zeek/scripts/base
Robin Sommer 0d3296590d
Spicy: Register well-known ports through an event handler.
This avoids the earlier problem of not tracking ports correctly in
scriptland, while still supporting `port` in EVT files and `%port` in
Spicy files.

As it turns out we are already following the same approach for file
analyzers' MIME types, so I'm applying the same pattern: it's one
event per port, without further customization points. That leaves the
patch pretty small after all while fixing the original issue.
2024-08-22 10:24:55 +02:00
..
files Copy timestamp from file object 2024-05-17 15:03:06 +02:00
frameworks Spicy: Register well-known ports through an event handler. 2024-08-22 10:24:55 +02:00
misc Parse and store localversion string 2024-04-17 14:17:22 -07:00
packet-protocols Add registration for GRE-over-UDP 2023-10-16 11:42:24 -07:00
protocols Merge remote-tracking branch 'origin/topic/vern/zam-regularization' 2024-08-16 12:10:33 +02:00
utils Clarify membership in the Site::private_address_space prefix list. [skip ci] 2024-05-04 11:21:26 -07:00
init-bare.zeek Add DNS TKEY event 2024-08-16 10:20:42 -04:00
init-default.zeek utils: Introduce packages.zeek with can_load() helper 2024-02-22 11:41:50 +01:00
init-frameworks-and-bifs.zeek Add necessary script-land changes 2024-05-31 13:30:31 -07:00
init-supervisor.zeek Establish a separate init script when using the supervisor 2021-07-08 13:12:53 -07:00