Johanna Amann 0829164a3e First (sadly not completely working) approach at caching X509 certificates ... This approach mostly relies on script-level changes. In scriptland, we track which certificates should be cached - and also perform the caching and the replaying of events there. This actually is probably nearly functional - the problem is the fact that now the event ordering is wrong - and file_state_remove is called before the x509 events are thrown. The fix probably is to move to a callback from the core - which can execute things in the right order again. (Or just write the whole event-raising inside the core - but that is both less flexible and a lot more cumbersome).		2020-03-06 15:21:45 -08:00
..
files	First (sadly not completely working) approach at caching X509 certificates	2020-03-06 15:21:45 -08:00
frameworks	GH-780: Prevent log batches from indefinite buffering	2020-02-05 13:06:52 -08:00
misc	GH-545: add "addl" parameter to flow_weird and net_weird events	2019-08-20 22:45:22 -04:00
protocols	Update submodule	2020-02-03 13:23:22 -08:00
utils	Remove APIs that were explicitly deprecated to be removed in 3.1.	2020-01-29 12:08:09 +00:00
init-bare.zeek	First (sadly not completely working) approach at caching X509 certificates	2020-03-06 15:21:45 -08:00
init-default.zeek	MQTT Analyzer heavily updated and ported from the analyzer originally by Supriya Kumar	2019-07-29 13:45:10 -04:00
init-frameworks-and-bifs.zeek	Add Supervisor BIF/event API skeleton	2019-10-15 12:59:45 -07:00