Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 06:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1
zeek/testing/btest/Baseline
History
Jon Siwek 30d0b21ecc Merge remote-tracking branch 'origin/topic/dev/print-to-log' 
Adjustments during merge:

- kept the UNKNOWN Log::ID as placeholder value
- changed the coverage.find-bro-logs test to check for arbitrary $path
  field values instead of just string literals
- don't force EnumVal to unsigned integer since the relevant union member
  is the signed integer and added the relevant enum values/types to
  .bif files for easier access
- compare FILE* versus file name to check for stdout equality (don't
  think it matters much, just a bit more efficient)
- minor whitespace/style tweaks

* origin/topic/dev/print-to-log:
  Added a non boolean configuration and other changes as suggested by Jon
  Allow Print Statements to be redirected to a Log# This is a combination of 3 commits.
2019-12-02 13:47:09 -08:00
..
bifs.addr_count_conversion Change IPv6 output format to no longer automatically be bracketed. 2012-05-07 12:55:54 -05:00
bifs.addr_to_ptr_name Add a test and baseline for addr_to_ptr_name BiF. 2012-02-08 11:23:02 -06:00
bifs.addr_version Remove --enable-brov6 flag, IPv6 now supported by default. 2012-02-03 16:46:58 -06:00
bifs.all_set GH-211: improve consistency of how scripting errors are handled 2019-01-30 11:20:09 -06:00
bifs.analyzer_name Add tests for untested BIFs 2012-08-03 17:24:04 -05:00
bifs.any_set Add more tests for previously-untested BIFs 2012-05-24 16:33:19 -05:00
bifs.bloomfilter Also switch BloomFilters from H3 to siphash. 2016-07-13 09:04:10 -07:00
bifs.bloomfilter-seed Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
bifs.bytestring_to_count Allow default function/hook/event parameters. Addresses #972. 2013-05-07 14:32:22 -05:00
bifs.bytestring_to_double Add test cases for the bytestring_to_double BIF 2012-10-25 17:10:51 -05:00
bifs.bytestring_to_hexstr Add more tests for previously-untested BIFs 2012-05-29 14:04:36 -05:00
bifs.cat Add more tests for previously-untested BIFs 2012-05-25 17:15:29 -05:00
bifs.check_subnet Add check_subnet bif that allows exact membership test for subnet tables. 2016-03-09 16:52:25 -08:00
bifs.clear_table Add more tests for previously-untested BIFs 2012-05-24 16:33:19 -05:00
bifs.convert_for_pattern Add more tests for previously-untested BIFs 2012-05-29 14:04:36 -05:00
bifs.count_to_addr SSH: Update baselines 2015-03-18 13:02:33 -04:00
bifs.create_file Add more tests for previously-untested BIFs 2012-05-30 16:30:50 -05:00
bifs.decode_base64 Remove deprecated functions/events 2019-05-02 12:06:39 -07:00
bifs.decode_base64_conn Change default value of peer_description "zeek" 2019-06-06 19:49:30 -07:00
bifs.directory_operations Add rename, unlink, and rmdir bifs. 2017-04-24 11:58:05 -07:00
bifs.disable_analyzer GH-532: improve disable_analyzer BIF 2019-08-09 20:03:26 -07:00
bifs.disable_analyzer-early GH-532: improve disable_analyzer BIF 2019-08-09 20:03:26 -07:00
bifs.disable_analyzer-tcp-packet-children GH-532: improve disable_analyzer BIF 2019-08-09 20:03:26 -07:00
bifs.dump_current_packet Merge remote-tracking branch 'origin/topic/jazoff/fix-snaplen' 2018-08-21 14:54:55 -05:00
bifs.edit Add tests for previously-untested strings BIFs 2012-05-23 16:34:03 -05:00
bifs.enable_raw_output
bifs.encode_base64 Remove deprecated functions/events 2019-05-02 12:06:39 -07:00
bifs.entropy_test Add tests for untested BIFs 2012-08-03 17:24:04 -05:00
bifs.enum_to_int [ADD] builtin function enum_to_int() 2014-11-10 18:24:27 -08:00
bifs.escape_string Changing what's escaped when printing. 2015-04-15 16:59:50 -07:00
bifs.exit Add more tests for previously-untested BIFs 2012-05-24 16:33:19 -05:00
bifs.file_mode Add more tests for previously-untested BIFs 2012-05-29 14:04:36 -05:00
bifs.filter_subnet_table Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
bifs.find_all Add tests for previously-untested strings BIFs 2012-05-23 16:34:03 -05:00
bifs.find_entropy Add more tests for previously-untested BIFs 2012-05-30 16:30:50 -05:00
bifs.find_last Add tests for previously-untested strings BIFs 2012-05-23 16:34:03 -05:00
bifs.fmt Update docs and tests of the fmt() function 2016-04-27 15:34:47 -05:00
bifs.fmt_ftp_port Add more tests for previously-untested BIFs 2012-05-30 16:30:50 -05:00
bifs.get_current_packet_header Added test case for get_current_packet_header bif. 2016-04-20 00:05:33 +02:00
bifs.get_port_transport_proto Add more tests for previously-untested BIFs 2012-05-30 16:30:50 -05:00
bifs.getsetenv Add more tests for previously-untested BIFs 2012-05-24 16:33:19 -05:00
bifs.global_ids Add more tests for previously-untested BIFs 2012-05-30 16:30:50 -05:00
bifs.global_sizes Some more testing fixes. 2019-04-14 09:58:30 -04:00
bifs.haversine_distance Add new functions for calculating geographic distance 2016-06-07 13:11:10 -05:00
bifs.hexdump Changing what's escaped when printing. 2015-04-15 16:59:50 -07:00
bifs.hexstr_to_bytestring Changing what's escaped when printing. 2015-04-15 16:59:50 -07:00
bifs.hll_cardinality get hll ready for merging 2013-07-30 16:47:26 -07:00
bifs.hll_large_estimate Misc. unit test improvements 2018-08-10 16:58:27 -05:00
bifs.identify_data Replace libmagic w/ Bro signatures for file MIME type identification. 2014-03-04 11:12:06 -06:00
bifs.install_src_addr_filter Update PacketFilter/Discarder code for IP version independence. 2012-03-08 13:12:04 -06:00
bifs.is_ascii Add more tests for previously-untested BIFs 2012-05-30 16:30:50 -05:00
bifs.is_local_interface Add more BIF tests 2012-08-07 14:10:55 -05:00
bifs.is_port Add more tests for previously-untested BIFs 2012-05-29 14:04:36 -05:00
bifs.join_string Remove deprecated functions/events 2019-05-02 12:06:39 -07:00
bifs.levenshtein_distance Merge branch 'master' of https://github.com/anthonykasza/bro 2013-08-19 11:20:50 -07:00
bifs.lookup_ID GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
bifs.lowerupper Add tests for previously-untested strings BIFs 2012-05-23 16:34:03 -05:00
bifs.lstrip Merge branch 'master' of https://github.com/ZekeMedley/zeek 2019-02-15 17:51:29 -06:00
bifs.mask_addr
bifs.matching_subnets Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
bifs.math Add more tests for previously-untested BIFs 2012-05-25 17:15:29 -05:00
bifs.md5 Add more tests for previously-untested BIFs 2012-05-24 16:33:19 -05:00
bifs.net_stats_trace Merge branch 'stats-bytes-recvd' of https://github.com/msmiley/bro 2015-03-04 13:16:19 -08:00
bifs.netbios-functions Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
bifs.order BIT-1894: fix bad integer casts in BIFs: sort, rand, order, to_int 2018-01-26 15:49:34 -06:00
bifs.parse_ftp Add more tests for previously-untested BIFs 2012-05-29 14:04:36 -05:00
bifs.piped_exec
bifs.print_raw Add new BIF: print_raw() 2019-10-02 15:21:24 -07:00
bifs.ptr_name_to_addr Change IPv6 output format to no longer automatically be bracketed. 2012-05-07 12:55:54 -05:00
bifs.rand Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
bifs.raw_bytes_to_v4_addr Add more tests for previously-untested BIFs 2012-05-29 14:04:36 -05:00
bifs.reading_traces Add more BIF tests 2012-08-07 14:10:55 -05:00
bifs.record_type_to_vector Add more tests for previously-untested BIFs 2012-05-25 17:15:29 -05:00
bifs.records_fields Recursively handle into container types in record_fields() 2019-11-13 15:28:06 +01:00
bifs.remask_addr Refactoring various usages of new IPAddr class. 2012-02-22 14:45:44 -06:00
bifs.resize Add more tests for previously-untested BIFs 2012-05-24 16:33:19 -05:00
bifs.reverse Added reverse() function to strings.bif. 2013-03-23 08:39:04 -07:00
bifs.rotate_file Add more tests for previously-untested BIFs 2012-05-30 16:30:50 -05:00
bifs.rotate_file_by_name Add more tests for previously-untested BIFs 2012-05-30 16:30:50 -05:00
bifs.routing0_data_to_addrs Change IPv6 output format to no longer automatically be bracketed. 2012-05-07 12:55:54 -05:00
bifs.rstrip Merge branch 'master' of https://github.com/ZekeMedley/zeek 2019-02-15 17:51:29 -06:00
bifs.safe_shell_quote Deprecate str_shell_escape, add safe_shell_quote replacement 2019-03-25 17:51:04 -07:00
bifs.same_object Add more tests for previously-untested BIFs 2012-05-30 16:30:50 -05:00
bifs.sha1 Add SHA1 and SHA256 hashing BIFs. (addresses #542) 2012-05-04 16:09:05 -05:00
bifs.sha256 Add SHA1 and SHA256 hashing BIFs. (addresses #542) 2012-05-04 16:09:05 -05:00
bifs.sort BIT-1894: fix bad integer casts in BIFs: sort, rand, order, to_int 2018-01-26 15:49:34 -06:00
bifs.split_string Deprecate split* family of BIFs. 2015-01-21 15:34:42 -06:00
bifs.str_shell_escape Add tests for previously-untested strings BIFs 2012-05-23 16:34:03 -05:00
bifs.strcmp Add tests for previously-untested strings BIFs 2012-05-23 16:34:03 -05:00
bifs.strftime Add tests for untested BIFs 2012-08-03 17:24:04 -05:00
bifs.string_fill Changing what's escaped when printing. 2015-04-15 16:59:50 -07:00
bifs.string_to_pattern Add more tests for previously-untested BIFs 2012-05-29 14:04:36 -05:00
bifs.strip Add tests for previously-untested strings BIFs 2012-05-23 16:34:03 -05:00
bifs.strptime Quick pass over unit tests, adding -b flag to bro so they run faster. 2012-11-30 17:44:36 -06:00
bifs.strstr Add tests for previously-untested strings BIFs 2012-05-23 16:34:03 -05:00
bifs.sub Add tests for previously-untested strings BIFs 2012-05-23 16:34:03 -05:00
bifs.subnet_to_addr fix acld plugin to use address instead of subnet (and add functions for 2015-06-05 00:00:20 -07:00
bifs.subnet_version add bif function to test if a subnet revers to v4 or v6. 2015-04-14 14:51:52 -07:00
bifs.subst_string Add tests for previously-untested strings BIFs 2012-05-23 16:34:03 -05:00
bifs.system Add more tests for previously-untested BIFs 2012-05-24 16:33:19 -05:00
bifs.system_env Fix documentation for system_env BIF 2012-06-01 13:12:55 -05:00
bifs.to_addr Improve error messages from to_addr and to_subnet BIFs 2019-08-01 10:49:03 -07:00
bifs.to_count Fix the to_count function to use strtoull versus strtoll. 2015-04-16 09:56:18 -05:00
bifs.to_double Updating tests for the #start/#end change. 2012-07-19 22:28:55 -07:00
bifs.to_double_from_string Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
bifs.to_int BIT-1894: fix bad integer casts in BIFs: sort, rand, order, to_int 2018-01-26 15:49:34 -06:00
bifs.to_interval Add more tests for previously-untested BIFs 2012-05-25 17:15:29 -05:00
bifs.to_port Fix to_port() BIF for port strings with a port number of zero. 2012-12-18 15:08:18 -06:00
bifs.to_subnet Improve error messages from to_addr and to_subnet BIFs 2019-08-01 10:49:03 -07:00
bifs.to_time Add more tests for previously-untested BIFs 2012-05-25 17:15:29 -05:00
bifs.topk Allow iterating over bif functions with result type vector of any. 2014-02-25 15:30:29 -08:00
bifs.type_name Merge remote-tracking branch 'origin/topic/dnthayer/bif-tests' 2012-06-06 11:42:16 -07:00
bifs.unique_id Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
bifs.unique_id-rnd
bifs.uuid_to_string Add more tests for previously-untested BIFs 2012-05-30 16:30:50 -05:00
bifs.x509_verify Adjust x509 unit tests to work around OpenSSL 1.0 vs. 1.1 differences 2018-06-29 16:01:23 -05:00
broker.connect-on-retry Merge topic/actor-system throug a squashed commit. 2018-05-18 22:39:23 +00:00
broker.disconnect BIT-1941: improve reliability of broker.disconnect unit test 2018-07-02 16:32:13 -05:00
broker.error Merge topic/actor-system throug a squashed commit. 2018-05-18 22:39:23 +00:00
broker.opaque Remove opaque of ocsp_resp. 2019-06-18 11:09:16 -07:00
broker.remote_event Merge topic/actor-system throug a squashed commit. 2018-05-18 22:39:23 +00:00
broker.remote_event_any Support unserializing broker data into type 'any' 2018-05-31 10:39:40 -05:00
broker.remote_event_auto Merge topic/actor-system throug a squashed commit. 2018-05-18 22:39:23 +00:00
broker.remote_event_ssl_auth Merge topic/actor-system throug a squashed commit. 2018-05-18 22:39:23 +00:00
broker.remote_event_vector_any Fix recursive type checks/casts of broker data into type 'any' 2018-09-10 14:55:50 -05:00
broker.remote_id Improve broker.remote_id unit test 2018-10-03 15:50:07 -05:00
broker.remote_log Merge topic/actor-system throug a squashed commit. 2018-05-18 22:39:23 +00:00
broker.remote_log_late_join Merge topic/actor-system throug a squashed commit. 2018-05-18 22:39:23 +00:00
broker.remote_log_types Merge topic/actor-system throug a squashed commit. 2018-05-18 22:39:23 +00:00
broker.ssl_auth_failure Parallelize communication tests using btest TEST-PORT 2018-11-04 15:29:59 -06:00
broker.store.clone Merge topic/actor-system throug a squashed commit. 2018-05-18 22:39:23 +00:00
broker.store.local Merge topic/actor-system throug a squashed commit. 2018-05-18 22:39:23 +00:00
broker.store.ops Update broker unit test output. 2019-05-23 18:06:47 -07:00
broker.store.record Update broker unit test output. 2019-05-23 18:06:47 -07:00
broker.store.set Merge topic/actor-system throug a squashed commit. 2018-05-18 22:39:23 +00:00
broker.store.sqlite Update broker unit test output. 2019-05-23 18:06:47 -07:00
broker.store.table Merge topic/actor-system throug a squashed commit. 2018-05-18 22:39:23 +00:00
broker.store.type-conversion A few more updates to the digest functions. 2019-01-24 10:44:28 -08:00
broker.store.vector Update broker unit test output. 2019-05-23 18:06:47 -07:00
broker.unpeer Merge topic/actor-system throug a squashed commit. 2018-05-18 22:39:23 +00:00
core.bits_per_uid Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
core.check-unused-event-handlers Add config framework. 2017-11-29 13:46:59 -08:00
core.checksums Change default value of peer_description "zeek" 2019-06-06 19:49:30 -07:00
core.cisco-fabric-path Fix unit tests for new ordering from NetSessions::Drain 2019-08-21 09:24:02 -04:00
core.conn-size-threshold Add duration thresholding to the conn-size analyzer. 2019-08-01 11:57:40 -07:00
core.conn-uid Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
core.connection-successful GH-646: add new "successful_connection_remove" event 2019-11-11 19:52:59 -08:00
core.connection_flip_roles Improve analysis of TCP SYN/SYN-ACK reversal situations. 2014-03-11 17:03:59 -05:00
core.disable-mobile-ipv6 GH-545: add "addl" parameter to flow_weird and net_weird events 2019-08-20 22:45:22 -04:00
core.discarder Change IPv6 output format to no longer automatically be bracketed. 2012-05-07 12:55:54 -05:00
core.div-by-zero Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
core.dns-init Merge remote-tracking branch 'origin/topic/jsiwek/fix-dns-double-free' 2011-12-01 16:40:07 -08:00
core.embedded-null Merge branch 'Reporter/MessageFix' of https://github.com/catenacyber/bro 2018-04-16 10:58:45 -07:00
core.erspan Implement ERSPAN support. 2017-02-03 12:29:22 -08:00
core.erspanII Improve ERSPAN Type III support 2019-01-17 18:06:10 -06:00
core.erspanIII Added ERSPAN III testing 2019-01-24 14:05:13 +00:00
core.ether-addrs Moved link-layer addresses into endpoints. 2016-06-02 01:46:26 +02:00
core.event-arg-reuse Fix assignments to event arguments becoming visible to subsequent 2017-10-27 13:28:48 -07:00
core.expr-exception Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
core.fake_dns Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
core.global_opaque_val Fix global opaque val segfault, addresses BIT-1071 2013-08-29 17:17:40 -05:00
core.history-flip Make tunnel_parents in conn.log optional. 2018-01-12 13:46:00 -08:00
core.icmp.icmp-context Change IPv6 output format to no longer automatically be bracketed. 2012-05-07 12:55:54 -05:00
core.icmp.icmp-events Changing what's escaped when printing. 2015-04-15 16:59:50 -07:00
core.icmp.icmp6-context Change IPv6 output format to no longer automatically be bracketed. 2012-05-07 12:55:54 -05:00
core.icmp.icmp6-events Extract ICMPv6 NDP options and include in ICMP events (addresses #833). 2012-06-26 17:10:00 -05:00
core.icmp.icmp6-nd-options Changing what's escaped when printing. 2015-04-15 16:59:50 -07:00
core.icmp.icmp_sent BIT-342: add "icmp_sent_payload" event. 2015-03-18 16:16:24 -05:00
core.init-error Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
core.ip-broken-header Change default value of peer_description "zeek" 2019-06-06 19:49:30 -07:00
core.ipv6-atomic-frag Change IPv6 output format to no longer automatically be bracketed. 2012-05-07 12:55:54 -05:00
core.ipv6-flow-labels Improve availability of IPv6 flow label in connection records. 2012-05-22 15:18:33 -05:00
core.ipv6-frag Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
core.ipv6_esp Change IPv6 output format to no longer automatically be bracketed. 2012-05-07 12:55:54 -05:00
core.ipv6_ext_headers Changing what's escaped when printing. 2015-04-15 16:59:50 -07:00
core.ipv6_zero_len_ah Updated affected test case. 2016-04-20 00:23:11 +02:00
core.leaks.basic-cluster Unit test tweaks/fixes. 2012-08-16 16:33:46 -05:00
core.leaks.broker.clone_store Merge topic/actor-system throug a squashed commit. 2018-05-18 22:39:23 +00:00
core.leaks.broker.data Merge remote-tracking branch 'origin/topic/johanna/remove-serializer' 2019-06-20 13:38:54 -07:00
core.leaks.broker.remote_event Fix memory leak due to enum type/val circular references 2019-01-29 18:28:13 -06:00
core.leaks.broker.remote_log Fix memory leak due to enum type/val circular references 2019-01-29 18:28:13 -06:00
core.leaks.closure-sending Add memory leak test of closure (un)serialization 2019-08-07 12:41:22 -07:00
core.leaks.hll_cluster add clustered leak test for hll. No issues. 2013-08-29 14:01:22 -07:00
core.load-explicit-bro-suffix-fallback GH-237: add @load foo.bro -> foo.zeek fallback 2019-04-16 17:49:37 -07:00
core.load-file-extension Add test cases to verify new file extension is recognized 2019-04-11 12:26:50 -05:00
core.load-pkg Add test cases to verify new file extension is recognized 2019-04-11 12:26:50 -05:00
core.load-prefixes Update tests and baselines due to renaming all scripts 2019-04-11 23:32:58 -05:00
core.load-relative
core.load-unload Add test cases to verify new file extension is recognized 2019-04-11 12:26:50 -05:00
core.mobile-ipv6-home-addr Change IPv6 output format to no longer automatically be bracketed. 2012-05-07 12:55:54 -05:00
core.mobile-ipv6-routing Change IPv6 output format to no longer automatically be bracketed. 2012-05-07 12:55:54 -05:00
core.mobility-checksums Fix mobility checksums unit test. 2012-05-17 14:47:09 -05:00
core.mobility_msg Change IPv6 output format to no longer automatically be bracketed. 2012-05-07 12:55:54 -05:00
core.mpls-in-vlan Fix unit tests for new ordering from NetSessions::Drain 2019-08-21 09:24:02 -04:00
core.negative-time Change default value of peer_description "zeek" 2019-06-06 19:49:30 -07:00
core.nflog Merge branch 'master' of https://github.com/rdenniston/zeek 2019-03-19 19:19:02 -07:00
core.nop
core.option-errors Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
core.option-errors-2 Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
core.option-errors-3 Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
core.option-priorities Add config framework. 2017-11-29 13:46:59 -08:00
core.option-redef Make options redef-able by default. 2018-08-10 11:53:36 -07:00
core.option-runtime-errors More bro-to-zeek renaming in the unit tests 2019-05-16 02:27:54 -05:00
core.option-runtime-errors-2 Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
core.option-runtime-errors-3 Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
core.option-runtime-errors-4 Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
core.option-runtime-errors-5 Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
core.option-runtime-errors-6 Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
core.option-runtime-errors-7 Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
core.option-runtime-errors-8 Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
core.option-runtime-errors-9 Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
core.option-runtime-errors-10 Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
core.option-runtime-errors-11 Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
core.option-runtime-errors-12 Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
core.option-runtime-errors-13 Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
core.pcap.dumper Merge remote-tracking branch 'origin/topic/jazoff/fix-snaplen' 2018-08-21 14:54:55 -05:00
core.pcap.dynamic-filter Make tunnel_parents in conn.log optional. 2018-01-12 13:46:00 -08:00
core.pcap.filter-error Update tests and baselines due to renaming all scripts 2019-04-11 23:32:58 -05:00
core.pcap.input-error A set of various fixes and smaller API tweaks, plus tests. 2014-08-24 19:55:26 -07:00
core.pcap.pseudo-realtime A set of various fixes and smaller API tweaks, plus tests. 2014-08-24 19:55:26 -07:00
core.pcap.read-trace-with-filter Change default value of peer_description "zeek" 2019-06-06 19:49:30 -07:00
core.pppoe Fix unit tests for new ordering from NetSessions::Drain 2019-08-21 09:24:02 -04:00
core.pppoe-over-qinq Duplicate TCP segment should trigger tcp_multiple_retransmissions 2019-07-28 15:15:40 -06:00
core.print-bpf-filters Disable MQTT by default 2019-08-05 17:04:39 -07:00
core.print-interval GH-589: improve printing of sub-microsecond intervals 2019-09-23 19:57:49 -07:00
core.q-in-q Make tunnel_parents in conn.log optional. 2018-01-12 13:46:00 -08:00
core.radiotap Make tunnel_parents in conn.log optional. 2018-01-12 13:46:00 -08:00
core.raw_packet Allow for logging of the VLAN data about a connection in conn.log 2015-07-22 14:13:17 -04:00
core.reassembly Rewrite weird logging. 2016-06-15 13:49:35 -07:00
core.recursive-event Merge topic/actor-system throug a squashed commit. 2018-05-18 22:39:23 +00:00
core.reporter GH-443: fix uses of timestamp 0 in cluster diagnostic logs 2019-06-27 23:00:42 -07:00
core.reporter-error-in-handler Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
core.reporter-fmt-strings Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
core.reporter-parse-error Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
core.reporter-runtime-error Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
core.reporter-type-mismatch Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
core.reporter-weird-sampling Add rate-limiting sampling mechanism for weird events 2018-07-26 19:57:36 -05:00
core.reporter-weird-sampling-disable Permit weird sampling rate of 0. 2018-09-05 13:12:23 -07:00
core.tcp.fin-retransmit Moved link-layer addresses into endpoints. 2016-06-02 01:46:26 +02:00
core.tcp.large-file-reassembly Refined state machine update placement to (1) properly deal with gaps capped 2019-04-22 09:13:23 -07:00
core.tcp.miss-end-data Refined state machine update placement to (1) properly deal with gaps capped 2019-04-22 09:13:23 -07:00
core.tcp.missing-syn Make tunnel_parents in conn.log optional. 2018-01-12 13:46:00 -08:00
core.tcp.options GH-618: add "tcp_options" event containing TCP option values 2019-10-03 18:59:02 -07:00
core.tcp.quantum-insert Extending rexmit_inconsistency() event to receive an additional 2015-10-26 14:16:08 -07:00
core.tcp.rst-after-syn Moved link-layer addresses into endpoints. 2016-06-02 01:46:26 +02:00
core.tcp.rxmit-history Fix unit tests for new ordering from NetSessions::Drain 2019-08-21 09:24:02 -04:00
core.tcp.tcp-dups Duplicate TCP segment should trigger tcp_multiple_retransmissions 2019-07-28 15:15:40 -06:00
core.tcp.truncated-header Fix potential crash TCP headers were captured incompletely. 2015-08-30 18:49:05 -07:00
core.truncation Change default value of peer_description "zeek" 2019-06-06 19:49:30 -07:00
core.tunnels.ayiya Fix unit tests for new ordering from NetSessions::Drain 2019-08-21 09:24:02 -04:00
core.tunnels.gre Merge branch 'ntp-rewrite' of https://github.com/mauropalumbo75/zeek 2019-06-15 19:11:34 -07:00
core.tunnels.gre-in-gre Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
core.tunnels.gre-pptp BIT-1798: fix PPTP GRE tunnel decapsulation 2018-08-14 16:48:04 -05:00
core.tunnels.gtp.different_dl_and_ul Fix unit tests for new ordering from NetSessions::Drain 2019-08-21 09:24:02 -04:00
core.tunnels.gtp.ext_header Add parsing for GTPv1 extension headers and control messages. 2013-02-07 14:59:02 -06:00
core.tunnels.gtp.false_gtp Make tunnel_parents in conn.log optional. 2018-01-12 13:46:00 -08:00
core.tunnels.gtp.inner_ipv6 Make tunnel_parents in conn.log optional. 2018-01-12 13:46:00 -08:00
core.tunnels.gtp.inner_teredo Fix unit tests for new ordering from NetSessions::Drain 2019-08-21 09:24:02 -04:00
core.tunnels.gtp.non_recursive Add parsing for GTPv1 extension headers and control messages. 2013-02-07 14:59:02 -06:00
core.tunnels.gtp.not_user_plane_data Make tunnel_parents in conn.log optional. 2018-01-12 13:46:00 -08:00
core.tunnels.gtp.opt_header Make tunnel_parents in conn.log optional. 2018-01-12 13:46:00 -08:00
core.tunnels.gtp.outer_ip_frag Refined state machine update placement to (1) properly deal with gaps capped 2019-04-22 09:13:23 -07:00
core.tunnels.gtp.pdp_ctx_messages Changing what's escaped when printing. 2015-04-15 16:59:50 -07:00
core.tunnels.gtp.unknown_or_too_short Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
core.tunnels.ip-in-ip Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
core.tunnels.ip-in-ip-version Change default value of peer_description "zeek" 2019-06-06 19:49:30 -07:00
core.tunnels.ip-tunnel-uid Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
core.tunnels.teredo Fix unit tests for new ordering from NetSessions::Drain 2019-08-21 09:24:02 -04:00
core.tunnels.teredo_bubble_with_payload Fix unit tests for new ordering from NetSessions::Drain 2019-08-21 09:24:02 -04:00
core.tunnels.vxlan Fix unit tests for new ordering from NetSessions::Drain 2019-08-21 09:24:02 -04:00
core.vlan-mpls Make tunnel_parents in conn.log optional. 2018-01-12 13:46:00 -08:00
core.when-interpreter-exceptions GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
core.wlanmon Merge branch 'p-l--topic/support-wlan-monitor' 2018-05-15 13:32:34 -04:00
core.x509-generalizedtime Refactor X509 generalizedtime support and test. 2015-09-18 12:46:49 -07:00
coverage.bare-load-baseline GH-618: add "tcp_options" event containing TCP option values 2019-10-03 18:59:02 -07:00
coverage.bare-mode-errors Update unit test output to match json.zeek being deprecated and slight format changes to JSON output 2019-07-02 13:14:52 -07:00
coverage.coverage-blacklist Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
coverage.default-load-baseline GH-618: add "tcp_options" event containing TCP option values 2019-10-03 18:59:02 -07:00
coverage.find-bro-logs Merge remote-tracking branch 'origin/topic/dev/print-to-log' 2019-12-02 13:47:09 -08:00
coverage.init-default Update unit test output to match json.zeek being deprecated and slight format changes to JSON output 2019-07-02 13:14:52 -07:00
coverage.zeek-profiler-file Fix ZEEK_PROFILER_FILE file format/parsing 2019-11-07 16:47:09 -08:00
doc.zeekygen.all_scripts Rename Zeexygen to Zeekygen 2019-05-02 21:39:21 -07:00
doc.zeekygen.command_line Rename Zeexygen to Zeekygen 2019-05-02 21:39:21 -07:00
doc.zeekygen.comment_retrieval_bifs Rename Zeexygen to Zeekygen 2019-05-02 21:39:21 -07:00
doc.zeekygen.enums Rename Zeexygen to Zeekygen 2019-05-02 21:39:21 -07:00
doc.zeekygen.example Rename Zeexygen to Zeekygen 2019-05-02 21:39:21 -07:00
doc.zeekygen.func-params Rename Zeexygen to Zeekygen 2019-05-02 21:39:21 -07:00
doc.zeekygen.identifier Rename Zeexygen to Zeekygen 2019-05-02 21:39:21 -07:00
doc.zeekygen.package Rename Zeexygen to Zeekygen 2019-05-02 21:39:21 -07:00
doc.zeekygen.package_index Rename Zeexygen to Zeekygen 2019-05-02 21:39:21 -07:00
doc.zeekygen.records Rename Zeexygen to Zeekygen 2019-05-02 21:39:21 -07:00
doc.zeekygen.script_index Rename Zeexygen to Zeekygen 2019-05-02 21:39:21 -07:00
doc.zeekygen.script_summary Rename Zeexygen to Zeekygen 2019-05-02 21:39:21 -07:00
doc.zeekygen.type-aliases Rename Zeexygen to Zeekygen 2019-05-02 21:39:21 -07:00
doc.zeekygen.vectors GH-427: improve default ID values shown by Zeekygen 2019-06-24 19:02:05 -07:00
language.addr Add parsing rules for IPv4/IPv6 subnet literal constants, addresses #888 2012-10-22 15:57:21 -05:00
language.any Add more language tests 2012-09-04 17:39:00 -05:00
language.at-deprecated Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
language.at-dir Change @PATH to @DIR for clarity. Add @FILENAME. Addresses #869. 2013-06-05 11:01:11 -05:00
language.at-filename Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
language.at-if Add more language tests 2012-08-31 14:05:02 -05:00
language.at-if-event Merge remote-tracking branch 'origin/topic/johanna/bit-1976' 2018-08-29 18:28:54 -05:00
language.at-if-invalid Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
language.at-ifdef Add more language tests 2012-08-31 14:05:02 -05:00
language.at-ifndef Add more language tests 2012-08-31 14:05:02 -05:00
language.at-load Add more language tests 2012-08-31 14:05:02 -05:00
language.attr-default-coercion BIT-1288: Improve coercion of &default expressions. 2014-11-18 12:40:16 -06:00
language.attr-default-global-set-error Improve &default validation for global vars: exclude sets 2019-10-15 18:24:35 -07:00
language.bool Add more language tests 2012-09-04 17:39:00 -05:00
language.closure-sending fix bug in serialization test 2019-07-25 11:53:16 -07:00
language.closure-sending-naming Allow serialization of closures over Broker. 2019-07-12 10:31:40 -07:00
language.common-mistakes Merge remote-tracking branch 'origin/topic/seth/zeek_init' 2019-04-19 11:24:29 -07:00
language.conditional-expression Add more language tests 2012-08-29 17:14:03 -05:00
language.const Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
language.container-ctor-scope Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
language.copy Fix TableVal::DoClone to use CloneState cache 2019-06-20 18:34:36 -07:00
language.copy-all-opaques Merge remote-tracking branch 'upstream/master' into paraglob 2019-06-20 14:14:48 -07:00
language.copy-all-types Finish implementation of copy method. 2019-05-22 14:29:37 -07:00
language.copy-cycle GH-293: Protect copy() against reference cycles. 2019-06-03 15:20:30 +00:00
language.count test suite for bitwise operators 2018-04-26 13:25:04 -07:00
language.cross-product-init Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
language.default-params GH-654: allow table() in function &default expressions 2019-10-25 13:00:46 -07:00
language.delete-field
language.delete-field-set
language.deprecated GH-171: support warning messages alongside deprecated attributes 2019-06-20 22:57:15 -07:00
language.double Add more language tests 2012-09-04 17:39:00 -05:00
language.enum Add tests of the Bro scripting language 2012-08-24 11:32:49 -05:00
language.enum-desc
language.enum-multiple-decls Fix ref-counting bug in EnumType copy ctor 2019-07-15 12:42:56 -07:00
language.enum-scope
language.eof-parse-errors Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
language.event Some more testing fixes. 2019-04-14 09:58:30 -04:00
language.event-local-var Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
language.expire-expr-error Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
language.expire-func-undef Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
language.expire-redef Fix the expire-redef.bro test 2017-08-10 14:15:31 -05:00
language.expire-type-error Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
language.expire_func Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
language.expire_func_mod &expire_func(table, arg1, arg2, ...) + type checking. 2019-07-18 12:11:27 -07:00
language.expire_multiple Check that there is only one of read, write, create_expire 2016-03-18 12:34:26 -07:00
language.expire_multiple-2 Check that there is only one of read, write, create_expire 2016-03-18 12:34:26 -07:00
language.expire_multiple-3 Check that there is only one of read, write, create_expire 2016-03-18 12:34:26 -07:00
language.expire_subnet GH-589: improve printing of sub-microsecond intervals 2019-09-23 19:57:49 -07:00
language.file Add tests of the Bro scripting language 2012-08-24 11:32:49 -05:00
language.for Add key-value for loop 2019-03-14 09:46:16 -07:00
language.func-assignment Fix function type-equivalence requiring same param names, addresses #957 2013-03-07 13:02:33 -06:00
language.function Add tests of the Bro scripting language 2012-08-24 11:32:49 -05:00
language.function-closures Frame merge and cleanup for merge. 2019-07-25 11:19:17 -07:00
language.function-sending Allow serialization of closures over Broker. 2019-07-12 10:31:40 -07:00
language.hook Fix precedence of hook 2016-06-13 16:02:06 -07:00
language.hook_calls Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
language.if Add tests of the Bro scripting language 2012-08-24 11:32:49 -05:00
language.incr-vec-expr Fix segfault when incrementing whole vector values. 2012-07-13 14:32:50 -05:00
language.index-assignment-invalid Merge remote-tracking branch 'origin/topic/seth/zeek_init' 2019-04-19 11:24:29 -07:00
language.init-in-anon-function Merge branch 'patch-1' of https://github.com/neu5ron/bro 2019-03-13 13:49:17 -07:00
language.int Add more language tests 2012-09-04 17:39:00 -05:00
language.interval GH-219: fix |x| operator int overflow / floating point type inconsistency 2019-01-22 16:42:40 -06:00
language.invalid_index Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
language.ipv6-literals Change IPv6 output format to no longer automatically be bracketed. 2012-05-07 12:55:54 -05:00
language.key-value-for Add key-value for loop 2019-03-14 09:46:16 -07:00
language.module Add more language tests 2012-08-29 17:14:03 -05:00
language.more-closure-tests fix bug in serialization test 2019-07-25 11:53:16 -07:00
language.named-record-ctors Fix record coercion tolerance of optional fields. 2013-10-23 11:37:23 -05:00
language.named-set-ctors Improve set constructor argument coercion. 2013-05-29 16:49:12 -05:00
language.named-table-ctors Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
language.named-vector-ctors Allow named vector constructors. Addresses #983. 2013-05-30 10:57:28 -05:00
language.next-test Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
language.no-module Allow access to global variables using GLOBAL:: namespace. 2016-12-07 15:28:34 -08:00
language.null-statement Add tests of the Bro scripting language 2012-08-24 11:32:49 -05:00
language.outer_param_binding Add lambda expressions with closures to Zeek. 2019-06-20 18:43:56 -07:00
language.paraglob Fix creating a StringVal from std::string. 2019-06-26 11:41:39 -07:00
language.paraglob-serialization Make paraglob serializable and copyable. 2019-06-04 14:56:48 -07:00
language.pattern use PCRE syntax instead of the beautiful new (?i ...) syntax 2018-06-29 13:01:05 -07:00
language.port Add more language tests 2012-09-04 17:39:00 -05:00
language.precedence Add more language tests 2012-08-29 17:14:03 -05:00
language.raw_output_attr
language.raw_output_attr-2
language.rec-comp-init
language.rec-nested-opt
language.rec-of-tbl
language.rec-table-default Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
language.record-bad-ctor Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
language.record-bad-ctor2 Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
language.record-ceorce-orphan Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
language.record-coerce-clash Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
language.record-default-coercion GH-654: allow table() in record &default expressions 2019-10-25 12:48:52 -07:00
language.record-default-set-mismatch Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
language.record-extension
language.record-function-recursion Fix crash when printing type of recursive structures. 2016-02-03 13:22:05 -08:00
language.record-index-complex-fields GH-151: fix hash calculation for nested sets 2019-01-18 20:54:22 -06:00
language.record-recursive-coercion
language.record-redef-after-init BIT-1909: fix invalid redef'd record field accesses 2018-04-11 16:23:26 -05:00
language.record-ref-assign
language.record-type-checking Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
language.redef-same-prefixtable-idx Fix use-after-free in some cases of reassigning a table index. 2014-06-10 13:38:32 -05:00
language.redef-vector BIT-466: add redef += support to vectors 2018-08-17 15:16:15 -05:00
language.returnwhen GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
language.set documentation, test suite update 2018-07-20 08:57:37 -07:00
language.set-opt-record-index Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
language.set-type-checking Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
language.short-circuit Add tests of the Bro scripting language 2012-08-24 11:32:49 -05:00
language.sizeof GH-219: fix |x| operator int overflow / floating point type inconsistency 2019-01-22 16:42:40 -06:00
language.smith-waterman-test
language.string Add more language tests 2012-09-04 17:39:00 -05:00
language.string-indexing Support omission of string slice low/high indices, BIT-1097. 2013-12-04 15:11:48 -06:00
language.strings
language.subnet Add parsing rules for IPv4/IPv6 subnet literal constants, addresses #888 2012-10-22 15:57:21 -05:00
language.subnet-errors Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
language.switch-error-mixed Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
language.switch-incomplete Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
language.switch-statement Finish implementation of script-layer switch statement. Addresses #754. 2012-12-20 12:49:50 -06:00
language.switch-types Merge topic/actor-system throug a squashed commit. 2018-05-18 22:39:23 +00:00
language.switch-types-error-duplicate Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
language.switch-types-error-unsupported Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
language.switch-types-vars Merge topic/actor-system throug a squashed commit. 2018-05-18 22:39:23 +00:00
language.table Fix ambiguity between composite table index and record ctor expressions. 2012-11-16 12:43:39 -06:00
language.table-default-record Table lookups return copy of non-const &default vals (addresses #981). 2013-05-03 11:22:15 -05:00
language.table-init Allow local table variables to be initialized with {} list expressions. 2012-01-04 16:44:25 -06:00
language.table-init-attrs Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
language.table-init-container-ctors Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
language.table-init-record-idx Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
language.table-init-record-idx-2 Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
language.table-init-record-idx-3 Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
language.table-init-record-idx-4 Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
language.table-list-assign-type-check Merge branch 'table-error' of https://github.com/ZekeMedley/zeek 2019-05-28 10:51:50 -07:00
language.table-redef Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
language.table-redef-default Fix redef'ing a table with a new &default attribute 2019-10-11 18:57:03 -07:00
language.table-type-checking Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
language.ternary-record-mismatch Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
language.time Add more language tests 2012-09-04 17:39:00 -05:00
language.timeout Add tests of the Bro scripting language 2012-08-24 11:32:49 -05:00
language.type-cast-any Merge topic/actor-system throug a squashed commit. 2018-05-18 22:39:23 +00:00
language.type-cast-error-dynamic Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
language.type-cast-error-static Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
language.type-cast-same Merge topic/actor-system throug a squashed commit. 2018-05-18 22:39:23 +00:00
language.type-check-any Merge topic/actor-system throug a squashed commit. 2018-05-18 22:39:23 +00:00
language.type-check-vector Fix is/as operators on vector values 2018-09-10 14:54:54 -05:00
language.type-coerce-numerics Merge remote-tracking branch 'origin/topic/timw/159-coerce-counts' 2019-06-04 17:57:15 -07:00
language.type-type-error Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
language.undefined-delete-field Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
language.uninitialized-local Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
language.uninitialized-local2 Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
language.vector Add ability to grow/shrink a vector using slicing, also adds Insert/Remove methods for VectorVal 2019-06-17 15:34:24 -07:00
language.vector-any-append Support appending to vector of any 2018-11-07 11:48:43 -06:00
language.vector-coerce-expr
language.vector-in-operator BIT-1280: Fix checking vector indices via "in". 2014-10-28 14:21:16 -05:00
language.vector-list-init-records
language.vector-of-enum Improve type inference for vector-of-enum constructor 2019-07-25 23:27:47 -07:00
language.vector-of-enum-mismatch Improve type inference for vector-of-enum constructor 2019-07-25 23:27:47 -07:00
language.vector-type-checking Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
language.vector-unspecified Allow iterating over bif functions with result type vector of any. 2014-02-25 15:30:29 -08:00
language.when Fix race condition in language/when.bro test 2012-09-24 18:20:42 -05:00
language.when-on-globals Add new test for when-statement watching global variables. 2019-06-07 23:17:29 +00:00
language.when-unitialized-rhs Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
language.while Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
language.wrong-delete-field Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
language.wrong-record-extension
language.zeek_init Update docs and tests for bro_(init|done) -> zeek_(init|done) 2019-04-14 08:49:12 -04:00
language.zeek_script_loaded GH-236: Add zeek_script_loaded event, deprecate bro_script_loaded 2019-04-19 12:02:22 -07:00
plugins.bifs-and-scripts Bro plugins should support a patch version (x.y.z) 2018-09-30 20:30:22 -04:00
plugins.bifs-and-scripts-install Bro plugins should support a patch version (x.y.z) 2018-09-30 20:30:22 -04:00
plugins.file Bro plugins should support a patch version (x.y.z) 2018-09-30 20:30:22 -04:00
plugins.hooks GH-646: add new "successful_connection_remove" event 2019-11-11 19:52:59 -08:00
plugins.init-plugin Bro plugins should support a patch version (x.y.z) 2018-09-30 20:30:22 -04:00
plugins.legacy Additional Bro to Zeek renaming 2019-05-19 16:51:36 -05:00
plugins.logging-hooks Plugin: Add hooks for log init and writing. 2017-04-24 14:02:05 -07:00
plugins.pktdumper Bro plugins should support a patch version (x.y.z) 2018-09-30 20:30:22 -04:00
plugins.pktsrc Make tunnel_parents in conn.log optional. 2018-01-12 13:46:00 -08:00
plugins.plugin-nopatchversion Bro plugins should support a patch version (x.y.z) 2018-09-30 20:30:22 -04:00
plugins.plugin-withpatchversion Bro plugins should support a patch version (x.y.z) 2018-09-30 20:30:22 -04:00
plugins.protocol Bro plugins should support a patch version (x.y.z) 2018-09-30 20:30:22 -04:00
plugins.reader Bro plugins should support a patch version (x.y.z) 2018-09-30 20:30:22 -04:00
plugins.reporter-hook Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
plugins.writer Change default value of peer_description "zeek" 2019-06-06 19:49:30 -07:00
scripts.base.files.data_event.basic Make "in" keyword work with binary data. 2017-09-18 12:12:38 -07:00
scripts.base.files.entropy.basic Add a file entropy test. 2016-04-13 00:44:02 -04:00
scripts.base.files.extract.limit Extend file extraction log. 2017-01-25 01:16:46 -05:00
scripts.base.files.pe.basic Fix unit tests for new ordering from NetSessions::Drain 2019-08-21 09:24:02 -04:00
scripts.base.files.unified2.alert Changing what's escaped when printing. 2015-04-15 16:59:50 -07:00
scripts.base.files.x509.1999 Fix parsing of x509 pre-y2k dates 2016-04-26 12:30:28 -07:00
scripts.base.files.x509.signed_certificate_timestamp SCT: Allow verification of SCTs in Certs. 2017-03-29 09:17:24 -07:00
scripts.base.files.x509.signed_certificate_timestamp_ocsp SCT: add validation of proofs for extensions and OCSP. 2017-03-29 09:04:05 -07:00
scripts.base.frameworks.analyzer.schedule-analyzer Moving all analyzers over to new structure. 2013-04-16 20:52:03 -07:00
scripts.base.frameworks.cluster.custom_pool_exclusivity GH-387: update Broker topic names to use "zeek/" prefix 2019-05-29 15:56:37 -07:00
scripts.base.frameworks.cluster.custom_pool_limits GH-387: update Broker topic names to use "zeek/" prefix 2019-05-29 15:56:37 -07:00
scripts.base.frameworks.cluster.forwarding Add Broker::forward() function 2018-08-28 19:42:22 -05:00
scripts.base.frameworks.cluster.log_distribution Merge topic/actor-system throug a squashed commit. 2018-05-18 22:39:23 +00:00
scripts.base.frameworks.cluster.start-it-up Merge topic/actor-system throug a squashed commit. 2018-05-18 22:39:23 +00:00
scripts.base.frameworks.cluster.start-it-up-logger Misc. unit test improvements 2018-08-10 16:58:27 -05:00
scripts.base.frameworks.cluster.topic_distribution GH-387: update Broker topic names to use "zeek/" prefix 2019-05-29 15:56:37 -07:00
scripts.base.frameworks.cluster.topic_distribution_bifs Merge topic/actor-system throug a squashed commit. 2018-05-18 22:39:23 +00:00
scripts.base.frameworks.config.basic GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
scripts.base.frameworks.config.basic_cluster Continue work on config framework clusterization. 2018-06-27 10:47:17 -07:00
scripts.base.frameworks.config.cluster_resend Add sending of values to nodes that dropped out. 2018-06-29 13:10:00 -07:00
scripts.base.frameworks.config.container-options GH-591: allow Config::set_value() to use empty/unspecified table/sets 2019-10-02 22:13:43 -07:00
scripts.base.frameworks.config.read_config Support whitespace at end of line for config reader. 2019-10-14 11:43:16 -04:00
scripts.base.frameworks.config.read_config_cluster Update broker unit test output. 2019-05-23 18:06:47 -07:00
scripts.base.frameworks.config.several-files GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
scripts.base.frameworks.config.updates GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
scripts.base.frameworks.config.weird Weird settings: make constants into options. 2018-09-05 13:12:23 -07:00
scripts.base.frameworks.control.configuration_update
scripts.base.frameworks.control.id_value
scripts.base.frameworks.dpd.max_violations Add DPD::max_violations option 2019-07-19 13:00:02 -07:00
scripts.base.frameworks.file-analysis.actions.data_event Changing what's escaped when printing. 2015-04-15 16:59:50 -07:00
scripts.base.frameworks.file-analysis.bifs.file_exists_lookup_file Update tests to reflect new error msg. 2019-06-24 09:34:02 -07:00
scripts.base.frameworks.file-analysis.bifs.register_mime_type Fixing tests 2017-01-25 02:06:35 -05:00
scripts.base.frameworks.file-analysis.bifs.remove_action Changing what's escaped when printing. 2015-04-15 16:59:50 -07:00
scripts.base.frameworks.file-analysis.bifs.set_timeout_interval GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
scripts.base.frameworks.file-analysis.bifs.stop Updates the files event api and brings file reassembly up to master. 2014-09-26 00:40:37 -04:00
scripts.base.frameworks.file-analysis.big-bof-buffer Fixing tests 2017-01-25 02:06:35 -05:00
scripts.base.frameworks.file-analysis.byteranges Adding test with command line that used to trigger a crash. 2017-01-31 14:52:37 -08:00
scripts.base.frameworks.file-analysis.ftp Updates the files event api and brings file reassembly up to master. 2014-09-26 00:40:37 -04:00
scripts.base.frameworks.file-analysis.http.get Merge branch 'topic/robin/ascii-escape-normalization' 2015-04-21 15:59:54 -07:00
scripts.base.frameworks.file-analysis.http.multipart Merge branch 'topic/robin/ascii-escape-normalization' 2015-04-21 15:59:54 -07:00
scripts.base.frameworks.file-analysis.http.partial-content Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.frameworks.file-analysis.http.pipeline Changing what's escaped when printing. 2015-04-15 16:59:50 -07:00
scripts.base.frameworks.file-analysis.http.post Merge branch 'topic/robin/ascii-escape-normalization' 2015-04-21 15:59:54 -07:00
scripts.base.frameworks.file-analysis.input.basic GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
scripts.base.frameworks.file-analysis.irc Changing what's escaped when printing. 2015-04-15 16:59:50 -07:00
scripts.base.frameworks.file-analysis.logging Fixing tests 2017-01-25 02:06:35 -05:00
scripts.base.frameworks.file-analysis.smtp OCSP/TLS/SCT: Fix a number of test failures. 2017-05-06 08:01:20 -07:00
scripts.base.frameworks.input.bad_patterns Make paraglob serializable and copyable. 2019-06-04 14:56:48 -07:00
scripts.base.frameworks.input.basic Make parsing of booleans a little bit more lenient. 2018-08-10 10:03:22 -07:00
scripts.base.frameworks.input.bignumber Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.frameworks.input.binary Changing what's escaped when printing. 2015-04-15 16:59:50 -07:00
scripts.base.frameworks.input.config.basic Add config framework. 2017-11-29 13:46:59 -08:00
scripts.base.frameworks.input.config.enum-set GH-591: fix reading set[enum] values from input files 2019-10-02 22:09:16 -07:00
scripts.base.frameworks.input.config.errors Merge remote-tracking branch 'origin/topic/johanna/config' 2018-02-07 14:10:48 -08:00
scripts.base.frameworks.input.config.spaces Be more liberal with whitespaces for ip-addresses, subnets, etc. 2019-02-19 15:06:06 -08:00
scripts.base.frameworks.input.default Fixed &default values ignored by input framework. 2016-06-16 01:02:51 +02:00
scripts.base.frameworks.input.empty-values-hashing Improve introspection of Record and TypeType values 2018-10-18 15:10:02 -05:00
scripts.base.frameworks.input.emptyvals fix crash when all value fields of imported table are uninitialized. 2012-03-22 10:59:36 -07:00
scripts.base.frameworks.input.errors GH-378: check validity of missing 'val' field in Input::add_table 2019-05-24 10:30:49 -07:00
scripts.base.frameworks.input.event Improve introspection of Record and TypeType values 2018-10-18 15:10:02 -05:00
scripts.base.frameworks.input.invalid-lines Ascii reader error changes - fix small bugs 2017-03-03 12:42:44 -08:00
scripts.base.frameworks.input.invalidnumbers Add input file name to additional ASCII reader warning messages 2019-05-24 16:04:06 -07:00
scripts.base.frameworks.input.invalidset Add input file name to additional ASCII reader warning messages 2019-05-24 16:04:06 -07:00
scripts.base.frameworks.input.invalidtext Add input file name to additional ASCII reader warning messages 2019-05-24 16:04:06 -07:00
scripts.base.frameworks.input.missing-enum GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
scripts.base.frameworks.input.missing-file GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
scripts.base.frameworks.input.missing-file-initially GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
scripts.base.frameworks.input.onecolumn-norecord make want_record field for tablefilter work... 2011-11-21 15:09:00 -08:00
scripts.base.frameworks.input.onecolumn-record make want_record field for tablefilter work... 2011-11-21 15:09:00 -08:00
scripts.base.frameworks.input.optional Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.frameworks.input.path-prefix.absolute-prefix Source file path control for Input and Intel frameworks 2019-03-15 16:43:36 -07:00
scripts.base.frameworks.input.path-prefix.absolute-prefix-2 Source file path control for Input and Intel frameworks 2019-03-15 16:43:36 -07:00
scripts.base.frameworks.input.path-prefix.absolute-prefix-3 Source file path control for Input and Intel frameworks 2019-03-15 16:43:36 -07:00
scripts.base.frameworks.input.path-prefix.absolute-source Source file path control for Input and Intel frameworks 2019-03-15 16:43:36 -07:00
scripts.base.frameworks.input.path-prefix.absolute-source-2 Source file path control for Input and Intel frameworks 2019-03-15 16:43:36 -07:00
scripts.base.frameworks.input.path-prefix.absolute-source-3 Source file path control for Input and Intel frameworks 2019-03-15 16:43:36 -07:00
scripts.base.frameworks.input.path-prefix.no-paths Source file path control for Input and Intel frameworks 2019-03-15 16:43:36 -07:00
scripts.base.frameworks.input.path-prefix.no-paths-2 Source file path control for Input and Intel frameworks 2019-03-15 16:43:36 -07:00
scripts.base.frameworks.input.path-prefix.no-paths-3 Source file path control for Input and Intel frameworks 2019-03-15 16:43:36 -07:00
scripts.base.frameworks.input.path-prefix.relative-prefix Source file path control for Input and Intel frameworks 2019-03-15 16:43:36 -07:00
scripts.base.frameworks.input.path-prefix.relative-prefix-2 Source file path control for Input and Intel frameworks 2019-03-15 16:43:36 -07:00
scripts.base.frameworks.input.path-prefix.relative-prefix-3 Source file path control for Input and Intel frameworks 2019-03-15 16:43:36 -07:00
scripts.base.frameworks.input.patterns Make paraglob serializable and copyable. 2019-06-04 14:56:48 -07:00
scripts.base.frameworks.input.port make test more robust. 2011-12-06 10:50:36 -08:00
scripts.base.frameworks.input.port-embedded GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
scripts.base.frameworks.input.predicate add very basic predicate test. 2011-11-21 15:36:03 -08:00
scripts.base.frameworks.input.predicate-stream fix one of the bugs seth found in the input framework. 2012-02-22 10:46:35 -08:00
scripts.base.frameworks.input.predicatemodify Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.frameworks.input.predicatemodifyandreread Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.frameworks.input.predicaterefusesecondsamerecord fix little sneaky bug in input framework with an edge case. 2012-08-04 22:38:26 -07:00
scripts.base.frameworks.input.raw.basic Improve introspection of Record and TypeType values 2018-10-18 15:10:02 -05:00
scripts.base.frameworks.input.raw.execute Improve introspection of Record and TypeType values 2018-10-18 15:10:02 -05:00
scripts.base.frameworks.input.raw.executestdin BIT-1941: improve unit test stability 2018-07-03 15:00:52 -05:00
scripts.base.frameworks.input.raw.executestream BIT-1941: improve unit test stability 2018-07-03 15:00:52 -05:00
scripts.base.frameworks.input.raw.long small fixes. 2013-05-27 22:59:27 -07:00
scripts.base.frameworks.input.raw.offset Fix offset=-1 (eof) for raw reader 2015-09-16 15:16:04 -07:00
scripts.base.frameworks.input.raw.rereadraw Improve introspection of Record and TypeType values 2018-10-18 15:10:02 -05:00
scripts.base.frameworks.input.raw.stderr Improve an input framework unit test 2018-07-17 17:51:52 -05:00
scripts.base.frameworks.input.raw.streamraw BIT-1941: improve unit test stability 2018-07-03 15:00:52 -05:00
scripts.base.frameworks.input.repeat Updating input framework unit tests. 2012-06-29 12:50:57 -05:00
scripts.base.frameworks.input.reread Improve introspection of Record and TypeType values 2018-10-18 15:10:02 -05:00
scripts.base.frameworks.input.set Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.frameworks.input.setseparator Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.frameworks.input.setspecialcases Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.frameworks.input.sqlite.basic Baseline updates for the addition of local_resp. 2015-02-23 16:25:11 -08:00
scripts.base.frameworks.input.sqlite.error make sqlite3 executable required and add test-cases for errors 2013-05-14 22:09:46 -07:00
scripts.base.frameworks.input.sqlite.port make sqlite support more or less work for logging and input 2013-01-15 16:01:30 -08:00
scripts.base.frameworks.input.sqlite.types Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.frameworks.input.stream Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.frameworks.input.subrecord Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.frameworks.input.subrecord-event Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.frameworks.input.tableevent Fix race-condition in table-event test. 2013-03-07 20:28:18 -08:00
scripts.base.frameworks.input.twotables Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.frameworks.input.unsupported_types Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.frameworks.input.windows Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.frameworks.intel.cluster-transparency Merge topic/actor-system throug a squashed commit. 2018-05-18 22:39:23 +00:00
scripts.base.frameworks.intel.cluster-transparency-with-proxy Change Intel framework to round-robin insertion events across proxies 2018-05-24 14:36:22 -05:00
scripts.base.frameworks.intel.expire-item Change default value of peer_description "zeek" 2019-06-06 19:49:30 -07:00
scripts.base.frameworks.intel.filter-item Change default value of peer_description "zeek" 2019-06-06 19:49:30 -07:00
scripts.base.frameworks.intel.input-and-match Change default value of peer_description "zeek" 2019-06-06 19:49:30 -07:00
scripts.base.frameworks.intel.match-subnet Change default value of peer_description "zeek" 2019-06-06 19:49:30 -07:00
scripts.base.frameworks.intel.path-prefix.input-intel-absolute-prefixes Source file path control for Input and Intel frameworks 2019-03-15 16:43:36 -07:00
scripts.base.frameworks.intel.path-prefix.input-intel-relative-prefixes Source file path control for Input and Intel frameworks 2019-03-15 16:43:36 -07:00
scripts.base.frameworks.intel.path-prefix.input-prefix Source file path control for Input and Intel frameworks 2019-03-15 16:43:36 -07:00
scripts.base.frameworks.intel.path-prefix.no-paths Source file path control for Input and Intel frameworks 2019-03-15 16:43:36 -07:00
scripts.base.frameworks.intel.read-file-dist-cluster Refactored FAF integration of intel framework. 2016-06-15 21:56:53 +02:00
scripts.base.frameworks.intel.remove-item-cluster Refactored FAF integration of intel framework. 2016-06-15 21:56:53 +02:00
scripts.base.frameworks.intel.remove-non-existing Update tests and baselines due to renaming all scripts 2019-04-11 23:32:58 -05:00
scripts.base.frameworks.intel.updated-match Change default value of peer_description "zeek" 2019-06-06 19:49:30 -07:00
scripts.base.frameworks.logging.adapt-filter Changing the start/end markers in logs to open/close now reflecting 2012-07-27 12:15:21 -07:00
scripts.base.frameworks.logging.ascii-binary Changing the start/end markers in logs to open/close now reflecting 2012-07-27 12:15:21 -07:00
scripts.base.frameworks.logging.ascii-double Update unit tests for JSON logger to match new output 2019-07-02 13:14:52 -07:00
scripts.base.frameworks.logging.ascii-empty Updating tests for the #start/#end change. 2012-07-19 22:28:55 -07:00
scripts.base.frameworks.logging.ascii-escape Tests updates for recent open/close log change. 2012-07-27 12:39:11 -07:00
scripts.base.frameworks.logging.ascii-escape-binary In bifs, change ODesc objects to have RAW_STYLE. 2015-04-16 21:50:50 -07:00
scripts.base.frameworks.logging.ascii-escape-empty-str Escape the empty indicator in logs if it occurs literally as a field's 2016-07-05 16:34:24 -07:00
scripts.base.frameworks.logging.ascii-escape-notset-str Changing the start/end markers in logs to open/close now reflecting 2012-07-27 12:15:21 -07:00
scripts.base.frameworks.logging.ascii-escape-odd-url Merge branch 'patch-1' of https://github.com/neu5ron/bro 2019-03-13 13:49:17 -07:00
scripts.base.frameworks.logging.ascii-escape-set-separator Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.frameworks.logging.ascii-gz Add gzip log writing to the ascii writer. 2017-04-24 13:15:32 -07:00
scripts.base.frameworks.logging.ascii-json GH-606: Output nulls into json data if a field isn't set 2019-09-27 14:12:48 -07:00
scripts.base.frameworks.logging.ascii-json-iso-timestamps GH-186: fix JSON formatting of timestamps before Unix epoch 2018-10-12 21:34:28 +00:00
scripts.base.frameworks.logging.ascii-json-optional Merge branch 'master' of https://github.com/aeppert/bro 2015-10-26 16:52:47 -07:00
scripts.base.frameworks.logging.ascii-json-utf8 Merge remote-tracking branch 'origin/topic/timw/cleaner-utf8' 2019-07-29 09:25:25 -07:00
scripts.base.frameworks.logging.ascii-line-like-comment Changing the start/end markers in logs to open/close now reflecting 2012-07-27 12:15:21 -07:00
scripts.base.frameworks.logging.ascii-options Updating tests for the #start/#end change. 2012-07-19 22:28:55 -07:00
scripts.base.frameworks.logging.ascii-timestamps Changing the start/end markers in logs to open/close now reflecting 2012-07-27 12:15:21 -07:00
scripts.base.frameworks.logging.ascii-tsv Renaming ASCII writer filter option 'only_single_header_row' to 'tsv'. 2012-12-03 14:40:38 -08:00
scripts.base.frameworks.logging.ascii-utf8-enabled Added optional script and redef bool to enable utf-8 in ASCII logs 2019-07-23 11:59:33 -07:00
scripts.base.frameworks.logging.ascii-utf8-enabled-control-characters Added Jon's test cases as unit tests 2019-07-23 11:59:33 -07:00
scripts.base.frameworks.logging.ascii-utf8-enabled-set-separator-escape Added Jon's test cases as unit tests 2019-07-23 11:59:33 -07:00
scripts.base.frameworks.logging.attr Changing the start/end markers in logs to open/close now reflecting 2012-07-27 12:15:21 -07:00
scripts.base.frameworks.logging.attr-extend Changing the start/end markers in logs to open/close now reflecting 2012-07-27 12:15:21 -07:00
scripts.base.frameworks.logging.empty-event Changing the start/end markers in logs to open/close now reflecting 2012-07-27 12:15:21 -07:00
scripts.base.frameworks.logging.enable-stream Logging: implement get_filter_names and small fixes. 2018-01-17 09:47:20 -08:00
scripts.base.frameworks.logging.events Updating tests for the #start/#end change. 2012-07-19 22:28:55 -07:00
scripts.base.frameworks.logging.exclude Changing the start/end markers in logs to open/close now reflecting 2012-07-27 12:15:21 -07:00
scripts.base.frameworks.logging.field-extension Fix unit tests for new ordering from NetSessions::Drain 2019-08-21 09:24:02 -04:00
scripts.base.frameworks.logging.field-extension-cluster Merge branch 'patch-1' of https://github.com/neu5ron/bro 2019-03-13 13:49:17 -07:00
scripts.base.frameworks.logging.field-extension-cluster-error Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
scripts.base.frameworks.logging.field-extension-complex Fix unit tests for new ordering from NetSessions::Drain 2019-08-21 09:24:02 -04:00
scripts.base.frameworks.logging.field-extension-invalid Update tests to reflect new error msg. 2019-06-24 09:34:02 -07:00
scripts.base.frameworks.logging.field-extension-optional Fix unit tests for new ordering from NetSessions::Drain 2019-08-21 09:24:02 -04:00
scripts.base.frameworks.logging.field-extension-table Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
scripts.base.frameworks.logging.field-name-map Fix unit tests for new ordering from NetSessions::Drain 2019-08-21 09:24:02 -04:00
scripts.base.frameworks.logging.field-name-map2 Fix invalid memory free when using Log::default_field_name_map 2018-09-10 19:06:35 -05:00
scripts.base.frameworks.logging.file Changing the start/end markers in logs to open/close now reflecting 2012-07-27 12:15:21 -07:00
scripts.base.frameworks.logging.include Changing the start/end markers in logs to open/close now reflecting 2012-07-27 12:15:21 -07:00
scripts.base.frameworks.logging.none-debug Extending the log writer DoInit() API. 2012-06-21 17:42:33 -07:00
scripts.base.frameworks.logging.path-func Changing the start/end markers in logs to open/close now reflecting 2012-07-27 12:15:21 -07:00
scripts.base.frameworks.logging.path-func-column-demote Fix unit tests for new ordering from NetSessions::Drain 2019-08-21 09:24:02 -04:00
scripts.base.frameworks.logging.pred Changing the start/end markers in logs to open/close now reflecting 2012-07-27 12:15:21 -07:00
scripts.base.frameworks.logging.print-log Added a non boolean configuration and other changes as suggested by Jon 2019-11-26 21:53:21 -08:00
scripts.base.frameworks.logging.print-log-stdout Added a non boolean configuration and other changes as suggested by Jon 2019-11-26 21:53:21 -08:00
scripts.base.frameworks.logging.remove Logging: implement get_filter_names and small fixes. 2018-01-17 09:47:20 -08:00
scripts.base.frameworks.logging.rotate Changing the start/end markers in logs to open/close now reflecting 2012-07-27 12:15:21 -07:00
scripts.base.frameworks.logging.rotate-custom Changing the start/end markers in logs to open/close now reflecting 2012-07-27 12:15:21 -07:00
scripts.base.frameworks.logging.scope_sep Fix unit tests for new ordering from NetSessions::Drain 2019-08-21 09:24:02 -04:00
scripts.base.frameworks.logging.scope_sep_and_field_name_map Fix unit tests for new ordering from NetSessions::Drain 2019-08-21 09:24:02 -04:00
scripts.base.frameworks.logging.sqlite.error rename the dbname configuration option to tablename. 2013-10-17 12:24:40 -07:00
scripts.base.frameworks.logging.sqlite.set Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.frameworks.logging.sqlite.simultaneous-writes Enable SQLite shared cache mode. 2016-07-21 12:10:20 -07:00
scripts.base.frameworks.logging.sqlite.types Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.frameworks.logging.sqlite.wikipedia Merge branch 'patch-1' of https://github.com/neu5ron/bro 2019-03-13 13:49:17 -07:00
scripts.base.frameworks.logging.stdout Changing the start/end markers in logs to open/close now reflecting 2012-07-27 12:15:21 -07:00
scripts.base.frameworks.logging.test-logging Changing the start/end markers in logs to open/close now reflecting 2012-07-27 12:15:21 -07:00
scripts.base.frameworks.logging.types Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.frameworks.logging.unset-record Changing the start/end markers in logs to open/close now reflecting 2012-07-27 12:15:21 -07:00
scripts.base.frameworks.logging.vec Changing the start/end markers in logs to open/close now reflecting 2012-07-27 12:15:21 -07:00
scripts.base.frameworks.logging.writer-path-conflict Merge branch 'patch-1' of https://github.com/neu5ron/bro 2019-03-13 13:49:17 -07:00
scripts.base.frameworks.netcontrol.acld GH-387: update Broker topic names to use "zeek/" prefix 2019-05-29 15:56:37 -07:00
scripts.base.frameworks.netcontrol.acld-hook Parallelize communication tests using btest TEST-PORT 2018-11-04 15:29:59 -06:00
scripts.base.frameworks.netcontrol.basic NetControl: add rule exists as state besides added and failure. 2016-03-24 15:06:07 -07:00
scripts.base.frameworks.netcontrol.basic-cluster BIT-1941: improve unit test stability 2018-07-03 15:00:52 -05:00
scripts.base.frameworks.netcontrol.broker GH-387: update Broker topic names to use "zeek/" prefix 2019-05-29 15:56:37 -07:00
scripts.base.frameworks.netcontrol.delete-internal-state NetControl: allow reasons in remove_rule calls. 2016-08-05 10:49:09 -07:00
scripts.base.frameworks.netcontrol.duplicate Rewrite internal handling of rules. 2016-03-09 15:43:47 -08:00
scripts.base.frameworks.netcontrol.find-rules Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.frameworks.netcontrol.hook Rewrite internal handling of rules. 2016-03-09 15:43:47 -08:00
scripts.base.frameworks.netcontrol.multiple NetControl: add rule exists as state besides added and failure. 2016-03-24 15:06:07 -07:00
scripts.base.frameworks.netcontrol.openflow NetControl: add rule exists as state besides added and failure. 2016-03-24 15:06:07 -07:00
scripts.base.frameworks.netcontrol.packetfilter Fix unit tests for new ordering from NetSessions::Drain 2019-08-21 09:24:02 -04:00
scripts.base.frameworks.netcontrol.quarantine-openflow NetControl: add rule exists as state besides added and failure. 2016-03-24 15:06:07 -07:00
scripts.base.frameworks.netcontrol.timeout Rewrite internal handling of rules. 2016-03-09 15:43:47 -08:00
scripts.base.frameworks.notice.cluster GH-379: move catch-and-release and unified2 scripts to policy/ 2019-06-05 13:33:45 -07:00
scripts.base.frameworks.notice.mail-alarms Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.frameworks.notice.suppression GH-379: move catch-and-release and unified2 scripts to policy/ 2019-06-05 13:33:45 -07:00
scripts.base.frameworks.notice.suppression-cluster GH-379: move catch-and-release and unified2 scripts to policy/ 2019-06-05 13:33:45 -07:00
scripts.base.frameworks.openflow.broker-basic Parallelize communication tests using btest TEST-PORT 2018-11-04 15:29:59 -06:00
scripts.base.frameworks.openflow.log-basic Update OpenFlow API and events. 2016-02-11 13:10:40 -08:00
scripts.base.frameworks.openflow.log-cluster Update OpenFlow API and events. 2016-02-11 13:10:40 -08:00
scripts.base.frameworks.openflow.ryu-basic Improve RecordVal JSON formatting 2019-09-30 19:04:55 -07:00
scripts.base.frameworks.reporter.disable-stderr Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
scripts.base.frameworks.reporter.stderr Use .zeek file suffix in unit tests 2019-04-16 16:08:57 -07:00
scripts.base.frameworks.software.version-parsing GH-281: Improve parsing of Google Pixel user agent 2019-02-25 14:07:53 -06:00
scripts.base.frameworks.sumstats.basic Fix problems with SumStats non-cluster.bro script 2018-01-18 11:14:39 -06:00
scripts.base.frameworks.sumstats.basic-cluster Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.frameworks.sumstats.cluster-intermediate-update Updates for SumStats API to deal with high memory stats. 2013-08-02 12:44:33 -04:00
scripts.base.frameworks.sumstats.last-cluster Fix SumStats "last" plugin in cluster mode 2018-11-08 12:27:37 -06:00
scripts.base.frameworks.sumstats.on-demand Updates for SumStats API to deal with high memory stats. 2013-08-02 12:44:33 -04:00
scripts.base.frameworks.sumstats.on-demand-cluster Updates for SumStats API to deal with high memory stats. 2013-08-02 12:44:33 -04:00
scripts.base.frameworks.sumstats.sample Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.frameworks.sumstats.sample-cluster Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.frameworks.sumstats.thresholding Updating tests for HLL merge. 2013-08-31 11:17:49 -07:00
scripts.base.frameworks.sumstats.topk topk for sumstats 2013-04-23 15:19:01 -07:00
scripts.base.frameworks.sumstats.topk-cluster add topk cluster test 2013-04-24 15:30:24 -07:00
scripts.base.misc.find-filtered-trace More bro-to-zeek renaming in the unit tests 2019-05-16 02:27:54 -05:00
scripts.base.misc.version GH-488: teach the Version module to parse new version scheme 2019-07-25 23:05:06 -07:00
scripts.base.misc.version-2 Add convenient way to access version information to Bro. 2016-09-29 12:45:48 -07:00
scripts.base.protocols.arp.bad Add bad ARP tests 2018-05-18 17:39:53 +02:00
scripts.base.protocols.arp.basic ARP: remove unnecessary variables and add testcase 2016-04-27 06:51:04 -07:00
scripts.base.protocols.arp.radiotap Add tests for ARP in 802.11 (w & w/o RadioTAP) 2018-05-15 18:15:17 +02:00
scripts.base.protocols.arp.wlanmon Add tests for ARP in 802.11 (w & w/o RadioTAP) 2018-05-15 18:15:17 +02:00
scripts.base.protocols.conn.contents-default-extract Change IPv6 address/prefix output format to be bracketed. 2012-05-04 11:21:18 -05:00
scripts.base.protocols.conn.new_connection_contents Fix duplication of new_connection_contents event 2016-05-17 10:32:13 -07:00
scripts.base.protocols.conn.polling Add an example of a GridFTP data channel detection script. 2012-10-01 12:32:24 -05:00
scripts.base.protocols.conn.threshold Add duration thresholding to the conn-size analyzer. 2019-08-01 11:57:40 -07:00
scripts.base.protocols.conn.threshold-delete Add duration thresholding to the conn-size analyzer. 2019-08-01 11:57:40 -07:00
scripts.base.protocols.dce-rpc.context Fix tracking of DCE-RPC context identifier mappings 2018-08-23 15:11:38 -05:00
scripts.base.protocols.dce-rpc.mapi Fix unit tests for new ordering from NetSessions::Drain 2019-08-21 09:24:02 -04:00
scripts.base.protocols.dce-rpc.ntlm-empty-av-pair-seq GH-541: add test cases for NTLM AV Pair sequence handling 2019-08-26 10:28:46 -07:00
scripts.base.protocols.dce-rpc.ntlm-unterminated-av-pair-seq GH-541: add test cases for NTLM AV Pair sequence handling 2019-08-26 10:28:46 -07:00
scripts.base.protocols.dhcp.dhcp-ack-msg-types Rework to the DHCP analyzer. 2018-03-01 08:36:32 -08:00
scripts.base.protocols.dhcp.dhcp-all-msg-types GH-485: fix cases where DHCP log omits MAC field 2019-07-26 20:05:15 -07:00
scripts.base.protocols.dhcp.dhcp-discover-msg-types Rework to the DHCP analyzer. 2018-03-01 08:36:32 -08:00
scripts.base.protocols.dhcp.dhcp-sub-opts Rework to the DHCP analyzer. 2018-03-01 08:36:32 -08:00
scripts.base.protocols.dhcp.dhcp-time-nameserver-events Merge branch '001-dhcp-options' of https://github.com/jrwren/zeek 2019-05-24 18:08:34 -07:00
scripts.base.protocols.dhcp.inform Rework to the DHCP analyzer. 2018-03-01 08:36:32 -08:00
scripts.base.protocols.dnp3.dnp3_del_measure Update &check'd fields in various protocol parsers 2018-04-18 18:16:34 -05:00
scripts.base.protocols.dnp3.dnp3_en_spon Update &check'd fields in various protocol parsers 2018-04-18 18:16:34 -05:00
scripts.base.protocols.dnp3.dnp3_file_del Update &check'd fields in various protocol parsers 2018-04-18 18:16:34 -05:00
scripts.base.protocols.dnp3.dnp3_file_read Update &check'd fields in various protocol parsers 2018-04-18 18:16:34 -05:00
scripts.base.protocols.dnp3.dnp3_file_write Update &check'd fields in various protocol parsers 2018-04-18 18:16:34 -05:00
scripts.base.protocols.dnp3.dnp3_link_only Update &check'd fields in various protocol parsers 2018-04-18 18:16:34 -05:00
scripts.base.protocols.dnp3.dnp3_read Update &check'd fields in various protocol parsers 2018-04-18 18:16:34 -05:00
scripts.base.protocols.dnp3.dnp3_rec_time Update &check'd fields in various protocol parsers 2018-04-18 18:16:34 -05:00
scripts.base.protocols.dnp3.dnp3_select_operate Update &check'd fields in various protocol parsers 2018-04-18 18:16:34 -05:00
scripts.base.protocols.dnp3.dnp3_udp_en_spon Update &check'd fields in various protocol parsers 2018-04-18 18:16:34 -05:00
scripts.base.protocols.dnp3.dnp3_udp_read Update &check'd fields in various protocol parsers 2018-04-18 18:16:34 -05:00
scripts.base.protocols.dnp3.dnp3_udp_select_operate Update &check'd fields in various protocol parsers 2018-04-18 18:16:34 -05:00
scripts.base.protocols.dnp3.dnp3_udp_write Update &check'd fields in various protocol parsers 2018-04-18 18:16:34 -05:00
scripts.base.protocols.dnp3.dnp3_write Update &check'd fields in various protocol parsers 2018-04-18 18:16:34 -05:00
scripts.base.protocols.dnp3.events Update &check'd fields in various protocol parsers 2018-04-18 18:16:34 -05:00
scripts.base.protocols.dns.caa Add DNS tests for huge TLL and CAA 2016-04-25 15:43:20 -07:00
scripts.base.protocols.dns.dns-key Merge branch 'fatemabw/bro' of https://github.com/fatemabw/bro into dev/2.7 2018-09-21 16:40:41 -05:00
scripts.base.protocols.dns.dnskey Merge branch 'fatemabw/bro' of https://github.com/fatemabw/bro into dev/2.7 2018-09-21 16:40:41 -05:00
scripts.base.protocols.dns.ds Merge branch 'fatemabw/bro' of https://github.com/fatemabw/bro into dev/2.7 2018-09-21 16:40:41 -05:00
scripts.base.protocols.dns.duplicate-reponses Merge branch 'fatemabw/bro' of https://github.com/fatemabw/bro into dev/2.7 2018-09-21 16:40:41 -05:00
scripts.base.protocols.dns.flip Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.protocols.dns.huge-ttl Add DNS tests for huge TLL and CAA 2016-04-25 15:43:20 -07:00
scripts.base.protocols.dns.multiple-txt-strings Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.protocols.dns.nsec Merge branch 'fatemabw/bro' of https://github.com/fatemabw/bro into dev/2.7 2018-09-21 16:40:41 -05:00
scripts.base.protocols.dns.nsec3 Merge branch 'fatemabw/bro' of https://github.com/fatemabw/bro into dev/2.7 2018-09-21 16:40:41 -05:00
scripts.base.protocols.dns.rrsig Merge branch 'fatemabw/bro' of https://github.com/fatemabw/bro into dev/2.7 2018-09-21 16:40:41 -05:00
scripts.base.protocols.dns.spf DNS: Add support for SPF response records 2019-06-14 10:18:37 -05:00
scripts.base.protocols.dns.tsig Changing what's escaped when printing. 2015-04-15 16:59:50 -07:00
scripts.base.protocols.dns.zero-responses Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.protocols.ftp.cwd-navigation added 'g' $history character for content gaps 2019-04-17 14:20:48 -07:00
scripts.base.protocols.ftp.ftp-get-file-size Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.protocols.ftp.ftp-ipv4 Make tunnel_parents in conn.log optional. 2018-01-12 13:46:00 -08:00
scripts.base.protocols.ftp.ftp-ipv6 Make tunnel_parents in conn.log optional. 2018-01-12 13:46:00 -08:00
scripts.base.protocols.ftp.gridftp Fix unit tests for new ordering from NetSessions::Drain 2019-08-21 09:24:02 -04:00
scripts.base.protocols.http.100-continue Merge branch 'patch-1' of https://github.com/neu5ron/bro 2019-03-13 13:49:17 -07:00
scripts.base.protocols.http.101-switching-protocols Merge branch 'patch-1' of https://github.com/neu5ron/bro 2019-03-13 13:49:17 -07:00
scripts.base.protocols.http.all-headers-event Add tests for {http,mime}_all_headers events 2019-08-13 11:28:00 -07:00
scripts.base.protocols.http.build-url Merge branch 'Fix_http_build_url' of ssh://github.com/Olerdrive/zeek 2019-10-28 09:32:32 +00:00
scripts.base.protocols.http.content-range-gap Fix file analysis placement of data after gap in HTTP Content-Range. 2014-09-11 12:25:43 -05:00
scripts.base.protocols.http.content-range-less-than-len Change default value of peer_description "zeek" 2019-06-06 19:49:30 -07:00
scripts.base.protocols.http.entity-gap Changing what's escaped when printing. 2015-04-15 16:59:50 -07:00
scripts.base.protocols.http.entity-gap2 Changing what's escaped when printing. 2015-04-15 16:59:50 -07:00
scripts.base.protocols.http.fake-content-length Merge branch 'patch-1' of https://github.com/neu5ron/bro 2019-03-13 13:49:17 -07:00
scripts.base.protocols.http.http-bad-request-with-version Change default value of peer_description "zeek" 2019-06-06 19:49:30 -07:00
scripts.base.protocols.http.http-connect Duplicate TCP segment should trigger tcp_multiple_retransmissions 2019-07-28 15:15:40 -06:00
scripts.base.protocols.http.http-connect-with-header Merge branch 'patch-1' of https://github.com/neu5ron/bro 2019-03-13 13:49:17 -07:00
scripts.base.protocols.http.http-filename Merge branch 'patch-1' of https://github.com/neu5ron/bro 2019-03-13 13:49:17 -07:00
scripts.base.protocols.http.http-methods Change default value of peer_description "zeek" 2019-06-06 19:49:30 -07:00
scripts.base.protocols.http.http-pipelining Merge branch 'patch-1' of https://github.com/neu5ron/bro 2019-03-13 13:49:17 -07:00
scripts.base.protocols.http.missing-zlib-header Merge branch 'patch-1' of https://github.com/neu5ron/bro 2019-03-13 13:49:17 -07:00
scripts.base.protocols.http.multipart-extract Merge branch 'patch-1' of https://github.com/neu5ron/bro 2019-03-13 13:49:17 -07:00
scripts.base.protocols.http.multipart-file-limit Merge branch 'patch-1' of https://github.com/neu5ron/bro 2019-03-13 13:49:17 -07:00
scripts.base.protocols.http.no-uri Change default value of peer_description "zeek" 2019-06-06 19:49:30 -07:00
scripts.base.protocols.http.no-version Merge branch 'patch-1' of https://github.com/neu5ron/bro 2019-03-13 13:49:17 -07:00
scripts.base.protocols.http.percent-end-of-line Change default value of peer_description "zeek" 2019-06-06 19:49:30 -07:00
scripts.base.protocols.http.x-gzip Merge branch 'patch-1' of https://github.com/neu5ron/bro 2019-03-13 13:49:17 -07:00
scripts.base.protocols.imap.capabilities Add support of getting server capabilities to IMAP parser. 2015-07-23 11:15:57 -07:00
scripts.base.protocols.imap.starttls Make tunnel_parents in conn.log optional. 2018-01-12 13:46:00 -08:00
scripts.base.protocols.irc.basic Duplicate TCP segment should trigger tcp_multiple_retransmissions 2019-07-28 15:15:40 -06:00
scripts.base.protocols.irc.events Merge branch 'master' of https://github.com/marktayl/bro 2016-02-12 18:55:25 -08:00
scripts.base.protocols.irc.longline Change default value of peer_description "zeek" 2019-06-06 19:49:30 -07:00
scripts.base.protocols.irc.names-weird Change default value of peer_description "zeek" 2019-06-06 19:49:30 -07:00
scripts.base.protocols.irc.starttls Make tunnel_parents in conn.log optional. 2018-01-12 13:46:00 -08:00
scripts.base.protocols.krb.kinit KRB: do not set authentication info to nouser. 2018-06-01 12:32:34 -07:00
scripts.base.protocols.krb.smb2_krb Add krb unit test 2018-05-10 10:14:30 -04:00
scripts.base.protocols.krb.smb2_krb_nokeytab KRB: do not set keytab by default. 2018-06-01 12:46:26 -07:00
scripts.base.protocols.krb.smb_gssapi Added and verified correct test results 2017-09-17 21:25:59 +00:00
scripts.base.protocols.krb.tgs Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.protocols.modbus.coil_parsing_big Add some documentation for modbus data types. 2016-06-18 01:46:07 -04:00
scripts.base.protocols.modbus.coil_parsing_small Add some documentation for modbus data types. 2016-06-18 01:46:07 -04:00
scripts.base.protocols.modbus.events Remove variable content from weird names 2019-04-01 18:30:11 -07:00
scripts.base.protocols.modbus.exception_handling Remove variable content from weird names 2019-04-01 18:30:11 -07:00
scripts.base.protocols.modbus.policy Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.protocols.modbus.register_parsing Convert some BinPAC &check expressions to &enforce 2018-04-19 14:07:40 -05:00
scripts.base.protocols.mount.basic Merge remote-tracking branch 'origin/topic/jsiwek/gh-684-fix-rpc-parsing' 2019-11-21 08:50:28 -08:00
scripts.base.protocols.mqtt.mqtt GH-474: add MQTT::max_payload_size option 2019-08-02 14:28:55 -07:00
scripts.base.protocols.mqtt.mqtt-payload-cap GH-474: add MQTT::max_payload_size option 2019-08-02 14:28:55 -07:00
scripts.base.protocols.mqtt.mqtt-payload-cap-dynamic GH-474: change MQTT::max_payload_size to be a runtime option 2019-08-05 18:11:54 -07:00
scripts.base.protocols.mysql.auth Fixes for MySQL and SMB protocol parsers 2018-05-18 10:31:36 -05:00
scripts.base.protocols.mysql.encrypted Add a test with an encrypted MySQL connection 2018-10-29 15:58:06 -05:00
scripts.base.protocols.mysql.wireshark Fixes for MySQL and SMB protocol parsers 2018-05-18 10:31:36 -05:00
scripts.base.protocols.ncp.event Migrate NCP analyzer to use latest analyzer API 2018-05-22 16:27:07 -05:00
scripts.base.protocols.ncp.frame_size_tuning Add NCP::max_frame_size tuning option 2018-05-22 18:27:52 -05:00
scripts.base.protocols.nfs.basic Merge remote-tracking branch 'origin/topic/jsiwek/gh-684-fix-rpc-parsing' 2019-11-21 08:50:28 -08:00
scripts.base.protocols.ntp.ntp Merge branch 'ntp-rewrite' of https://github.com/mauropalumbo75/zeek 2019-06-15 19:11:34 -07:00
scripts.base.protocols.ntp.ntp-digest Merge branch 'ntp-rewrite' of https://github.com/mauropalumbo75/zeek 2019-06-15 19:11:34 -07:00
scripts.base.protocols.ntp.ntp2 Merge branch 'ntp-rewrite' of https://github.com/mauropalumbo75/zeek 2019-06-15 19:11:34 -07:00
scripts.base.protocols.ntp.ntp3 Merge branch 'ntp-rewrite' of https://github.com/mauropalumbo75/zeek 2019-06-15 19:11:34 -07:00
scripts.base.protocols.ntp.ntpmode67 Merge branch 'ntp-rewrite' of https://github.com/mauropalumbo75/zeek 2019-06-15 19:11:34 -07:00
scripts.base.protocols.pop3.starttls Make tunnel_parents in conn.log optional. 2018-01-12 13:46:00 -08:00
scripts.base.protocols.portmap.basic GH-684: Fix parsing of RPC calls with non-AUTH_UNIX flavors 2019-11-13 13:14:14 -08:00
scripts.base.protocols.radius.auth GH-209: replace "remote_ip" field of radius.log with "tunnel_client" 2019-06-05 11:11:49 -07:00
scripts.base.protocols.radius.radius-multiple-attempts GH-209: replace "remote_ip" field of radius.log with "tunnel_client" 2019-06-05 11:11:49 -07:00
scripts.base.protocols.rdp.rdp-client-cluster-data Merge branch 'rdp_client_cluster_data' of https://github.com/neslog/zeek 2019-06-20 20:41:16 -07:00
scripts.base.protocols.rdp.rdp-client-security-data Merge branch 'rdp_client_security' of https://github.com/neslog/zeek 2019-06-06 16:53:48 -07:00
scripts.base.protocols.rdp.rdp-native-encrypted-data Merge branch 'master' of https://github.com/anthonykasza/zeek 2019-06-06 17:22:49 -07:00
scripts.base.protocols.rdp.rdp-proprietary-encryption RDP: Update existing baselines with new client_channels field 2019-05-28 09:31:32 -05:00
scripts.base.protocols.rdp.rdp-to-ssl RDP: Update existing baselines with new client_channels field 2019-05-28 09:31:32 -05:00
scripts.base.protocols.rdp.rdp-x509 RDP: Update existing baselines with new client_channels field 2019-05-28 09:31:32 -05:00
scripts.base.protocols.rfb.rfb-apple-remote-desktop Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.protocols.rfb.vnc-mac-to-linux Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.protocols.rfb.vnc-scanner GH-320: Improve RFB (VNC) protocol parsing 2019-04-03 13:59:03 -07:00
scripts.base.protocols.sip.wireshark Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.protocols.smb.raw-ntlm Including a test for raw NTLM in SMB 2016-10-26 10:41:08 -04:00
scripts.base.protocols.smb.smb1 Merge remote-tracking branch 'origin/master' into topic/seth/smb 2016-08-08 15:46:49 -04:00
scripts.base.protocols.smb.smb1-transaction-dcerpc Merge remote-tracking branch 'origin/master' into topic/seth/smb 2016-08-08 15:46:49 -04:00
scripts.base.protocols.smb.smb1-transaction-request add test for smb1_com_transaction_request event changes 2018-01-12 13:00:05 +01:00
scripts.base.protocols.smb.smb1-transaction-response add test for smb1_com_transaction_response event changes 2018-01-19 14:29:31 +01:00
scripts.base.protocols.smb.smb1-transaction-secondary-request add test for smb1_com_transaction_secondary_request event changes 2018-01-19 14:29:09 +01:00
scripts.base.protocols.smb.smb1-transaction2-request add test for smb1_com_transaction2_request event changes 2018-01-19 14:29:20 +01:00
scripts.base.protocols.smb.smb1-transaction2-secondary-request add test for smb1_com_transaction2_secondary_request event changes 2018-01-19 14:29:26 +01:00
scripts.base.protocols.smb.smb2 Add unit tests for new SMB2 event -- smb2_file_sattr. 2018-04-04 16:55:10 -04:00
scripts.base.protocols.smb.smb2-read-write Merge branch 'smb2-fix' of https://github.com/mauropalumbo75/zeek 2019-03-20 18:01:35 -07:00
scripts.base.protocols.smb.smb2-write-response Merge branch 'smb2_write_response' of https://github.com/mauropalumbo75/zeek 2019-04-12 10:13:41 -07:00
scripts.base.protocols.smb.smb3 clean up, test and pcap for transform_header added 2019-02-21 12:01:02 +01:00
scripts.base.protocols.smb.smb3-negotiate-context Merge branch '555-smb3-negotiate-context-fix' of https://github.com/mad/zeek 2019-08-27 10:08:42 -07:00
scripts.base.protocols.smb.smb311 Merge branch 'smb3-negotiate-response' of https://github.com/mauropalumbo75/zeek 2019-03-21 14:13:21 -07:00
scripts.base.protocols.smtp.attachment Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.protocols.smtp.basic Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.protocols.smtp.mime-all-headers-event Add tests for {http,mime}_all_headers events 2019-08-13 11:28:00 -07:00
scripts.base.protocols.smtp.one-side Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.protocols.smtp.starttls Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.protocols.snmp.snmp-addr Correct endianness of IP addresses in SNMP. 2016-07-26 15:02:11 -07:00
scripts.base.protocols.snmp.v1 Correct endianness of IP addresses in SNMP. 2016-07-26 15:02:11 -07:00
scripts.base.protocols.snmp.v2 Add SNMP datagram parsing support. 2014-02-18 14:41:32 -06:00
scripts.base.protocols.snmp.v3 Changing what's escaped when printing. 2015-04-15 16:59:50 -07:00
scripts.base.protocols.socks.socks-auth Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.protocols.socks.socks-auth-2 Do not log SOCKS passwords by default. 2017-12-01 14:36:57 -08:00
scripts.base.protocols.socks.trace1 Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.protocols.socks.trace2 Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.protocols.socks.trace3 Changing the start/end markers in logs to open/close now reflecting 2012-07-27 12:15:21 -07:00
scripts.base.protocols.ssh.basic Update btest baselines for fix in 46f727a6fa 2018-10-23 10:49:53 -05:00
scripts.base.protocols.ssh.curve25519_kex Update baselines for SSH capabilities fix 2018-10-16 10:33:52 -05:00
scripts.base.protocols.ssh.one-auth-fail-only Merge remote-tracking branch 'origin/topic/vladg/bit-1641' 2016-10-18 21:57:27 -04:00
scripts.base.protocols.ssh.ssh_segmented_encryption_transition GH-566: fix cases where ssh_encrypted_packet event wasn't raised 2019-09-03 17:34:24 -07:00
scripts.base.protocols.ssl.basic Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.protocols.ssl.common_name Do not log common name by default (it is most interesting for scripts) 2015-03-03 16:38:25 -08:00
scripts.base.protocols.ssl.comp_methods Add compression methods to ssl_client_hello event. 2017-02-03 11:48:55 -08:00
scripts.base.protocols.ssl.cve-2015-3194 Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.protocols.ssl.dhe Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.protocols.ssl.dpd SSL: update dpd signature for TLS1.3 2017-04-05 08:58:08 -07:00
scripts.base.protocols.ssl.dtls Make parsing of ServerKeyExchange work for D(TLS) < 1.2. 2017-11-30 12:20:45 -08:00
scripts.base.protocols.ssl.dtls-no-dtls Update DTLS error handling 2019-04-04 12:27:42 -07:00
scripts.base.protocols.ssl.dtls-stun-dpd Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.protocols.ssl.ecdhe Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.protocols.ssl.ecdsa Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.protocols.ssl.fragment Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.protocols.ssl.handshake-events Introduce ssl_plaintext_data event. 2017-02-03 13:58:26 -08:00
scripts.base.protocols.ssl.keyexchange Include all data of the server-hello random 2019-04-29 15:25:47 -04:00
scripts.base.protocols.ssl.ocsp-http-get Fix small OCSP parser bug. 2017-09-11 09:26:33 -07:00
scripts.base.protocols.ssl.ocsp-request-only Fix small OCSP parser bug. 2017-09-11 09:26:33 -07:00
scripts.base.protocols.ssl.ocsp-request-response Fix small OCSP parser bug. 2017-09-11 09:26:33 -07:00
scripts.base.protocols.ssl.ocsp-response-only Fix small OCSP parser bug. 2017-09-11 09:26:33 -07:00
scripts.base.protocols.ssl.ocsp-revoked Fix small OCSP parser bug. 2017-09-11 09:26:33 -07:00
scripts.base.protocols.ssl.ocsp-stapling Implement verification of OCSP replies. 2014-05-16 10:32:08 -07:00
scripts.base.protocols.ssl.signed_certificate_timestamp Make parsing of ServerKeyExchange work for D(TLS) < 1.2. 2017-11-30 12:20:45 -08:00
scripts.base.protocols.ssl.tls-1.2 SSL: test updates for record_layer version 2018-08-28 11:02:20 -07:00
scripts.base.protocols.ssl.tls-1.2-ciphers Change ciphers in changes ciphers from a set to a vector. 2013-12-04 11:38:15 -08:00
scripts.base.protocols.ssl.tls-1.2-handshake-failure Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.protocols.ssl.tls-1.2-random Include all data of the server-hello random 2019-04-29 15:25:47 -04:00
scripts.base.protocols.ssl.tls-extension-events Parse pre-shared-key extension. 2019-04-22 23:02:39 +02:00
scripts.base.protocols.ssl.tls1_1 Make parsing of ServerKeyExchange work for D(TLS) < 1.2. 2017-11-30 12:20:45 -08:00
scripts.base.protocols.ssl.tls13 Fix unit tests for new ordering from NetSessions::Drain 2019-08-21 09:24:02 -04:00
scripts.base.protocols.ssl.tls13-experiment Recognize TLS 1.3 negotiation correctly. 2018-03-27 14:58:06 -07:00
scripts.base.protocols.ssl.tls13-version support the newer TLS 1.3 key_share extension. 2019-06-03 14:40:33 +10:00
scripts.base.protocols.ssl.x509-invalid-extension Fix read at invalid address in X509 extension parser. 2018-06-04 12:05:56 -07:00
scripts.base.protocols.ssl.x509_extensions Changing what's escaped when printing. 2015-04-15 16:59:50 -07:00
scripts.base.protocols.syslog.missing-pri Make Syslog analyzer accept messages that omit Priority 2019-03-14 18:47:32 -07:00
scripts.base.protocols.syslog.trace Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.protocols.tcp.pending Fix behavior of connection_pending event 2016-07-26 15:49:51 -07:00
scripts.base.protocols.xmpp.client-dpd Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.protocols.xmpp.server-dialback-dpd Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.protocols.xmpp.starttls Make tunnel_parents in conn.log optional. 2018-01-12 13:46:00 -08:00
scripts.base.utils.active-http Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.utils.addrs GH-340: Improve IPv4/IPv6 regexes, extraction, and validity functions 2019-04-18 19:04:39 -07:00
scripts.base.utils.conn-ids
scripts.base.utils.decompose_uri Changing what's escaped when printing. 2015-04-15 16:59:50 -07:00
scripts.base.utils.dir GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
scripts.base.utils.directions-and-hosts
scripts.base.utils.exec GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
scripts.base.utils.files extract_filename_from_content_disposition is still hacky but more closely aligns with RFC5987 2013-07-09 14:05:36 -04:00
scripts.base.utils.hash_hrw Merge topic/actor-system throug a squashed commit. 2018-05-18 22:39:23 +00:00
scripts.base.utils.json Merge remote-tracking branch 'origin/topic/timw/595-json-perf' 2019-10-01 16:42:59 -07:00
scripts.base.utils.numbers
scripts.base.utils.paths GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
scripts.base.utils.pattern Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.utils.queue Fixed the measurement "sample" plugin. 2013-04-02 00:19:06 -04:00
scripts.base.utils.site Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.base.utils.strings Changing what's escaped when printing. 2015-04-15 16:59:50 -07:00
scripts.base.utils.thresholds
scripts.base.utils.urls Updates for the urls.bro script. Fixes BIT-1404. 2015-06-01 11:38:26 -04:00
scripts.check-test-all-policy
scripts.policy.frameworks.intel.removal Change default value of peer_description "zeek" 2019-06-06 19:49:30 -07:00
scripts.policy.frameworks.intel.seen.certs Change default value of peer_description "zeek" 2019-06-06 19:49:30 -07:00
scripts.policy.frameworks.intel.seen.smb Change default value of peer_description "zeek" 2019-06-06 19:49:30 -07:00
scripts.policy.frameworks.intel.seen.smtp Change default value of peer_description "zeek" 2019-06-06 19:49:30 -07:00
scripts.policy.frameworks.intel.whitelisting Change default value of peer_description "zeek" 2019-06-06 19:49:30 -07:00
scripts.policy.frameworks.netcontrol.catch-and-release GH-379: move catch-and-release and unified2 scripts to policy/ 2019-06-05 13:33:45 -07:00
scripts.policy.frameworks.netcontrol.catch-and-release-2 GH-379: move catch-and-release and unified2 scripts to policy/ 2019-06-05 13:33:45 -07:00
scripts.policy.frameworks.netcontrol.catch-and-release-forgotten GH-379: move catch-and-release and unified2 scripts to policy/ 2019-06-05 13:33:45 -07:00
scripts.policy.frameworks.software.version-changes GH-379: move catch-and-release and unified2 scripts to policy/ 2019-06-05 13:33:45 -07:00
scripts.policy.frameworks.software.vulnerable GH-379: move catch-and-release and unified2 scripts to policy/ 2019-06-05 13:33:45 -07:00
scripts.policy.misc.dump-events GH-646: add new "successful_connection_remove" event 2019-11-11 19:52:59 -08:00
scripts.policy.misc.weird-stats GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
scripts.policy.misc.weird-stats-cluster Add rate-limiting sampling mechanism for weird events 2018-07-26 19:57:36 -05:00
scripts.policy.protocols.conn.known-hosts update tests 2019-07-31 15:48:30 +02:00
scripts.policy.protocols.conn.known-services update tests 2019-07-31 15:48:30 +02:00
scripts.policy.protocols.conn.known-services-multi Merge branch 'known_services_multiprotocols' of https://github.com/mauropalumbo75/zeek 2019-08-09 10:47:34 -07:00
scripts.policy.protocols.conn.mac-logging Fix unit tests for new ordering from NetSessions::Drain 2019-08-21 09:24:02 -04:00
scripts.policy.protocols.conn.speculative-service Merge branch 'topic/jgras/dpd-late-match' of https://github.com/J-Gras/zeek 2019-09-17 11:17:41 -07:00
scripts.policy.protocols.conn.vlan-logging update tests 2019-07-31 15:48:30 +02:00
scripts.policy.protocols.http.flash-version Adding tests for Flash version parsing and plugin detection. 2015-07-30 07:23:14 -07:00
scripts.policy.protocols.http.header-names Merge branch 'patch-1' of https://github.com/neu5ron/bro 2019-03-13 13:49:17 -07:00
scripts.policy.protocols.http.test-sql-injection-regex
scripts.policy.protocols.krb.ticket-logging I missed one test I needed to update for the kerberos commit that I just pushed. 2017-02-22 00:02:51 -05:00
scripts.policy.protocols.ssh.detect-bruteforcing GH-379: move catch-and-release and unified2 scripts to policy/ 2019-06-05 13:33:45 -07:00
scripts.policy.protocols.ssl.expiring-certs GH-379: move catch-and-release and unified2 scripts to policy/ 2019-06-05 13:33:45 -07:00
scripts.policy.protocols.ssl.extract-certs-pem Finishing touches of the x509 file analyzer. 2014-03-13 15:21:30 -07:00
scripts.policy.protocols.ssl.heartbleed GH-379: move catch-and-release and unified2 scripts to policy/ 2019-06-05 13:33:45 -07:00
scripts.policy.protocols.ssl.known-certs Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.policy.protocols.ssl.log-hostcerts-only Fix x509 certificate Version (the +1 was missing...). 2014-03-19 21:46:19 -07:00
scripts.policy.protocols.ssl.validate-certs Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.policy.protocols.ssl.validate-certs-no-cache Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.policy.protocols.ssl.validate-ocsp Baseline updates after hash function change. 2016-07-13 10:11:37 -07:00
scripts.policy.protocols.ssl.validate-sct SCT: Add signed certificate timestamp validation script. 2017-03-29 09:17:30 -07:00
scripts.policy.protocols.ssl.weak-keys GH-379: move catch-and-release and unified2 scripts to policy/ 2019-06-05 13:33:45 -07:00
signatures.bad-eval-condition Update test baseline. 2019-07-18 14:06:34 -07:00
signatures.dpd Test-suite passes. 2013-03-26 15:40:23 -07:00
signatures.dst-ip-cidr-v4 Fix a couple of problems with signature matching. 2016-10-19 14:23:43 -07:00
signatures.dst-ip-header-condition-v4 Add IPv6 support to signature header conditions. 2012-10-17 11:11:51 -05:00
signatures.dst-ip-header-condition-v4-masks Add IPv6 support to signature header conditions. 2012-10-17 11:11:51 -05:00
signatures.dst-ip-header-condition-v6 Add IPv6 support to signature header conditions. 2012-10-17 11:11:51 -05:00
signatures.dst-ip-header-condition-v6-masks Add IPv6 support to signature header conditions. 2012-10-17 11:11:51 -05:00
signatures.dst-port-header-condition Add IPv6 support to signature header conditions. 2012-10-17 11:11:51 -05:00
signatures.eval-condition Make tunnel_parents in conn.log optional. 2018-01-12 13:46:00 -08:00
signatures.eval-condition-no-return-value Update tests to reflect new error msg. 2019-06-24 09:34:02 -07:00
signatures.header-header-condition Add IPv6 support to signature header conditions. 2012-10-17 11:11:51 -05:00
signatures.id-lookup Fix signatures that use identifiers of type table. 2013-09-05 13:01:40 -05:00
signatures.ip-proto-header-condition Add IPv6 support to signature header conditions. 2012-10-17 11:11:51 -05:00
signatures.load-sigs Fix assignments to event arguments becoming visible to subsequent 2017-10-27 13:28:48 -07:00
signatures.src-ip-header-condition-v4 Add IPv6 support to signature header conditions. 2012-10-17 11:11:51 -05:00
signatures.src-ip-header-condition-v4-masks Add IPv6 support to signature header conditions. 2012-10-17 11:11:51 -05:00
signatures.src-ip-header-condition-v6 Add IPv6 support to signature header conditions. 2012-10-17 11:11:51 -05:00
signatures.src-ip-header-condition-v6-masks Add IPv6 support to signature header conditions. 2012-10-17 11:11:51 -05:00
signatures.src-port-header-condition GH-173: Support ranges of values for value_list elements in the signature parser 2019-05-23 10:58:04 -07:00
signatures.tcp-syn-with-payload GH-664: fix signature matching for payload-carrying SYN packets 2019-10-29 17:20:08 -07:00
signatures.udp-packetwise-insensitive GH-353: Add /<re>/i case-insensitive signature syntax 2019-05-06 14:22:12 -07:00
signatures.udp-packetwise-match Sorting test output for stability. 2015-04-09 15:22:59 -07:00
signatures.udp-payload-size Fix a couple of problems with signature matching. 2016-10-19 14:23:43 -07:00