zeek/testing/external/scripts/testing-setup.zeek
Johanna Amann 0fa1ecce8f DPD: change policy script for service violation logging; add NEWS
This commit renames the `service_violation` column that can be added via
a policy script to `failed_service`. This expresses the intent of it
better - the column contains services that failed and were removed after
confirmation.

Furthermore, the script is fixed so it actually does this - before it
would sometimes add services to the list that were not actually removed.
In the course of this, the type of the column was changed from a vector
to an ordered set.

Due to the column rename, the policy script itself is also renamed.

Also adds a NEWS entry for the DPD changes.
2025-02-06 18:56:30 +00:00

21 lines
597 B
Text

# Sets some testing specific options.
@load external-ca-list
@load protocols/conn/failed-service-logging
@ifdef ( SMTP::never_calc_md5 )
# MDD5s can depend on libmagic output.
redef SMTP::never_calc_md5 = T;
@endif
@ifdef ( LogAscii::use_json )
# Don't start logging everything as JSON.
# (json-logs.zeek activates this).
redef LogAscii::use_json = F;
@endif
# The IMAP analyzer includes absolute filenames in its error messages,
# exclude it for now from analyzer.log.
# https://github.com/zeek/zeek/issues/2659
redef Analyzer::Logging::ignore_analyzers += { Analyzer::ANALYZER_IMAP };