zeek/scripts/base/protocols/dns
Johanna Amann 697b2748f5 Rewrite weird logging.
This commit rewrites the way that weirds are logged and fixes a number
of issues on the way. Most prominently, flow weirds now actually log
information about the flow that they occur in (before this change, they
only logged the name of the weird, which is only marginally helpful).

Besides restructuring how weird logging works internally, weirds can now
also be generated by calling Weird::weird with the info record directly,
allowing more fine-granular passing of information. This is e.g. used
for DNS weirds, which do not have the connection record available any
more when they are generated (before data like the connection ID was
just not logged in these instances).

Addresses BIT-1578
2016-06-15 13:49:35 -07:00
..
__load__.bro Hopefully the last major script reorganization. 2011-08-05 23:09:53 -04:00
consts.bro Add DNS "CAA" RR type and event. 2016-04-22 15:26:34 -04:00
main.bro Rewrite weird logging. 2016-06-15 13:49:35 -07:00
README Add README files for base/protocols 2013-10-17 12:47:32 -05:00

Support for Domain Name System (DNS) protocol analysis.