zeek/scripts
Jon Siwek 00a4865885 Merge branch 'dns-original-query-case' of https://github.com/rvictory/zeek
Changes during merge
- Changed the policy script to use an event handler that behaves
  for like the base script: &priority=5, msg$opcode != early-out,
  no record field existence checks
- Also extended dns_query_reply event with original_query param
- Removed ExtractName overload, and just use default param

* 'dns-original-query-case' of https://github.com/rvictory/zeek:
  Fixed some places where tabs became spaces
  Stricter checking if we have a dns field on the connection being processed
  Modified the DNS protocol analyzer to add a new parameter to the dns_request event which includes the DNS query in its original case. Added a policy script that will add the original_case to the dns.log file as well. Created new btests to test both.
2020-06-26 00:07:02 -07:00
..
base Merge remote-tracking branch 'origin/topic/jsiwek/reduce-ftp-cluster-msg-sizes' 2020-06-18 20:07:26 +00:00
policy Merge branch 'dns-original-query-case' of https://github.com/rvictory/zeek 2020-06-26 00:07:02 -07:00
site Switch file UID hashing from md5 to highwayhash. 2020-04-30 10:20:09 -07:00
zeekygen Merge branch 'topic/jgras/dpd-late-match' of https://github.com/J-Gras/zeek 2019-09-17 11:17:41 -07:00
CMakeLists.txt No longer symlink local.zeek to local.bro. 2020-01-29 12:08:10 +00:00
test-all-policy.zeek Modified the DNS protocol analyzer to add a new parameter to the dns_request event which includes the DNS query in its original case. Added a policy script that will add the original_case to the dns.log file as well. Created new btests to test both. 2020-06-17 10:13:04 -05:00