-groups.errors-2
core.event-groups.errors-3
core.event-groups.errors-4
core.event-groups.existence
core.event-groups.hooks-basic
core.event-groups.hooks-module
core.event-groups.module
core.event-groups.multi-group
core.event-groups.runtime
core.event-metadata.add-missing-remote-network-timestamp-error Event: Bail on add_missing_remote_network_timestamp without add_network_timestamp 2025-06-02 17:31:36 +02:00
core.event-metadata.current-event-time Event: Use -1.0 for undefined/unset timestamps 2025-06-02 17:31:36 +02:00
core.event-metadata.network-timestamp Event/zeek.bif: Add EventMetadata current() and current_values() accessors 2025-05-23 19:32:50 +02:00
core.event-metadata.non-event Event/zeek.bif: Add EventMetadata current() and current_values() accessors 2025-05-23 19:32:50 +02:00
core.event-metadata.register Event/zeek.bif: Add EventMetadata current() and current_values() accessors 2025-05-23 19:32:50 +02:00
core.event-metadata.register-type-errors EventRegistry/zeek.bif/init-bare: Add event metadata infrastructure 2025-05-23 19:31:58 +02:00
core.event-trace btest/core: Add event-trace test 2025-05-19 18:23:08 +02:00
core.expire-all-timers Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.expired-conn-weird btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.expr-exception btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.fake_dns Remove deprecations tagged for v8.1 2025-08-12 10:19:03 -07:00
core.file-analyzer-violation threading/Manager: Warn if threads are added after termination 2024-07-02 12:34:28 +02:00
core.global_opaque_val
core.history-flip Optimize Conn::set_conn to minimize operations 2025-07-29 09:11:57 +01:00
core.icmp.icmp-context btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.icmp.icmp-events btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.icmp.icmp6-context btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.icmp.icmp6-events btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.icmp.icmp6-nd-options btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.icmp.icmp_sent btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.init-error
core.ip-broken-header
core.ipv6-atomic-frag btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.ipv6-flow-labels btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.ipv6-frag dns: Remove AD and CD flags from log 2023-03-16 10:09:27 +01:00
core.ipv6_esp
core.ipv6_ext_headers btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.ipv6_zero_len_ah btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.linuxsll2 btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.load-duplicates-links
core.load-explicit-bro-suffix-fallback
core.load-file-extension Cleanup unused baselines 2025-07-10 16:46:09 -04:00
core.load-pkg Cleanup unused baselines 2025-07-10 16:46:09 -04:00
core.load-prefixes
core.load-relative
core.load-stdin
core.load-unload Cleanup unused baselines 2025-07-10 16:46:09 -04:00
core.local-flip Optimize Conn::set_conn to minimize operations 2025-07-29 09:11:57 +01:00
core.max-analyzer-violations pop3: Prevent unbounded state growth 2024-09-18 19:05:39 +02:00
core.mmdb.explicit-open Add btest to verify behavior of re-opened MMDBs opened directly via BIFs 2024-01-10 20:44:40 -08:00
core.mmdb.lookup Add btest for succeeding/failing IPv4/IPv6 lookups 2024-01-25 23:54:20 -08:00
core.mmdb.reopen btest/core/mmdb: Basic lookup_autonomous_system / lookup_location tests 2023-10-24 13:15:18 +02:00
core.mmdb.temporary-error Fix mmdb.temporary-error testcase when MMDBs are installed on system 2024-01-10 20:28:41 -08:00
core.mobile-ipv6-dst-opts
core.mobile-ipv6-home-addr btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.mobile-ipv6-routing btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.mobility-checksums
core.mobility_msg
core.mpls-in-vlan Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.network-time
core.network-time-init
core.network_time.broker core.network_time.broker: Test reliability improvement 2023-05-05 14:08:29 +02:00
core.network_time.no-update A set of tests around set_network_time() and timer expiration 2023-03-23 12:41:56 +01:00
core.network_time.packet_ts Add btest for get_current_packet_ts() 2024-12-09 16:39:38 +01:00
core.network_time.set-network-time A set of tests around set_network_time() and timer expiration 2023-03-23 12:41:56 +01:00
core.network_time.set-network-time-expiration A set of tests around set_network_time() and timer expiration 2023-03-23 12:41:56 +01:00
core.nflog
core.nop
core.option-errors
core.option-errors-2
core.option-errors-3
core.option-priorities
core.option-redef
core.option-runtime-errors added a space when rendering some expressions so they're more readable 2024-05-29 12:40:05 -07:00
core.option-runtime-errors-2 added a space when rendering some expressions so they're more readable 2024-05-29 12:40:05 -07:00
core.option-runtime-errors-3 added a space when rendering some expressions so they're more readable 2024-05-29 12:40:05 -07:00
core.option-runtime-errors-4 added a space when rendering some expressions so they're more readable 2024-05-29 12:40:05 -07:00
core.option-runtime-errors-5 added a space when rendering some expressions so they're more readable 2024-05-29 12:40:05 -07:00
core.option-runtime-errors-6 added a space when rendering some expressions so they're more readable 2024-05-29 12:40:05 -07:00
core.option-runtime-errors-7 added a space when rendering some expressions so they're more readable 2024-05-29 12:40:05 -07:00
core.option-runtime-errors-8 added a space when rendering some expressions so they're more readable 2024-05-29 12:40:05 -07:00
core.option-runtime-errors-9 added a space when rendering some expressions so they're more readable 2024-05-29 12:40:05 -07:00
core.option-runtime-errors-10 added a space when rendering some expressions so they're more readable 2024-05-29 12:40:05 -07:00
core.option-runtime-errors-11 added a space when rendering some expressions so they're more readable 2024-05-29 12:40:05 -07:00
core.option-runtime-errors-12 added a space when rendering some expressions so they're more readable 2024-05-29 12:40:05 -07:00
core.option-runtime-errors-13 added a space when rendering some expressions so they're more readable 2024-05-29 12:40:05 -07:00
core.option-zeek-done
core.packet-analyzer-override Reintroduce info when overriding packet analyzer mappings. 2023-03-30 16:19:39 +02:00
core.parse-only-signature-file-issues rule-parse: Remove [event_name] syntax, deprecate msg as identifier 2023-12-14 10:16:35 +01:00
core.parse-only-usage-issues
core.pbb Move Conn::set_conn() from connection_state_remove to new_connection 2025-07-29 09:11:57 +01:00
core.pcap.dumper
core.pcap.dynamic-filter btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.pcap.filter-warning Update core.pcap.filter-warning baseline 2024-04-18 12:27:46 +00:00
core.pcap.input-error iosource/pcap: Support configurable buffer size 2023-10-10 15:08:51 +02:00
core.pcap.pseudo-realtime
core.pcap.read-trace-with-filter Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.pcap.wrong-format iosource/pcap: Support configurable buffer size 2023-10-10 15:08:51 +02:00
core.pcap_file_done
core.ppp Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.pppoe Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.pppoe-over-qinq PPPoE: don't forward more bytes than header indicates 2025-07-08 10:20:59 +01:00
core.print-bpf-filters spciy-redis: Bring Redis analyzer into Zeek proper 2025-05-27 09:28:12 -04:00
core.print-interval
core.proc-status-file
core.protocol-registration-error
core.q-in-q Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.radiotap Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.raw-truncation Add length checking to ToRawPktHdrVal for truncated packets 2023-05-19 09:37:18 -07:00
core.raw_packet ip4_hdr: Add DF, MF, offset and sum fields 2023-04-29 17:09:43 +02:00
core.reassembly btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.record-field-defer testing/btest: Un-deferred record initalization tests 2023-09-12 12:12:46 +02:00
core.record-field-defer-2 testing/btest: Un-deferred record initalization tests 2023-09-12 12:12:46 +02:00
core.record-field-defer-3 testing/btest: Un-deferred record initalization tests 2023-09-12 12:12:46 +02:00
core.record-field-defer-4 testing/btest: Un-deferred record initalization tests 2023-09-12 12:12:46 +02:00
core.record-field-defer-parse-time testing/btest: Un-deferred record initalization tests 2023-09-12 12:12:46 +02:00
core.record-field-defer-parse-time-nested testing/btest: Un-deferred record initalization tests 2023-09-12 12:12:46 +02:00
core.record-field-defer-table testing/btest: Un-deferred record initalization tests 2023-09-12 12:12:46 +02:00
core.record-field-defer-table-2 testing/btest: Un-deferred record initalization tests 2023-09-12 12:12:46 +02:00
core.record-field-defer-table-3 testing/btest: Un-deferred record initalization tests 2023-09-12 12:12:46 +02:00
core.record-field-redef Type/RecordType: Make table returned by GetRecordFieldsVal() ordered 2025-07-22 16:58:40 +02:00
core.record-field-redef-errors
core.record-field-redef-errors-2
core.record-field-redef-errors-3
core.record-field-redef-errors-4
core.record-field-redef-errors-5
core.record-field-redef-errors-6
core.record-field-redef-errors-7
core.record-field-redef-errors-8
core.record-field-redef-errors-9
core.record-field-redef-errors-10
core.record-field-redef-errors-11
core.record-field-redef-errors-12
core.recursive-event btest: More verbose recursive-event output 2023-03-23 12:41:56 +01:00
core.reporter
core.reporter-error-in-handler
core.reporter-fmt-strings
core.reporter-parse-error
core.reporter-paths Btest for normalized reporter path reporting 2023-10-03 22:16:00 -07:00
core.reporter-runtime-error
core.reporter-type-mismatch
core.reporter-weird-sampling
core.reporter-weird-sampling-disable
core.reporter-weird-sampling-global
core.save-load-seeds util/init_random_seed: write_file implies deterministic 2025-02-04 11:57:51 +01:00
core.script-args
core.seed Introduce ZEEK_SEED_VALUES environment variable 2023-05-12 19:50:37 +02:00
core.seed-errors Introduce ZEEK_SEED_VALUES environment variable 2023-05-12 19:50:37 +02:00
core.skip_analyzer Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.suspend_processing.broker btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.suspend_processing.config Add a set of suspend_processing tests 2023-03-23 12:41:56 +01:00
core.suspend_processing.event-from-zeek-init ip4_hdr: Add DF, MF, offset and sum fields 2023-04-29 17:09:43 +02:00
core.suspend_processing.event-order ip4_hdr: Add DF, MF, offset and sum fields 2023-04-29 17:09:43 +02:00
core.suspend_processing.raw-input Add a set of suspend_processing tests 2023-03-23 12:41:56 +01:00
core.suspend_processing.scheduled-event-from-zeek-init ip4_hdr: Add DF, MF, offset and sum fields 2023-04-29 17:09:43 +02:00
core.suspend_processing.suspension-stack Fix a long-standing bug in the math around continue_processing 2023-04-06 10:49:05 -07:00
core.suspend_processing.websocket btest/core/suspend_processing: Add WebSocket example 2025-09-08 11:11:13 -07:00
core.tcp-padding Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.tcp.fin-retransmit
core.tcp.flip-without-syn Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.tcp.large-file-reassembly btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.tcp.miss-end-data btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.tcp.missing-syn Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.tcp.options btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.tcp.quantum-insert btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.tcp.reassembly-known-ports Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.tcp.rst-after-syn btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.tcp.rxmit-history Update btests for new local-only subnets 2025-01-09 22:16:42 -07:00
core.tcp.tcp-dups btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.tcp.truncated-header btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.truncation IP: fix weird name to not be ipv6 specific 2023-05-24 16:29:29 +02:00
core.tunnels.analyzer-confirmation btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.tunnels.ayiya Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.tunnels.geneve btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.tunnels.geneve-47101 Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.tunnels.geneve-get-options PacketAnalyzer::Geneve: Add get_options() 2025-02-22 12:19:42 -08:00
core.tunnels.geneve-many-options btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.tunnels.geneve-truncated Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.tunnels.geneve-vxlan-truncated Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.tunnels.gre Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.tunnels.gre-aruba
core.tunnels.gre-aruba-amsdu Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.tunnels.gre-erspan3-dot1q btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.tunnels.gre-in-gre Update btests for new local-only subnets 2025-01-09 22:16:42 -07:00
core.tunnels.gre-in-gre-min-depth Remove setting non-existent session history for IPTunnel 2024-01-23 12:39:58 -07:00
core.tunnels.gre-over-udp Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.tunnels.gre-pptp Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.tunnels.gtp.different_dl_and_ul Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.tunnels.gtp.ext_header btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.tunnels.gtp.false_gtp Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.tunnels.gtp.inner_ipv6 Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.tunnels.gtp.inner_teredo Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.tunnels.gtp.non_recursive btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.tunnels.gtp.not_user_plane_data Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.tunnels.gtp.opt_header Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.tunnels.gtp.outer_ip_frag Update btests for new local-only subnets 2025-01-09 22:16:42 -07:00
core.tunnels.gtp.pdp_ctx_messages btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.tunnels.gtp.unknown_or_too_short Add proto to analyzer.log 2025-08-06 11:34:57 +01:00
core.tunnels.ip-in-ip btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.tunnels.ip-in-ip-version
core.tunnels.ip-tunnel-uid btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.tunnels.max-depth init-bare: Default Tunnel::max_depth to 4 2024-01-11 10:22:36 +01:00
core.tunnels.max-depth-exceeded tunnels: Add 'X' to history when reaching Tunnel::max_depth 2024-01-11 10:22:44 +01:00
core.tunnels.teredo btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.tunnels.teredo-known-services Update some btests due to timing changes 2025-03-18 10:20:33 -07:00
core.tunnels.teredo-udp-in-udp
core.tunnels.teredo_bubble_with_payload btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.tunnels.vxlan btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.tunnels.vxlan-unknown-internal-packet Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.udp-broadcast-no-flip IPBasedAnalyzer: Don't flip connections when destination is broadcast 2023-08-28 12:15:55 +02:00
core.udp-content-ports btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.udp-contents-delivery-ports-use-resp btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.udp-padding Do not forward more than the remaining data to downstream UDP analyzer 2023-07-27 13:35:41 +01:00
core.unknown-ip-protocol Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.unknown-protocol-event Update btest baselines for analyzer history 2024-08-12 12:21:09 +02:00
core.unknown-protocol-log Add btest for unknown_protocols.log 2024-12-10 14:54:19 +01:00
core.vlan-mpls Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.vntag Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.vntag-in-vlan Add analyzer registration from VLAN to VNTAG 2025-03-18 11:51:27 -07:00
core.when-interpreter-exceptions
core.wlanmon Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.x509-generalizedtime
coverage.bare-load-baseline PPPoE: add session id logging 2025-07-23 13:43:45 +01:00
coverage.bare-mode-errors Remove deprecations tagged for v8.1 2025-08-12 10:19:03 -07:00
coverage.basic-no-errors
coverage.coverage-blacklist
coverage.default-load-baseline PPPoE: add session id logging 2025-07-23 13:43:45 +01:00
coverage.find-bro-logs Remove deprecations tagged for v8.1 2025-08-12 10:19:03 -07:00
coverage.global-ids-to-json OpaqueVal: Register TelemetryVals, too 2023-11-28 09:21:31 +01:00
coverage.init-default Add cluster framework telemetry for Broker's send-buffer use 2025-04-25 09:14:33 -07:00
coverage.record-fields Move c$service_violation to deprecated-dpd-log.zeek 2025-07-30 07:58:36 +01:00
coverage.test-all-policy-cluster btest/coverage: Avoid warnings in test-all-policy-cluster 2024-12-11 17:20:45 +01:00
coverage.test-all-policy-zeekygen btest/coverage/test-all-policy-zeekygen: Load test-all-policy with zeekygen enabled 2025-05-21 11:49:12 +02:00
coverage.zeek-profiler-file extend script coverage profiling to track whether conditionals evaluate to true/false 2025-06-26 16:10:50 +02:00
dns_mgr.blocking_lookup_hostname zeek.bif: Introduce blocking_lookup_hostname() 2025-03-05 19:22:57 +01:00
dns_mgr.lookup_addr btest: Add integration test for DNS_Mgr 2024-11-08 11:29:31 +01:00
dns_mgr.lookup_hostname btest: Add integration test for DNS_Mgr 2024-11-08 11:29:31 +01:00
dns_mgr.lookup_hostname_cname btest/dns_mgr: Update run-dnsmasq, use --host-record 2025-03-05 12:39:15 +01:00
dns_mgr.lookup_hostname_txt btest: Add integration test for DNS_Mgr 2024-11-08 11:29:31 +01:00
doc.zeekygen.all_scripts
doc.zeekygen.command_line
doc.zeekygen.comment_retrieval_bifs
doc.zeekygen.declaring_script Type/RecordType: Make table returned by GetRecordFieldsVal() ordered 2025-07-22 16:58:40 +02:00
doc.zeekygen.declaring_script_enum
doc.zeekygen.declaring_script_errors
doc.zeekygen.enums
doc.zeekygen.example RecordType:DescribeReST: Render RecordType using zeek:field directive 2025-05-28 15:59:50 +02:00
doc.zeekygen.func-params RecordType:DescribeReST: Render RecordType using zeek:field directive 2025-05-28 15:59:50 +02:00
doc.zeekygen.identifier RecordType:DescribeReST: Render RecordType using zeek:field directive 2025-05-28 15:59:50 +02:00
doc.zeekygen.identifier_without_script Add btest for Zeekygen docs extraction on identifiers defined by the Zeek core. 2024-05-03 12:22:42 -07:00
doc.zeekygen.package
doc.zeekygen.package_index
doc.zeekygen.records RecordType:DescribeReST: Render RecordType using zeek:field directive 2025-05-28 15:59:50 +02:00
doc.zeekygen.script_index
doc.zeekygen.script_summary
doc.zeekygen.type-aliases RecordType:DescribeReST: Render RecordType using zeek:field directive 2025-05-28 15:59:50 +02:00
doc.zeekygen.vectors
javascript.file-sniff btest/javascript: Add file_sniff() and file_state_remove() test 2025-03-10 19:15:06 +01:00
javascript.hello Add experimental JavaScript support when libnode is available 2023-04-14 11:26:41 +02:00
javascript.http-request Add experimental JavaScript support when libnode is available 2023-04-14 11:26:41 +02:00
javascript.http-uri-sha256 Add experimental JavaScript support when libnode is available 2023-04-14 11:26:41 +02:00
javascript.intel Add experimental JavaScript support when libnode is available 2023-04-14 11:26:41 +02:00
javascript.log-delay testing/btest: Log::delay() from JavaScript 2023-11-29 12:52:19 +01:00
javascript.suspend-continue Add experimental JavaScript support when libnode is available 2023-04-14 11:26:41 +02:00
language.add-del-expr-void crash fixes for constructs that expect add/delete expressions to return values 2025-07-11 12:56:08 -04:00
language.addr
language.alternate-event-hook-prototypes Var/Func: Render function parameters using comma, not semicolon 2023-10-04 17:42:30 +02:00
language.alternate-event-hook-prototypes-invalid-arg Var/Func: Render function parameters using comma, not semicolon 2023-10-04 17:42:30 +02:00
language.alternate-prototypes-arg-matching
language.alternate-prototypes-default-args Var/Func: Render function parameters using comma, not semicolon 2023-10-04 17:42:30 +02:00
language.alternate-prototypes-deprecated-args Var/Func: Render function parameters using comma, not semicolon 2023-10-04 17:42:30 +02:00
language.any
language.any-script-func-variadic-errors
language.any-script-func-variadic-errors-2
language.any-when
language.arithmetic-record-vec Fix record coercion with compatible types 2025-08-04 17:09:26 -04:00
language.arithmetic-record-vec-fail Fix record coercion with compatible types 2025-08-04 17:09:26 -04:00
language.assert BTest updates for ZAM support of (optionally) keeping "assert" statements 2024-12-03 10:40:41 -07:00
language.assert-2 Stmt: Introduce assert statement and related hooks 2023-06-12 18:16:02 +02:00
language.assert-3 update BIFs to_int() and to_count() to accept optional 'base' argument; allows more more exotic conversions from hex, octal, binary 2025-02-18 06:49:55 -06:00
language.assert-4 Stmt: Introduce assert statement and related hooks 2023-06-12 18:16:02 +02:00
language.assert-5 Stmt: Introduce assert statement and related hooks 2023-06-12 18:16:02 +02:00
language.assert-6 Stmt: Introduce assert statement and related hooks 2023-06-12 18:16:02 +02:00
language.assert-7 simplified "assert" by not trying to catch messages that themselves have errors 2024-12-02 10:37:10 -08:00
language.assert-8 Stmt: Introduce assert statement and related hooks 2023-06-12 18:16:02 +02:00
language.assert-error Stmt: Introduce assert statement and related hooks 2023-06-12 18:16:02 +02:00
language.assert-error-2 Stmt: Introduce assert statement and related hooks 2023-06-12 18:16:02 +02:00
language.assert-error-3 Stmt: Introduce assert statement and related hooks 2023-06-12 18:16:02 +02:00
language.assert-error-4 Stmt: Introduce assert statement and related hooks 2023-06-12 18:16:02 +02:00
language.assert-hook BTest updates for ZAM support of (optionally) keeping "assert" statements 2024-12-03 10:40:41 -07:00
language.assert-hook-2 update BIFs to_int() and to_count() to accept optional 'base' argument; allows more more exotic conversions from hex, octal, binary 2025-02-18 06:49:55 -06:00
language.assert-hook-3 Stmt: Rework assertion hooks break semantics 2023-06-13 16:18:01 +02:00
language.assert-hook-4 Stmt: Introduce assert statement and related hooks 2023-06-12 18:16:02 +02:00
language.assert-hook-5 Stmt: Rework assertion hooks break semantics 2023-06-13 16:18:01 +02:00
language.assert-hook-6 simplified "assert" by not trying to catch messages that themselves have errors 2024-12-02 10:37:10 -08:00
language.assert-hook-7 Stmt: Rework assertion hooks break semantics 2023-06-13 16:18:01 +02:00
language.assert-hook-8 Stmt: Fix assert evaluating cond twice 2024-03-04 15:30:09 +01:00
language.assert-misc update BIFs to_int() and to_count() to accept optional 'base' argument; allows more more exotic conversions from hex, octal, binary 2025-02-18 06:49:55 -06:00
language.assert-top-level BTest updates for ZAM support of (optionally) keeping "assert" statements 2024-12-03 10:40:41 -07:00
language.at-deprecated
language.at-dir
language.at-filename
language.at-if
language.at-if-else-if-no-way
language.at-if-event
language.at-if-invalid
language.at-if-lambda Var/Func: Render function parameters using comma, not semicolon 2023-10-04 17:42:30 +02:00
language.at-if-lambda-2 Var/Func: Render function parameters using comma, not semicolon 2023-10-04 17:42:30 +02:00
language.at-if-lambda-3 Var/Func: Render function parameters using comma, not semicolon 2023-10-04 17:42:30 +02:00
language.at-if-lambda-4 Var/Func: Render function parameters using comma, not semicolon 2023-10-04 17:42:30 +02:00
language.at-if-record parse: Support @if conditionals in record definitions 2024-01-08 15:21:48 +01:00
language.at-if-record-2 parse: Support @if conditionals in record definitions 2024-01-08 15:21:48 +01:00
language.at-if-record-3 parse: Support @if conditionals in record definitions 2024-01-08 15:21:48 +01:00
language.at-if-record-4 parse: Support @if conditionals in record definitions 2024-01-08 15:21:48 +01:00
language.at-if-record-5 parse: Support @if conditionals in record definitions 2024-01-08 15:21:48 +01:00
language.at-if-record-6 parse: Support @if conditionals in record definitions 2024-01-08 15:21:48 +01:00
language.at-if-record-7 parse: Support @if conditionals in record definitions 2024-01-08 15:21:48 +01:00
language.at-if-reject
language.at-if-reject-2
language.at-if-reject-3
language.at-if-reject-4
language.at-if-reject-5
language.at-ifdef
language.at-ifndef
language.at-load
language.attr-default-coercion
language.attr-default-global-set-error Only allow &optional in records 2025-08-14 11:38:19 -04:00
language.blank-expr-errors
language.blank-expr-errors-2
language.blank-expr-errors-3
language.blank-expr-errors-4
language.blank-expr-errors-5
language.blank-for
language.blank-local
language.blank-option-error
language.bogus-field-assign tightened up parsing of $field=X record constructor expressions 2025-08-31 15:14:26 -07:00
language.bool
language.closure-binding
language.closure-binding-errors Cleanup unused baselines 2025-07-10 16:46:09 -04:00
language.closure-sending
language.closure-sending-naming Use one-based index in warning message 2025-03-28 14:09:11 +01:00
language.closure-sending2
language.common-mistakes Cleanup unused baselines 2025-07-10 16:46:09 -04:00
language.common-mistakes2
language.complex-delete
language.conditional-expression
language.const
language.container-ctor-scope
language.container-option-init GH-2920: Don't warn on uninitialized container options 2023-04-13 09:05:17 -07:00
language.copy
language.copy-all-opaques Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
language.copy-all-types
language.copy-cycle
language.count
language.count-underflow
language.crlf-parsing
language.cross-product-init
language.dangling-at
language.default-params
language.delete-containers Allow delete statement for tables, sets and vectors 2024-02-21 18:00:00 +01:00
language.delete-field
language.delete-field-set RecordType: Allow deferring &default=vector(), set(), table() fields 2025-07-30 10:26:06 +02:00
language.delete-field-set-2 RecordType: Ensure &default fields are always re-initialized 2025-07-30 10:26:06 +02:00
language.delete-table-set Allow delete statement for tables, sets and vectors 2024-02-21 18:00:00 +01:00
language.deprecated
language.double
language.duplicate-attributes
language.enum
language.enum-desc
language.enum-multiple-decls
language.enum-name-conflict
language.enum-negative Add enum value negative check 2024-09-17 12:04:19 -04:00
language.enum-nonexisting
language.enum-scope
language.eof-parse-errors
language.event
language.event-invoke-mismatch-error Skip somer error reporting when the record type has errors 2023-01-27 20:49:22 +01:00
language.event-local-var
language.event-shadowing Support :: prefix to reference global namespace, deprecate GLOBAL:: 2023-07-11 12:51:21 +02:00
language.event-ts Add timestamp to events. 2023-05-11 12:51:06 +02:00
language.event-ts-scheduled Prevent event timestamps set to future 2025-04-11 13:06:33 +02:00
language.expire-expr-error BTest updates in support of compiling-scripts-to-C++ 2024-12-12 14:30:23 -08:00
language.expire-func-type-check Var/Func: Render function parameters using comma, not semicolon 2023-10-04 17:42:30 +02:00
language.expire-func-undef
language.expire-redef
language.expire-type-error
language.expire_func btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
language.expire_func-copy btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
language.expire_func_mod
language.expire_multiple
language.expire_multiple-2
language.expire_multiple-3
language.expire_subnet
language.file
language.for
language.for-var-check GH-2669: Give script location for type clash in for-loop construction 2023-01-26 09:11:10 -07:00
language.func-assignment
language.func-equality
language.function
language.function-already-defined
language.function-closures
language.function-invoke-mismatch-error Skip somer error reporting when the record type has errors 2023-01-27 20:49:22 +01:00
language.function-sending BTest baseline update for more complete function/lambda names 2024-09-27 14:16:10 -07:00
language.global-colon-colon Return an error if GLOBAL:: prefix is used 2024-08-07 11:58:22 -07:00
language.global-colon-colon-errors Support :: prefix to reference global namespace, deprecate GLOBAL:: 2023-07-11 12:51:21 +02:00
language.global-colon-colon-errors-2 Support :: prefix to reference global namespace, deprecate GLOBAL:: 2023-07-11 12:51:21 +02:00
language.global-colon-colon-errors-3 Support :: prefix to reference global namespace, deprecate GLOBAL:: 2023-07-11 12:51:21 +02:00
language.global-colon-colon-errors-4 Support :: prefix to reference global namespace, deprecate GLOBAL:: 2023-07-11 12:51:21 +02:00
language.global-colon-colon-errors-5 Support :: prefix to reference global namespace, deprecate GLOBAL:: 2023-07-11 12:51:21 +02:00
language.global-colon-colon-errors-6 Support :: prefix to reference global namespace, deprecate GLOBAL:: 2023-07-11 12:51:21 +02:00
language.global-colon-colon-redef Support :: prefix to reference global namespace, deprecate GLOBAL:: 2023-07-11 12:51:21 +02:00
language.global-init-calls-bif
language.global-init-calls-bif-using-builtin-type
language.global-type-clash
language.global-unset-addto
language.hook
language.hook_calls
language.identifier-not-defined-error Tame error reporting and abort() for undefined types 2023-01-26 20:05:02 +01:00
language.if
language.ignore-deprecations scan.l: Support @pragma, specifically push/pop ignore-deprecations 2023-04-05 10:24:30 +02:00
language.ignore-deprecations-2 scan.l: Support @pragma, specifically push/pop ignore-deprecations 2023-04-05 10:24:30 +02:00
language.ignore-deprecations-3 scan.l: Support @pragma, specifically push/pop ignore-deprecations 2023-04-05 10:24:30 +02:00
language.ignore-deprecations-4 scan.l: Support @pragma, specifically push/pop ignore-deprecations 2023-04-05 10:24:30 +02:00
language.incr-vec-expr-error Expr: Remove vector scalar operations 2023-03-20 21:35:48 +01:00
language.index-assignment-invalid
language.ineffective-default-args
language.init-in-anon-function
language.init-integration Remove deprecated Cluster::Node::interface field 2024-08-07 11:58:22 -07:00
language.init-mismatch Change table initialization deprecation to error 2023-06-14 10:07:23 -07:00
language.inlined-nested-loop
language.int
language.int-min-max
language.int-negation-range
language.interval
language.invalid-hostnames
language.invalid-hostnames-2
language.invalid-optional-attr Fix parameter attributes pretending to be records 2025-08-14 12:00:15 -04:00
language.invalid_index
language.ipv6-literals
language.key-value-for
language.lambda-escaping
language.lambda-nested-copy
language.lambda-record-field
language.lambda-zeek-init
language.locals-to-global Do not export locals 2025-02-12 13:49:12 -08:00
language.mismatched-container-ctor-types
language.module
language.more-closure-tests
language.named-record-ctors
language.named-set-ctors
language.named-table-ctors
language.named-vector-ctors
language.next-break-context-errors Make break/next/continue outside loops an error (6.1 deprecation) 2023-06-14 10:07:22 -07:00
language.next-break-context-errors-2 Make break/next/continue outside loops an error (6.1 deprecation) 2023-06-14 10:07:22 -07:00
language.next-break-context-errors-3 Make break/next/continue outside loops an error (6.1 deprecation) 2023-06-14 10:07:22 -07:00
language.next-break-context-errors-4 Make break/next/continue outside loops an error (6.1 deprecation) 2023-06-14 10:07:22 -07:00
language.next-break-context-errors-5 Make break/next/continue outside loops an error (6.1 deprecation) 2023-06-14 10:07:22 -07:00
language.next-break-context-errors-6 Make break/next/continue outside loops an error (6.1 deprecation) 2023-06-14 10:07:22 -07:00
language.next-break-context-errors-7 Make break/next/continue outside loops an error (6.1 deprecation) 2023-06-14 10:07:22 -07:00
language.next-break-context-errors-8 Make break/next/continue outside loops an error (6.1 deprecation) 2023-06-14 10:07:22 -07:00
language.next-break-context-errors-9 Make break/next/continue outside loops an error (6.1 deprecation) 2023-06-14 10:07:22 -07:00
language.next-test
language.no-module
language.null-statement
language.on_change
language.on_change-copy TableVal: Propagate &on_change attribute through copy() 2023-02-17 16:21:32 +01:00
language.on_change-recurse
language.on_change_expire btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
language.orphan-endif
language.outer_param_binding
language.paraglob
language.paraglob-serialization
language.pattern
language.pattern-sets Expr/Val: Add support for in set[pattern] 2023-11-21 10:34:17 +01:00
language.pattern-tables Expr: Implement string in table[pattern] of X 2023-11-21 10:34:17 +01:00
language.pattern-tables-stats Expr/Val: Add support for in set[pattern] 2023-11-21 10:34:17 +01:00
language.pattern-tables-when Expr: Implement string in table[pattern] of X 2023-11-21 10:34:17 +01:00
language.patterns-stored-in-containers
language.port
language.pragma scan.l: Support @pragma, specifically push/pop ignore-deprecations 2023-04-05 10:24:30 +02:00
language.pragma-2 scan.l: Support @pragma, specifically push/pop ignore-deprecations 2023-04-05 10:24:30 +02:00
language.pragma-3 scan.l: Support @pragma, specifically push/pop ignore-deprecations 2023-04-05 10:24:30 +02:00
language.pragma-4 scan.l: Support @pragma, specifically push/pop ignore-deprecations 2023-04-05 10:24:30 +02:00
language.pragma-5 scan.l: Support @pragma, specifically push/pop ignore-deprecations 2023-04-05 10:24:30 +02:00
language.pragma-6 scan.l: Support @pragma, specifically push/pop ignore-deprecations 2023-04-05 10:24:30 +02:00
language.pragma-7 scan.l: Support @pragma, specifically push/pop ignore-deprecations 2023-04-05 10:24:30 +02:00
language.pragma-8 scan.l: Support @pragma, specifically push/pop ignore-deprecations 2023-04-05 10:24:30 +02:00
language.pragma-9 scan.l: Support @pragma, specifically push/pop ignore-deprecations 2023-04-05 10:24:30 +02:00
language.pragma-10 scan.l: Support @pragma, specifically push/pop ignore-deprecations 2023-04-05 10:24:30 +02:00
language.pragma-11 scan.l: Support @pragma, specifically push/pop ignore-deprecations 2023-04-05 10:24:30 +02:00
language.pragma-12 scan.l: Support @pragma, specifically push/pop ignore-deprecations 2023-04-05 10:24:30 +02:00
language.precedence
language.raw_output_attr
language.raw_output_attr-2
language.rec-comp-init
language.rec-nested-opt
language.rec-of-tbl
language.rec-table-default
language.record-bad-ctor
language.record-bad-ctor2
language.record-bad-ctor3 tightened up parsing of $field=X record constructor expressions 2025-08-31 15:14:26 -07:00
language.record-bad-ctor4
language.record-chain-assign script optimization for record operations sourced (in part) from other records 2024-06-24 09:38:37 +02:00
language.record-coerce-clash
language.record-coerce-error Skip somer error reporting when the record type has errors 2023-01-27 20:49:22 +01:00
language.record-coerce-orphan
language.record-default-coercion
language.record-default-set-mismatch
language.record-duplicate-fields
language.record-empty-vector
language.record-extension
language.record-function-recursion
language.record-global-init-exception
language.record-index-complex-fields
language.record-option-init GH-2920: Don't warn on uninitialized container options 2023-04-13 09:05:17 -07:00
language.record-recursive-coercion
language.record-recursive-table Type/is_supported_index_type: Deal with recursive record types 2023-02-17 17:35:05 +01:00
language.record-recursive-table-2 Type/is_supported_index_type: Deal with recursive record types 2023-02-17 17:35:05 +01:00
language.record-recursive-table2 BTest updates in support of compiling-scripts-to-C++ 2024-12-12 14:30:23 -08:00
language.record-redef-after-init
language.record-ref-assign
language.record-type-checking
language.redeclaration-redefinition-errors Var: Fix null-pointer deref on redefinition of lambdas 2023-10-04 15:18:24 +02:00
language.redeclaration-redefinition-errors-2 Var: Fix null-pointer deref on redefinition of lambdas 2023-10-04 15:18:24 +02:00
language.redeclaration-redefinition-errors-3 Var: Fix null-pointer deref on redefinition of lambdas 2023-10-04 15:18:24 +02:00
language.redeclaration-redefinition-errors-4 Var: Fix null-pointer deref on redefinition of lambdas 2023-10-04 15:18:24 +02:00
language.redeclaration-redefinition-errors-5 Var: Fix null-pointer deref on redefinition of lambdas 2023-10-04 15:18:24 +02:00
language.redeclaration-redefinition-errors-6 Var: Fix null-pointer deref on redefinition of lambdas 2023-10-04 15:18:24 +02:00
language.redeclaration-redefinition-errors-7 Var/Func: Render function parameters using comma, not semicolon 2023-10-04 17:42:30 +02:00
language.redeclaration-redefinition-errors-8 Var/Func: Render function parameters using comma, not semicolon 2023-10-04 17:42:30 +02:00
language.redeclaration-redefinition-errors-9 Var/Func: Render function parameters using comma, not semicolon 2023-10-04 17:42:30 +02:00
language.redeclaration-redefinition-errors-10 Var/Func: Render function parameters using comma, not semicolon 2023-10-04 17:42:30 +02:00
language.redeclaration-redefinition-errors-11 Var/Func: Render function parameters using comma, not semicolon 2023-10-04 17:42:30 +02:00
language.redef-global-function
language.redef-missing-type parse.y: Improve error reporting of type redef 2023-02-21 11:58:33 +01:00
language.redef-missing-type-2 parse.y: Improve error reporting of type redef 2023-02-21 11:58:33 +01:00
language.redef-missing-type-3 parse.y: Improve error reporting of type redef 2023-02-21 11:58:33 +01:00
language.redef-missing-type-4 parse.y: Improve error reporting of type redef 2023-02-21 11:58:33 +01:00
language.redef-missing-type-5 parse.y: Improve error reporting of type redef 2023-02-21 11:58:33 +01:00
language.redef-missing-type-6 parse.y: Improve error reporting of type redef 2023-02-21 11:58:33 +01:00
language.redef-same-prefixtable-idx Change table initialization deprecation to error 2023-06-14 10:07:23 -07:00
language.redef-vector
language.returnwhen
language.set Support JSON roundtripping via to_json()/from_json() for patterns 2024-07-02 14:46:16 -07:00
language.set-iteration Fix &ordered attribute not preserved in table initializer assignments 2025-06-04 17:07:34 +08:00
language.set-opt-record-index
language.set-type-checking
language.set-vector-index
language.short-circuit
language.sizeof Fix port/enum values SizeOf not being a count 2024-09-17 10:55:45 -04:00
language.sizeof-any
language.skip-opt1 BTests & baselines for testing selective skipping of script optimization 2025-09-23 09:05:40 -07:00
language.skip-opt2 BTests & baselines for testing selective skipping of script optimization 2025-09-23 09:05:40 -07:00
language.skip-opt3 BTests & baselines for testing selective skipping of script optimization 2025-09-23 09:05:40 -07:00
language.smith-waterman-test Fix smith-waterman sorting to follow correct Compare semantics 2023-04-30 11:54:08 -07:00
language.spurious-table-expires fix for needing to always flush optimization information for identifiers 2024-01-15 15:03:56 +01:00
language.string
language.string-indexing
language.strings
language.subnet
language.subnet-errors
language.switch-error-mixed
language.switch-incomplete
language.switch-statement
language.switch-type-cast-fallthrough-error
language.switch-types
language.switch-types-error-duplicate
language.switch-types-error-unsupported
language.switch-types-vars
language.table Support table deserialization in from_json() 2024-07-02 14:46:16 -07:00
language.table-aggr-init-type-check
language.table-default-insert Add &default_insert attribute for tables 2023-08-04 12:30:36 +02:00
language.table-default-insert-copy Add &default_insert attribute for tables 2023-08-04 12:30:36 +02:00
language.table-default-insert-errors Add &default_insert attribute for tables 2023-08-04 12:30:36 +02:00
language.table-default-insert-errors-2 Add &default_insert attribute for tables 2023-08-04 12:30:36 +02:00
language.table-default-insert-errors-3 Add &default_insert attribute for tables 2023-08-04 12:30:36 +02:00
language.table-default-insert-errors-4 BTest baseline update for more complete function/lambda names 2024-09-27 14:16:10 -07:00
language.table-default-insert-errors-5 BTest baseline update for more complete function/lambda names 2024-09-27 14:16:10 -07:00
language.table-default-insert-errors-6 Add &default_insert attribute for tables 2023-08-04 12:30:36 +02:00
language.table-default-insert-errors-7 Add &default_insert attribute for tables 2023-08-04 12:30:36 +02:00
language.table-default-record
language.table-index-unsupported-types
language.table-init
language.table-init-attrs
language.table-init-container-ctors
language.table-init-record-idx
language.table-init-record-idx-2
language.table-init-record-idx-3
language.table-init-record-idx-4
language.table-iterate-record-key-default CompositeHash: Skip record initialization when recovering vals 2023-09-08 13:02:34 +02:00
language.table-iterate-record-key-default-2 ID/Stmt: Introduce INIT_SKIP and use in ForStmt 2023-09-08 13:05:44 +02:00
language.table-iterate-record-key-default-3 ID/Stmt: Introduce INIT_SKIP and use in ForStmt 2023-09-08 13:05:44 +02:00
language.table-iteration Fix &ordered attribute not preserved in table initializer assignments 2025-06-04 17:07:34 +08:00
language.table-list-assign-type-check
language.table-nested-set-ordering
language.table-optional-subrecord-index
language.table-pattern-index
language.table-record-idx-redef
language.table-redef Change table initialization deprecation to error 2023-06-14 10:07:23 -07:00
language.table-redef-default
language.table-set-iterator-invalidation
language.table-type-checking
language.ternary-type-check
language.time
language.timeout
language.trailing-comma
language.trailing-comma-2
language.trailing-comma-error
language.trailing-comma-error-2
language.trailing-comma-error-3
language.trailing-comma-error-4
language.trailing-comma-error-5
language.trailing-comma-error-6
language.trailing-comma-error-7
language.trailing-comma-error-8
language.trailing-comma-error-9
language.trailing-comma-error-10
language.trailing-comma-error-11
language.trailing-comma-error-12
language.type-alias-error
language.type-cast-any
language.type-cast-error-dynamic BTest updates for latest ZAM maintenance 2023-11-10 09:57:35 +01:00
language.type-cast-error-static
language.type-cast-same
language.type-check-any
language.type-check-func-call
language.type-check-operator-in
language.type-check-vector
language.type-coerce-numerics
language.type-expr Change from_json to return an error rather than print it. 2025-04-23 15:56:12 -07:00
language.type-type-error
language.undeclared-alternate-event-hook-prototype Var/Func: Render function parameters using comma, not semicolon 2023-10-04 17:42:30 +02:00
language.undefined-delete-field
language.uninitialized-local Updates to BTest baselines due to previous BTest tweaks 2023-06-30 09:36:14 +02:00
language.uninitialized-local2 parse.y: Make out-of-scope use errors 2023-03-20 21:35:48 +01:00
language.unspecified types: Fix table() resulting in table_type->IsSet() == true 2024-11-06 13:28:57 +01:00
language.unterminated-pattern
language.unused-assignment
language.usage-analyzer UsageAnalyzer: Collect identifiers found in attributes as seeds 2023-08-01 15:46:10 +02:00
language.usage-analyzer-record-attributes UsageAnalyzer: Collect identifiers found in attributes as seeds 2023-08-01 15:46:10 +02:00
language.usage-analyzer-table-attributes UsageAnalyzer: Collect identifiers found in attributes as seeds 2023-08-01 15:46:10 +02:00
language.vector Expr: Fix folding of pattern values to support == and != 2024-12-16 10:56:02 +01:00
language.vector-any-append minor BTest reordering to diminish differences with script optimization 2023-09-01 12:17:06 -07:00
language.vector-coerce-expr
language.vector-coerce-expr2 BTest baseline update for more complete function/lambda names 2024-09-27 14:16:10 -07:00
language.vector-for-value
language.vector-hole-loop
language.vector-in-operator
language.vector-iterate-record-default CompositeHash: Skip record initialization when recovering vals 2023-09-08 13:02:34 +02:00
language.vector-iterate-record-default-2 ID/Stmt: Introduce INIT_SKIP and use in ForStmt 2023-09-08 13:05:44 +02:00
language.vector-list-init-records
language.vector-neg-index BTest to check for invalid negative vector indices 2023-06-14 17:35:08 -07:00
language.vector-of-enum
language.vector-of-enum-mismatch
language.vector-of-interval-arithmetic
language.vector-set-conversions Fix conversion with record types 2023-08-10 13:42:23 -07:00
language.vector-set-conversions-errors Add conversion between set and vector using 'as' keyword 2023-08-09 14:41:54 -07:00
language.vector-slice-assign
language.vector-type-checking BTest updates for ZAM regularization changes 2024-08-16 11:18:58 +02:00
language.vector-unspecified
language.void-errors Expr: Handle TYPE_VOID in SizeExpr and AssignExpr::Typecheck() 2024-03-07 11:24:28 +01:00
language.void-errors-2 Expr: Handle TYPE_VOID in SizeExpr and AssignExpr::Typecheck() 2024-03-07 11:24:28 +01:00
language.void-errors-3 Expr: Handle TYPE_VOID in SizeExpr and AssignExpr::Typecheck() 2024-03-07 11:24:28 +01:00
language.void-errors-4 Expr: Handle TYPE_VOID in SizeExpr and AssignExpr::Typecheck() 2024-03-07 11:24:28 +01:00
language.void-errors-5 added a space when rendering some expressions so they're more readable 2024-05-29 12:40:05 -07:00
language.void-errors-6 Expr: Handle TYPE_VOID in SizeExpr and AssignExpr::Typecheck() 2024-03-07 11:24:28 +01:00
language.void-errors-7 added a space when rendering some expressions so they're more readable 2024-05-29 12:40:05 -07:00
language.when Merge remote-tracking branch 'origin/topic/vern/script-opt-maint.Aug24' 2024-07-24 11:18:18 +02:00
language.when-aggregates Stmt: Error on deprecated when/local usage 2023-03-20 21:35:53 +01:00
language.when-capture-errors Updates to BTest baselines due to previous BTest tweaks 2023-06-30 09:36:14 +02:00
language.when-local-function-capture-error Check for valid identifier in WhenStmt::Describe 2024-04-10 16:20:36 -07:00
language.when-on-globals
language.when-order-of-eval
language.when-scope Fix for nested "when" statements leading to confusion over scoping 2023-07-05 17:10:38 -07:00
language.when-unitialized-rhs Updates to BTest baselines due to previous BTest tweaks 2023-06-30 09:36:14 +02:00
language.while
language.wrong-delete-field "add" and "delete" are now expressions rather than statements 2024-05-29 12:40:06 -07:00
language.wrong-record-extension
language.zeek_init
language.zeek_script_loaded
opt.basic Update btests for new local-only subnets 2025-01-09 22:16:42 -07:00
opt.coalescence BTest baseline update for more complete function/lambda names 2024-09-27 14:16:10 -07:00
opt.confluence-test BTests to catch regressions for recent ZAM fixes 2024-01-15 15:03:56 +01:00
opt.infinite-empty-loop fixes for ZAM's propagation of control flow information for some degenerate constructs 2024-11-08 15:34:21 +01:00
opt.no-coalescence BTest baseline update for more complete function/lambda names 2024-09-27 14:16:10 -07:00
opt.null-inline fixes for ZAM's propagation of control flow information for some degenerate constructs 2024-11-08 15:34:21 +01:00
opt.opt-files BTest baseline update for more complete function/lambda names 2024-09-27 14:16:10 -07:00
opt.opt-files2 BTest baseline update for more complete function/lambda names 2024-09-27 14:16:10 -07:00
opt.opt-files3 BTest baseline update for more complete function/lambda names 2024-09-27 14:16:10 -07:00
opt.opt-func BTest baseline update for more complete function/lambda names 2024-09-27 14:16:10 -07:00
opt.opt-func2 BTest baseline update for more complete function/lambda names 2024-09-27 14:16:10 -07:00
opt.opt-func3 BTest baseline update for more complete function/lambda names 2024-09-27 14:16:10 -07:00
opt.opt-no-files script optimization for record operations sourced (in part) from other records 2024-06-24 09:38:37 +02:00
opt.opt-no-func script optimization for record operations sourced (in part) from other records 2024-06-24 09:38:37 +02:00
opt.opt-no-func2 script optimization for record operations sourced (in part) from other records 2024-06-24 09:38:37 +02:00
opt.opt-skip-files BTests & baselines for testing selective skipping of script optimization 2025-09-23 09:05:40 -07:00
opt.opt-skip-funcs BTests & baselines for testing selective skipping of script optimization 2025-09-23 09:05:40 -07:00
opt.opt-skip-other BTests & baselines for testing selective skipping of script optimization 2025-09-23 09:05:40 -07:00
opt.pure-inlining BTest baseline update for more complete function/lambda names 2024-09-27 14:16:10 -07:00
opt.regress-aggr-change-in-loop fix for ZAM optimization when an aggregate is modified inside of a loop 2025-05-09 15:01:55 -07:00
opt.regress-any ZAM fixes for assignments involving "any" record fields 2024-11-11 09:19:54 +01:00
opt.regress-any-leak fixes for (mostly ZAM) vector operation issues found by ASAN 2024-11-11 09:19:54 +01:00
opt.regress-constant-prop fix for error in ZAM's constant propagation logic 2025-07-04 16:05:46 -07:00
opt.regress-field-assign-in-op fix for ZAM optimization of assigning a record field to result of "in" operation 2024-12-17 19:49:43 -08:00
opt.regress-inlining-temps fixed incorrect ZAM optimization of expressions seen in single-statement inlined functions 2025-04-29 14:29:07 -07:00
opt.regress-missing-fields fixes for specialized ZAM operations needing to check whether record fields exist 2025-07-30 08:36:04 +02:00
opt.regress-record-multi-assign fix for crash when interpreting transformed ASTs that include multi-field record assignments/additions 2025-05-30 09:44:26 -07:00
opt.regress-set-op-opt ZAM optimizer fix for += / -= set operations 2025-07-09 13:40:33 -07:00
opt.regress-vector-mismatch fixes for (mostly ZAM) vector operation issues found by ASAN 2024-11-11 09:19:54 +01:00
opt.table-choose BTests to catch regressions for recent ZAM fixes 2024-01-15 15:03:56 +01:00
opt.vector-any-concretize1 BTests to catch regressions for recent ZAM fixes 2024-01-15 15:03:56 +01:00
opt.vector-any-concretize2 BTests to catch regressions for recent ZAM fixes 2024-01-15 15:03:56 +01:00
opt.vector-loop-managed Merge remote-tracking branch 'origin/topic/vern/zam-vector-loop-leak' 2024-11-08 15:32:57 +01:00
opt.ZAM-bif-tracking BTest updates for script optimization tracking of BiFs 2025-09-03 11:19:38 -07:00
plugins.api-plugin btest/plugin: Add plugin testing enum identifiers 2025-04-04 15:36:42 +02:00
plugins.bifs-and-scripts
plugins.bifs-and-scripts-install
plugins.bifs-and-scripts-install-delete-source tests: Add regression tests for zeek/cmake#61 2023-02-24 19:37:52 +01:00
plugins.binpac-flowbuffer-frame-length
plugins.conflict-plugin
plugins.connkey ConnKey: Extend DoPopulateConnIdVal() with ctx 2025-07-03 18:19:46 +02:00
plugins.debug-streams Sort streams in "-B help" output, and match case-insensitively throughout 2024-11-15 12:50:13 -08:00
plugins.doctest-disabled
plugins.doctest-supported
plugins.doctest-unsupported
plugins.duplicate-pktsrc plugin/Manager: Warn when plugin with the same name is found 2023-06-14 17:36:18 +02:00
plugins.enum-bif-plugin scan.l: Fix @load-plugin scripts loading 2025-03-04 09:35:00 +01:00
plugins.file btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
plugins.func-hook
plugins.hooks Remove length limiting on string fields for HTTP 2025-08-12 17:31:29 -07:00
plugins.init-hooks btest/plugins: Add a plugin testing Init and Done hooks 2024-11-22 13:37:03 +01:00
plugins.init-plugin
plugins.iosource-plugin Add a new plugin test with verbose IO source output 2023-03-21 09:15:39 +01:00
plugins.legacy-func-hook
plugins.logging-hooks BTest baseline update for more complete function/lambda names 2024-09-27 14:16:10 -07:00
plugins.meta-hook Cleanup unused baselines 2025-07-10 16:46:09 -04:00
plugins.packet-protocol Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
plugins.pktdumper
plugins.pktsrc Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
plugins.plugin-load-dependency
plugins.plugin-load-file-extended
plugins.plugin-nopatchversion
plugins.plugin-withpatchversion
plugins.protocol btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
plugins.publish-event-hook btest/plugin: Test for PublishEventHook() 2025-04-30 17:26:33 +02:00
plugins.publish-event-metadata Cleanup unused baselines 2025-07-10 16:46:09 -04:00
plugins.reader
plugins.reporter-hook
plugins.storage Add STORAGE_ prefixes for backends and serializers 2025-04-14 10:11:13 -07:00
plugins.tap-analyzer btest/tap-analyzer: Update existing test and add new one for UpdateConnVal() 2025-08-06 17:22:59 +02:00
plugins.tap-analyzer-conn-val btest/tap-analyzer: Update existing test and add new one for UpdateConnVal() 2025-08-06 17:22:59 +02:00
plugins.unprocessed-packet-hook
plugins.writer Analyzer failure logging: tweaks and test fixes 2025-06-03 15:56:42 +01:00
scripts.base.files.data_event.basic
scripts.base.files.entropy.basic
scripts.base.files.extract.limit btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.files.extract.limit-large-hole Add extract_limit_includes_missing option for file extraction 2023-09-14 12:11:42 -07:00
scripts.base.files.mime.iso-9660 signatures: Fix ISO 9960 signature 2024-02-22 12:37:40 +01:00
scripts.base.files.mime.vnd.ms-cab-compressed-multi-conn test-all-policy: Do not load iso-9660.zeek 2024-02-26 17:58:26 +01:00
scripts.base.files.pe.basic btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.files.x509.1999 Change x509 not_before/not_after to not be based on local timezone 2025-06-18 13:21:35 +01:00
scripts.base.files.x509.caching-hook Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.files.x509.disable-certificate-events-known-certs Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.files.x509.disable-certificate-events-known-certs-2 Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.files.x509.disable-certificate-events-known-certs-3 Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.files.x509.event-caching Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.files.x509.files btest/files/x509/files: Sort analyzers in baseline 2025-04-10 15:02:44 +02:00
scripts.base.files.x509.log-caching Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.files.x509.log-caching-cluster Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.files.x509.log-caching-disabled-cluster Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.files.x509.signed_certificate_timestamp
scripts.base.files.x509.signed_certificate_timestamp_ocsp
scripts.base.files.x509.tbs_sig_alg Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.files.x509.x509_check_cert_hostname
scripts.base.frameworks.analyzer.disabled-packet-analyzers
scripts.base.frameworks.analyzer.dpd-logging-configuration DPD: change policy script for service violation logging; add NEWS 2025-02-06 18:56:30 +00:00
scripts.base.frameworks.analyzer.dpd-logging-configuration-2 Fix policy/protocols/conn/failed-service-logging.zeek 2025-05-06 13:37:12 +01:00
scripts.base.frameworks.analyzer.request-analyzer Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.frameworks.analyzer.request-response-protocol-differences Add two protocol mismatch testcases 2025-03-04 15:38:20 +00:00
scripts.base.frameworks.analyzer.schedule-analyzer btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.frameworks.analyzer.tags
scripts.base.frameworks.analyzer.toggle-packet-analyzers ip4_hdr: Add DF, MF, offset and sum fields 2023-04-29 17:09:43 +02:00
scripts.base.frameworks.cluster.custom_pool_exclusivity btest/frameworks/cluster: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.cluster.custom_pool_limits btest/frameworks/cluster: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.cluster.forwarding btest/frameworks/cluster: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.cluster.leftover-log-rotation-multi-logger cluster/logger: Fix leftover-log-rotation in multi-logger setups 2023-06-13 10:47:20 +02:00
scripts.base.frameworks.cluster.log_distribution
scripts.base.frameworks.cluster.publish-hrw-type-check broker/messaging: Runtime type checks for pool 2023-04-19 19:30:46 +02:00
scripts.base.frameworks.cluster.start-it-up btest/frameworks/cluster: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.cluster.start-it-up-logger btest/frameworks/cluster: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.cluster.topic_distribution btest/frameworks/cluster: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.cluster.topic_distribution_bifs btest/frameworks/cluster: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.cluster.topic_distribution_make_event btest/frameworks/cluster: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.config.basic Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.frameworks.config.basic_cluster btest/frameworks/config: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.config.cluster_resend btest/frameworks/config: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.config.container-options
scripts.base.frameworks.config.missing-enum-value
scripts.base.frameworks.config.read_config Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.frameworks.config.read_config_cluster Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.frameworks.config.several-files Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.frameworks.config.updates Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.frameworks.config.weird
scripts.base.frameworks.control.configuration_update
scripts.base.frameworks.control.id_value
scripts.base.frameworks.file-analysis.actions.data_event btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.frameworks.file-analysis.bifs.enable-disable
scripts.base.frameworks.file-analysis.bifs.file_exists_lookup_file
scripts.base.frameworks.file-analysis.bifs.register_mime_type Update btest baselines to reflect the use of local address ranges. 2023-03-15 17:11:04 -07:00
scripts.base.frameworks.file-analysis.bifs.remove_action btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.frameworks.file-analysis.bifs.set_timeout_interval btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.frameworks.file-analysis.bifs.stop
scripts.base.frameworks.file-analysis.big-bof-buffer Update btest baselines to reflect the use of local address ranges. 2023-03-15 17:11:04 -07:00
scripts.base.frameworks.file-analysis.byteranges Update btest baselines to reflect the use of local address ranges. 2023-03-15 17:11:04 -07:00
scripts.base.frameworks.file-analysis.ftp btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.frameworks.file-analysis.http.get btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.frameworks.file-analysis.http.multipart btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.frameworks.file-analysis.http.partial-content btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.frameworks.file-analysis.http.pipeline btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.frameworks.file-analysis.http.post btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.frameworks.file-analysis.input.basic
scripts.base.frameworks.file-analysis.irc Add support for ircv3 tags 2025-07-28 14:06:33 -07:00
scripts.base.frameworks.file-analysis.log-files-event-flattening btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.frameworks.file-analysis.logging Update btest baselines to reflect the use of local address ranges. 2023-03-15 17:11:04 -07:00
scripts.base.frameworks.file-analysis.logging-input-analysis
scripts.base.frameworks.file-analysis.smtp btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.frameworks.input.bad_patterns
scripts.base.frameworks.input.basic
scripts.base.frameworks.input.bignumber
scripts.base.frameworks.input.binary
scripts.base.frameworks.input.config.basic
scripts.base.frameworks.input.config.enum-set
scripts.base.frameworks.input.config.errors
scripts.base.frameworks.input.config.spaces
scripts.base.frameworks.input.default
scripts.base.frameworks.input.empty-nested-record input/Manager: Ignore empty record types 2025-07-03 18:21:15 +02:00
scripts.base.frameworks.input.empty-values-hashing
scripts.base.frameworks.input.emptyvals
scripts.base.frameworks.input.errors input/Manager: Improve type checks of record fields with type any 2024-07-19 11:35:54 +02:00
scripts.base.frameworks.input.event BTest baseline update for more complete function/lambda names 2024-09-27 14:16:10 -07:00
scripts.base.frameworks.input.from_json Merge remote-tracking branch 'amazing-pp/topic/fupeng/from_json_bif' 2023-05-09 10:36:58 +02:00
scripts.base.frameworks.input.invalid-lines
scripts.base.frameworks.input.invalid-lines-duplicate Fix input error test nondeterminism 2024-10-02 13:26:41 -04:00
scripts.base.frameworks.input.invalidnumbers
scripts.base.frameworks.input.invalidset Better input framework error messages for unset non-optionals 2023-07-21 15:11:31 +01:00
scripts.base.frameworks.input.invalidtable Better input framework error messages for unset non-optionals 2023-07-21 15:11:31 +01:00
scripts.base.frameworks.input.invalidtext
scripts.base.frameworks.input.missing-enum
scripts.base.frameworks.input.missing-file
scripts.base.frameworks.input.missing-file-initially
scripts.base.frameworks.input.missing-table-value
scripts.base.frameworks.input.onecolumn-norecord
scripts.base.frameworks.input.onecolumn-record
scripts.base.frameworks.input.optional
scripts.base.frameworks.input.path-prefix.absolute-prefix
scripts.base.frameworks.input.path-prefix.absolute-prefix-2
scripts.base.frameworks.input.path-prefix.absolute-prefix-3
scripts.base.frameworks.input.path-prefix.absolute-source
scripts.base.frameworks.input.path-prefix.absolute-source-2
scripts.base.frameworks.input.path-prefix.absolute-source-3
scripts.base.frameworks.input.path-prefix.no-paths
scripts.base.frameworks.input.path-prefix.no-paths-2
scripts.base.frameworks.input.path-prefix.no-paths-3
scripts.base.frameworks.input.path-prefix.relative-prefix
scripts.base.frameworks.input.path-prefix.relative-prefix-2
scripts.base.frameworks.input.path-prefix.relative-prefix-3
scripts.base.frameworks.input.patterns
scripts.base.frameworks.input.port
scripts.base.frameworks.input.port-embedded
scripts.base.frameworks.input.predicate
scripts.base.frameworks.input.predicate-stream
scripts.base.frameworks.input.predicatemodify
scripts.base.frameworks.input.predicatemodifyandreread
scripts.base.frameworks.input.predicaterefusesecondsamerecord
scripts.base.frameworks.input.raw.basic BTest baseline update for more complete function/lambda names 2024-09-27 14:16:10 -07:00
scripts.base.frameworks.input.raw.execute BTest baseline update for more complete function/lambda names 2024-09-27 14:16:10 -07:00
scripts.base.frameworks.input.raw.executestdin
scripts.base.frameworks.input.raw.executestream
scripts.base.frameworks.input.raw.executestream-leftover input/Raw: Rework GetLine() 2024-10-09 14:21:07 -07:00
scripts.base.frameworks.input.raw.executestream-no-last-separator input/Raw: Rework GetLine() 2024-10-09 14:21:07 -07:00
scripts.base.frameworks.input.raw.executestream-slow input/Raw: Rework GetLine() 2024-10-09 14:21:07 -07:00
scripts.base.frameworks.input.raw.executestream-slow-long input/Raw: Rework GetLine() 2024-10-09 14:21:07 -07:00
scripts.base.frameworks.input.raw.long
scripts.base.frameworks.input.raw.offset
scripts.base.frameworks.input.raw.rereadraw btest/input/raw: Fix reread test 2023-05-22 11:06:54 +02:00
scripts.base.frameworks.input.raw.rereadraw2 input/Raw: Avoid reading file twice in MODE_REREAD 2023-05-22 11:06:25 +02:00
scripts.base.frameworks.input.raw.stderr
scripts.base.frameworks.input.raw.streamraw
scripts.base.frameworks.input.raw.streamtail
scripts.base.frameworks.input.raw.streamtail2
scripts.base.frameworks.input.repeat
scripts.base.frameworks.input.reread
scripts.base.frameworks.input.set
scripts.base.frameworks.input.set-event-reread
scripts.base.frameworks.input.set-event-stream
scripts.base.frameworks.input.setseparator
scripts.base.frameworks.input.setspecialcases
scripts.base.frameworks.input.sqlite.basic btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.frameworks.input.sqlite.error
scripts.base.frameworks.input.sqlite.port
scripts.base.frameworks.input.sqlite.types
scripts.base.frameworks.input.stream
scripts.base.frameworks.input.subrecord
scripts.base.frameworks.input.subrecord-event
scripts.base.frameworks.input.tableevent
scripts.base.frameworks.input.twotables
scripts.base.frameworks.input.unsupported_types
scripts.base.frameworks.input.windows
scripts.base.frameworks.intel.cluster-indicator-inserted intel: Add indicator_inserted and indicator_removed hooks 2025-06-02 09:50:48 +02:00
scripts.base.frameworks.intel.cluster-indicator-inserted-new-min-store intel: Add indicator_inserted and indicator_removed hooks 2025-06-02 09:50:48 +02:00
scripts.base.frameworks.intel.cluster-transparency btest/frameworks/intel: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.intel.cluster-transparency-with-proxy btest/frameworks/intel: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.intel.expire-item
scripts.base.frameworks.intel.filter-item
scripts.base.frameworks.intel.input-and-match
scripts.base.frameworks.intel.match-subnet
scripts.base.frameworks.intel.path-prefix.input-intel-absolute-prefixes
scripts.base.frameworks.intel.path-prefix.input-intel-relative-prefixes
scripts.base.frameworks.intel.path-prefix.input-prefix
scripts.base.frameworks.intel.path-prefix.no-paths
scripts.base.frameworks.intel.read-file-dist-cluster btest/frameworks/intel: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.intel.remove-item-cluster btest/frameworks/intel: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.intel.remove-non-existing Intel: Introduce Intel::seen_policy() hook 2024-01-25 12:22:47 +01:00
scripts.base.frameworks.intel.seen-policy Intel: Introduce Intel::seen_policy() hook 2024-01-25 12:22:47 +01:00
scripts.base.frameworks.intel.updated-match
scripts.base.frameworks.logging.adapt-filter Increase size of proto fields to uint16_t, add common default value 2024-11-13 11:25:46 -07:00
scripts.base.frameworks.logging.ascii-binary
scripts.base.frameworks.logging.ascii-double
scripts.base.frameworks.logging.ascii-empty Increase size of proto fields to uint16_t, add common default value 2024-11-13 11:25:46 -07:00
scripts.base.frameworks.logging.ascii-escape Increase size of proto fields to uint16_t, add common default value 2024-11-13 11:25:46 -07:00
scripts.base.frameworks.logging.ascii-escape-binary
scripts.base.frameworks.logging.ascii-escape-empty-str
scripts.base.frameworks.logging.ascii-escape-notset-str
scripts.base.frameworks.logging.ascii-escape-odd-url
scripts.base.frameworks.logging.ascii-escape-set-separator
scripts.base.frameworks.logging.ascii-gz BTest baseline update for more complete function/lambda names 2024-09-27 14:16:10 -07:00
scripts.base.frameworks.logging.ascii-json BTest baseline update for more complete function/lambda names 2024-09-27 14:16:10 -07:00
scripts.base.frameworks.logging.ascii-json-iso-timestamps
scripts.base.frameworks.logging.ascii-json-optional
scripts.base.frameworks.logging.ascii-json-utf8
scripts.base.frameworks.logging.ascii-line-like-comment
scripts.base.frameworks.logging.ascii-logdir Increase size of proto fields to uint16_t, add common default value 2024-11-13 11:25:46 -07:00
scripts.base.frameworks.logging.ascii-negative-ts logging/ascii/json: Make TS_MILLIS signed, add TS_MILLIS_UNSIGNED 2025-05-30 17:23:29 +02:00
scripts.base.frameworks.logging.ascii-options Increase size of proto fields to uint16_t, add common default value 2024-11-13 11:25:46 -07:00
scripts.base.frameworks.logging.ascii-timestamps
scripts.base.frameworks.logging.ascii-tsv Increase size of proto fields to uint16_t, add common default value 2024-11-13 11:25:46 -07:00
scripts.base.frameworks.logging.ascii-utf8-enabled
scripts.base.frameworks.logging.ascii-utf8-enabled-control-characters
scripts.base.frameworks.logging.ascii-utf8-enabled-set-separator-escape
scripts.base.frameworks.logging.attr
scripts.base.frameworks.logging.attr-extend
scripts.base.frameworks.logging.delay.basic logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.basic-2 logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.basic-3 logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.basic-4 logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.basic-5 logging/Manager: Implement DelayTokenType as an actual opaque 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.coerce logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.delay-cb logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.delay-cb-2 logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.delay-cb-3 logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.delay-cb-4 logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.delay-cb-5 logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.delay-cb-6 logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.delay-cb-redelay logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.delay-cb-redelay-2 logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.errors logging: Better error messages for invalid Log::delay() calls 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.errors-2 logging: Better error messages for invalid Log::delay() calls 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.errors-3 logging: Better error messages for invalid Log::delay() calls 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.errors-4 logging/Manager: Implement DelayTokenType as an actual opaque 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.errors-5 logging/Manager: Implement DelayTokenType as an actual opaque 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.errors-6 logging: Better error messages for invalid Log::delay() calls 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.example btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.frameworks.logging.delay.multi-write logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.nested-write logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.nested-write-2 logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.queue-setter logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.queue-setter-2 logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.queue-size logging: Implement get_delay_queue_size() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.queue-test logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.queue-test-2 logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.queue-test-3 logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.queue-test-4 logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.queue-test-5 logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.queue-test-6 logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.queue-test-7 logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.static-errors Add options to filter at the stream level as well as globally 2025-08-12 17:31:28 -07:00
scripts.base.frameworks.logging.delay.static-errors-2 Add options to filter at the stream level as well as globally 2025-08-12 17:31:28 -07:00
scripts.base.frameworks.logging.delay.static-errors-3 Add options to filter at the stream level as well as globally 2025-08-12 17:31:28 -07:00
scripts.base.frameworks.logging.delay.static-errors-4 Add options to filter at the stream level as well as globally 2025-08-12 17:31:28 -07:00
scripts.base.frameworks.logging.empty-event Increase size of proto fields to uint16_t, add common default value 2024-11-13 11:25:46 -07:00
scripts.base.frameworks.logging.enable-stream Increase size of proto fields to uint16_t, add common default value 2024-11-13 11:25:46 -07:00
scripts.base.frameworks.logging.event-groups-integration
scripts.base.frameworks.logging.events btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.frameworks.logging.exclude Increase size of proto fields to uint16_t, add common default value 2024-11-13 11:25:46 -07:00
scripts.base.frameworks.logging.field-extension Move Conn::set_conn() from connection_state_remove to new_connection 2025-07-29 09:11:57 +01:00
scripts.base.frameworks.logging.field-extension-cluster btest/frameworks/logging: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.logging.field-extension-cluster-error btest/frameworks/logging: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.logging.field-extension-complex Move Conn::set_conn() from connection_state_remove to new_connection 2025-07-29 09:11:57 +01:00
scripts.base.frameworks.logging.field-extension-include-exclude Move Conn::set_conn() from connection_state_remove to new_connection 2025-07-29 09:11:57 +01:00
scripts.base.frameworks.logging.field-extension-invalid Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.frameworks.logging.field-extension-optional Move Conn::set_conn() from connection_state_remove to new_connection 2025-07-29 09:11:57 +01:00
scripts.base.frameworks.logging.field-extension-table
scripts.base.frameworks.logging.field-length-limiting Add a weird that gets emitted when strings/containers are over the limits 2025-08-12 17:31:28 -07:00
scripts.base.frameworks.logging.field-length-limiting-2 Add a weird that gets emitted when strings/containers are over the limits 2025-08-12 17:31:28 -07:00
scripts.base.frameworks.logging.field-length-limiting-3 Add a weird that gets emitted when strings/containers are over the limits 2025-08-12 17:31:28 -07:00
scripts.base.frameworks.logging.field-length-limiting-4 Add a weird that gets emitted when strings/containers are over the limits 2025-08-12 17:31:28 -07:00
scripts.base.frameworks.logging.field-length-limiting-5 Add a weird that gets emitted when strings/containers are over the limits 2025-08-12 17:31:28 -07:00
scripts.base.frameworks.logging.field-length-limiting-6 Add a weird that gets emitted when strings/containers are over the limits 2025-08-12 17:31:28 -07:00
scripts.base.frameworks.logging.field-length-limiting-stream Add options to filter at the stream level as well as globally 2025-08-12 17:31:28 -07:00
scripts.base.frameworks.logging.field-length-limiting-stream-2 Add options to filter at the stream level as well as globally 2025-08-12 17:31:28 -07:00
scripts.base.frameworks.logging.field-length-limiting-stream-3 Add options to filter at the stream level as well as globally 2025-08-12 17:31:28 -07:00
scripts.base.frameworks.logging.field-length-limiting-stream-4 Add options to filter at the stream level as well as globally 2025-08-12 17:31:28 -07:00
scripts.base.frameworks.logging.field-length-limiting-stream-5 Add options to filter at the stream level as well as globally 2025-08-12 17:31:28 -07:00
scripts.base.frameworks.logging.field-length-limiting-stream-6 Add options to filter at the stream level as well as globally 2025-08-12 17:31:28 -07:00
scripts.base.frameworks.logging.field-name-map Move Conn::set_conn() from connection_state_remove to new_connection 2025-07-29 09:11:57 +01:00
scripts.base.frameworks.logging.field-name-map2 Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.frameworks.logging.file
scripts.base.frameworks.logging.hooks
scripts.base.frameworks.logging.hooks-2
scripts.base.frameworks.logging.hooks-3
scripts.base.frameworks.logging.hooks-4
scripts.base.frameworks.logging.hooks-5
scripts.base.frameworks.logging.hooks-6
scripts.base.frameworks.logging.hooks-7
scripts.base.frameworks.logging.hooks-8
scripts.base.frameworks.logging.hooks-9
scripts.base.frameworks.logging.hooks-10 Tighten the scripts.base.frameworks.logging.hooks test 2023-02-01 15:12:20 -08:00
scripts.base.frameworks.logging.hooks-11
scripts.base.frameworks.logging.include Increase size of proto fields to uint16_t, add common default value 2024-11-13 11:25:46 -07:00
scripts.base.frameworks.logging.length-checking Return weird if a log line is over a configurable size limit 2025-07-21 09:14:52 -07:00
scripts.base.frameworks.logging.none-debug
scripts.base.frameworks.logging.path-func Increase size of proto fields to uint16_t, add common default value 2024-11-13 11:25:46 -07:00
scripts.base.frameworks.logging.path-func-column-demote
scripts.base.frameworks.logging.pred Increase size of proto fields to uint16_t, add common default value 2024-11-13 11:25:46 -07:00
scripts.base.frameworks.logging.print-log
scripts.base.frameworks.logging.print-log-stdout
scripts.base.frameworks.logging.remove Increase size of proto fields to uint16_t, add common default value 2024-11-13 11:25:46 -07:00
scripts.base.frameworks.logging.rotate
scripts.base.frameworks.logging.rotate-ascii-logdir-leftover-log-rotation Remove LogAscii::logdir (6.1 deprecation) 2023-06-14 10:07:22 -07:00
scripts.base.frameworks.logging.rotate-custom
scripts.base.frameworks.logging.rotate-custom-fmt-func
scripts.base.frameworks.logging.rotate-custom-fmt-func-bad logging/Manager: Fix crash for rotation format function not returning 2023-04-13 09:23:51 +02:00
scripts.base.frameworks.logging.rotate-default-logdir
scripts.base.frameworks.logging.rotate-default-logdir-leftover-log-rotation-shadow-files
scripts.base.frameworks.logging.rotate-default-logdir-leftover-log-rotation-stale-shadow-files
scripts.base.frameworks.logging.rotate-leftover-log-rotation-shadow-files
scripts.base.frameworks.logging.rotate-leftover-log-rotation-shadow-files-postprocessor-errors logging/Ascii: Fix abort() for non-existing postrotation functions 2025-06-16 14:55:49 +02:00
scripts.base.frameworks.logging.rotate-pp-env logging: Support rotation_postprocessor_command_env 2023-04-17 13:10:14 +00:00
scripts.base.frameworks.logging.scope_sep Move Conn::set_conn() from connection_state_remove to new_connection 2025-07-29 09:11:57 +01:00
scripts.base.frameworks.logging.scope_sep_and_field_name_map Move Conn::set_conn() from connection_state_remove to new_connection 2025-07-29 09:11:57 +01:00
scripts.base.frameworks.logging.sqlite.default-logdir
scripts.base.frameworks.logging.sqlite.error
scripts.base.frameworks.logging.sqlite.pragma Test synchronous/journal mode options for SQLite log writer 2024-11-26 12:26:38 +00:00
scripts.base.frameworks.logging.sqlite.set
scripts.base.frameworks.logging.sqlite.simultaneous-writes BTest baseline update for more complete function/lambda names 2024-09-27 14:16:10 -07:00
scripts.base.frameworks.logging.sqlite.types BTest baseline update for more complete function/lambda names 2024-09-27 14:16:10 -07:00
scripts.base.frameworks.logging.sqlite.wikipedia Update btests for new local-only subnets 2025-01-09 22:16:42 -07:00
scripts.base.frameworks.logging.stdout Increase size of proto fields to uint16_t, add common default value 2024-11-13 11:25:46 -07:00
scripts.base.frameworks.logging.telemetry Add metrics to track string and container fields limited by length 2025-08-12 17:31:28 -07:00
scripts.base.frameworks.logging.test-logging Increase size of proto fields to uint16_t, add common default value 2024-11-13 11:25:46 -07:00
scripts.base.frameworks.logging.types BTest baseline update for more complete function/lambda names 2024-09-27 14:16:10 -07:00
scripts.base.frameworks.logging.unset-record
scripts.base.frameworks.logging.vec
scripts.base.frameworks.logging.writer-path-conflict
scripts.base.frameworks.netcontrol.acld
scripts.base.frameworks.netcontrol.acld-hook
scripts.base.frameworks.netcontrol.basic
scripts.base.frameworks.netcontrol.basic-cluster
scripts.base.frameworks.netcontrol.broker
scripts.base.frameworks.netcontrol.delete-internal-state
scripts.base.frameworks.netcontrol.duplicate
scripts.base.frameworks.netcontrol.find-rules
scripts.base.frameworks.netcontrol.hook
scripts.base.frameworks.netcontrol.multiple
scripts.base.frameworks.netcontrol.openflow
scripts.base.frameworks.netcontrol.packetfilter Move Conn::set_conn() from connection_state_remove to new_connection 2025-07-29 09:11:57 +01:00
scripts.base.frameworks.netcontrol.quarantine-openflow
scripts.base.frameworks.netcontrol.rule-added-hook Netcontrol: add rule_added_policy 2024-02-05 18:52:27 +00:00
scripts.base.frameworks.netcontrol.rule-added-hook-2 logging: Dedicated log flush timer 2024-09-27 15:30:35 +02:00
scripts.base.frameworks.netcontrol.timeout
scripts.base.frameworks.notice.action-email
scripts.base.frameworks.notice.action-email-admin
scripts.base.frameworks.notice.action-email-custom-address
scripts.base.frameworks.notice.action-email-multiple
scripts.base.frameworks.notice.action-page
scripts.base.frameworks.notice.action-page-with-hostnames
scripts.base.frameworks.notice.cluster btest/frameworks/notice: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.notice.file-info-multiple-conns btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.frameworks.notice.file-info-no-conns
scripts.base.frameworks.notice.mail-alarms
scripts.base.frameworks.notice.suppression
scripts.base.frameworks.notice.suppression-cluster btest/frameworks/notice: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.openflow.broker-basic
scripts.base.frameworks.openflow.log-basic
scripts.base.frameworks.openflow.log-cluster btest remaining: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.openflow.ryu-basic
scripts.base.frameworks.reporter.disable-stderr
scripts.base.frameworks.reporter.stderr
scripts.base.frameworks.software.version-parsing
scripts.base.frameworks.storage.compound-types Completely rework return values from storage operations 2025-03-18 10:20:33 -07:00
scripts.base.frameworks.storage.redis-async Fix swapped storage metrics names 2025-07-23 13:14:46 -07:00
scripts.base.frameworks.storage.redis-async-reading-pcap Completely rework return values from storage operations 2025-03-18 10:20:33 -07:00
scripts.base.frameworks.storage.redis-auth Redis: Add support for sending AUTH commands during connection 2025-06-03 11:38:38 -07:00
scripts.base.frameworks.storage.redis-cluster Completely rework return values from storage operations 2025-03-18 10:20:33 -07:00
scripts.base.frameworks.storage.redis-disconnect Add flag to force synchronous mode when calling storage script-land functions 2025-07-23 13:14:34 -07:00
scripts.base.frameworks.storage.redis-erase Redis: Fix sync erase, add btest for it 2025-03-18 10:20:34 -07:00
scripts.base.frameworks.storage.redis-error-handling Redis: return proper error if connection fails 2025-05-23 12:13:13 -07:00
scripts.base.frameworks.storage.redis-expiration Redis: Fix thread-contention issues with Expire(), add more tests 2025-03-18 10:20:33 -07:00
scripts.base.frameworks.storage.redis-forced-sync Fix swapped storage metrics names 2025-07-23 13:14:46 -07:00
scripts.base.frameworks.storage.redis-native-expiration Redis: Fix thread-contention issues with Expire(), add more tests 2025-03-18 10:20:33 -07:00
scripts.base.frameworks.storage.redis-sync Fix swapped storage metrics names 2025-07-23 13:14:46 -07:00
scripts.base.frameworks.storage.sqlite-basic Add flag to force synchronous mode when calling storage script-land functions 2025-07-23 13:14:34 -07:00
scripts.base.frameworks.storage.sqlite-basic-reading-pcap Completely rework return values from storage operations 2025-03-18 10:20:33 -07:00
scripts.base.frameworks.storage.sqlite-basic-sync-in-when Add flag to force synchronous mode when calling storage script-land functions 2025-07-23 13:14:34 -07:00
scripts.base.frameworks.storage.sqlite-cluster Add expiration to sqlite-cluster.btest 2025-06-05 10:21:50 -07:00
scripts.base.frameworks.storage.sqlite-erase Add flag to force synchronous mode when calling storage script-land functions 2025-07-23 13:14:34 -07:00
scripts.base.frameworks.storage.sqlite-error-handling Add Storage::is_connected BIF 2025-05-07 08:13:16 -07:00
scripts.base.frameworks.storage.sqlite-expiration SQLite: Reset expiration time on overwrite 2025-06-30 14:41:10 -07:00
scripts.base.frameworks.storage.sqlite-expiration-implicit Make PUT on SQLite backend implicitly overwrite expired entries 2025-07-15 15:50:43 -07:00
scripts.base.frameworks.storage.sqlite-metrics Add SQLite page_count and file_size metrics 2025-07-18 14:28:04 -07:00
scripts.base.frameworks.storage.sqlite-overwriting Prefix sqlite-based btests with sqlite- to match redis tests 2025-05-21 09:38:27 -07:00
scripts.base.frameworks.sumstats.basic
scripts.base.frameworks.sumstats.basic-cluster btest/frameworks/sumstats: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.sumstats.cluster-intermediate-update btest/frameworks/sumstats: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.sumstats.final-epoch sumstat/non-cluster: Move last epoch processing to zeek_done() 2024-11-18 15:58:01 +01:00
scripts.base.frameworks.sumstats.last-cluster btest/frameworks/sumstats: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.sumstats.manual-epoch
scripts.base.frameworks.sumstats.manual-epoch-cluster btest/frameworks/sumstats: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.sumstats.on-demand
scripts.base.frameworks.sumstats.on-demand-cluster btest/frameworks/sumstats: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.sumstats.sample
scripts.base.frameworks.sumstats.sample-cluster btest/frameworks/sumstats: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.sumstats.thresholding
scripts.base.frameworks.sumstats.topk
scripts.base.frameworks.sumstats.topk-cluster btest/frameworks/sumstats: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.telemetry.basic Fix ordering of telemtry metrics when running under test 2025-07-18 14:28:04 -07:00
scripts.base.frameworks.telemetry.conn-duration-histogram Change all instruments to only handle doubles 2024-05-31 13:36:37 -07:00
scripts.base.frameworks.telemetry.event-handler-invocations Change all instruments to only handle doubles 2024-05-31 13:36:37 -07:00
scripts.base.frameworks.telemetry.internal-metrics Fix ordering of telemtry metrics when running under test 2025-07-18 14:28:04 -07:00
scripts.base.frameworks.telemetry.process-collect Add process_start_time_seconds and process_pid metrics 2025-07-24 10:39:14 -07:00
scripts.base.frameworks.telemetry.sync telemetry: Invoke Telemetry::sync() only at scrape/collection time 2024-10-22 18:49:11 +02:00
scripts.base.frameworks.telemetry.sync-collect telemetry: Invoke Telemetry::sync() only at scrape/collection time 2024-10-22 18:49:11 +02:00
scripts.base.frameworks.telemetry.sync-warnings telemetry: Invoke Telemetry::sync() only at scrape/collection time 2024-10-22 18:49:11 +02:00
scripts.base.misc.find-filtered-trace
scripts.base.misc.installation
scripts.base.misc.version Remove unneeded @loads from base/misc/version.zeek 2024-12-06 15:18:05 -08:00
scripts.base.misc.version-2
scripts.base.protocols.arp.bad
scripts.base.protocols.arp.basic
scripts.base.protocols.arp.linuxsll
scripts.base.protocols.arp.radiotap
scripts.base.protocols.arp.wlanmon
scripts.base.protocols.bittorrent.tracker btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.conn.conn_state-RST-behavior
scripts.base.protocols.conn.contents-default-extract
scripts.base.protocols.conn.new_connection_contents Add support for ircv3 tags 2025-07-28 14:06:33 -07:00
scripts.base.protocols.conn.polling btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.conn.removal-hooks btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.conn.threshold Add support for ircv3 tags 2025-07-28 14:06:33 -07:00
scripts.base.protocols.conn.threshold-delete
scripts.base.protocols.dce-rpc.context
scripts.base.protocols.dce-rpc.dce-rpc-backing-discard dce-rpc: Test cases for unbounded state growth 2023-06-30 15:14:35 +02:00
scripts.base.protocols.dce-rpc.dce-rpc-backing-size dce-rpc: Test cases for unbounded state growth 2023-06-30 15:14:35 +02:00
scripts.base.protocols.dce-rpc.dce_rpc_netlogon
scripts.base.protocols.dce-rpc.dce_rpc_ntlm
scripts.base.protocols.dce-rpc.mapi
scripts.base.protocols.dce-rpc.ntlm-empty-av-pair-seq Add proto to analyzer.log 2025-08-06 11:34:57 +01:00
scripts.base.protocols.dce-rpc.ntlm-unterminated-av-pair-seq Add proto to analyzer.log 2025-08-06 11:34:57 +01:00
scripts.base.protocols.dce-rpc.request-response-stub-events btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.dhcp.cluster btest remaining: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.protocols.dhcp.dhcp-ack-msg-types
scripts.base.protocols.dhcp.dhcp-all-msg-types Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.protocols.dhcp.dhcp-discover-msg-types
scripts.base.protocols.dhcp.dhcp-prevent-large-msgtypes
scripts.base.protocols.dhcp.dhcp-prevent-large-uids
scripts.base.protocols.dhcp.dhcp-sub-opts
scripts.base.protocols.dhcp.dhcp-time-nameserver-events
scripts.base.protocols.dhcp.hw-type0
scripts.base.protocols.dhcp.inform
scripts.base.protocols.dnp3.dnp3_del_measure
scripts.base.protocols.dnp3.dnp3_en_spon
scripts.base.protocols.dnp3.dnp3_file_del
scripts.base.protocols.dnp3.dnp3_file_read
scripts.base.protocols.dnp3.dnp3_file_write
scripts.base.protocols.dnp3.dnp3_link_only
scripts.base.protocols.dnp3.dnp3_read
scripts.base.protocols.dnp3.dnp3_rec_time
scripts.base.protocols.dnp3.dnp3_select_operate
scripts.base.protocols.dnp3.dnp3_udp_en_spon
scripts.base.protocols.dnp3.dnp3_udp_read
scripts.base.protocols.dnp3.dnp3_udp_select_operate
scripts.base.protocols.dnp3.dnp3_udp_write
scripts.base.protocols.dnp3.dnp3_write
scripts.base.protocols.dnp3.events
scripts.base.protocols.dns.ad-cd dns: Remove AD and CD flags from log 2023-03-16 10:09:27 +01:00
scripts.base.protocols.dns.binds Remove deprecations tagged for v8.1 2025-08-12 10:19:03 -07:00
scripts.base.protocols.dns.caa
scripts.base.protocols.dns.dns-edns-cookie
scripts.base.protocols.dns.dns-edns-ecs
scripts.base.protocols.dns.dns-edns-tcp-keepalive
scripts.base.protocols.dns.dns-key dns: Remove AD and CD flags from log 2023-03-16 10:09:27 +01:00
scripts.base.protocols.dns.dnskey Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.dns.dnssec DNS: Add Ed25519 and Ed448 enum values to parser 2023-11-17 19:56:47 +01:00
scripts.base.protocols.dns.ds Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.dns.duplicate-reponses dns: Remove AD and CD flags from log 2023-03-16 10:09:27 +01:00
scripts.base.protocols.dns.dynamic-update Add weird for unhandled opcodes in DNS analyzer 2024-09-04 13:01:24 -07:00
scripts.base.protocols.dns.ech Parse SVCB/HTTPS SvcParams list 2025-09-03 09:53:55 +03:00
scripts.base.protocols.dns.edns-rcode Fix parsing of EDNS rcode 2025-07-24 14:57:00 +01:00
scripts.base.protocols.dns.event-handler-warning Raise warnings when for DNS events that are not raised due to dns_skip_all_addl 2025-01-07 17:46:27 +00:00
scripts.base.protocols.dns.flip dns: Remove AD and CD flags from log 2023-03-16 10:09:27 +01:00
scripts.base.protocols.dns.hinfo Parse DNSSEC AD and CD bits 2023-03-13 14:35:06 -07:00
scripts.base.protocols.dns.https Parse SVCB/HTTPS SvcParams list 2025-09-03 09:53:55 +03:00
scripts.base.protocols.dns.huge-ttl
scripts.base.protocols.dns.loc dns: Remove AD and CD flags from log 2023-03-16 10:09:27 +01:00
scripts.base.protocols.dns.multiple-txt-strings dns: Remove AD and CD flags from log 2023-03-16 10:09:27 +01:00
scripts.base.protocols.dns.naptr DNS: Implement NAPTR RR support 2025-06-24 17:43:27 +02:00
scripts.base.protocols.dns.nsec Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.dns.nsec3 Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.dns.nsec3param dns: Remove AD and CD flags from log 2023-03-16 10:09:27 +01:00
scripts.base.protocols.dns.rrsig Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.dns.spf dns: Remove AD and CD flags from log 2023-03-16 10:09:27 +01:00
scripts.base.protocols.dns.sshfp dns: Remove AD and CD flags from log 2023-03-16 10:09:27 +01:00
scripts.base.protocols.dns.svcb Parse SVCB/HTTPS SvcParams list 2025-09-03 09:53:55 +03:00
scripts.base.protocols.dns.tkey Add DNS TKEY event 2024-08-16 10:20:42 -04:00
scripts.base.protocols.dns.tsig
scripts.base.protocols.dns.wks dns: Remove AD and CD flags from log 2023-03-16 10:09:27 +01:00
scripts.base.protocols.dns.zero-responses dns: Remove AD and CD flags from log 2023-03-16 10:09:27 +01:00
scripts.base.protocols.finger.events btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.ftp.bad-adat-encoding
scripts.base.protocols.ftp.cwd-navigation Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.protocols.ftp.ftp-auth-tls btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.ftp.ftp-get-file-size btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.ftp.ftp-invalid-reply-code Add proto to analyzer.log 2025-08-06 11:34:57 +01:00
scripts.base.protocols.ftp.ftp-ipv4 btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.ftp.ftp-ipv6 btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.ftp.ftp-max-arg-length btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.ftp.ftp-max-command-length Settle on analyzer.log for the dpd.log replacement 2025-06-03 17:33:36 +01:00
scripts.base.protocols.ftp.ftp-max-pending-commands Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.protocols.ftp.ftp-max-user-length btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.ftp.ftp-missing-reply-code Add proto to analyzer.log 2025-08-06 11:34:57 +01:00
scripts.base.protocols.ftp.ftp-missing-space-after-reply-code Add proto to analyzer.log 2025-08-06 11:34:57 +01:00
scripts.base.protocols.ftp.ftp-multiline-reply ftp/main: Skip get_pending_command() for intermediate reply lines 2023-03-23 13:50:36 +01:00
scripts.base.protocols.ftp.ftp-password-pass-command Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.protocols.ftp.ftp-password-pass-command-hidden Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.protocols.ftp.ftp-samba-retr ftp/main: Skip get_pending_command() for intermediate reply lines 2023-03-23 13:50:36 +01:00
scripts.base.protocols.ftp.gridftp Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.http.100-continue
scripts.base.protocols.http.101-switching-protocols btest/http: Explain switching-protocols test change as comment 2024-01-22 18:54:38 +01:00
scripts.base.protocols.http.all-headers-event
scripts.base.protocols.http.bad-content-range HTTP: Make Content-Range parsing more robust 2023-03-13 18:00:39 +01:00
scripts.base.protocols.http.build-url
scripts.base.protocols.http.concurrent-range-requests btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.http.content-range-gap
scripts.base.protocols.http.content-range-less-than-len
scripts.base.protocols.http.curl-http-09
scripts.base.protocols.http.deeply-nested-mime MIME: Cap nested MIME analysis depth to 100 2024-01-17 10:18:13 -07:00
scripts.base.protocols.http.entity-gap
scripts.base.protocols.http.entity-gap2
scripts.base.protocols.http.fake-content-length
scripts.base.protocols.http.flip-content-line-orig Optimize Conn::set_conn to minimize operations 2025-07-29 09:11:57 +01:00
scripts.base.protocols.http.flip-content-line-resp HTTP: Implement FlipRoles() 2024-07-04 11:38:33 +02:00
scripts.base.protocols.http.http-09 Add weird for unknown HTTP/0.9 request method 2023-03-10 15:45:11 -07:00
scripts.base.protocols.http.http-09-content-length-confusion http: Prevent request/response de-synchronization and unbounded state growth 2023-08-28 15:02:58 +02:00
scripts.base.protocols.http.http-11-request-then-cruft Add proto to analyzer.log 2025-08-06 11:34:57 +01:00
scripts.base.protocols.http.http-bad-request-with-version
scripts.base.protocols.http.http-basic-auth-colon http: fix password capture when enabled 2024-08-28 21:44:39 +02:00
scripts.base.protocols.http.http-basic-auth-extra-space Merge branch 'master' of https://github.com/progmboy/zeek 2023-06-27 18:21:34 +02:00
scripts.base.protocols.http.http-connect Make conn.log service field ordered 2025-01-30 16:59:44 +00:00
scripts.base.protocols.http.http-connect-with-header Make conn.log service field ordered 2025-01-30 16:59:44 +00:00
scripts.base.protocols.http.http-desynched http: Prevent request/response de-synchronization and unbounded state growth 2023-08-28 15:02:58 +02:00
scripts.base.protocols.http.http-dpd-large-req
scripts.base.protocols.http.http-filename
scripts.base.protocols.http.http-lower-case Ignore case when matching prefix in http analyzer 2025-04-25 10:33:11 -07:00
scripts.base.protocols.http.http-methods Add weird for unknown HTTP/0.9 request method 2023-03-10 15:45:11 -07:00
scripts.base.protocols.http.http-no-crlf Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.protocols.http.http-pending-state-growth http: Prevent request/response de-synchronization and unbounded state growth 2023-08-28 15:02:58 +02:00
scripts.base.protocols.http.http-pipelining
scripts.base.protocols.http.missing-http-entity
scripts.base.protocols.http.missing-zlib-header
scripts.base.protocols.http.multipart-body-length
scripts.base.protocols.http.multipart-extract
scripts.base.protocols.http.multipart-file-limit
scripts.base.protocols.http.no-uri
scripts.base.protocols.http.no-version Special case HTTP 0.9 early on 2023-03-10 09:52:34 -07:00
scripts.base.protocols.http.percent-end-of-line
scripts.base.protocols.http.upgrade-to-tcp btest/http: Demo StreamEvent analyzer with HTTP::upgrade_analyzers 2024-12-06 16:12:40 +01:00
scripts.base.protocols.http.version-mismatch Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.http.x-gzip
scripts.base.protocols.icmp.dnssl
scripts.base.protocols.imap.capabilities
scripts.base.protocols.imap.starttls Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.irc.basic Add support for ircv3 tags 2025-07-28 14:06:33 -07:00
scripts.base.protocols.irc.events Expand coverage of IRC analyzer with more commands 2025-07-28 14:13:55 -07:00
scripts.base.protocols.irc.longline
scripts.base.protocols.irc.names-weird
scripts.base.protocols.irc.starttls Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.krb.enc_part Add a revised script for detecting HTTP SQL injection, deprecate original 2025-05-20 16:24:20 +02:00
scripts.base.protocols.krb.kinit Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.krb.krb-service-name Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.krb.pa_data
scripts.base.protocols.krb.smb2_krb
scripts.base.protocols.krb.smb2_krb_nokeytab
scripts.base.protocols.krb.smb_gssapi
scripts.base.protocols.krb.tgs
scripts.base.protocols.ldap.add Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.protocols.ldap.aduser1 ldap: Add Sicily Authentication constants 2025-04-15 20:10:56 +02:00
scripts.base.protocols.ldap.attributes Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.protocols.ldap.basic Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.protocols.ldap.diff_port Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.protocols.ldap.invalid_credentials btest/ldap: Add regression test for #3919 2024-09-06 19:16:49 +02:00
scripts.base.protocols.ldap.ldap_substring_search ldap: Fix substring filter parsing and rendering 2024-01-05 16:06:23 +01:00
scripts.base.protocols.ldap.log_policy Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.protocols.ldap.sasl-encrypted Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.protocols.ldap.sasl-ntlm Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.protocols.ldap.sasl-scram-sha-512 Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.protocols.ldap.sasl-signed-clear Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.protocols.ldap.sasl-signed-clear-2 Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.protocols.ldap.sasl-srp-who-am-i Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.protocols.ldap.search_filter_extended ldap: Use scalar values in logs where appropriate 2024-01-03 11:57:31 +01:00
scripts.base.protocols.ldap.spnego-ntlmssp Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.protocols.ldap.starttls Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.protocols.ldap.who-am-i Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.protocols.modbus.coil_parsing_big btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.modbus.coil_parsing_small btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.modbus.events btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.modbus.exception_handling Fix issues with Modbus message logging 2024-10-30 13:12:27 +01:00
scripts.base.protocols.modbus.modbus_and_non_modbus_on_port_502 Analyzer failure logging: tweaks and test fixes 2025-06-03 15:56:42 +01:00
scripts.base.protocols.modbus.policy Fix issues with Modbus message logging 2024-10-30 13:12:27 +01:00
scripts.base.protocols.modbus.register_parsing btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.mount.basic Move c$service_violation to deprecated-dpd-log.zeek 2025-07-30 07:58:36 +01:00
scripts.base.protocols.mqtt.mqtt
scripts.base.protocols.mqtt.mqtt-payload-cap
scripts.base.protocols.mqtt.mqtt-payload-cap-dynamic
scripts.base.protocols.mysql.auth
scripts.base.protocols.mysql.caching_sha2_password mysql: Add mysql_auth_plugin, mysql_auth_more_data and mysql_auth_switch_request events 2024-07-25 11:53:41 +02:00
scripts.base.protocols.mysql.caching_sha2_password-after-auth-switch mysql: Add mysql_auth_plugin, mysql_auth_more_data and mysql_auth_switch_request events 2024-07-25 11:53:41 +02:00
scripts.base.protocols.mysql.caching_sha2_password-auth-switch-to-test-sha256_password mysql: Handle server connection phase separately from command phase 2024-08-13 22:06:25 +02:00
scripts.base.protocols.mysql.change-user-error mysql: Implement and test COM_CHANGE_USER 2024-08-14 10:20:01 +02:00
scripts.base.protocols.mysql.change-user-success mysql: Implement and test COM_CHANGE_USER 2024-08-14 10:20:01 +02:00
scripts.base.protocols.mysql.encrypted Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.mysql.encrypted-aws-rds Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.mysql.many-query-attr mysql: Support non-string query attributes 2024-07-25 11:53:41 +02:00
scripts.base.protocols.mysql.plain-aws-rds testing/mysql: Add traces recorded with a free-tier MySQL instance 2023-01-27 10:59:23 +01:00
scripts.base.protocols.mysql.query-attr Add support for "auth switch" and "query attrs" 2024-07-25 11:53:40 +02:00
scripts.base.protocols.mysql.query-attr-non-string mysql: Support non-string query attributes 2024-07-25 11:53:41 +02:00
scripts.base.protocols.mysql.selects_with_new_proto
scripts.base.protocols.mysql.show-engine-innodb-status MySQL: Fix endianness, introduce mysql_eof() event 2023-01-27 10:59:23 +01:00
scripts.base.protocols.mysql.wireshark MySQL: Fix endianness, introduce mysql_eof() event 2023-01-27 10:59:23 +01:00
scripts.base.protocols.ncp.event
scripts.base.protocols.ncp.frame_size_tuning
scripts.base.protocols.nfs.basic Move c$service_violation to deprecated-dpd-log.zeek 2025-07-30 07:58:36 +01:00
scripts.base.protocols.ntp.misordered-ntp Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.ntp.ntp Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.ntp.ntp-digest Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.ntp.ntp2 Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.ntp.ntp3 Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.ntp.ntpmode67
scripts.base.protocols.pop3.bad-list-retr-crafted Analyzer failure logging: tweaks and test fixes 2025-06-03 15:56:42 +01:00
scripts.base.protocols.pop3.basic Move Conn::set_conn() from connection_state_remove to new_connection 2025-07-29 09:11:57 +01:00
scripts.base.protocols.pop3.redis Analyzer failure logging: tweaks and test fixes 2025-06-03 15:56:42 +01:00
scripts.base.protocols.pop3.starttls Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.portmap.basic
scripts.base.protocols.postgresql.bad-backend-message Add proto to analyzer.log 2025-08-06 11:34:57 +01:00
scripts.base.protocols.postgresql.bad-startup-message postgresql: Initial parser implementation 2024-09-06 16:10:48 +02:00
scripts.base.protocols.postgresql.dump-events Move c$service_violation to deprecated-dpd-log.zeek 2025-07-30 07:58:36 +01:00
scripts.base.protocols.postgresql.http-on-port-5432 Analyzer failure logging: tweaks and test fixes 2025-06-03 15:56:42 +01:00
scripts.base.protocols.postgresql.mysql-on-port-5432 Analyzer failure logging: tweaks and test fixes 2025-06-03 15:56:42 +01:00
scripts.base.protocols.postgresql.parameter-status postgresql: Initial parser implementation 2024-09-06 16:10:48 +02:00
scripts.base.protocols.postgresql.psql-auth postgresql: Initial parser implementation 2024-09-06 16:10:48 +02:00
scripts.base.protocols.postgresql.psql-aws-ssl-disable postgresql: Initial parser implementation 2024-09-06 16:10:48 +02:00
scripts.base.protocols.postgresql.psql-aws-ssl-disable-15432 postgresql: Initial parser implementation 2024-09-06 16:10:48 +02:00
scripts.base.protocols.postgresql.psql-aws-ssl-require Make conn.log service field ordered 2025-01-30 16:59:44 +00:00
scripts.base.protocols.postgresql.psql-aws-ssl-require-15432 Make conn.log service field ordered 2025-01-30 16:59:44 +00:00
scripts.base.protocols.postgresql.psql-create-insert-select postgresql: Initial parser implementation 2024-09-06 16:10:48 +02:00
scripts.base.protocols.postgresql.psql-insert-fail-drop-fail postgresql: Initial parser implementation 2024-09-06 16:10:48 +02:00
scripts.base.protocols.postgresql.psql-login-fail postgresql: Initial parser implementation 2024-09-06 16:10:48 +02:00
scripts.base.protocols.postgresql.psql-login-no-role Report PostgreSQL login success only after ReadyForQuery 2025-08-18 10:59:44 +08:00
scripts.base.protocols.postgresql.psql-login-no-sslrequest postgresql: Initial parser implementation 2024-09-06 16:10:48 +02:00
scripts.base.protocols.postgresql.psql-select-now postgresql: Initial parser implementation 2024-09-06 16:10:48 +02:00
scripts.base.protocols.postgresql.startup-parameter postgresql: Initial parser implementation 2024-09-06 16:10:48 +02:00
scripts.base.protocols.quic.analyzer-confirmations Merge remote-tracking branch 'origin/master' into topic/johanna/dpd-changes 2025-02-05 09:31:16 +00:00
scripts.base.protocols.quic.chromium Merge remote-tracking branch 'origin/master' into topic/johanna/dpd-changes 2025-02-05 09:31:16 +00:00
scripts.base.protocols.quic.curl-http3 QUIC: Do not consume EncryptedLongPacketPayload 2025-05-05 14:34:11 +02:00
scripts.base.protocols.quic.decrypt-crash Analyzer failure logging: tweaks and test fixes 2025-06-03 15:56:42 +01:00
scripts.base.protocols.quic.decrypt-fail-google-de-51833 QUIC: Use initial destination conn_id for decryption 2025-05-05 14:34:11 +02:00
scripts.base.protocols.quic.events QUIC: Do not consume EncryptedLongPacketPayload 2025-05-05 14:34:11 +02:00
scripts.base.protocols.quic.firefox Merge remote-tracking branch 'origin/master' into topic/johanna/dpd-changes 2025-02-05 09:31:16 +00:00
scripts.base.protocols.quic.fragmented-crypto Merge remote-tracking branch 'origin/master' into topic/johanna/dpd-changes 2025-02-05 09:31:16 +00:00
scripts.base.protocols.quic.interop.quic-go_quic-go.handshake Merge remote-tracking branch 'origin/master' into topic/johanna/dpd-changes 2025-02-05 09:31:16 +00:00
scripts.base.protocols.quic.interop.quic-go_quic-go.retry Merge remote-tracking branch 'origin/master' into topic/johanna/dpd-changes 2025-02-05 09:31:16 +00:00
scripts.base.protocols.quic.interop.quic-go_quic-go.zerortt QUIC: Do not consume EncryptedLongPacketPayload 2025-05-05 14:34:11 +02:00
scripts.base.protocols.quic.max-history-length quic: Bump maximum history length, make configurable 2023-10-20 20:42:30 +02:00
scripts.base.protocols.quic.merlinc2 Merge remote-tracking branch 'origin/master' into topic/johanna/dpd-changes 2025-02-05 09:31:16 +00:00
scripts.base.protocols.quic.multiple-initial-fragmented-crypto QUIC: Handle CRYPTO frames across multiple INITIAL packets 2025-05-05 14:34:11 +02:00
scripts.base.protocols.quic.multiple-initial-fragmented-crypto-only-initial QUIC: Handle CRYPTO frames across multiple INITIAL packets 2025-05-05 14:34:11 +02:00
scripts.base.protocols.quic.quic-log quic: Log client's source connection id, too. 2024-01-30 21:46:38 +01:00
scripts.base.protocols.quic.quicdoq Merge remote-tracking branch 'origin/master' into topic/johanna/dpd-changes 2025-02-05 09:31:16 +00:00
scripts.base.protocols.quic.quicv2-echo-443 QUIC: Do not consume EncryptedLongPacketPayload 2025-05-05 14:34:11 +02:00
scripts.base.protocols.quic.quicv2-http3-443 Merge remote-tracking branch 'origin/master' into topic/johanna/dpd-changes 2025-02-05 09:31:16 +00:00
scripts.base.protocols.quic.run-pcap Merge remote-tracking branch 'origin/master' into topic/johanna/dpd-changes 2025-02-05 09:31:16 +00:00
scripts.base.protocols.quic.vector-max-size-crash Analyzer failure logging: tweaks and test fixes 2025-06-03 15:56:42 +01:00
scripts.base.protocols.radius.auth
scripts.base.protocols.radius.radius-multiple-attempts
scripts.base.protocols.rdp.rdp-client-cluster-data
scripts.base.protocols.rdp.rdp-client-security-data
scripts.base.protocols.rdp.rdp-invalid-length Analyzer failure logging: tweaks and test fixes 2025-06-03 15:56:42 +01:00
scripts.base.protocols.rdp.rdp-native-encrypted-data
scripts.base.protocols.rdp.rdp-no-cookie-msthash RDP: cookie is optional 2025-03-04 13:38:01 +00:00
scripts.base.protocols.rdp.rdp-proprietary-encryption
scripts.base.protocols.rdp.rdp-to-ssl
scripts.base.protocols.rdp.rdp-unknown-keyboard Add test for new handling of unknown RDP keyboards 2023-01-23 13:01:48 -07:00
scripts.base.protocols.rdp.rdp-x509
scripts.base.protocols.rdp.rdpeudp-handshake-fail btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.rdp.rdpeudp-handshake-success btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.rdp.rdpeudp2-handshake-success btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.redis.almost-redis spicy-redis: Separate error replies from success 2025-05-27 09:31:25 -04:00
scripts.base.protocols.redis.attributes Handle more Redis RESP3 protocol pieces 2025-07-01 14:14:15 -04:00
scripts.base.protocols.redis.auth spicy-redis: Separate error replies from success 2025-05-27 09:31:25 -04:00
scripts.base.protocols.redis.bulk spicy-redis: Add synchronization and pipeline support 2025-05-27 09:28:12 -04:00
scripts.base.protocols.redis.client-reply-off spicy-redis: Separate error replies from success 2025-05-27 09:31:25 -04:00
scripts.base.protocols.redis.client-reply-off-2conn spicy-redis: Separate error replies from success 2025-05-27 09:31:25 -04:00
scripts.base.protocols.redis.client-skip-while-off spicy-redis: Separate error replies from success 2025-05-27 09:31:25 -04:00
scripts.base.protocols.redis.django-cloud spicy-redis: Separate error replies from success 2025-05-27 09:31:25 -04:00
scripts.base.protocols.redis.excessive-pipelining spicy-redis: Separate error replies from success 2025-05-27 09:31:25 -04:00
scripts.base.protocols.redis.pipeline-with-quotes spicy-redis: Separate error replies from success 2025-05-27 09:31:25 -04:00
scripts.base.protocols.redis.pipelined spicy-redis: Separate error replies from success 2025-05-27 09:31:25 -04:00
scripts.base.protocols.redis.pipelined-with-commands spicy-redis: Separate error replies from success 2025-05-27 09:31:25 -04:00
scripts.base.protocols.redis.pubsub Handle more Redis RESP3 protocol pieces 2025-07-01 14:14:15 -04:00
scripts.base.protocols.redis.pubsub-resp3 Handle more Redis RESP3 protocol pieces 2025-07-01 14:14:15 -04:00
scripts.base.protocols.redis.set spicy-redis: Add synchronization and pipeline support 2025-05-27 09:28:12 -04:00
scripts.base.protocols.redis.start-with-server spicy-redis: Abort parsing if server data comes first 2025-05-27 09:28:12 -04:00
scripts.base.protocols.redis.stream Add Redis analyzer array stringification 2025-07-01 10:23:57 -04:00
scripts.base.protocols.rfb.rfb-apple-remote-desktop
scripts.base.protocols.rfb.vnc-mac-to-linux
scripts.base.protocols.rfb.vnc-scanner
scripts.base.protocols.sip.junk
scripts.base.protocols.sip.wireshark
scripts.base.protocols.smb.compression-cap
scripts.base.protocols.smb.raw-ntlm
scripts.base.protocols.smb.smb1 Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.smb.smb1-OSS-fuzz-54883 Analyzer failure logging: tweaks and test fixes 2025-06-03 15:56:42 +01:00
scripts.base.protocols.smb.smb1-transaction-dcerpc
scripts.base.protocols.smb.smb1-transaction-request
scripts.base.protocols.smb.smb1-transaction-response
scripts.base.protocols.smb.smb1-transaction-secondary-request
scripts.base.protocols.smb.smb1-transaction2-request
scripts.base.protocols.smb.smb1-transaction2-secondary-request
scripts.base.protocols.smb.smb2 Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.smb.smb2-create-delete-on-close Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.smb.smb2-fscontrol Update btest baselines to reflect the use of local address ranges. 2023-03-15 17:11:04 -07:00
scripts.base.protocols.smb.smb2-max-pending-messages Allow SMB_TCP record to contain multiple protocol identifiers/headers 2024-04-22 15:55:25 -07:00
scripts.base.protocols.smb.smb2-multiple-pdus Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.smb.smb2-read-response-non-zero-reserved1 smb2/read: Parse only 1 byte for data_offset, ignore reserved1 2025-08-08 16:12:20 +02:00
scripts.base.protocols.smb.smb2-read-write Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.smb.smb2-write-response
scripts.base.protocols.smb.smb2-zero-byte-error-ioctl Fix handling of zero-length SMB2 error responses 2024-07-24 12:44:46 -07:00
scripts.base.protocols.smb.smb3
scripts.base.protocols.smb.smb3-multichannel Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.smb.smb3-negotiate-context
scripts.base.protocols.smb.smb311 Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.smtp.attachment Update btest baselines to reflect the use of local address ranges. 2023-03-15 17:11:04 -07:00
scripts.base.protocols.smtp.attachment-msg
scripts.base.protocols.smtp.basic
scripts.base.protocols.smtp.bdat smtp: Fix last_reply column in smtp.log for BDAT LAST 2025-06-06 10:40:49 +02:00
scripts.base.protocols.smtp.bdat-0-last smtp: Fix last_reply column in smtp.log for BDAT LAST 2025-06-06 10:40:49 +02:00
scripts.base.protocols.smtp.bdat-chunk-size-overflow btest/smtp/bdat: Move tests into proper directory 2024-01-23 21:49:50 +01:00
scripts.base.protocols.smtp.bdat-chunk-size-overflow2 btest/smtp/bdat: Move tests into proper directory 2024-01-23 21:49:50 +01:00
scripts.base.protocols.smtp.bdat-cmd-invalid BDAT: Harden parse_bdat_arg() 2024-01-23 21:49:50 +01:00
scripts.base.protocols.smtp.bdat-multipart smtp: Fix last_reply column in smtp.log for BDAT LAST 2025-06-06 10:40:49 +02:00
scripts.base.protocols.smtp.bdat-multipart-chunked smtp: Fix last_reply column in smtp.log for BDAT LAST 2025-06-06 10:40:49 +02:00
scripts.base.protocols.smtp.bdat-negative-chunk-size btest/smtp/bdat: Move tests into proper directory 2024-01-23 21:49:50 +01:00
scripts.base.protocols.smtp.bdat-pipeline-8bitmime smtp: Fix last_reply column in smtp.log for BDAT LAST 2025-06-06 10:40:49 +02:00
scripts.base.protocols.smtp.mail-transactions-invalid smtp: Validate mail transaction and disable SMTP analyzer if excessive 2023-03-27 18:41:47 +02:00
scripts.base.protocols.smtp.mail-transactions-invalid-disable-analyzer smtp: Validate mail transaction and disable SMTP analyzer if excessive 2023-03-27 18:41:47 +02:00
scripts.base.protocols.smtp.mime-all-headers-event
scripts.base.protocols.smtp.one-side
scripts.base.protocols.smtp.rfc822-msg-file-analysis btest: Add tests for full email extraction 2025-07-16 12:37:33 +02:00
scripts.base.protocols.smtp.rfc822-msg-file-analysis-binary btest: Add tests for full email extraction 2025-07-16 12:37:33 +02:00
scripts.base.protocols.smtp.rfc822-msg-file-analysis-multi-mail btest: Add tests for full email extraction 2025-07-16 12:37:33 +02:00
scripts.base.protocols.smtp.rfc822-msg-file-analysis-multi-session btest: Add tests for full email extraction 2025-07-16 12:37:33 +02:00
scripts.base.protocols.smtp.starttls Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.snap.snap-arp Remove non-standard way of forwarding out of the Ethernet analyzer 2023-04-25 12:29:55 -07:00
scripts.base.protocols.snap.snap-cdp Make SNAP analyzer use both OUI and protocol for forwarding 2025-03-24 15:20:50 -07:00
scripts.base.protocols.snap.snap-tcp Add test for TCP over 802.3/SNAP 2024-10-31 14:37:44 +00:00
scripts.base.protocols.snmp.snmp-addr
scripts.base.protocols.snmp.v1 btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.snmp.v2 btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.snmp.v3 btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.socks.socks-auth
scripts.base.protocols.socks.socks-auth-2
scripts.base.protocols.socks.socks-auth-10080 socks/dpd: Fix socks5_server side signature 2023-06-05 13:54:47 +02:00
scripts.base.protocols.socks.trace1
scripts.base.protocols.socks.trace2
scripts.base.protocols.socks.trace3
scripts.base.protocols.ssh.basic Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.protocols.ssh.curve25519_kex
scripts.base.protocols.ssh.fingerprints
scripts.base.protocols.ssh.half-duplex-client Analyzer failure logging: tweaks and test fixes 2025-06-03 15:56:42 +01:00
scripts.base.protocols.ssh.half-duplex-server Settle on analyzer.log for the dpd.log replacement 2025-06-03 17:33:36 +01:00
scripts.base.protocols.ssh.http-port-22 Analyzer failure logging: tweaks and test fixes 2025-06-03 15:56:42 +01:00
scripts.base.protocols.ssh.one-auth-fail-only
scripts.base.protocols.ssh.pre-banner SSH: make banner parsing more robust 2025-03-18 16:19:33 +00:00
scripts.base.protocols.ssh.set_version btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.ssh.ssh-reverse-connection
scripts.base.protocols.ssh.ssh_dh_gex_direction
scripts.base.protocols.ssh.ssh_segmented_encryption_transition
scripts.base.protocols.ssh.ssh_version_199
scripts.base.protocols.ssl.basic Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.ssl.certificate_request SSL/TLS: Parse CertificateRequest message 2023-03-09 09:12:29 +01:00
scripts.base.protocols.ssl.common_name
scripts.base.protocols.ssl.comp_methods
scripts.base.protocols.ssl.cve-2015-3194
scripts.base.protocols.ssl.dhe
scripts.base.protocols.ssl.dpd Fix parsing of version field in SSLv2 client hello 2024-08-22 13:14:24 +01:00
scripts.base.protocols.ssl.dtls Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.ssl.dtls-13 btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.ssl.dtls-no-dtls
scripts.base.protocols.ssl.dtls-stun-dpd Settle on analyzer.log for the dpd.log replacement 2025-06-03 17:33:36 +01:00
scripts.base.protocols.ssl.ecdhe Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.ssl.ecdsa Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.ssl.fragment
scripts.base.protocols.ssl.handshake-events
scripts.base.protocols.ssl.keyexchange Make ssl_history work for SSLv2 handshakes/connections 2024-08-13 18:03:06 +01:00
scripts.base.protocols.ssl.max-history-length ssl: Prevent unbounded ssl_history growth 2023-10-25 09:35:45 +02:00
scripts.base.protocols.ssl.ocsp-http-get Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.ssl.ocsp-request-only
scripts.base.protocols.ssl.ocsp-request-response Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.ssl.ocsp-response-only Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.ssl.ocsp-revoked Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.ssl.ocsp-stapling
scripts.base.protocols.ssl.prevent-disable-analyzer btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.ssl.session-ticket Only pass session ticket data in ssl_session_ticket_handshake event 2025-06-24 16:33:14 +01:00
scripts.base.protocols.ssl.signed_certificate_timestamp
scripts.base.protocols.ssl.tls-1.2 Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.ssl.tls-1.2-ciphers
scripts.base.protocols.ssl.tls-1.2-handshake-failure
scripts.base.protocols.ssl.tls-1.2-random
scripts.base.protocols.ssl.tls-extension-events
scripts.base.protocols.ssl.tls-protocol-violation SSL: do not try to disable failed analyzer 2023-05-03 11:16:14 +01:00
scripts.base.protocols.ssl.tls1_1 Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.ssl.tls13 btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.ssl.tls13-encrypted-client-hello SSL: Add new extension types and ECH test 2023-10-30 14:19:16 +00:00
scripts.base.protocols.ssl.tls13-experiment
scripts.base.protocols.ssl.tls13-version
scripts.base.protocols.ssl.tls13_encrypted_handshake_events btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.ssl.x509-invalid-extension
scripts.base.protocols.ssl.x509_extensions
scripts.base.protocols.syslog.missing-pri Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.syslog.trace
scripts.base.protocols.tcp.krb-tcp-tso Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.tcp.pending btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.tcp.timestamp
scripts.base.protocols.websocket.broker-websocket Make conn.log service field ordered 2025-01-30 16:59:44 +00:00
scripts.base.protocols.websocket.coalesced-reply-ping websocket: Address review feedback for BinPac code 2024-01-22 18:54:41 +01:00
scripts.base.protocols.websocket.events btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.websocket.fragmented-http-reply websocket: Fix opcode for continuation frames 2024-01-24 22:57:24 +01:00
scripts.base.protocols.websocket.jupyter-websocket Make conn.log service field ordered 2025-01-30 16:59:44 +00:00
scripts.base.protocols.websocket.key-accept-wrong websocket: Verify Sec-WebSocket-Key/Accept headers and review feedback 2024-01-22 18:54:38 +01:00
scripts.base.protocols.websocket.wstunnel-http Make conn.log service field ordered 2025-01-30 16:59:44 +00:00
scripts.base.protocols.websocket.wstunnel-https Make conn.log service field ordered 2025-01-30 16:59:44 +00:00
scripts.base.protocols.websocket.wstunnel-ssh Make conn.log service field ordered 2025-01-30 16:59:44 +00:00
scripts.base.protocols.websocket.wstunnel-ssh-configure Make conn.log service field ordered 2025-01-30 16:59:44 +00:00
scripts.base.protocols.websocket.wstunnel-ssh-configure-break websocket: Handle breaking from WebSocket::configure_analyzer() 2024-01-22 18:54:41 +01:00
scripts.base.protocols.websocket.wstunnel-ssh-configure-wrong Make conn.log service field ordered 2025-01-30 16:59:44 +00:00
scripts.base.protocols.websocket.wstunnel-ssh-disabled Merge remote-tracking branch 'origin/topic/awelzel/3424-http-upgrade-websocket-v1' 2024-01-23 18:17:50 +01:00
scripts.base.protocols.websocket.wstunnel-ssh-spicy Make conn.log service field ordered 2025-01-30 16:59:44 +00:00
scripts.base.protocols.xmpp.client-dpd
scripts.base.protocols.xmpp.server-dialback-dpd
scripts.base.protocols.xmpp.starttls Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.utils.active-http
scripts.base.utils.addrs Add is_valid_subnet BiF 2025-03-18 20:25:32 -07:00
scripts.base.utils.conn-ids
scripts.base.utils.decompose_uri utils/decompose_uri: Support URIs containing IPv6 addresses 2025-09-23 13:04:29 +02:00
scripts.base.utils.dir
scripts.base.utils.directions-and-hosts Update btest baselines to reflect the use of local address ranges. 2023-03-15 17:11:04 -07:00
scripts.base.utils.email
scripts.base.utils.exec
scripts.base.utils.files
scripts.base.utils.hash_hrw Improvements in FNV1A hash functions 2024-10-22 16:07:12 +02:00
scripts.base.utils.json Change all instruments to only handle doubles 2024-05-31 13:36:37 -07:00
scripts.base.utils.json-roundtrip Add interval_as_double argument to control how intervals are converted to JSON 2024-12-03 09:26:08 -07:00
scripts.base.utils.numbers
scripts.base.utils.packages utils: Introduce packages.zeek with can_load() helper 2024-02-22 11:41:50 +01:00
scripts.base.utils.paths
scripts.base.utils.pattern
scripts.base.utils.queue
scripts.base.utils.site
scripts.base.utils.site-defaults Add btests for new Site::local_nets behavior 2023-03-15 17:11:08 -07:00
scripts.base.utils.site-defaults-2 Add btests for new Site::local_nets behavior 2023-03-15 17:11:08 -07:00
scripts.base.utils.site-defaults-3 Add btests for new Site::local_nets behavior 2023-03-15 17:11:08 -07:00
scripts.base.utils.site-defaults-4 Add btests for new Site::local_nets behavior 2023-03-15 17:11:08 -07:00
scripts.base.utils.site-defaults-5 Add btests for new Site::local_nets behavior 2023-03-15 17:11:08 -07:00
scripts.base.utils.site-defaults-6 Add btests for new Site::local_nets behavior 2023-03-15 17:11:08 -07:00
scripts.base.utils.site-defaults-7 Add btests for new Site::local_nets behavior 2023-03-15 17:11:08 -07:00
scripts.base.utils.site-defaults-8 Add btests for new Site::local_nets behavior 2023-03-15 17:11:08 -07:00
scripts.base.utils.site-defaults-9 Add btests for new Site::local_nets behavior 2023-03-15 17:11:08 -07:00
scripts.base.utils.strings
scripts.base.utils.thresholds
scripts.base.utils.urls
scripts.check-test-all-policy Update btest baselines to reflect the use of local address ranges. 2023-03-15 17:11:04 -07:00
scripts.policy.frameworks.analyzer.logging-debug Analyzer failure logging: tweaks and test fixes 2025-06-03 15:56:42 +01:00
scripts.policy.frameworks.analyzer.packet-segment-logging Add proto to analyzer.log 2025-08-06 11:34:57 +01:00
scripts.policy.frameworks.cluster.cluster_started btest/policy: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.policy.frameworks.cluster.cluster_started_logger btest/policy: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.policy.frameworks.cluster.cluster_started_restart_manager Add cluster_started restart tests. 2023-04-21 19:04:52 +02:00
scripts.policy.frameworks.cluster.cluster_started_restart_worker Add cluster_started restart tests. 2023-04-21 19:04:52 +02:00
scripts.policy.frameworks.conn_key.vlan_fivetuple Add a VLAN-aware flow tuple implementation. 2025-06-25 13:19:26 +02:00
scripts.policy.frameworks.conn_key.vlan_fivetuple-2 ip/vlan_fivetuple: Populate nested conn_id_context, not conn_id 2025-07-03 18:19:46 +02:00
scripts.policy.frameworks.conn_key.vlan_fivetuple-3 Add a VLAN-aware flow tuple implementation. 2025-06-25 13:19:26 +02:00
scripts.policy.frameworks.conn_key.vlan_fivetuple-4 ip/vlan_fivetuple: Populate nested conn_id_context, not conn_id 2025-07-03 18:19:46 +02:00
scripts.policy.frameworks.conn_key.vlan_fivetuple-5 ip/vlan_fivetuple: Populate nested conn_id_context, not conn_id 2025-07-03 18:19:46 +02:00
scripts.policy.frameworks.conn_key.vlan_fivetuple-6 ip/vlan_fivetuple: Populate nested conn_id_context, not conn_id 2025-07-03 18:19:46 +02:00
scripts.policy.frameworks.conn_key.vlan_fivetuple_conn_id_ctx_usage ip/vlan_fivetuple: Populate nested conn_id_context, not conn_id 2025-07-03 18:19:46 +02:00
scripts.policy.frameworks.conn_key.vlan_fivetuple_conn_id_ctx_usage-2 ip/vlan_fivetuple: Populate nested conn_id_context, not conn_id 2025-07-03 18:19:46 +02:00
scripts.policy.frameworks.conn_key.vlan_fivetuple_lookup_connection ip/vlan_fivetuple: Populate nested conn_id_context, not conn_id 2025-07-03 18:19:46 +02:00
scripts.policy.frameworks.intel.removal
scripts.policy.frameworks.intel.seen.certs
scripts.policy.frameworks.intel.seen.filename-in-http-get-response
scripts.policy.frameworks.intel.seen.filename-in-http-post
scripts.policy.frameworks.intel.seen.manage-event-groups.basic-smtp intel/seen/manage-event-groups: Policy script for toggling intel event groups 2025-06-02 09:51:14 +02:00
scripts.policy.frameworks.intel.seen.smb performance speed-up for SMB base scripts 2024-04-25 09:15:12 -07:00
scripts.policy.frameworks.intel.seen.smtp
scripts.policy.frameworks.intel.seen.smtp-cluster btest/policy: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.policy.frameworks.intel.whitelisting
scripts.policy.frameworks.management.controller.agent-checkin
scripts.policy.frameworks.netcontrol.catch-and-release Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.policy.frameworks.netcontrol.catch-and-release-2 Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.policy.frameworks.netcontrol.catch-and-release-forgotten Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.policy.frameworks.netcontrol.catch-and-release-two-plugins Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.policy.frameworks.netcontrol.catch-and-release-two-plugins-2 Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.policy.frameworks.notice.community-id policy/community-id: Populate conn$community_id in new_connection() 2024-11-08 18:19:55 +01:00
scripts.policy.frameworks.notice.extend-email.hostnames Merge remote-tracking branch 'origin/topic/jazoff/gh-3268t ' 2023-09-04 14:01:23 +02:00
scripts.policy.frameworks.software.version-changes
scripts.policy.frameworks.software.vulnerable
scripts.policy.frameworks.telemetry.log misc/stats: Add zeek_net_timestamp_seconds 2024-10-22 18:49:17 +02:00
scripts.policy.frameworks.telemetry.log-prefixes Remove prefix column from telemetry.log 2024-06-04 14:14:58 -07:00
scripts.policy.frameworks.telemetry.prometheus telemetry: Rename endpoint label to node label 2025-06-25 09:33:01 +02:00
scripts.policy.misc.capture-loss
scripts.policy.misc.dump-events Move c$service_violation to deprecated-dpd-log.zeek 2025-07-30 07:58:36 +01:00
scripts.policy.misc.stats
scripts.policy.misc.weird-stats
scripts.policy.misc.weird-stats-cluster btest/policy: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.policy.protocols.conn.community-id-logging policy: Import zeek-community-id scripts into protocols/conn frameworks/notice 2023-04-24 09:43:19 +02:00
scripts.policy.protocols.conn.community-id-logging-flipped policy/community-id: Populate conn$community_id in new_connection() 2024-11-08 18:19:55 +01:00
scripts.policy.protocols.conn.ip-proto-name-logging Add btests for ip_proto policy files 2024-11-15 16:49:10 -07:00
scripts.policy.protocols.conn.known-hosts
scripts.policy.protocols.conn.known-services Modify known-services policy script to add storage framework support 2025-07-10 08:55:01 -07:00
scripts.policy.protocols.conn.known-services-multi
scripts.policy.protocols.conn.mac-logging Move Conn::set_conn() from connection_state_remove to new_connection 2025-07-29 09:11:57 +01:00
scripts.policy.protocols.conn.pppoe-session-id-logging PPPoE: add session id logging 2025-07-23 13:43:45 +01:00
scripts.policy.protocols.conn.speculative-service Update btests for new local-only subnets 2025-01-09 22:16:42 -07:00
scripts.policy.protocols.conn.vlan-logging Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.policy.protocols.dns.detect-external-names-mdns-broadcast IPv6 support for detect-external-names and testcase 2025-02-04 17:34:43 +00:00
scripts.policy.protocols.dns.detect-external-names-mdns-broadcast-2 IPv6 support for detect-external-names and testcase 2025-02-04 17:34:43 +00:00
scripts.policy.protocols.dns.original_case dns: Remove AD and CD flags from log 2023-03-16 10:09:27 +01:00
scripts.policy.protocols.ftp.ftp ftp/main: Skip get_pending_command() for intermediate reply lines 2023-03-23 13:50:36 +01:00
scripts.policy.protocols.http.flash-version
scripts.policy.protocols.http.header-names
scripts.policy.protocols.http.sql-injection-plus-dvwa2 btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.policy.protocols.http.test-sql-injection-regex
scripts.policy.protocols.http.var-extraction-uri Changed behavior of var-extraction-uri.zeek from policy/protocol/http to extract only the URI parameter names. Do not include the path in the first parameter name. Only extract uri vars if parameters actually exist. 2025-08-13 22:45:20 +02:00
scripts.policy.protocols.krb.ticket-logging
scripts.policy.protocols.ssh.detect-bruteforcing
scripts.policy.protocols.ssl.certificate-request-info SSL/TLS: Parse CertificateRequest message 2023-03-09 09:12:29 +01:00
scripts.policy.protocols.ssl.decryption
scripts.policy.protocols.ssl.expiring-certs
scripts.policy.protocols.ssl.heartbleed
scripts.policy.protocols.ssl.known-certs Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.policy.protocols.ssl.log-certs-base64 Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.policy.protocols.ssl.log-hostcerts-only Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.policy.protocols.ssl.ssl-log-ext Fix parsing of version field in SSLv2 client hello 2024-08-22 13:14:24 +01:00
scripts.policy.protocols.ssl.validate-certs
scripts.policy.protocols.ssl.validate-certs-no-cache
scripts.policy.protocols.ssl.validate-ocsp
scripts.policy.protocols.ssl.validate-sct
scripts.policy.protocols.ssl.weak-keys
signatures.bad-eval-condition rule-parse: Remove [event_name] syntax, deprecate msg as identifier 2023-12-14 10:16:35 +01:00
signatures.custom-event btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
signatures.custom-event-errors signatures: Add data_end_offset to signature_match() and custom events 2024-10-30 13:29:58 +01:00
signatures.dpd btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
signatures.dst-ip-cidr-v4
signatures.dst-ip-header-condition-v4 btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
signatures.dst-ip-header-condition-v4-masks btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
signatures.dst-ip-header-condition-v6 btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
signatures.dst-ip-header-condition-v6-masks btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
signatures.dst-port-header-condition btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
signatures.eval-condition Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
signatures.eval-condition-no-return-value
signatures.header-header-condition btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
signatures.http-body-match Test how the signature framework matches HTTP body 2023-11-03 15:28:15 +01:00
signatures.id-lookup btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
signatures.ip-proto-header-condition btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
signatures.load-sigs btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
signatures.signature-cond-used
signatures.signature-cond-used-twice
signatures.src-ip-header-condition-v4 btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
signatures.src-ip-header-condition-v4-masks btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
signatures.src-ip-header-condition-v6 btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
signatures.src-ip-header-condition-v6-masks btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
signatures.src-port-header-condition btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
signatures.tcp-end-of-match Order rule traversal in RuleMatcher::Match() operations by Rule index 2024-11-18 09:45:09 -08:00
signatures.tcp-end-of-match-2 signatures: Add data_end_offset to signature_match() and custom events 2024-10-30 13:29:58 +01:00
signatures.tcp-syn-with-payload btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
signatures.udp-end-of-match btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
signatures.udp-packetwise-insensitive
signatures.udp-packetwise-match
signatures.udp-payload-size
signatures.udp-state btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
spicy.analyzer-id Add spicy runtime-support current_analyzer_id(), use it to set id in events 2024-12-18 15:44:09 -07:00
spicy.analyzer-tag Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.conn-id Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.context Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.decline_input Analyzer failure logging: tweaks and test fixes 2025-06-03 15:56:42 +01:00
spicy.decline_input-2 Analyzer failure logging: tweaks and test fixes 2025-06-03 15:56:42 +01:00
spicy.dns Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.double-event Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.double-types Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.event-args Bump Spicy to current main. 2024-01-29 09:59:46 +01:00
spicy.event-args-fail Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.event-args-fail-2 Port Spicy integration to new AST API. 2024-03-04 15:48:39 +01:00
spicy.event-args-fail-3 Port Spicy integration to new AST API. 2024-03-04 15:48:39 +01:00
spicy.event-args-fail-4 Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.event-args-fail-5 Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.event-args-fail-6 Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.event-args-mismatch Spicy: Rework code for converting Spicy values to Zeek values. 2025-04-02 17:45:19 +02:00
spicy.event-cond Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.event-unit-type-fail Spicy: Improve error messages reporting malformed unit names in EVT files. 2024-11-08 13:44:09 +01:00
spicy.event-unit-type-fail-2 Spicy: Improve error messages reporting malformed unit names in EVT files. 2024-11-08 13:44:09 +01:00
spicy.event-unit-type-fail-3 Spicy: Improve error messages reporting malformed unit names in EVT files. 2024-11-08 13:44:09 +01:00
spicy.event-user-type Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.export-bitfield Type/RecordType: Make table returned by GetRecordFieldsVal() ordered 2025-07-22 16:58:40 +02:00
spicy.export-enum Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.export-protocol-enum Spicy: Map Spicy's Protocol enum to Zeek's transport_proto. 2024-04-29 08:38:53 +02:00
spicy.export-switch [Spicy] Support switch fields when exporting Spicy types to Zeek. 2023-07-06 08:40:54 +02:00
spicy.export-type-ambigious-fail [Spicy] Extend functionality of export in EVT files. 2023-08-21 10:26:25 +02:00
spicy.export-type-e2e Fix disappearing unit fields in Spicy type export. 2023-05-26 11:37:23 +02:00
spicy.export-type-fail Port Spicy integration to new AST API. 2024-03-04 15:48:39 +01:00
spicy.export-type-with-fields Type/RecordType: Make table returned by GetRecordFieldsVal() ordered 2025-07-22 16:58:40 +02:00
spicy.export-type-with-fields-fail Port Spicy integration to new AST API. 2024-03-04 15:48:39 +01:00
spicy.export-types Type/RecordType: Make table returned by GetRecordFieldsVal() ordered 2025-07-22 16:58:40 +02:00
spicy.file-analysis-data-in Spicy: Query Zeek scriptland for file handles. 2024-05-06 09:20:38 +02:00
spicy.file-analysis-data-in-concurrent Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.file-analyzer Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.file-analyzer-nested Move the options from policy/tuning/defaults to actual Zeek defaults, deprecate that package 2024-05-06 11:13:04 -07:00
spicy.file-analyzer-property Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.file-data-in-at-offset Spicy: Query Zeek scriptland for file handles. 2024-05-06 09:20:38 +02:00
spicy.file-replaces Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.gap-recovery Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.get-values Spicy: Provide runtime API to access Zeek-side globals. 2024-06-20 12:02:54 +02:00
spicy.hook-priority Test .evt file &priority 2024-10-14 08:51:58 -04:00
spicy.import-from Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.list-conversion btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
spicy.module-path Do not automatically load Spicy modules in dot paths. 2023-09-26 11:56:52 +02:00
spicy.multiple-enum Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.network-time Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.optional Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.packet-analyzer Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.packet-analyzer-on-ip Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.packet-analyzer-replaces Fix packet analyzer replacement. 2024-05-06 09:45:11 +02:00
spicy.packet-analyzer-violation Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.parse-error Add proto to analyzer.log 2025-08-06 11:34:57 +01:00
spicy.port Spicy: Register well-known ports through an event handler. 2024-08-22 10:24:55 +02:00
spicy.port-fail Spicy: Register well-known ports through an event handler. 2024-08-22 10:24:55 +02:00
spicy.port-fail-2 Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.port-fail-3 Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.port-fail-4 Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.port-fail-5 Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.port-range-one-port Make ports for LDAP analyzers fully configurable 2023-10-10 18:28:13 +02:00
spicy.preprocessor Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.preprocessor-fail Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.preprocessor-fail-2 Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.preprocessor-fail-3 Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.preprocessor-fail-4 Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.preprocessor-fail-5 Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.preprocessor-fail-6 Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.preprocessor-fail-7 Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.preprocessor-spicy Spicy: Port over to Spicy's new tuple representation. 2025-04-02 14:14:26 +02:00
spicy.profiling btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
spicy.protocol-analyzer-data-in Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.protocol-analyzer-data-in-from-tcp-to-udp Spicy: Support UDP in Spicy's protocol_* runtime functions. 2024-05-07 18:19:46 +02:00
spicy.protocol-analyzer-data-in-udp Spicy: Support UDP in Spicy's protocol_* runtime functions. 2024-05-07 18:19:46 +02:00
spicy.protocol-analyzer-explicit-forwarding Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.protocol-analyzer-tcp-over-udp Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.replaces btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
spicy.replaces-conflicts btest/spicy: Make replaces-conflicts trigger replaces code path 2024-08-06 11:52:52 +02:00
spicy.replaces-conflicts-2 Spicy: Disallow repeating replacements of the same analyzer. 2024-06-14 13:10:47 +02:00
spicy.replaces-conflicts-3 Spicy: Disallow repeating replacements of the same analyzer. 2024-06-14 13:10:47 +02:00
spicy.replaces-mismatch Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.resource-usage Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.reuse-parser-across-hltos Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.skip-input-file Spicy: Provide zeek::skip_input() to disable deliver to current analyzer. 2023-11-09 10:43:49 +01:00
spicy.skip-input-protocol Spicy: Provide zeek::skip_input() to disable deliver to current analyzer. 2023-11-09 10:43:49 +01:00
spicy.spicy-dump
spicy.spicyz Provide infrastructure to migrate legacy analyzers to Spicy. 2023-02-01 11:33:48 +01:00
spicy.ssh-banner btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
spicy.tcp-eod-behavior Analyzer failure logging: tweaks and test fixes 2025-06-03 15:56:42 +01:00
spicy.tcp-eod-behavior-child [Spicy] Let zeek::protocol_handle_close() send a TCP EOF. 2025-07-09 17:28:19 +02:00
spicy.tcp-eod-behavior-on-destroy Bump Spicy to pull in fix. 2025-05-28 15:50:47 +02:00
spicy.terminate-session Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.toggle-protocol-analyzer btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
spicy.tuple-arg Spicy: Port over to Spicy's new tuple representation. 2025-04-02 14:14:26 +02:00
spicy.tuple-enum Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.tuple-optional Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.type-converter btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
spicy.udp btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
spicy.zeekygen spicy/manager: Ensure Zeekygen knows identifier for registered types 2023-10-11 13:31:20 +02:00
spicy.zeekygen-enum-zeek-side spicy/manager: Ensure Zeekygen knows identifier for registered types 2023-10-11 13:31:20 +02:00
supervisor.config-bare-mode
supervisor.config-cluster
supervisor.config-cluster-leftover-log-archival
supervisor.config-cluster-log-archival
supervisor.config-cluster-multi-logger cluster/supervisor: Multi-logger awareness 2023-05-05 12:27:25 +02:00
supervisor.config-cluster-pcap Add pcap_file option to supervised nodes. 2023-03-21 16:18:02 +01:00
supervisor.config-directory
supervisor.config-env
supervisor.config-output-redirect
supervisor.config-scripts Remove Supervisor::NodeConfig (6.1 deprecation) 2023-06-14 10:07:22 -07:00
supervisor.create
supervisor.create-interface-pcap-file-error Add pcap_file option to supervised nodes. 2023-03-21 16:18:02 +01:00
supervisor.destroy
supervisor.large-cluster Remove deprecated Cluster::Node::interface field 2024-08-07 11:58:22 -07:00
supervisor.node_status
supervisor.output-redirect
supervisor.output-redirect-hook
supervisor.restart
supervisor.revive-leaf
supervisor.revive-stem
supervisor.status
telemetry.counter Change all instruments to only handle doubles 2024-05-31 13:36:37 -07:00
telemetry.gauge Change all instruments to only handle doubles 2024-05-31 13:36:37 -07:00
telemetry.histogram Change all instruments to only handle doubles 2024-05-31 13:36:37 -07:00
save-load-seeds.zeek cluster/zeromq: Fix node_topic() and nodeid_topic() 2025-03-24 18:36:26 +01:00