zeek/scripts/base/protocols/conn
Benjamin Bannier d5fd29edcd Prefer explicit construction to coercion in record initialization
While we support initializing records via coercion from an expression
list, e.g.,

    local x: X = [$x1=1, $x2=2];

this can sometimes obscure the code to readers, e.g., when assigning to
value declared and typed elsewhere. The language runtime has a similar
overhead since instead of just constructing a known type it needs to
check at runtime that the coercion from the expression list is valid;
this can be slower than just writing the readible code in the first
place, see #4559.

With this patch we use explicit construction, e.g.,

    local x = X($x1=1, $x2=2);
2025-07-11 16:28:37 -07:00
..
__load__.zeek GH-1119: add base/protcols/conn/removal-hooks.zeek 2020-09-11 12:12:10 -07:00
contents.zeek Remove trailing whitespace from script files 2021-10-20 09:57:09 -07:00
inactivity.zeek Introduce generic analyzer_confirmation_info and analyzer_violation_info 2022-09-27 17:49:51 +02:00
main.zeek Prefer explicit construction to coercion in record initialization 2025-07-11 16:28:37 -07:00
polling.zeek reduce memory usage of ConnPolling 2020-06-26 18:51:29 -04:00
README Add README files for base/protocols 2013-10-17 12:47:32 -05:00
removal-hooks.zeek GH-1119: add base/protcols/conn/removal-hooks.zeek 2020-09-11 12:12:10 -07:00
thresholds.zeek Spelling fixes: scripts 2022-11-02 17:36:39 -04:00

Support for connection (TCP, UDP, or ICMP) analysis.