zeek/scripts
Robin Sommer 0af57d12b2 Change HTTP's DPD signatures so that each side can trigger the analyzer on its own.
This is to avoid missing large sessions where a single side exceeds
the DPD buffer size. It comes with the trade-off that now the analyzer
can be triggered by anybody controlling one of the endpoints (instead
of both).

Test suite changes are minor, and nothing in "external".

Closes #343.
2020-09-08 07:33:36 +00:00
..
base Change HTTP's DPD signatures so that each side can trigger the analyzer on its own. 2020-09-08 07:33:36 +00:00
policy Moved verb ACTION_DROP from policy/frameworks/netcontrol/catch-and-release.zeek to base/frameworks/notice/main.zeek. 2020-08-12 10:13:27 -07:00
site Switch file UID hashing from md5 to highwayhash. 2020-04-30 10:20:09 -07:00
zeekygen Merge branch 'topic/jgras/dpd-late-match' of https://github.com/J-Gras/zeek 2019-09-17 11:17:41 -07:00
CMakeLists.txt No longer symlink local.zeek to local.bro. 2020-01-29 12:08:10 +00:00
test-all-policy.zeek Modified the DNS protocol analyzer to add a new parameter to the dns_request event which includes the DNS query in its original case. Added a policy script that will add the original_case to the dns.log file as well. Created new btests to test both. 2020-06-17 10:13:04 -05:00