zeek/testing/btest/scripts/base/protocols
Arne Welzel d2314d2666 files.log: Unroll and introduce uid and id fields
This is a script-only change that unrolls File::Info records into
multiple files.log entries if the same file was seen over different
connections by single worker. Consequently, the File::Info record
gets the commonly used uid and id fields added. These fields are
optional for File::Info - a file may be analyzed without relation
to a network connection (e.g by using Input::add_analysis()).

The existing tx_hosts, rx_hosts and conn_uids fields of Files::Info
are not meaningful after this change and removed by default. Therefore,
files.log will have them removed, too.

The tx_hosts, rx_hosts and conn_uids fields can be revived by using the
policy script frameworks/files/deprecated-txhosts-rxhosts-connuids.zeek
included in the distribution. However, with v6.1 this script will be
removed.
2022-08-16 17:22:20 +02:00
..
arp Initial implementation of Lower-Level analyzers 2020-09-23 11:13:25 -07:00
bittorrent Adding test for BitTorrent tracker. 2021-12-21 17:48:26 +01:00
conn GH-1252: rename files with colons for Windows compatibility 2020-11-04 10:29:52 -08:00
dce-rpc Fix protocol forwarding in dce_rpc-auth 2021-09-23 08:50:11 -04:00
dhcp Prevent large dhcp log entries 2022-07-28 11:34:18 -07:00
dnp3 General btest cleanup 2020-08-11 11:26:22 -07:00
dns add svcb test case 2021-10-12 17:43:32 -04:00
ftp Implement X509 certificate log caching 2021-06-29 09:41:40 +01:00
http files.log: Unroll and introduce uid and id fields 2022-08-16 17:22:20 +02:00
icmp Remove deprecated ICMP events 2021-01-27 10:52:40 -07:00
imap Baseline updates for recent SSL changes. 2021-06-29 15:03:03 +01:00
irc General btest cleanup 2020-08-11 11:26:22 -07:00
krb General btest cleanup 2020-08-11 11:26:22 -07:00
modbus General btest cleanup 2020-08-11 11:26:22 -07:00
mount GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
mqtt GH-474: change MQTT::max_payload_size to be a runtime option 2019-08-05 18:11:54 -07:00
mysql Add btest for GH-1084 2020-07-24 09:28:11 -05:00
ncp General btest cleanup 2020-08-11 11:26:22 -07:00
nfs GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
ntp General btest cleanup 2020-08-11 11:26:22 -07:00
pop3 GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
portmap GH-684: Fix parsing of RPC calls with non-AUTH_UNIX flavors 2019-11-13 13:14:14 -08:00
radius Convert pcapng test suite files to pcap format 2019-11-08 13:08:06 -08:00
rdp Baseline updates for recent SSL changes. 2021-06-29 15:03:03 +01:00
rfb regularize test suite names to avoid custom/outdated suffices 2022-05-12 13:32:49 -07:00
sip GH-1507: Tolerate junk data before SIP requests 2021-04-14 15:34:07 -07:00
smb updates for gen-C++ maintenance, including skipping some inappropriate tests 2022-08-01 16:47:17 -07:00
smtp GH-1352: Added flag to stop processing SMTP headers in attached 2021-01-21 14:55:10 -05:00
snmp General btest cleanup 2020-08-11 11:26:22 -07:00
socks General btest cleanup 2020-08-11 11:26:22 -07:00
ssh Change SSH version field to be &optional. 2021-06-17 09:24:46 +02:00
ssl Introduce global disabling_analyzer() hook to veto disable_analyzer() 2022-08-11 09:40:36 +02:00
syslog General btest cleanup 2020-08-11 11:26:22 -07:00
tcp Add testcase for TCP segment offloading. 2021-11-23 12:37:55 +00:00
xmpp GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00