zeek/scripts/base
Robin Sommer 0af57d12b2 Change HTTP's DPD signatures so that each side can trigger the analyzer on its own.
This is to avoid missing large sessions where a single side exceeds
the DPD buffer size. It comes with the trade-off that now the analyzer
can be triggered by anybody controlling one of the endpoints (instead
of both).

Test suite changes are minor, and nothing in "external".

Closes #343.
2020-09-08 07:33:36 +00:00
..
files X509 caching API change: callback gets entry directly 2020-03-12 11:31:13 -07:00
frameworks Fix closing timestamp of rotated log files in supervised-cluster mode 2020-08-25 17:06:10 -07:00
misc GH-545: add "addl" parameter to flow_weird and net_weird events 2019-08-20 22:45:22 -04:00
protocols Change HTTP's DPD signatures so that each side can trigger the analyzer on its own. 2020-09-08 07:33:36 +00:00
utils Change a script comment to use "code-block" directive 2020-09-03 15:03:12 -07:00
init-bare.zeek Improve how primary/top-level BIFs get initialized 2020-08-27 13:54:43 -07:00
init-default.zeek Add backtrace() and print_backtrace() 2020-07-03 14:09:31 -07:00
init-frameworks-and-bifs.zeek GH-1122: Allow initializing globals with calls to subdir BIFs 2020-08-27 12:20:37 -07:00