mirror of
https://github.com/zeek/zeek.git
synced 2025-10-03 23:28:20 +00:00
430cd9b146
- Large rework on packet filter framework to make many things easier.
- Removed the PacketFilter::all_packets variable because it was confusing.
- New variable (PacketFilter::enable_auto_protocol_capture_filters) to re-enable the old filtering model of only sniffing ports for analyzed protocols.
- In progress plugin model for adding filtering mechanisms.
- New default single item for capture_filters = { ["default"] = PacketFilter::default_capture_filter };
- Mechanism and helper functions to "shunt" traffic with filters.
- Created the Protocols framework to assist with reworking how base protocol scripts are registered with DPD and other things.
- Protocols framework creates BPF filters for registered analyzers. (if using PacketFilter framework in that mode).
|
||
|---|---|---|
| .. | ||
| cluster | ||
| communication | ||
| control | ||
| dpd | ||
| intel | ||
| logging | ||
| metrics | ||
| notice | ||
| packet-filter | ||
| protocols | ||
| reporter | ||
| signatures | ||
| software | ||