zeek/testing/btest/signatures
Arne Welzel 04872d4e78 signatures: Add data_end_offset to signature_match() and custom events
This change tracks the current offset (number of bytes fed into matchers)
on the top-level RuleEndpointState such that we can compute the relative ending
for matched texts individually.

Additionally, it adds the data_end_offset as a new optional parameter to
signature_match().
2024-10-30 13:29:58 +01:00
..
bad-eval-condition.zeek General btest cleanup 2020-08-11 11:26:22 -07:00
custom-event-errors.zeek rule-parse: Remove id_to_str() lookup to squelch coverity warning 2024-08-09 09:49:43 +02:00
custom-event.zeek signatures: Add data_end_offset to signature_match() and custom events 2024-10-30 13:29:58 +01:00
dpd.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
dst-ip-cidr-v4.zeek General btest cleanup 2020-08-11 11:26:22 -07:00
dst-ip-header-condition-v4-masks.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
dst-ip-header-condition-v4.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
dst-ip-header-condition-v6-masks.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
dst-ip-header-condition-v6.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
dst-port-header-condition.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
eval-condition-no-return-value.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
eval-condition.zeek Remove @load base/frameworks/dpd from tests 2022-08-31 17:00:55 +02:00
header-header-condition.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
http-body-match.zeek Test how the signature framework matches HTTP body 2023-11-03 15:28:15 +01:00
id-lookup.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
ip-proto-header-condition.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
load-sigs.zeek General btest cleanup 2020-08-11 11:26:22 -07:00
signature-cond-used-twice.zeek Attr: Duplicated &is_used is allowed 2022-12-02 17:15:05 +01:00
signature-cond-used.zeek Add is_used attribute to an ID if used in a signature eval statement 2022-08-31 14:58:23 -07:00
src-ip-header-condition-v4-masks.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
src-ip-header-condition-v4.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
src-ip-header-condition-v6-masks.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
src-ip-header-condition-v6.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
src-port-header-condition.zeek GH-173: Support ranges of values for value_list elements in the signature parser 2019-05-23 10:58:04 -07:00
tcp-end-of-match.zeek signatures: Add data_end_offset to signature_match() and custom events 2024-10-30 13:29:58 +01:00
tcp-syn-with-payload.zeek GH-664: fix signature matching for payload-carrying SYN packets 2019-10-29 17:20:08 -07:00
udp-end-of-match.zeek signatures: Add data_end_offset to signature_match() and custom events 2024-10-30 13:29:58 +01:00
udp-packetwise-insensitive.zeek General btest cleanup 2020-08-11 11:26:22 -07:00
udp-packetwise-match.zeek General btest cleanup 2020-08-11 11:26:22 -07:00
udp-payload-size.zeek General btest cleanup 2020-08-11 11:26:22 -07:00
udp-state.zeek GH-779: Add "udp-state" signature condition 2020-10-09 13:43:17 -07:00