zeek/scripts/base
Jon Siwek 3c95d1d695 Refactor DNS script's state management to improve performance.
The amount of timers involved in DNS::PendingMessage tables'
expiration attributes have a significant performance hit.  Instead the
script now relies solely on maximum thresholds for pending message
quantities to limit amount of accumulated state.  There's a new option,
"DNS::max_pending_query_ids", to limit the number outstanding messages
across all DNS query IDs ("DNS::max_pending_msgs" still limits number
of outstanding messages for a *given* query ID).
2014-02-13 14:55:45 -06:00
..
files Minor unified2 script documentation fix. 2014-02-03 16:55:23 -06:00
frameworks Merge remote-tracking branch 'origin/topic/jazoff/notice_file_info' 2014-01-20 12:01:44 -08:00
misc Add script to detect filtered TCP traces, addresses BIT-1119. 2014-01-31 17:04:58 -06:00
protocols Refactor DNS script's state management to improve performance. 2014-02-13 14:55:45 -06:00
utils Return the Dir module to file name tracking instead of inode tracking. 2013-10-29 11:09:55 -04:00
init-bare.bro Merge remote-tracking branch 'origin/topic/jsiwek/tcp-improvements' 2014-01-28 15:24:20 -08:00
init-default.bro Add script to detect filtered TCP traces, addresses BIT-1119. 2014-01-31 17:04:58 -06:00