zeek/scripts/base
Benjamin Bannier 396fb89504 Remove use of fallible get_conn_transport_proto in analyzer_violation.
When setting up the DPD info we previously would get the
`transport_proto` for the connection with `get_conn_transport_proto`.
This function takes a `conn_id` and would fail fatally if the connection
for the given ID was unknown. It seems it was possible to run into such
scenarios when the `analyzer_violation` event was processed after the
connection had been cleaned up.

We now get the `transport_proto` directly from the ports in the
`connection` passed into `analyzer_violation` via
`get_port_transport_proto` which cannot fail.
2022-07-19 12:20:45 +02:00
..
files GH-1634: Address feedback 2021-07-02 15:12:58 +01:00
frameworks Remove use of fallible get_conn_transport_proto in analyzer_violation. 2022-07-19 12:20:45 +02:00
misc annotate base scripts with &is_used as needed 2022-05-26 17:39:17 -07:00
packet-protocols Fix ethertype for ARP in Geneve forwarding rules 2021-12-09 14:58:08 -07:00
protocols SSL Analyzer: track connection direction by messages 2022-06-24 18:35:44 +01:00
utils Expand build_path() function to handle empty dir arguments gracefully 2022-05-19 09:45:52 -07:00
init-bare.zeek Remove deprecated MemoryAllocation() methods and related code 2022-06-30 18:56:52 +00:00
init-default.zeek Add base/misc/installation.zeek, with Zeek installation directories 2022-05-23 14:16:59 -07:00
init-frameworks-and-bifs.zeek GH-1122: Allow initializing globals with calls to subdir BIFs 2020-08-27 12:20:37 -07:00
init-supervisor.zeek Establish a separate init script when using the supervisor 2021-07-08 13:12:53 -07:00