zeek/scripts/policy/protocols
Jon Siwek c61dfb1963 Rewrite DNS state tracking which matches queries and replies.
The previous method of matching queries with replies was still
unreliable in cases where the reply contains no answers.  The new code
also takes extra measures to avoid pending state growing too large in
cases where the condition to match a query with a corresponding reply is
never met, but yet DNS messages continue to be exchanged over the same
connection 5-tuple (preventing cleanup of the pending state).
2014-01-30 17:21:01 -06:00
..
conn Fix typos and formatting in the policy/protocols docs 2013-10-21 02:34:28 -05:00
dhcp Fix typos and formatting in the policy/protocols docs 2013-10-21 02:34:28 -05:00
dns Rewrite DNS state tracking which matches queries and replies. 2014-01-30 17:21:01 -06:00
ftp Fix typos and formatting in the policy/protocols docs 2013-10-21 02:34:28 -05:00
http Fix typos and formatting in the policy/protocols docs 2013-10-21 02:34:28 -05:00
modbus Fix typos and formatting in the policy/protocols docs 2013-10-21 02:34:28 -05:00
smtp Fix typos and formatting in the policy/protocols docs 2013-10-21 02:34:28 -05:00
ssh Fix resp_size in ssh.log, require a minimum resp_size for the heuristic. Some work on geodata, but still a WIP. 2013-11-05 11:34:32 -05:00
ssl fix the caching of recently validated certs 2013-12-10 11:27:19 -05:00