zeek/scripts
Arne Welzel 25fc4d5d98 init-bare: Add conn_id_ctx to conn_id
This nested record can be used to discriminate orig_h or resp_h being
observed in different "contexts". A context can be based on VLAN tags,
but any custom ConnKey implementation should populate the ctx field,
allowing to write context-aware Zeek scripts without needing to know
what the context really is.
2025-07-03 18:19:46 +02:00
..
base init-bare: Add conn_id_ctx to conn_id 2025-07-03 18:19:46 +02:00
policy cluster/telemetry: Move topic_normalization redef to zeromq 2025-06-26 15:22:11 +02:00
site site/local: Switch to detect-sql-injection 2025-05-20 16:24:28 +02:00
spicy Spicy: Document lifetime semantics of Zeek analyzers created from Spicy. 2025-04-10 12:17:05 +02:00
zeekygen Add a VLAN-aware flow tuple implementation. 2025-06-25 13:19:26 +02:00
CMakeLists.txt Use the same rules as cmake submodule to reformat Zeek 2023-05-09 08:31:43 -07:00
test-all-policy.zeek Add a VLAN-aware flow tuple implementation. 2025-06-25 13:19:26 +02:00