Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 06:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1
zeek/testing/btest/Baseline
History
Arne Welzel 4c60dfd6c5 SMTP: Adapt scripts for enable_rfc822_msg_file_analysis 
Specifically, set a MIME part's parent_id to the rfc822_msg_fuid if it
is set and take into account the current rfc822_msg_fuid for describe_file()
to avoid fuid collisions of the top-level RFC822 message and the first
MIME part.
2025-07-16 12:37:33 +02:00
..
af_packet.plugin Include in Jan's AF_PACKET plugin as builtin plugin 2022-10-13 13:29:27 +02:00
bifs.addr_count_conversion
bifs.addr_to_ptr_name
bifs.addr_version
bifs.all_set
bifs.analyzer_name
bifs.any_set
bifs.backtrace
bifs.bare_mode
bifs.bloomfilter
bifs.bloomfilter-seed
bifs.bytestring_to_count Support other byte lengths in bytestring_to_count 2022-08-17 15:45:30 -07:00
bifs.bytestring_to_double
bifs.bytestring_to_float
bifs.bytestring_to_hexstr
bifs.cat cat_sep: Make fully vararg and do explicit runtime type checks 2022-10-27 13:06:06 +02:00
bifs.cat_sep_errors zeek.bif: Remove cat_sep() fully var_arg changes 2023-04-19 19:30:46 +02:00
bifs.cat_sep_errors-2 zeek.bif: Remove cat_sep() fully var_arg changes 2023-04-19 19:30:46 +02:00
bifs.cat_sep_errors-3 zeek.bif: Remove cat_sep() fully var_arg changes 2023-04-19 19:30:46 +02:00
bifs.cat_sep_errors-4 zeek.bif: Remove cat_sep() fully var_arg changes 2023-04-19 19:30:46 +02:00
bifs.cat_sep_errors-5 zeek.bif: Remove cat_sep() fully var_arg changes 2023-04-19 19:30:46 +02:00
bifs.check_subnet
bifs.clear_table
bifs.clear_table_expire_func
bifs.community_id.run-pcaps btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
bifs.community_id.v1 btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
bifs.compress_path
bifs.convert_for_pattern
bifs.count_to_addr
bifs.create_file
bifs.decode_base64
bifs.decode_base64_conn
bifs.decode_base64_errors btest/decode_base_errors: Avoid binary output in baseline 2023-02-02 18:49:00 +01:00
bifs.directory_operations Downgrade internal errors to reporter warnings in file/directory BiFs 2025-02-05 17:49:37 -08:00
bifs.disable_analyzer btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
bifs.disable_analyzer-early btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
bifs.disable_analyzer-for-conn DPD: change handling of pre-confirmation violations, remove max_violations 2025-01-30 16:59:44 +00:00
bifs.disable_analyzer-for-conn-2 Add btests for the lookup_connection_analyzer_id() BiF. 2024-05-30 16:38:09 -07:00
bifs.disable_analyzer-for-conn-3 Add btests for the lookup_connection_analyzer_id() BiF. 2024-05-30 16:38:09 -07:00
bifs.disable_analyzer-hook btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
bifs.disable_analyzer-hook-module analyzer: Move disabling_analyzer() hook into Analyzer module 2023-01-23 12:22:05 +01:00
bifs.disable_analyzer-invalid-aid More precise error reporting for the disable_analyzer() BiF 2024-05-30 16:38:22 -07:00
bifs.disable_analyzer-tcp-packet-children btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
bifs.do_find_str
bifs.dump_current_packet
bifs.edit
bifs.enable_raw_output
bifs.encode_base64
bifs.entropy_test
bifs.enum_names enum_names: Support naming types with a string 2022-10-21 20:09:48 +02:00
bifs.enum_to_int
bifs.escape_string
bifs.event-handler-stats telemetry: Invoke Telemetry::sync() only at scrape/collection time 2024-10-22 18:49:11 +02:00
bifs.exit
bifs.file_mode
bifs.filter_subnet_table
bifs.find_all Add max_size argument for find_all/find_all_ordered BIFs 2023-02-21 12:27:54 -07:00
bifs.find_all_ordered Add max_size argument for find_all/find_all_ordered BIFs 2023-02-21 12:27:54 -07:00
bifs.find_entropy
bifs.find_first Add baseline for find_first test, update comments, and reorder function imports 2025-05-02 11:51:45 +08:00
bifs.find_in_zeekpath zeek.bif: Add find_in_zeekpath() helper 2024-02-22 11:33:03 +01:00
bifs.find_last
bifs.fmt
bifs.fmt_ftp_port
bifs.fnv1a_hash Improvements in FNV1A hash functions 2024-10-22 16:07:12 +02:00
bifs.footprint refine Val "footprint" to equate long strings with multiple objects 2024-04-29 12:39:36 -07:00
bifs.from_json Change from_json to return an error rather than print it. 2025-04-23 15:56:12 -07:00
bifs.from_json-2 Change from_json to return an error rather than print it. 2025-04-23 15:56:12 -07:00
bifs.from_json-3 Change from_json to return an error rather than print it. 2025-04-23 15:56:12 -07:00
bifs.from_json-4 Change from_json to return an error rather than print it. 2025-04-23 15:56:12 -07:00
bifs.from_json-5 Change from_json to return an error rather than print it. 2025-04-23 15:56:12 -07:00
bifs.from_json-6 Change from_json to return an error rather than print it. 2025-04-23 15:56:12 -07:00
bifs.from_json-7 Change from_json to return an error rather than print it. 2025-04-23 15:56:12 -07:00
bifs.from_json-8 Change from_json to return an error rather than print it. 2025-04-23 15:56:12 -07:00
bifs.from_json-9 Change from_json to return an error rather than print it. 2025-04-23 15:56:12 -07:00
bifs.from_json-10 Change from_json to return an error rather than print it. 2025-04-23 15:56:12 -07:00
bifs.from_json-11 Change from_json to return an error rather than print it. 2025-04-23 15:56:12 -07:00
bifs.from_json-12 Change from_json to return an error rather than print it. 2025-04-23 15:56:12 -07:00
bifs.from_json-13 Change from_json to return an error rather than print it. 2025-04-23 15:56:12 -07:00
bifs.from_json-14 Add test with MUD example 2023-06-29 15:57:52 +02:00
bifs.get_current_packet_header
bifs.get_dns_stats get_dns_stats: Expose total cache size and cached text entries 2023-03-10 09:22:45 +01:00
bifs.get_plugin_components Added Baseline 2025-06-25 21:22:21 +05:30
bifs.get_port_transport_proto
bifs.getsetenv
bifs.global_ids global_ids: Align script_id$type_name field with type_name() 2024-02-23 17:26:56 +01:00
bifs.global_ids-modules global_ids(): Include module names 2023-07-05 14:09:20 +02:00
bifs.haversine_distance
bifs.hexdump
bifs.hexstr_to_bytestring
bifs.hll_cardinality
bifs.hll_cluster btest remaining: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
bifs.hll_large_estimate
bifs.identify_data
bifs.install_src_addr_filter btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
bifs.is_ascii
bifs.is_event_handled Address review comments and small updates for DNS warnings 2025-01-14 09:33:48 +00:00
bifs.is_local_interface
bifs.is_port
bifs.join_string strings: Implement join_string_set() as bif 2022-09-20 23:07:26 +02:00
bifs.levenshtein_distance
bifs.lookup_connection btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
bifs.lookup_ID
bifs.lowerupper
bifs.lstrip
bifs.mask_addr
bifs.matching_subnets
bifs.math zeek.bif: Add log2() and ceil() 2023-05-09 18:57:57 +02:00
bifs.md5
bifs.net_stats_trace Add optional packet filtered statistics for packet sources 2023-04-06 09:47:04 -07:00
bifs.netbios-functions netbios_decode: use unsigned char for result 2023-02-02 15:48:58 +01:00
bifs.order
bifs.packet_sources
bifs.parse_ftp bifs/parse_eftp: Prevent reporter warnings/errors on invalid input 2023-01-16 15:20:02 +01:00
bifs.piped_exec tweak btest so it's recognized as a candidate for C++ compilation testing 2022-09-16 16:49:55 -07:00
bifs.print_raw
bifs.ptr_name_to_addr
bifs.rand
bifs.raw_bytes_to_v4_addr
bifs.raw_bytes_to_v6_addr
bifs.reading_traces
bifs.record_type_to_vector
bifs.records_fields record_fields: Include information about optionality of fields 2023-04-27 21:18:35 +02:00
bifs.remask_addr
bifs.resize
bifs.reverse
bifs.rotate_file
bifs.rotate_file_by_name
bifs.routing0_data_to_addrs
bifs.rstrip
bifs.safe_shell_quote
bifs.same_object
bifs.sha1
bifs.sha256
bifs.sleep Add sleep() BiF. 2024-12-07 00:36:45 -08:00
bifs.sort
bifs.split_string strings.bif/do_split_string: Pass bol and eol to MatchPrefix() 2023-11-16 08:36:08 +01:00
bifs.strcmp
bifs.strftime
bifs.string_fill
bifs.string_to_pattern
bifs.string_utils Convert remove_prefix/suffix BIFs to use std::string_view 2024-01-23 10:38:56 -07:00
bifs.string_utils_errors Add type checking to string_cat arguments 2022-08-29 08:45:59 -07:00
bifs.strip
bifs.strptime
bifs.strstr
bifs.sub strings.bif/sub,gsub: Respect anchors in pattern 2023-11-17 14:37:25 +01:00
bifs.sub_bytes BTest updates for ZAM regularization changes 2024-08-16 11:18:58 +02:00
bifs.subnet_to_addr
bifs.subnet_version
bifs.subst_string
bifs.system
bifs.system_env
bifs.table_keys Add more test cases 2022-08-11 13:35:27 +08:00
bifs.table_values update test suite to avoid GH-2385 problems, including incorrect typing 2022-12-04 17:56:30 -08:00
bifs.to_addr
bifs.to_count Merge remote-tracking branch 'markoverholser/master' 2025-02-24 11:38:11 -07:00
bifs.to_double
bifs.to_double_from_string
bifs.to_int Merge remote-tracking branch 'markoverholser/master' 2025-02-24 11:38:11 -07:00
bifs.to_interval
bifs.to_port bifs/to_port: Avoid ASAN errors when calling to_port("") 2022-08-31 17:15:50 +02:00
bifs.to_subnet
bifs.to_time
bifs.topk
bifs.type_aliases
bifs.type_name Var/Func: Render function parameters using comma, not semicolon 2023-10-04 17:42:30 +02:00
bifs.unique_id
bifs.unique_id-rnd
bifs.uuid_to_string
bifs.x509_check_hostname
bifs.x509_parse_dn SSL/TLS: Parse CertificateRequest message 2023-03-09 09:12:29 +01:00
bifs.x509_verify btest/x509_verify: Drop OpenSSL 1.0 hack 2025-02-04 09:44:03 +01:00
bifs.zeek_args
broker.connect-on-retry
broker.disconnect
broker.error
broker.event-group-interaction EventRegistry/Func: Disable events when all bodies are disabled 2023-01-05 12:03:58 +01:00
broker.opaque Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
broker.peering-directionality Expand Broker APIs to allow tracking directionality of peering establishment 2025-04-21 14:08:42 -07:00
broker.publish-errors btest/broker/publish-errors: Avoid exit(0) 2025-06-24 19:06:52 +02:00
broker.publish_unspecified_table broker: Support publish() of unspecified set() / table() 2024-11-06 15:27:26 +01:00
broker.python-bindings btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
broker.remote_event base/frameworks/spicy: Do not load base/misc/version 2023-10-24 13:15:21 +02:00
broker.remote_event_any base/frameworks/spicy: Do not load base/misc/version 2023-10-24 13:15:21 +02:00
broker.remote_event_auto
broker.remote_event_auto_ts Add timestamps to auto published broker events. 2023-05-11 12:54:11 +02:00
broker.remote_event_index_types BTest baseline update for more complete function/lambda names 2024-09-27 14:16:10 -07:00
broker.remote_event_schedule_ts Prevent event timestamps set to future 2025-04-11 13:06:33 +02:00
broker.remote_event_ssl_auth base/frameworks/spicy: Do not load base/misc/version 2023-10-24 13:15:21 +02:00
broker.remote_event_ts Add timestamps to manually published broker events. 2023-05-11 12:53:52 +02:00
broker.remote_event_ts_compat Add compatibility tests for timestamped events. 2023-05-11 12:54:11 +02:00
broker.remote_event_vector_any
broker.remote_id Spelling testing 2022-11-16 20:05:03 -05:00
broker.remote_log
broker.remote_log_batch
broker.remote_log_late_join
broker.remote_log_types BTest baseline update for more complete function/lambda names 2024-09-27 14:16:10 -07:00
broker.ssl-mismatch
broker.ssl_auth_failure
broker.store.brokerstore-attr-clone
broker.store.brokerstore-attr-expire
broker.store.brokerstore-attr-persistence
broker.store.brokerstore-attr-persistence-clone
broker.store.brokerstore-attr-simple
broker.store.brokerstore-backend-delete-composite-key btest/broker: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
broker.store.brokerstore-backend-invalid
broker.store.brokerstore-backend-simple
broker.store.brokerstore-backend-simple-incompatible
broker.store.brokerstore-backend-simple-reverse
broker.store.brokerstore-backend-sqlite
broker.store.brokerstore-backend-sqlite-corrupt-delete broker/store: Extend SQLiteOptions around data safety and performance 2023-01-30 10:25:37 +01:00
broker.store.brokerstore-backend-sqlite-corrupt-fail broker/store: Extend SQLiteOptions around data safety and performance 2023-01-30 10:25:37 +01:00
broker.store.brokerstore-backend-sqlite-incompatible
broker.store.brokerstore-backend-sqlite-integrity-check broker/store: Extend SQLiteOptions around data safety and performance 2023-01-30 10:25:37 +01:00
broker.store.brokerstore-backend-sqlite-wal-mode broker/store: Extend SQLiteOptions around data safety and performance 2023-01-30 10:25:37 +01:00
broker.store.clone
broker.store.create-failure
broker.store.create-global-failure Return a warning and fail if creating a store at global scope 2024-12-17 11:32:43 -07:00
broker.store.handle-copy
broker.store.invalid-handle added a space when rendering some expressions so they're more readable 2024-05-29 12:40:05 -07:00
broker.store.local
broker.store.ops
broker.store.record
broker.store.set
broker.store.sqlite
broker.store.table
broker.store.type-conversion
broker.store.vector
broker.telemetry telemetry: Rename endpoint label to node label 2025-06-25 09:33:01 +02:00
broker.unpeer
broker.web-socket-events
broker.web-socket-events-metadata Add compatibility tests for timestamped events. 2023-05-11 12:54:11 +02:00
cluster.backend-enum broker: Add WebSocketShim backend 2025-04-23 14:27:43 +02:00
cluster.broker.cluster-hello-zero-network-timestamp btest: Add test for Cluster::hello zero-timestamp 2025-05-26 16:08:27 +02:00
cluster.broker.cluster-publish cluster: Add Cluster scoped bifs 2024-11-26 12:58:23 +01:00
cluster.broker.logging btest/cluster: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
cluster.broker.publish-any cluster: Fix Cluster::publish() of Broker::Data 2024-12-12 17:54:37 +01:00
cluster.broker.publish-warning Broker::publish: Warn on using Broker::publish() when inactive 2024-12-11 17:20:42 +01:00
cluster.generic.cluster-publish-errors cluster: Move publish_hrw() and publish_rr() to cluster.bif 2024-12-10 20:33:02 +01:00
cluster.generic.errors cluster: Add Cluster scoped bifs 2024-11-26 12:58:23 +01:00
cluster.generic.logging-rr btest/generic: Add publish_hrw(), publish_rr() and logging tests 2024-12-10 20:33:02 +01:00
cluster.generic.make_event cluster: Add Cluster scoped bifs 2024-11-26 12:58:23 +01:00
cluster.generic.publish-any cluster: Fix Cluster::publish() of Broker::Data 2024-12-12 17:54:37 +01:00
cluster.generic.publish-hrw btest/generic: Add publish_hrw(), publish_rr() and logging tests 2024-12-10 20:33:02 +01:00
cluster.generic.publish-no-handler cluster/serializer/broker: Fix handler lookup 2025-02-05 10:39:56 +01:00
cluster.generic.publish-rr btest/generic: Add publish_hrw(), publish_rr() and logging tests 2024-12-10 20:33:02 +01:00
cluster.generic.publish-unspecified cluster/Backend: Handle unspecified table/set 2024-12-12 17:54:42 +01:00
cluster.generic.publish-vec-hole broker/Data/data_to_val: Fail on vectors/lists with holes 2025-04-28 18:23:37 +02:00
cluster.serializer-enum cluster/serializer: Add binary-serialization-format 2024-12-04 12:40:35 +01:00
cluster.telemetry.two-nodes btest/cluster/telemetry: Add smoke testing for telemetry 2025-06-25 17:13:01 +02:00
cluster.telemetry.ws btest/cluster/telemetry: Add smoke testing for telemetry 2025-06-25 17:13:01 +02:00
cluster.telemetry.ws-app btest/cluster/telemetry: Add smoke testing for telemetry 2025-06-25 17:13:01 +02:00
cluster.telemetry.ws-invalid-app RE: Add MatchAll() and MatchSet() for std::string_view 2025-06-30 13:22:31 +02:00
cluster.websocket.bad-event-args Align WebSocket error in cluster with one in Broker 2025-06-21 18:13:09 +02:00
cluster.websocket.bad-subscriptions Align WebSocket error in cluster with one in Broker 2025-06-21 18:13:09 +02:00
cluster.websocket.bad-url Align WebSocket error in cluster with one in Broker 2025-06-21 18:13:09 +02:00
cluster.websocket.broker.manager-recvs btest/cluster/websocket: Add tests using broker 2025-04-23 14:27:43 +02:00
cluster.websocket.broker.manager-sends btest/cluster/websocket: Add tests using broker 2025-04-23 14:27:43 +02:00
cluster.websocket.broker.manager-worker-ping-pong btest/cluster/websocket: Add tests using broker 2025-04-23 14:27:43 +02:00
cluster.websocket.broker.no-subscriptions btest/cluster/websocket: Move no-subscriptions test 2025-04-25 10:01:23 +00:00
cluster.websocket.broker.oneshot cluster/zeromq: Attempt publish during termination 2025-04-23 14:27:43 +02:00
cluster.websocket.cluster-log cluster/WebSocket: Include X-Application-Name in cluster.log 2025-06-30 17:55:24 +02:00
cluster.websocket.listen-idempotent cluster/websocket: Make websocket dispatcher queue size configurable 2025-04-23 14:27:43 +02:00
cluster.websocket.one cluster/websocket: Implement WebSocket server 2025-03-10 17:07:30 +01:00
cluster.websocket.one-ipv6 cluster/websocket: Deprecate $listen_host, introduce $listen_addr 2025-05-30 11:02:41 +02:00
cluster.websocket.one-ipv6-deprecated cluster/websocket: Deprecate $listen_host, introduce $listen_addr 2025-05-30 11:02:41 +02:00
cluster.websocket.one-pipelining cluster/websocket: Implement WebSocket server 2025-03-10 17:07:30 +01:00
cluster.websocket.ping-timeout cluster/websocket: Propagate code and reason to websocket_client_lost() 2025-05-13 18:26:03 +02:00
cluster.websocket.terminate-while-queuing Websocket: Close onloop during Terminate() 2025-05-06 14:19:08 +02:00
cluster.websocket.three btest/cluster/websocket: Harden multi-client tests 2025-03-24 18:36:26 +01:00
cluster.websocket.tls cluster/websocket: Implement WebSocket server 2025-03-10 17:07:30 +01:00
cluster.websocket.tls-nocert btest/cluster/websocket: Add cert-less test 2025-06-16 13:47:33 +02:00
cluster.websocket.tls-usage-error cluster/websocket: Deprecate $listen_host, introduce $listen_addr 2025-05-30 11:02:41 +02:00
cluster.websocket.two-pipelining btest/cluster/websocket: Harden multi-client tests 2025-03-24 18:36:26 +01:00
cluster.websocket.zeromq.manager-worker-ping-pong btest/cluster/websocket: Move ZeroMQ test and use wstest.py 2025-04-23 14:27:43 +02:00
cluster.websocket.zeromq.no-subscriptions btest/cluster/websocket: Move no-subscriptions test 2025-04-25 10:01:23 +00:00
cluster.websocket.zeromq.oneshot cluster/zeromq: Attempt publish during termination 2025-04-23 14:27:43 +02:00
cluster.zeromq.ipv6-error cluster/zeromq: Hook up and enable IPV6 by default 2025-06-24 17:12:45 +02:00
cluster.zeromq.ipv6-logging cluster/zeromq: Hook up and enable IPV6 by default 2025-06-24 17:12:45 +02:00
cluster.zeromq.logging cluster/backend/zeromq: Add ZeroMQ based cluster backend 2024-12-10 20:33:02 +01:00
cluster.zeromq.manager-is-logger cluster/backend/zeromq: Add ZeroMQ based cluster backend 2024-12-10 20:33:02 +01:00
cluster.zeromq.node-topic-prefix cluster/zeromq: Fix node_topic() and nodeid_topic() 2025-03-24 18:36:26 +01:00
cluster.zeromq.supervisor cluster/backend/zeromq: Add ZeroMQ based cluster backend 2024-12-10 20:33:02 +01:00
cluster.zeromq.two-nodes cluster/backend/zeromq: Add ZeroMQ based cluster backend 2024-12-10 20:33:02 +01:00
cluster.zeromq.unsubscribe cluster/zeromq: Fix Unsubscribe() bug caused by \x00 prefix 2025-02-05 10:39:56 +01:00
cluster.zeromq.unsubscribe-two-workers cluster/zeromq: Fix unsubscription visibility 2025-03-24 18:36:16 +01:00
core.analyzer-confirmation-violation-info PPPoE: don't forward more bytes than header indicates 2025-07-08 10:20:59 +01:00
core.analyzer-confirmation-violation-info-ftp btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.analyzer-stream-event protocol: Add StreamEvent analyzer 2024-12-06 16:12:40 +01:00
core.analyzer-stream-event-disable protocol: Add StreamEvent analyzer 2024-12-06 16:12:40 +01:00
core.bits_per_uid btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.check-unused-event-handlers EventRegistry: Deprecate UsedHandlers() and UnusedHandlers() 2023-11-07 16:06:17 +01:00
core.checksums
core.checksums-cli Add btest for "-C" flag vs the script-layer ignore_checksums global. 2023-04-24 21:19:05 -07:00
core.checksums_ignore_nets Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.checksums_ignore_nets_runtime_update
core.cisco-fabric-path Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.command-line-option-redefs
core.conn-generic-packet-threshold Merge branch 'topic/jgras/connection-packet-threshold' of https://github.com/J-Gras/zeek 2025-07-08 17:54:27 +02:00
core.conn-size-threshold btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.conn-stats
core.conn-uid btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.connection_flip_roles btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.connection_flipped btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.connection_status_update btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.disable-mobile-ipv6
core.discarder btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.div-by-zero
core.dns-init scan.l: Deprecate DNS resolutions of hostname literals 2025-03-05 19:23:08 +01:00
core.embedded-null
core.erspan
core.erspanI Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.erspanII Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.erspanIII Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.ether-addrs
core.event-arg-reuse
core.event-groups.basic Reintroduce event groups 2022-10-25 18:03:26 +02:00
core.event-groups.errors Reintroduce event groups 2022-10-25 18:03:26 +02:00
core.event-groups.errors-2 Reintroduce event groups 2022-10-25 18:03:26 +02:00
core.event-groups.errors-3 Reintroduce event groups 2022-10-25 18:03:26 +02:00
core.event-groups.errors-4 Reintroduce event groups 2022-10-25 18:03:26 +02:00
core.event-groups.existence zeek.bif: Add has_event_group() / has_module_events() 2022-12-09 16:59:07 +01:00
core.event-groups.hooks-basic Reintroduce event groups 2022-10-25 18:03:26 +02:00
core.event-groups.hooks-module Reintroduce event groups 2022-10-25 18:03:26 +02:00
core.event-groups.module Reintroduce event groups 2022-10-25 18:03:26 +02:00
core.event-groups.multi-group Reintroduce event groups 2022-10-25 18:03:26 +02:00
core.event-groups.runtime Reintroduce event groups 2022-10-25 18:03:26 +02:00
core.event-metadata.add-missing-remote-network-timestamp-error Event: Bail on add_missing_remote_network_timestamp without add_network_timestamp 2025-06-02 17:31:36 +02:00
core.event-metadata.current-event-time Event: Use -1.0 for undefined/unset timestamps 2025-06-02 17:31:36 +02:00
core.event-metadata.network-timestamp Event/zeek.bif: Add EventMetadata current() and current_values() accessors 2025-05-23 19:32:50 +02:00
core.event-metadata.non-event Event/zeek.bif: Add EventMetadata current() and current_values() accessors 2025-05-23 19:32:50 +02:00
core.event-metadata.register Event/zeek.bif: Add EventMetadata current() and current_values() accessors 2025-05-23 19:32:50 +02:00
core.event-metadata.register-type-errors EventRegistry/zeek.bif/init-bare: Add event metadata infrastructure 2025-05-23 19:31:58 +02:00
core.event-trace btest/core: Add event-trace test 2025-05-19 18:23:08 +02:00
core.expire-all-timers Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.expired-conn-weird btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.expr-exception btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.fake_dns scan.l: Deprecate DNS resolutions of hostname literals 2025-03-05 19:23:08 +01:00
core.file-analyzer-violation threading/Manager: Warn if threads are added after termination 2024-07-02 12:34:28 +02:00
core.global_opaque_val
core.history-flip Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.hostname-literal-resolve scan.l: Deprecate DNS resolutions of hostname literals 2025-03-05 19:23:08 +01:00
core.icmp.icmp-context btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.icmp.icmp-events btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.icmp.icmp6-context btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.icmp.icmp6-events btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.icmp.icmp6-nd-options btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.icmp.icmp_sent btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.init-error
core.ip-broken-header Update baselines after AnalyzePacket changes 2022-11-08 16:44:15 -07:00
core.ipv6-atomic-frag btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.ipv6-flow-labels btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.ipv6-frag dns: Remove AD and CD flags from log 2023-03-16 10:09:27 +01:00
core.ipv6_esp
core.ipv6_ext_headers btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.ipv6_zero_len_ah btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.linuxsll2 btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.load-duplicates-links
core.load-explicit-bro-suffix-fallback
core.load-file-extension Cleanup unused baselines 2025-07-10 16:46:09 -04:00
core.load-pkg Cleanup unused baselines 2025-07-10 16:46:09 -04:00
core.load-prefixes
core.load-relative
core.load-stdin
core.load-unload Cleanup unused baselines 2025-07-10 16:46:09 -04:00
core.max-analyzer-violations pop3: Prevent unbounded state growth 2024-09-18 19:05:39 +02:00
core.mmdb.explicit-open Add btest to verify behavior of re-opened MMDBs opened directly via BIFs 2024-01-10 20:44:40 -08:00
core.mmdb.lookup Add btest for succeeding/failing IPv4/IPv6 lookups 2024-01-25 23:54:20 -08:00
core.mmdb.reopen btest/core/mmdb: Basic lookup_autonomous_system / lookup_location tests 2023-10-24 13:15:18 +02:00
core.mmdb.temporary-error Fix mmdb.temporary-error testcase when MMDBs are installed on system 2024-01-10 20:28:41 -08:00
core.mobile-ipv6-dst-opts Update baselines after AnalyzePacket changes 2022-11-08 16:44:15 -07:00
core.mobile-ipv6-home-addr btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.mobile-ipv6-routing btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.mobility-checksums
core.mobility_msg
core.mpls-in-vlan Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.network-time
core.network-time-init
core.network_time.broker core.network_time.broker: Test reliability improvement 2023-05-05 14:08:29 +02:00
core.network_time.no-update A set of tests around set_network_time() and timer expiration 2023-03-23 12:41:56 +01:00
core.network_time.packet_ts Add btest for get_current_packet_ts() 2024-12-09 16:39:38 +01:00
core.network_time.set-network-time A set of tests around set_network_time() and timer expiration 2023-03-23 12:41:56 +01:00
core.network_time.set-network-time-expiration A set of tests around set_network_time() and timer expiration 2023-03-23 12:41:56 +01:00
core.nflog
core.nop
core.option-errors
core.option-errors-2
core.option-errors-3
core.option-priorities
core.option-redef
core.option-runtime-errors added a space when rendering some expressions so they're more readable 2024-05-29 12:40:05 -07:00
core.option-runtime-errors-2 added a space when rendering some expressions so they're more readable 2024-05-29 12:40:05 -07:00
core.option-runtime-errors-3 added a space when rendering some expressions so they're more readable 2024-05-29 12:40:05 -07:00
core.option-runtime-errors-4 added a space when rendering some expressions so they're more readable 2024-05-29 12:40:05 -07:00
core.option-runtime-errors-5 added a space when rendering some expressions so they're more readable 2024-05-29 12:40:05 -07:00
core.option-runtime-errors-6 added a space when rendering some expressions so they're more readable 2024-05-29 12:40:05 -07:00
core.option-runtime-errors-7 added a space when rendering some expressions so they're more readable 2024-05-29 12:40:05 -07:00
core.option-runtime-errors-8 added a space when rendering some expressions so they're more readable 2024-05-29 12:40:05 -07:00
core.option-runtime-errors-9 added a space when rendering some expressions so they're more readable 2024-05-29 12:40:05 -07:00
core.option-runtime-errors-10 added a space when rendering some expressions so they're more readable 2024-05-29 12:40:05 -07:00
core.option-runtime-errors-11 added a space when rendering some expressions so they're more readable 2024-05-29 12:40:05 -07:00
core.option-runtime-errors-12 added a space when rendering some expressions so they're more readable 2024-05-29 12:40:05 -07:00
core.option-runtime-errors-13 added a space when rendering some expressions so they're more readable 2024-05-29 12:40:05 -07:00
core.option-zeek-done option.bif: Short-circuit option changes when terminating 2022-07-29 18:22:03 +02:00
core.packet-analyzer-override Reintroduce info when overriding packet analyzer mappings. 2023-03-30 16:19:39 +02:00
core.parse-only-signature-file-issues rule-parse: Remove [event_name] syntax, deprecate msg as identifier 2023-12-14 10:16:35 +01:00
core.parse-only-usage-issues
core.pbb Update btests for new local-only subnets 2025-01-09 22:16:42 -07:00
core.pcap.dumper
core.pcap.dynamic-filter btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.pcap.filter-warning Update core.pcap.filter-warning baseline 2024-04-18 12:27:46 +00:00
core.pcap.input-error iosource/pcap: Support configurable buffer size 2023-10-10 15:08:51 +02:00
core.pcap.pseudo-realtime
core.pcap.read-trace-with-filter Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.pcap.wrong-format iosource/pcap: Support configurable buffer size 2023-10-10 15:08:51 +02:00
core.pcap_file_done
core.ppp Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.pppoe Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.pppoe-over-qinq PPPoE: don't forward more bytes than header indicates 2025-07-08 10:20:59 +01:00
core.print-bpf-filters spciy-redis: Bring Redis analyzer into Zeek proper 2025-05-27 09:28:12 -04:00
core.print-interval
core.proc-status-file
core.protocol-registration-error
core.q-in-q Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.radiotap Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.raw-truncation Add length checking to ToRawPktHdrVal for truncated packets 2023-05-19 09:37:18 -07:00
core.raw_packet ip4_hdr: Add DF, MF, offset and sum fields 2023-04-29 17:09:43 +02:00
core.reassembly btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.record-field-defer testing/btest: Un-deferred record initalization tests 2023-09-12 12:12:46 +02:00
core.record-field-defer-2 testing/btest: Un-deferred record initalization tests 2023-09-12 12:12:46 +02:00
core.record-field-defer-3 testing/btest: Un-deferred record initalization tests 2023-09-12 12:12:46 +02:00
core.record-field-defer-4 testing/btest: Un-deferred record initalization tests 2023-09-12 12:12:46 +02:00
core.record-field-defer-parse-time testing/btest: Un-deferred record initalization tests 2023-09-12 12:12:46 +02:00
core.record-field-defer-parse-time-nested testing/btest: Un-deferred record initalization tests 2023-09-12 12:12:46 +02:00
core.record-field-defer-table testing/btest: Un-deferred record initalization tests 2023-09-12 12:12:46 +02:00
core.record-field-defer-table-2 testing/btest: Un-deferred record initalization tests 2023-09-12 12:12:46 +02:00
core.record-field-defer-table-3 testing/btest: Un-deferred record initalization tests 2023-09-12 12:12:46 +02:00
core.record-field-redef record_fields: Include information about optionality of fields 2023-04-27 21:18:35 +02:00
core.record-field-redef-errors Support redef'ing the &log attribute of record fields 2022-08-10 17:27:05 +02:00
core.record-field-redef-errors-2 Support redef'ing the &log attribute of record fields 2022-08-10 17:27:05 +02:00
core.record-field-redef-errors-3 Support redef'ing the &log attribute of record fields 2022-08-10 17:27:05 +02:00
core.record-field-redef-errors-4 Support redef'ing the &log attribute of record fields 2022-08-10 17:27:05 +02:00
core.record-field-redef-errors-5 Support redef'ing the &log attribute of record fields 2022-08-10 17:27:05 +02:00
core.record-field-redef-errors-6 Support redef'ing the &log attribute of record fields 2022-08-10 17:27:05 +02:00
core.record-field-redef-errors-7 Support redef'ing the &log attribute of record fields 2022-08-10 17:27:05 +02:00
core.record-field-redef-errors-8 Support redef'ing the &log attribute of record fields 2022-08-10 17:27:05 +02:00
core.record-field-redef-errors-9 Support redef'ing the &log attribute of record fields 2022-08-10 17:27:05 +02:00
core.record-field-redef-errors-10 Support redef'ing the &log attribute of record fields 2022-08-10 17:27:05 +02:00
core.record-field-redef-errors-11 Support redef'ing the &log attribute of record fields 2022-08-10 17:27:05 +02:00
core.record-field-redef-errors-12 Support redef'ing the &log attribute of record fields 2022-08-10 17:27:05 +02:00
core.recursive-event btest: More verbose recursive-event output 2023-03-23 12:41:56 +01:00
core.reporter
core.reporter-error-in-handler
core.reporter-fmt-strings
core.reporter-parse-error
core.reporter-paths Btest for normalized reporter path reporting 2023-10-03 22:16:00 -07:00
core.reporter-runtime-error
core.reporter-type-mismatch
core.reporter-weird-sampling
core.reporter-weird-sampling-disable
core.reporter-weird-sampling-global
core.save-load-seeds util/init_random_seed: write_file implies deterministic 2025-02-04 11:57:51 +01:00
core.script-args
core.seed Introduce ZEEK_SEED_VALUES environment variable 2023-05-12 19:50:37 +02:00
core.seed-errors Introduce ZEEK_SEED_VALUES environment variable 2023-05-12 19:50:37 +02:00
core.skip_analyzer Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.suspend_processing.broker btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.suspend_processing.config Add a set of suspend_processing tests 2023-03-23 12:41:56 +01:00
core.suspend_processing.event-from-zeek-init ip4_hdr: Add DF, MF, offset and sum fields 2023-04-29 17:09:43 +02:00
core.suspend_processing.event-order ip4_hdr: Add DF, MF, offset and sum fields 2023-04-29 17:09:43 +02:00
core.suspend_processing.raw-input Add a set of suspend_processing tests 2023-03-23 12:41:56 +01:00
core.suspend_processing.scheduled-event-from-zeek-init ip4_hdr: Add DF, MF, offset and sum fields 2023-04-29 17:09:43 +02:00
core.suspend_processing.suspension-stack Fix a long-standing bug in the math around continue_processing 2023-04-06 10:49:05 -07:00
core.tcp-padding Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.tcp.fin-retransmit
core.tcp.flip-without-syn Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.tcp.large-file-reassembly btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.tcp.miss-end-data btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.tcp.missing-syn Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.tcp.options btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.tcp.quantum-insert btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.tcp.reassembly-known-ports Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.tcp.rst-after-syn btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.tcp.rxmit-history Update btests for new local-only subnets 2025-01-09 22:16:42 -07:00
core.tcp.tcp-dups btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.tcp.truncated-header btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.truncation IP: fix weird name to not be ipv6 specific 2023-05-24 16:29:29 +02:00
core.tunnels.analyzer-confirmation btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.tunnels.ayiya Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.tunnels.geneve btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.tunnels.geneve-47101 Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.tunnels.geneve-get-options PacketAnalyzer::Geneve: Add get_options() 2025-02-22 12:19:42 -08:00
core.tunnels.geneve-many-options btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.tunnels.geneve-truncated Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.tunnels.geneve-vxlan-truncated Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.tunnels.gre Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.tunnels.gre-aruba
core.tunnels.gre-aruba-amsdu Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.tunnels.gre-erspan3-dot1q btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.tunnels.gre-in-gre Update btests for new local-only subnets 2025-01-09 22:16:42 -07:00
core.tunnels.gre-in-gre-min-depth Remove setting non-existent session history for IPTunnel 2024-01-23 12:39:58 -07:00
core.tunnels.gre-over-udp Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.tunnels.gre-pptp Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.tunnels.gtp.different_dl_and_ul Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.tunnels.gtp.ext_header btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.tunnels.gtp.false_gtp Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.tunnels.gtp.inner_ipv6 Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.tunnels.gtp.inner_teredo Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.tunnels.gtp.non_recursive btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.tunnels.gtp.not_user_plane_data Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.tunnels.gtp.opt_header Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.tunnels.gtp.outer_ip_frag Update btests for new local-only subnets 2025-01-09 22:16:42 -07:00
core.tunnels.gtp.pdp_ctx_messages btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.tunnels.gtp.unknown_or_too_short Settle on analyzer.log for the dpd.log replacement 2025-06-03 17:33:36 +01:00
core.tunnels.ip-in-ip btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.tunnels.ip-in-ip-version
core.tunnels.ip-tunnel-uid btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.tunnels.max-depth init-bare: Default Tunnel::max_depth to 4 2024-01-11 10:22:36 +01:00
core.tunnels.max-depth-exceeded tunnels: Add 'X' to history when reaching Tunnel::max_depth 2024-01-11 10:22:44 +01:00
core.tunnels.teredo btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.tunnels.teredo-known-services Update some btests due to timing changes 2025-03-18 10:20:33 -07:00
core.tunnels.teredo-udp-in-udp
core.tunnels.teredo_bubble_with_payload btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.tunnels.vxlan btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.tunnels.vxlan-unknown-internal-packet Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.udp-broadcast-no-flip IPBasedAnalyzer: Don't flip connections when destination is broadcast 2023-08-28 12:15:55 +02:00
core.udp-content-ports btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.udp-contents-delivery-ports-use-resp btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
core.udp-padding Do not forward more than the remaining data to downstream UDP analyzer 2023-07-27 13:35:41 +01:00
core.unknown-ip-protocol Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.unknown-protocol-event Update btest baselines for analyzer history 2024-08-12 12:21:09 +02:00
core.unknown-protocol-log Add btest for unknown_protocols.log 2024-12-10 14:54:19 +01:00
core.vlan-mpls Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.vntag Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.vntag-in-vlan Add analyzer registration from VLAN to VNTAG 2025-03-18 11:51:27 -07:00
core.when-interpreter-exceptions
core.wlanmon Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
core.x509-generalizedtime
coverage.bare-load-baseline cluster: Introduce telemetry component 2025-06-25 16:59:49 +02:00
coverage.bare-mode-errors Suppress warnings on deprecated DPD scripts during Zeekygen 2025-06-05 17:44:10 -07:00
coverage.basic-no-errors Introduce basic test triggering when zeek -r triggers script errors 2022-09-27 17:49:58 +02:00
coverage.coverage-blacklist updates for gen-C++ maintenance, including skipping some inappropriate tests 2022-08-01 16:47:17 -07:00
coverage.default-load-baseline cluster: Introduce telemetry component 2025-06-25 16:59:49 +02:00
coverage.find-bro-logs Settle on analyzer.log for the dpd.log replacement 2025-06-03 17:33:36 +01:00
coverage.global-ids-to-json OpaqueVal: Register TelemetryVals, too 2023-11-28 09:21:31 +01:00
coverage.init-default Add cluster framework telemetry for Broker's send-buffer use 2025-04-25 09:14:33 -07:00
coverage.record-fields SMTP: Adapt scripts for enable_rfc822_msg_file_analysis 2025-07-16 12:37:33 +02:00
coverage.test-all-policy-cluster btest/coverage: Avoid warnings in test-all-policy-cluster 2024-12-11 17:20:45 +01:00
coverage.test-all-policy-zeekygen btest/coverage/test-all-policy-zeekygen: Load test-all-policy with zeekygen enabled 2025-05-21 11:49:12 +02:00
coverage.zeek-profiler-file extend script coverage profiling to track whether conditionals evaluate to true/false 2025-06-26 16:10:50 +02:00
dns_mgr.blocking_lookup_hostname zeek.bif: Introduce blocking_lookup_hostname() 2025-03-05 19:22:57 +01:00
dns_mgr.lookup_addr btest: Add integration test for DNS_Mgr 2024-11-08 11:29:31 +01:00
dns_mgr.lookup_hostname btest: Add integration test for DNS_Mgr 2024-11-08 11:29:31 +01:00
dns_mgr.lookup_hostname_cname btest/dns_mgr: Update run-dnsmasq, use --host-record 2025-03-05 12:39:15 +01:00
dns_mgr.lookup_hostname_txt btest: Add integration test for DNS_Mgr 2024-11-08 11:29:31 +01:00
doc.zeekygen.all_scripts
doc.zeekygen.command_line Squelch the zeekygen warnings for command line 2022-08-06 11:35:05 +08:00
doc.zeekygen.comment_retrieval_bifs
doc.zeekygen.declaring_script zeekygen: Add BIFs to access declaring scripts 2022-11-22 13:23:01 +01:00
doc.zeekygen.declaring_script_enum zeekygen: Add BIFs to access declaring scripts 2022-11-22 13:23:01 +01:00
doc.zeekygen.declaring_script_errors zeekygen: Add BIFs to access declaring scripts 2022-11-22 13:23:01 +01:00
doc.zeekygen.enums
doc.zeekygen.example RecordType:DescribeReST: Render RecordType using zeek:field directive 2025-05-28 15:59:50 +02:00
doc.zeekygen.func-params RecordType:DescribeReST: Render RecordType using zeek:field directive 2025-05-28 15:59:50 +02:00
doc.zeekygen.identifier RecordType:DescribeReST: Render RecordType using zeek:field directive 2025-05-28 15:59:50 +02:00
doc.zeekygen.identifier_without_script Add btest for Zeekygen docs extraction on identifiers defined by the Zeek core. 2024-05-03 12:22:42 -07:00
doc.zeekygen.package Spelling fixes: scripts 2022-11-02 17:36:39 -04:00
doc.zeekygen.package_index
doc.zeekygen.records RecordType:DescribeReST: Render RecordType using zeek:field directive 2025-05-28 15:59:50 +02:00
doc.zeekygen.script_index
doc.zeekygen.script_summary Spelling fixes: scripts 2022-11-02 17:36:39 -04:00
doc.zeekygen.type-aliases RecordType:DescribeReST: Render RecordType using zeek:field directive 2025-05-28 15:59:50 +02:00
doc.zeekygen.vectors Spelling testing 2022-11-16 20:05:03 -05:00
javascript.file-sniff btest/javascript: Add file_sniff() and file_state_remove() test 2025-03-10 19:15:06 +01:00
javascript.hello Add experimental JavaScript support when libnode is available 2023-04-14 11:26:41 +02:00
javascript.http-request Add experimental JavaScript support when libnode is available 2023-04-14 11:26:41 +02:00
javascript.http-uri-sha256 Add experimental JavaScript support when libnode is available 2023-04-14 11:26:41 +02:00
javascript.intel Add experimental JavaScript support when libnode is available 2023-04-14 11:26:41 +02:00
javascript.log-delay testing/btest: Log::delay() from JavaScript 2023-11-29 12:52:19 +01:00
javascript.suspend-continue Add experimental JavaScript support when libnode is available 2023-04-14 11:26:41 +02:00
language.add-del-expr-void crash fixes for constructs that expect add/delete expressions to return values 2025-07-11 12:56:08 -04:00
language.addr ensure that language tests pay attention to .stderr 2022-07-29 21:30:40 -07:00
language.alternate-event-hook-prototypes Var/Func: Render function parameters using comma, not semicolon 2023-10-04 17:42:30 +02:00
language.alternate-event-hook-prototypes-invalid-arg Var/Func: Render function parameters using comma, not semicolon 2023-10-04 17:42:30 +02:00
language.alternate-prototypes-arg-matching
language.alternate-prototypes-default-args Var/Func: Render function parameters using comma, not semicolon 2023-10-04 17:42:30 +02:00
language.alternate-prototypes-deprecated-args Var/Func: Render function parameters using comma, not semicolon 2023-10-04 17:42:30 +02:00
language.any ensure that language tests pay attention to .stderr 2022-07-29 21:30:40 -07:00
language.any-script-func-variadic-errors Func: Do not crash on va_args confusion for script funcs 2022-11-01 08:55:14 +01:00
language.any-script-func-variadic-errors-2 Func: Do not crash on va_args confusion for script funcs 2022-11-01 08:55:14 +01:00
language.any-when
language.assert BTest updates for ZAM support of (optionally) keeping "assert" statements 2024-12-03 10:40:41 -07:00
language.assert-2 Stmt: Introduce assert statement and related hooks 2023-06-12 18:16:02 +02:00
language.assert-3 update BIFs to_int() and to_count() to accept optional 'base' argument; allows more more exotic conversions from hex, octal, binary 2025-02-18 06:49:55 -06:00
language.assert-4 Stmt: Introduce assert statement and related hooks 2023-06-12 18:16:02 +02:00
language.assert-5 Stmt: Introduce assert statement and related hooks 2023-06-12 18:16:02 +02:00
language.assert-6 Stmt: Introduce assert statement and related hooks 2023-06-12 18:16:02 +02:00
language.assert-7 simplified "assert" by not trying to catch messages that themselves have errors 2024-12-02 10:37:10 -08:00
language.assert-8 Stmt: Introduce assert statement and related hooks 2023-06-12 18:16:02 +02:00
language.assert-error Stmt: Introduce assert statement and related hooks 2023-06-12 18:16:02 +02:00
language.assert-error-2 Stmt: Introduce assert statement and related hooks 2023-06-12 18:16:02 +02:00
language.assert-error-3 Stmt: Introduce assert statement and related hooks 2023-06-12 18:16:02 +02:00
language.assert-error-4 Stmt: Introduce assert statement and related hooks 2023-06-12 18:16:02 +02:00
language.assert-hook BTest updates for ZAM support of (optionally) keeping "assert" statements 2024-12-03 10:40:41 -07:00
language.assert-hook-2 update BIFs to_int() and to_count() to accept optional 'base' argument; allows more more exotic conversions from hex, octal, binary 2025-02-18 06:49:55 -06:00
language.assert-hook-3 Stmt: Rework assertion hooks break semantics 2023-06-13 16:18:01 +02:00
language.assert-hook-4 Stmt: Introduce assert statement and related hooks 2023-06-12 18:16:02 +02:00
language.assert-hook-5 Stmt: Rework assertion hooks break semantics 2023-06-13 16:18:01 +02:00
language.assert-hook-6 simplified "assert" by not trying to catch messages that themselves have errors 2024-12-02 10:37:10 -08:00
language.assert-hook-7 Stmt: Rework assertion hooks break semantics 2023-06-13 16:18:01 +02:00
language.assert-hook-8 Stmt: Fix assert evaluating cond twice 2024-03-04 15:30:09 +01:00
language.assert-misc update BIFs to_int() and to_count() to accept optional 'base' argument; allows more more exotic conversions from hex, octal, binary 2025-02-18 06:49:55 -06:00
language.assert-top-level BTest updates for ZAM support of (optionally) keeping "assert" statements 2024-12-03 10:40:41 -07:00
language.at-deprecated
language.at-dir
language.at-filename
language.at-if ensure that language tests pay attention to .stderr 2022-07-29 21:30:40 -07:00
language.at-if-else-if-no-way parse.y/directives: Reject directives as statements 2022-08-26 09:42:50 +02:00
language.at-if-event ensure that language tests pay attention to .stderr 2022-07-29 21:30:40 -07:00
language.at-if-invalid
language.at-if-lambda Var/Func: Render function parameters using comma, not semicolon 2023-10-04 17:42:30 +02:00
language.at-if-lambda-2 Var/Func: Render function parameters using comma, not semicolon 2023-10-04 17:42:30 +02:00
language.at-if-lambda-3 Var/Func: Render function parameters using comma, not semicolon 2023-10-04 17:42:30 +02:00
language.at-if-lambda-4 Var/Func: Render function parameters using comma, not semicolon 2023-10-04 17:42:30 +02:00
language.at-if-record parse: Support @if conditionals in record definitions 2024-01-08 15:21:48 +01:00
language.at-if-record-2 parse: Support @if conditionals in record definitions 2024-01-08 15:21:48 +01:00
language.at-if-record-3 parse: Support @if conditionals in record definitions 2024-01-08 15:21:48 +01:00
language.at-if-record-4 parse: Support @if conditionals in record definitions 2024-01-08 15:21:48 +01:00
language.at-if-record-5 parse: Support @if conditionals in record definitions 2024-01-08 15:21:48 +01:00
language.at-if-record-6 parse: Support @if conditionals in record definitions 2024-01-08 15:21:48 +01:00
language.at-if-record-7 parse: Support @if conditionals in record definitions 2024-01-08 15:21:48 +01:00
language.at-if-reject parse.y/directives: Reject directives as statements 2022-08-26 09:42:50 +02:00
language.at-if-reject-2 parse.y/directives: Reject directives as statements 2022-08-26 09:42:50 +02:00
language.at-if-reject-3 parse.y/directives: Reject directives as statements 2022-08-26 09:42:50 +02:00
language.at-if-reject-4 parse.y/directives: Reject directives as statements 2022-08-26 09:42:50 +02:00
language.at-if-reject-5 parse.y/directives: Reject directives as statements 2022-08-26 09:42:50 +02:00
language.at-ifdef GH-2034: Store module names and use them in lookups for ifdef 2022-08-05 15:36:21 +00:00
language.at-ifndef GH-2034: Store module names and use them in lookups for ifdef 2022-08-05 15:36:21 +00:00
language.at-load ensure that language tests pay attention to .stderr 2022-07-29 21:30:40 -07:00
language.attr-default-coercion
language.attr-default-global-set-error improved error cascade for invalid attributes 2024-06-04 10:36:36 -07:00
language.blank-expr-errors Introduce special treatment for the blank identifier _ 2022-10-24 10:36:01 +02:00
language.blank-expr-errors-2 Introduce special treatment for the blank identifier _ 2022-10-24 10:36:01 +02:00
language.blank-expr-errors-3 Introduce special treatment for the blank identifier _ 2022-10-24 10:36:01 +02:00
language.blank-expr-errors-4 Introduce special treatment for the blank identifier _ 2022-10-24 10:36:01 +02:00
language.blank-expr-errors-5 Introduce special treatment for the blank identifier _ 2022-10-24 10:36:01 +02:00
language.blank-for Introduce special treatment for the blank identifier _ 2022-10-24 10:36:01 +02:00
language.blank-local Introduce special treatment for the blank identifier _ 2022-10-24 10:36:01 +02:00
language.blank-option-error Introduce special treatment for the blank identifier _ 2022-10-24 10:36:01 +02:00
language.bool ensure that language tests pay attention to .stderr 2022-07-29 21:30:40 -07:00
language.closure-binding
language.closure-binding-errors Cleanup unused baselines 2025-07-10 16:46:09 -04:00
language.closure-sending
language.closure-sending-naming Use one-based index in warning message 2025-03-28 14:09:11 +01:00
language.closure-sending2
language.common-mistakes Cleanup unused baselines 2025-07-10 16:46:09 -04:00
language.common-mistakes2 updates for gen-C++ maintenance, including skipping some inappropriate tests 2022-08-01 16:47:17 -07:00
language.complex-delete
language.conditional-expression ensure that language tests pay attention to .stderr 2022-07-29 21:30:40 -07:00
language.const
language.container-ctor-scope
language.container-option-init GH-2920: Don't warn on uninitialized container options 2023-04-13 09:05:17 -07:00
language.copy ensure that language tests pay attention to .stderr 2022-07-29 21:30:40 -07:00
language.copy-all-opaques Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
language.copy-all-types
language.copy-cycle
language.count ensure that language tests pay attention to .stderr 2022-07-29 21:30:40 -07:00
language.count-underflow Expr: Warn on count underflow for c -= 1 and c = c - 1 2022-11-30 10:08:52 +01:00
language.crlf-parsing
language.cross-product-init
language.dangling-at
language.default-params
language.delete-containers Allow delete statement for tables, sets and vectors 2024-02-21 18:00:00 +01:00
language.delete-field
language.delete-field-set
language.delete-table-set Allow delete statement for tables, sets and vectors 2024-02-21 18:00:00 +01:00
language.deprecated Replace all the Warning() calls after IsFieldDeprecated() over to Warn() 2022-09-03 19:15:47 +08:00
language.double ensure that language tests pay attention to .stderr 2022-07-29 21:30:40 -07:00
language.duplicate-attributes
language.enum ensure that language tests pay attention to .stderr 2022-07-29 21:30:40 -07:00
language.enum-desc
language.enum-multiple-decls
language.enum-name-conflict
language.enum-negative Add enum value negative check 2024-09-17 12:04:19 -04:00
language.enum-nonexisting Spelling testing 2022-11-16 20:05:03 -05:00
language.enum-scope
language.eof-parse-errors
language.event
language.event-invoke-mismatch-error Skip somer error reporting when the record type has errors 2023-01-27 20:49:22 +01:00
language.event-local-var
language.event-shadowing Support :: prefix to reference global namespace, deprecate GLOBAL:: 2023-07-11 12:51:21 +02:00
language.event-ts Add timestamp to events. 2023-05-11 12:51:06 +02:00
language.event-ts-scheduled Prevent event timestamps set to future 2025-04-11 13:06:33 +02:00
language.expire-expr-error BTest updates in support of compiling-scripts-to-C++ 2024-12-12 14:30:23 -08:00
language.expire-func-type-check Var/Func: Render function parameters using comma, not semicolon 2023-10-04 17:42:30 +02:00
language.expire-func-undef
language.expire-redef
language.expire-type-error
language.expire_func btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
language.expire_func-copy btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
language.expire_func_mod
language.expire_multiple
language.expire_multiple-2
language.expire_multiple-3
language.expire_subnet
language.file
language.for ensure that language tests pay attention to .stderr 2022-07-29 21:30:40 -07:00
language.for-var-check GH-2669: Give script location for type clash in for-loop construction 2023-01-26 09:11:10 -07:00
language.func-assignment
language.func-equality
language.function ensure that language tests pay attention to .stderr 2022-07-29 21:30:40 -07:00
language.function-already-defined
language.function-closures
language.function-invoke-mismatch-error Skip somer error reporting when the record type has errors 2023-01-27 20:49:22 +01:00
language.function-sending BTest baseline update for more complete function/lambda names 2024-09-27 14:16:10 -07:00
language.global-colon-colon Return an error if GLOBAL:: prefix is used 2024-08-07 11:58:22 -07:00
language.global-colon-colon-errors Support :: prefix to reference global namespace, deprecate GLOBAL:: 2023-07-11 12:51:21 +02:00
language.global-colon-colon-errors-2 Support :: prefix to reference global namespace, deprecate GLOBAL:: 2023-07-11 12:51:21 +02:00
language.global-colon-colon-errors-3 Support :: prefix to reference global namespace, deprecate GLOBAL:: 2023-07-11 12:51:21 +02:00
language.global-colon-colon-errors-4 Support :: prefix to reference global namespace, deprecate GLOBAL:: 2023-07-11 12:51:21 +02:00
language.global-colon-colon-errors-5 Support :: prefix to reference global namespace, deprecate GLOBAL:: 2023-07-11 12:51:21 +02:00
language.global-colon-colon-errors-6 Support :: prefix to reference global namespace, deprecate GLOBAL:: 2023-07-11 12:51:21 +02:00
language.global-colon-colon-redef Support :: prefix to reference global namespace, deprecate GLOBAL:: 2023-07-11 12:51:21 +02:00
language.global-init-calls-bif
language.global-init-calls-bif-using-builtin-type
language.global-type-clash Fix module-scoped type definitions that conflict with existing global ones 2022-08-08 15:30:34 -07:00
language.global-unset-addto
language.hook
language.hook_calls
language.identifier-not-defined-error Tame error reporting and abort() for undefined types 2023-01-26 20:05:02 +01:00
language.if ensure that language tests pay attention to .stderr 2022-07-29 21:30:40 -07:00
language.ignore-deprecations scan.l: Support @pragma, specifically push/pop ignore-deprecations 2023-04-05 10:24:30 +02:00
language.ignore-deprecations-2 scan.l: Support @pragma, specifically push/pop ignore-deprecations 2023-04-05 10:24:30 +02:00
language.ignore-deprecations-3 scan.l: Support @pragma, specifically push/pop ignore-deprecations 2023-04-05 10:24:30 +02:00
language.ignore-deprecations-4 scan.l: Support @pragma, specifically push/pop ignore-deprecations 2023-04-05 10:24:30 +02:00
language.incr-vec-expr-error Expr: Remove vector scalar operations 2023-03-20 21:35:48 +01:00
language.index-assignment-invalid
language.ineffective-default-args
language.init-in-anon-function
language.init-integration Remove deprecated Cluster::Node::interface field 2024-08-07 11:58:22 -07:00
language.init-mismatch Change table initialization deprecation to error 2023-06-14 10:07:23 -07:00
language.inlined-nested-loop
language.int split basic "int" btests into main part versus now-separate overflow part 2022-09-16 16:49:22 -07:00
language.int-min-max btest tweaks for recent changes 2022-09-16 17:04:06 -07:00
language.int-negation-range
language.interval ensure that language tests pay attention to .stderr 2022-07-29 21:30:40 -07:00
language.invalid-hostnames
language.invalid-hostnames-2
language.invalid_index
language.ipv6-literals
language.key-value-for
language.lambda-escaping
language.lambda-nested-copy
language.lambda-record-field
language.lambda-zeek-init
language.locals-to-global Do not export locals 2025-02-12 13:49:12 -08:00
language.mismatched-container-ctor-types
language.module ensure that language tests pay attention to .stderr 2022-07-29 21:30:40 -07:00
language.more-closure-tests
language.named-record-ctors
language.named-set-ctors
language.named-table-ctors
language.named-vector-ctors
language.next-break-context-errors Make break/next/continue outside loops an error (6.1 deprecation) 2023-06-14 10:07:22 -07:00
language.next-break-context-errors-2 Make break/next/continue outside loops an error (6.1 deprecation) 2023-06-14 10:07:22 -07:00
language.next-break-context-errors-3 Make break/next/continue outside loops an error (6.1 deprecation) 2023-06-14 10:07:22 -07:00
language.next-break-context-errors-4 Make break/next/continue outside loops an error (6.1 deprecation) 2023-06-14 10:07:22 -07:00
language.next-break-context-errors-5 Make break/next/continue outside loops an error (6.1 deprecation) 2023-06-14 10:07:22 -07:00
language.next-break-context-errors-6 Make break/next/continue outside loops an error (6.1 deprecation) 2023-06-14 10:07:22 -07:00
language.next-break-context-errors-7 Make break/next/continue outside loops an error (6.1 deprecation) 2023-06-14 10:07:22 -07:00
language.next-break-context-errors-8 Make break/next/continue outside loops an error (6.1 deprecation) 2023-06-14 10:07:22 -07:00
language.next-break-context-errors-9 Make break/next/continue outside loops an error (6.1 deprecation) 2023-06-14 10:07:22 -07:00
language.next-test
language.no-module ensure that language tests pay attention to .stderr 2022-07-29 21:30:40 -07:00
language.null-statement
language.on_change
language.on_change-copy TableVal: Propagate &on_change attribute through copy() 2023-02-17 16:21:32 +01:00
language.on_change-recurse
language.on_change_expire btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
language.orphan-endif
language.outer_param_binding
language.paraglob
language.paraglob-serialization
language.pattern Merge remote-tracking branch 'origin/topic/vern/bit-shift-fixes' 2022-08-03 09:56:55 -07:00
language.pattern-sets Expr/Val: Add support for in set[pattern] 2023-11-21 10:34:17 +01:00
language.pattern-tables Expr: Implement string in table[pattern] of X 2023-11-21 10:34:17 +01:00
language.pattern-tables-stats Expr/Val: Add support for in set[pattern] 2023-11-21 10:34:17 +01:00
language.pattern-tables-when Expr: Implement string in table[pattern] of X 2023-11-21 10:34:17 +01:00
language.patterns-stored-in-containers
language.port ensure that language tests pay attention to .stderr 2022-07-29 21:30:40 -07:00
language.pragma scan.l: Support @pragma, specifically push/pop ignore-deprecations 2023-04-05 10:24:30 +02:00
language.pragma-2 scan.l: Support @pragma, specifically push/pop ignore-deprecations 2023-04-05 10:24:30 +02:00
language.pragma-3 scan.l: Support @pragma, specifically push/pop ignore-deprecations 2023-04-05 10:24:30 +02:00
language.pragma-4 scan.l: Support @pragma, specifically push/pop ignore-deprecations 2023-04-05 10:24:30 +02:00
language.pragma-5 scan.l: Support @pragma, specifically push/pop ignore-deprecations 2023-04-05 10:24:30 +02:00
language.pragma-6 scan.l: Support @pragma, specifically push/pop ignore-deprecations 2023-04-05 10:24:30 +02:00
language.pragma-7 scan.l: Support @pragma, specifically push/pop ignore-deprecations 2023-04-05 10:24:30 +02:00
language.pragma-8 scan.l: Support @pragma, specifically push/pop ignore-deprecations 2023-04-05 10:24:30 +02:00
language.pragma-9 scan.l: Support @pragma, specifically push/pop ignore-deprecations 2023-04-05 10:24:30 +02:00
language.pragma-10 scan.l: Support @pragma, specifically push/pop ignore-deprecations 2023-04-05 10:24:30 +02:00
language.pragma-11 scan.l: Support @pragma, specifically push/pop ignore-deprecations 2023-04-05 10:24:30 +02:00
language.pragma-12 scan.l: Support @pragma, specifically push/pop ignore-deprecations 2023-04-05 10:24:30 +02:00
language.precedence ensure that language tests pay attention to .stderr 2022-07-29 21:30:40 -07:00
language.raw_output_attr
language.raw_output_attr-2
language.rec-comp-init
language.rec-nested-opt
language.rec-of-tbl
language.rec-table-default
language.record-bad-ctor
language.record-bad-ctor2
language.record-bad-ctor3
language.record-bad-ctor4
language.record-chain-assign script optimization for record operations sourced (in part) from other records 2024-06-24 09:38:37 +02:00
language.record-coerce-clash
language.record-coerce-error Skip somer error reporting when the record type has errors 2023-01-27 20:49:22 +01:00
language.record-coerce-orphan
language.record-default-coercion
language.record-default-set-mismatch
language.record-duplicate-fields fix for crashes when record definitions repeat a field name 2023-01-10 13:56:47 -08:00
language.record-empty-vector
language.record-extension
language.record-function-recursion
language.record-global-init-exception
language.record-index-complex-fields
language.record-option-init GH-2920: Don't warn on uninitialized container options 2023-04-13 09:05:17 -07:00
language.record-recursive-coercion
language.record-recursive-table Type/is_supported_index_type: Deal with recursive record types 2023-02-17 17:35:05 +01:00
language.record-recursive-table-2 Type/is_supported_index_type: Deal with recursive record types 2023-02-17 17:35:05 +01:00
language.record-recursive-table2 BTest updates in support of compiling-scripts-to-C++ 2024-12-12 14:30:23 -08:00
language.record-redef-after-init
language.record-ref-assign
language.record-type-checking
language.redeclaration-redefinition-errors Var: Fix null-pointer deref on redefinition of lambdas 2023-10-04 15:18:24 +02:00
language.redeclaration-redefinition-errors-2 Var: Fix null-pointer deref on redefinition of lambdas 2023-10-04 15:18:24 +02:00
language.redeclaration-redefinition-errors-3 Var: Fix null-pointer deref on redefinition of lambdas 2023-10-04 15:18:24 +02:00
language.redeclaration-redefinition-errors-4 Var: Fix null-pointer deref on redefinition of lambdas 2023-10-04 15:18:24 +02:00
language.redeclaration-redefinition-errors-5 Var: Fix null-pointer deref on redefinition of lambdas 2023-10-04 15:18:24 +02:00
language.redeclaration-redefinition-errors-6 Var: Fix null-pointer deref on redefinition of lambdas 2023-10-04 15:18:24 +02:00
language.redeclaration-redefinition-errors-7 Var/Func: Render function parameters using comma, not semicolon 2023-10-04 17:42:30 +02:00
language.redeclaration-redefinition-errors-8 Var/Func: Render function parameters using comma, not semicolon 2023-10-04 17:42:30 +02:00
language.redeclaration-redefinition-errors-9 Var/Func: Render function parameters using comma, not semicolon 2023-10-04 17:42:30 +02:00
language.redeclaration-redefinition-errors-10 Var/Func: Render function parameters using comma, not semicolon 2023-10-04 17:42:30 +02:00
language.redeclaration-redefinition-errors-11 Var/Func: Render function parameters using comma, not semicolon 2023-10-04 17:42:30 +02:00
language.redef-global-function
language.redef-missing-type parse.y: Improve error reporting of type redef 2023-02-21 11:58:33 +01:00
language.redef-missing-type-2 parse.y: Improve error reporting of type redef 2023-02-21 11:58:33 +01:00
language.redef-missing-type-3 parse.y: Improve error reporting of type redef 2023-02-21 11:58:33 +01:00
language.redef-missing-type-4 parse.y: Improve error reporting of type redef 2023-02-21 11:58:33 +01:00
language.redef-missing-type-5 parse.y: Improve error reporting of type redef 2023-02-21 11:58:33 +01:00
language.redef-missing-type-6 parse.y: Improve error reporting of type redef 2023-02-21 11:58:33 +01:00
language.redef-same-prefixtable-idx Change table initialization deprecation to error 2023-06-14 10:07:23 -07:00
language.redef-vector
language.returnwhen
language.set Support JSON roundtripping via to_json()/from_json() for patterns 2024-07-02 14:46:16 -07:00
language.set-iteration Fix &ordered attribute not preserved in table initializer assignments 2025-06-04 17:07:34 +08:00
language.set-opt-record-index
language.set-type-checking
language.set-vector-index
language.short-circuit ensure that language tests pay attention to .stderr 2022-07-29 21:30:40 -07:00
language.sizeof Fix port/enum values SizeOf not being a count 2024-09-17 10:55:45 -04:00
language.sizeof-any
language.smith-waterman-test Fix smith-waterman sorting to follow correct Compare semantics 2023-04-30 11:54:08 -07:00
language.spurious-table-expires fix for needing to always flush optimization information for identifiers 2024-01-15 15:03:56 +01:00
language.string ensure that language tests pay attention to .stderr 2022-07-29 21:30:40 -07:00
language.string-indexing
language.strings
language.subnet ensure that language tests pay attention to .stderr 2022-07-29 21:30:40 -07:00
language.subnet-errors
language.switch-error-mixed
language.switch-incomplete
language.switch-statement
language.switch-type-cast-fallthrough-error
language.switch-types Spelling testing 2022-11-16 20:05:03 -05:00
language.switch-types-error-duplicate
language.switch-types-error-unsupported
language.switch-types-vars
language.table Support table deserialization in from_json() 2024-07-02 14:46:16 -07:00
language.table-aggr-init-type-check
language.table-default-insert Add &default_insert attribute for tables 2023-08-04 12:30:36 +02:00
language.table-default-insert-copy Add &default_insert attribute for tables 2023-08-04 12:30:36 +02:00
language.table-default-insert-errors Add &default_insert attribute for tables 2023-08-04 12:30:36 +02:00
language.table-default-insert-errors-2 Add &default_insert attribute for tables 2023-08-04 12:30:36 +02:00
language.table-default-insert-errors-3 Add &default_insert attribute for tables 2023-08-04 12:30:36 +02:00
language.table-default-insert-errors-4 BTest baseline update for more complete function/lambda names 2024-09-27 14:16:10 -07:00
language.table-default-insert-errors-5 BTest baseline update for more complete function/lambda names 2024-09-27 14:16:10 -07:00
language.table-default-insert-errors-6 Add &default_insert attribute for tables 2023-08-04 12:30:36 +02:00
language.table-default-insert-errors-7 Add &default_insert attribute for tables 2023-08-04 12:30:36 +02:00
language.table-default-record
language.table-index-unsupported-types
language.table-init
language.table-init-attrs
language.table-init-container-ctors
language.table-init-record-idx
language.table-init-record-idx-2
language.table-init-record-idx-3
language.table-init-record-idx-4
language.table-iterate-record-key-default CompositeHash: Skip record initialization when recovering vals 2023-09-08 13:02:34 +02:00
language.table-iterate-record-key-default-2 ID/Stmt: Introduce INIT_SKIP and use in ForStmt 2023-09-08 13:05:44 +02:00
language.table-iterate-record-key-default-3 ID/Stmt: Introduce INIT_SKIP and use in ForStmt 2023-09-08 13:05:44 +02:00
language.table-iteration Fix &ordered attribute not preserved in table initializer assignments 2025-06-04 17:07:34 +08:00
language.table-list-assign-type-check
language.table-nested-set-ordering
language.table-optional-subrecord-index
language.table-pattern-index
language.table-record-idx-redef
language.table-redef Change table initialization deprecation to error 2023-06-14 10:07:23 -07:00
language.table-redef-default
language.table-set-iterator-invalidation Reporter: Add ExprRuntimeWarning() 2022-11-29 15:28:58 +01:00
language.table-type-checking
language.ternary-type-check
language.time ensure that language tests pay attention to .stderr 2022-07-29 21:30:40 -07:00
language.timeout
language.trailing-comma update test suite to avoid GH-2385 problems, including incorrect typing 2022-12-04 17:56:30 -08:00
language.trailing-comma-2 parse.y: Allow trailing commas for table, set, vector and record construction 2022-12-01 12:05:29 +01:00
language.trailing-comma-error parse.y: Allow trailing commas for table, set, vector and record construction 2022-12-01 12:05:29 +01:00
language.trailing-comma-error-2 parse.y: Allow trailing commas for table, set, vector and record construction 2022-12-01 12:05:29 +01:00
language.trailing-comma-error-3 parse.y: Allow trailing commas for table, set, vector and record construction 2022-12-01 12:05:29 +01:00
language.trailing-comma-error-4 parse.y: Allow trailing commas for table, set, vector and record construction 2022-12-01 12:05:29 +01:00
language.trailing-comma-error-5 parse.y: Allow trailing commas for table, set, vector and record construction 2022-12-01 12:05:29 +01:00
language.trailing-comma-error-6 parse.y: Allow trailing commas for table, set, vector and record construction 2022-12-01 12:05:29 +01:00
language.trailing-comma-error-7 parse.y: Allow trailing commas for table, set, vector and record construction 2022-12-01 12:05:29 +01:00
language.trailing-comma-error-8 parse.y: Allow trailing commas for table, set, vector and record construction 2022-12-01 12:05:29 +01:00
language.trailing-comma-error-9 parse.y: Allow trailing commas for table, set, vector and record construction 2022-12-01 12:05:29 +01:00
language.trailing-comma-error-10 parse.y: Allow trailing commas for table, set, vector and record construction 2022-12-01 12:05:29 +01:00
language.trailing-comma-error-11 parse.y: Allow trailing commas for table, set, vector and record construction 2022-12-01 12:05:29 +01:00
language.trailing-comma-error-12 parse.y: Allow trailing commas for table, set, vector and record construction 2022-12-01 12:05:29 +01:00
language.type-alias-error GH-1344: Give better warning when using a type that doesn't exist 2022-07-29 12:38:25 -07:00
language.type-cast-any
language.type-cast-error-dynamic BTest updates for latest ZAM maintenance 2023-11-10 09:57:35 +01:00
language.type-cast-error-static
language.type-cast-same
language.type-check-any
language.type-check-func-call
language.type-check-operator-in
language.type-check-vector
language.type-coerce-numerics Type coercion fix: transform +=/-= operators with arithmetic targets to explict assignments 2022-11-22 13:01:10 -08:00
language.type-expr Change from_json to return an error rather than print it. 2025-04-23 15:56:12 -07:00
language.type-type-error
language.undeclared-alternate-event-hook-prototype Var/Func: Render function parameters using comma, not semicolon 2023-10-04 17:42:30 +02:00
language.undefined-delete-field
language.uninitialized-local Updates to BTest baselines due to previous BTest tweaks 2023-06-30 09:36:14 +02:00
language.uninitialized-local2 parse.y: Make out-of-scope use errors 2023-03-20 21:35:48 +01:00
language.unspecified types: Fix table() resulting in table_type->IsSet() == true 2024-11-06 13:28:57 +01:00
language.unterminated-pattern
language.unused-assignment updates for gen-C++ maintenance, including skipping some inappropriate tests 2022-08-01 16:47:17 -07:00
language.usage-analyzer UsageAnalyzer: Collect identifiers found in attributes as seeds 2023-08-01 15:46:10 +02:00
language.usage-analyzer-record-attributes UsageAnalyzer: Collect identifiers found in attributes as seeds 2023-08-01 15:46:10 +02:00
language.usage-analyzer-table-attributes UsageAnalyzer: Collect identifiers found in attributes as seeds 2023-08-01 15:46:10 +02:00
language.vector Expr: Fix folding of pattern values to support == and != 2024-12-16 10:56:02 +01:00
language.vector-any-append minor BTest reordering to diminish differences with script optimization 2023-09-01 12:17:06 -07:00
language.vector-coerce-expr
language.vector-coerce-expr2 BTest baseline update for more complete function/lambda names 2024-09-27 14:16:10 -07:00
language.vector-for-value stmt: Support iterating over vector values 2022-08-22 16:57:37 +02:00
language.vector-hole-loop
language.vector-in-operator
language.vector-iterate-record-default CompositeHash: Skip record initialization when recovering vals 2023-09-08 13:02:34 +02:00
language.vector-iterate-record-default-2 ID/Stmt: Introduce INIT_SKIP and use in ForStmt 2023-09-08 13:05:44 +02:00
language.vector-list-init-records
language.vector-neg-index BTest to check for invalid negative vector indices 2023-06-14 17:35:08 -07:00
language.vector-of-enum
language.vector-of-enum-mismatch
language.vector-of-interval-arithmetic
language.vector-set-conversions Fix conversion with record types 2023-08-10 13:42:23 -07:00
language.vector-set-conversions-errors Add conversion between set and vector using 'as' keyword 2023-08-09 14:41:54 -07:00
language.vector-slice-assign
language.vector-type-checking BTest updates for ZAM regularization changes 2024-08-16 11:18:58 +02:00
language.vector-unspecified
language.void-errors Expr: Handle TYPE_VOID in SizeExpr and AssignExpr::Typecheck() 2024-03-07 11:24:28 +01:00
language.void-errors-2 Expr: Handle TYPE_VOID in SizeExpr and AssignExpr::Typecheck() 2024-03-07 11:24:28 +01:00
language.void-errors-3 Expr: Handle TYPE_VOID in SizeExpr and AssignExpr::Typecheck() 2024-03-07 11:24:28 +01:00
language.void-errors-4 Expr: Handle TYPE_VOID in SizeExpr and AssignExpr::Typecheck() 2024-03-07 11:24:28 +01:00
language.void-errors-5 added a space when rendering some expressions so they're more readable 2024-05-29 12:40:05 -07:00
language.void-errors-6 Expr: Handle TYPE_VOID in SizeExpr and AssignExpr::Typecheck() 2024-03-07 11:24:28 +01:00
language.void-errors-7 added a space when rendering some expressions so they're more readable 2024-05-29 12:40:05 -07:00
language.when Merge remote-tracking branch 'origin/topic/vern/script-opt-maint.Aug24' 2024-07-24 11:18:18 +02:00
language.when-aggregates Stmt: Error on deprecated when/local usage 2023-03-20 21:35:53 +01:00
language.when-capture-errors Updates to BTest baselines due to previous BTest tweaks 2023-06-30 09:36:14 +02:00
language.when-local-function-capture-error Check for valid identifier in WhenStmt::Describe 2024-04-10 16:20:36 -07:00
language.when-on-globals
language.when-order-of-eval
language.when-scope Fix for nested "when" statements leading to confusion over scoping 2023-07-05 17:10:38 -07:00
language.when-unitialized-rhs Updates to BTest baselines due to previous BTest tweaks 2023-06-30 09:36:14 +02:00
language.while
language.wrong-delete-field "add" and "delete" are now expressions rather than statements 2024-05-29 12:40:06 -07:00
language.wrong-record-extension
language.zeek_init
language.zeek_script_loaded
opt.basic Update btests for new local-only subnets 2025-01-09 22:16:42 -07:00
opt.coalescence BTest baseline update for more complete function/lambda names 2024-09-27 14:16:10 -07:00
opt.confluence-test BTests to catch regressions for recent ZAM fixes 2024-01-15 15:03:56 +01:00
opt.infinite-empty-loop fixes for ZAM's propagation of control flow information for some degenerate constructs 2024-11-08 15:34:21 +01:00
opt.no-coalescence BTest baseline update for more complete function/lambda names 2024-09-27 14:16:10 -07:00
opt.null-inline fixes for ZAM's propagation of control flow information for some degenerate constructs 2024-11-08 15:34:21 +01:00
opt.opt-files BTest baseline update for more complete function/lambda names 2024-09-27 14:16:10 -07:00
opt.opt-files2 BTest baseline update for more complete function/lambda names 2024-09-27 14:16:10 -07:00
opt.opt-files3 BTest baseline update for more complete function/lambda names 2024-09-27 14:16:10 -07:00
opt.opt-func BTest baseline update for more complete function/lambda names 2024-09-27 14:16:10 -07:00
opt.opt-func2 BTest baseline update for more complete function/lambda names 2024-09-27 14:16:10 -07:00
opt.opt-func3 BTest baseline update for more complete function/lambda names 2024-09-27 14:16:10 -07:00
opt.opt-no-files script optimization for record operations sourced (in part) from other records 2024-06-24 09:38:37 +02:00
opt.opt-no-func script optimization for record operations sourced (in part) from other records 2024-06-24 09:38:37 +02:00
opt.opt-no-func2 script optimization for record operations sourced (in part) from other records 2024-06-24 09:38:37 +02:00
opt.pure-inlining BTest baseline update for more complete function/lambda names 2024-09-27 14:16:10 -07:00
opt.regress-aggr-change-in-loop fix for ZAM optimization when an aggregate is modified inside of a loop 2025-05-09 15:01:55 -07:00
opt.regress-any ZAM fixes for assignments involving "any" record fields 2024-11-11 09:19:54 +01:00
opt.regress-any-leak fixes for (mostly ZAM) vector operation issues found by ASAN 2024-11-11 09:19:54 +01:00
opt.regress-constant-prop fix for error in ZAM's constant propagation logic 2025-07-04 16:05:46 -07:00
opt.regress-field-assign-in-op fix for ZAM optimization of assigning a record field to result of "in" operation 2024-12-17 19:49:43 -08:00
opt.regress-inlining-temps fixed incorrect ZAM optimization of expressions seen in single-statement inlined functions 2025-04-29 14:29:07 -07:00
opt.regress-record-multi-assign fix for crash when interpreting transformed ASTs that include multi-field record assignments/additions 2025-05-30 09:44:26 -07:00
opt.regress-set-op-opt ZAM optimizer fix for += / -= set operations 2025-07-09 13:40:33 -07:00
opt.regress-vector-mismatch fixes for (mostly ZAM) vector operation issues found by ASAN 2024-11-11 09:19:54 +01:00
opt.table-choose BTests to catch regressions for recent ZAM fixes 2024-01-15 15:03:56 +01:00
opt.vector-any-concretize1 BTests to catch regressions for recent ZAM fixes 2024-01-15 15:03:56 +01:00
opt.vector-any-concretize2 BTests to catch regressions for recent ZAM fixes 2024-01-15 15:03:56 +01:00
opt.vector-loop-managed Merge remote-tracking branch 'origin/topic/vern/zam-vector-loop-leak' 2024-11-08 15:32:57 +01:00
opt.ZAM-bif-tracking Add get_tags_by_category BIF method 2025-06-24 13:47:49 -07:00
plugins.api-plugin btest/plugin: Add plugin testing enum identifiers 2025-04-04 15:36:42 +02:00
plugins.bifs-and-scripts
plugins.bifs-and-scripts-install
plugins.bifs-and-scripts-install-delete-source tests: Add regression tests for zeek/cmake#61 2023-02-24 19:37:52 +01:00
plugins.binpac-flowbuffer-frame-length
plugins.conflict-plugin Spelling testing 2022-11-16 20:05:03 -05:00
plugins.connkey ConnKey: Extend DoPopulateConnIdVal() with ctx 2025-07-03 18:19:46 +02:00
plugins.debug-streams Sort streams in "-B help" output, and match case-insensitively throughout 2024-11-15 12:50:13 -08:00
plugins.doctest-disabled
plugins.doctest-supported
plugins.doctest-unsupported
plugins.duplicate-pktsrc plugin/Manager: Warn when plugin with the same name is found 2023-06-14 17:36:18 +02:00
plugins.enum-bif-plugin scan.l: Fix @load-plugin scripts loading 2025-03-04 09:35:00 +01:00
plugins.file btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
plugins.func-hook
plugins.hooks btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
plugins.init-hooks btest/plugins: Add a plugin testing Init and Done hooks 2024-11-22 13:37:03 +01:00
plugins.init-plugin
plugins.iosource-plugin Add a new plugin test with verbose IO source output 2023-03-21 09:15:39 +01:00
plugins.legacy-func-hook
plugins.logging-hooks BTest baseline update for more complete function/lambda names 2024-09-27 14:16:10 -07:00
plugins.meta-hook Cleanup unused baselines 2025-07-10 16:46:09 -04:00
plugins.packet-protocol Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
plugins.pktdumper
plugins.pktsrc Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
plugins.plugin-load-dependency
plugins.plugin-load-file-extended
plugins.plugin-nopatchversion
plugins.plugin-withpatchversion
plugins.protocol btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
plugins.publish-event-hook btest/plugin: Test for PublishEventHook() 2025-04-30 17:26:33 +02:00
plugins.publish-event-metadata Cleanup unused baselines 2025-07-10 16:46:09 -04:00
plugins.reader
plugins.reporter-hook
plugins.storage Add STORAGE_ prefixes for backends and serializers 2025-04-14 10:11:13 -07:00
plugins.unprocessed-packet-hook Spelling testing 2022-11-16 20:05:03 -05:00
plugins.writer Analyzer failure logging: tweaks and test fixes 2025-06-03 15:56:42 +01:00
scripts.base.files.data_event.basic
scripts.base.files.entropy.basic
scripts.base.files.extract.limit btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.files.extract.limit-large-hole Add extract_limit_includes_missing option for file extraction 2023-09-14 12:11:42 -07:00
scripts.base.files.mime.iso-9660 signatures: Fix ISO 9960 signature 2024-02-22 12:37:40 +01:00
scripts.base.files.mime.vnd.ms-cab-compressed-multi-conn test-all-policy: Do not load iso-9660.zeek 2024-02-26 17:58:26 +01:00
scripts.base.files.pe.basic btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.files.x509.1999 Change x509 not_before/not_after to not be based on local timezone 2025-06-18 13:21:35 +01:00
scripts.base.files.x509.caching-hook Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.files.x509.disable-certificate-events-known-certs Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.files.x509.disable-certificate-events-known-certs-2 Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.files.x509.disable-certificate-events-known-certs-3 Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.files.x509.event-caching Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.files.x509.files btest/files/x509/files: Sort analyzers in baseline 2025-04-10 15:02:44 +02:00
scripts.base.files.x509.log-caching Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.files.x509.log-caching-cluster Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.files.x509.log-caching-disabled-cluster Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.files.x509.signed_certificate_timestamp
scripts.base.files.x509.signed_certificate_timestamp_ocsp
scripts.base.files.x509.tbs_sig_alg Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.files.x509.x509_check_cert_hostname
scripts.base.frameworks.analyzer.disabled-packet-analyzers packet_analysis: Introduce PacketAnalyzer::__disable_analyzer() 2022-09-30 09:27:22 +02:00
scripts.base.frameworks.analyzer.dpd-logging-configuration DPD: change policy script for service violation logging; add NEWS 2025-02-06 18:56:30 +00:00
scripts.base.frameworks.analyzer.dpd-logging-configuration-2 Fix policy/protocols/conn/failed-service-logging.zeek 2025-05-06 13:37:12 +01:00
scripts.base.frameworks.analyzer.request-analyzer Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.frameworks.analyzer.request-response-protocol-differences Add two protocol mismatch testcases 2025-03-04 15:38:20 +00:00
scripts.base.frameworks.analyzer.schedule-analyzer btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.frameworks.analyzer.tags
scripts.base.frameworks.analyzer.toggle-packet-analyzers ip4_hdr: Add DF, MF, offset and sum fields 2023-04-29 17:09:43 +02:00
scripts.base.frameworks.cluster.custom_pool_exclusivity btest/frameworks/cluster: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.cluster.custom_pool_limits btest/frameworks/cluster: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.cluster.forwarding btest/frameworks/cluster: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.cluster.leftover-log-rotation-multi-logger cluster/logger: Fix leftover-log-rotation in multi-logger setups 2023-06-13 10:47:20 +02:00
scripts.base.frameworks.cluster.log_distribution
scripts.base.frameworks.cluster.publish-hrw-type-check broker/messaging: Runtime type checks for pool 2023-04-19 19:30:46 +02:00
scripts.base.frameworks.cluster.start-it-up btest/frameworks/cluster: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.cluster.start-it-up-logger btest/frameworks/cluster: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.cluster.topic_distribution btest/frameworks/cluster: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.cluster.topic_distribution_bifs btest/frameworks/cluster: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.cluster.topic_distribution_make_event btest/frameworks/cluster: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.config.basic Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.frameworks.config.basic_cluster btest/frameworks/config: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.config.cluster_resend btest/frameworks/config: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.config.container-options
scripts.base.frameworks.config.missing-enum-value testing/missing-enum-value: redef exit_only_after_terminate=T 2022-07-29 18:22:03 +02:00
scripts.base.frameworks.config.read_config Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.frameworks.config.read_config_cluster Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.frameworks.config.several-files Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.frameworks.config.updates Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.frameworks.config.weird
scripts.base.frameworks.control.configuration_update
scripts.base.frameworks.control.id_value
scripts.base.frameworks.file-analysis.actions.data_event btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.frameworks.file-analysis.bifs.enable-disable
scripts.base.frameworks.file-analysis.bifs.file_exists_lookup_file
scripts.base.frameworks.file-analysis.bifs.register_mime_type Update btest baselines to reflect the use of local address ranges. 2023-03-15 17:11:04 -07:00
scripts.base.frameworks.file-analysis.bifs.remove_action btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.frameworks.file-analysis.bifs.set_timeout_interval btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.frameworks.file-analysis.bifs.stop
scripts.base.frameworks.file-analysis.big-bof-buffer Update btest baselines to reflect the use of local address ranges. 2023-03-15 17:11:04 -07:00
scripts.base.frameworks.file-analysis.byteranges Update btest baselines to reflect the use of local address ranges. 2023-03-15 17:11:04 -07:00
scripts.base.frameworks.file-analysis.ftp btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.frameworks.file-analysis.http.get btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.frameworks.file-analysis.http.multipart btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.frameworks.file-analysis.http.partial-content btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.frameworks.file-analysis.http.pipeline btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.frameworks.file-analysis.http.post btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.frameworks.file-analysis.input.basic
scripts.base.frameworks.file-analysis.irc btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.frameworks.file-analysis.log-files-event-flattening btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.frameworks.file-analysis.logging Update btest baselines to reflect the use of local address ranges. 2023-03-15 17:11:04 -07:00
scripts.base.frameworks.file-analysis.logging-input-analysis files.log: Unroll and introduce uid and id fields 2022-08-16 17:22:20 +02:00
scripts.base.frameworks.file-analysis.smtp btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.frameworks.input.bad_patterns
scripts.base.frameworks.input.basic
scripts.base.frameworks.input.bignumber
scripts.base.frameworks.input.binary
scripts.base.frameworks.input.config.basic
scripts.base.frameworks.input.config.enum-set
scripts.base.frameworks.input.config.errors
scripts.base.frameworks.input.config.spaces
scripts.base.frameworks.input.default
scripts.base.frameworks.input.empty-nested-record input/Manager: Ignore empty record types 2025-07-03 18:21:15 +02:00
scripts.base.frameworks.input.empty-values-hashing
scripts.base.frameworks.input.emptyvals
scripts.base.frameworks.input.errors input/Manager: Improve type checks of record fields with type any 2024-07-19 11:35:54 +02:00
scripts.base.frameworks.input.event BTest baseline update for more complete function/lambda names 2024-09-27 14:16:10 -07:00
scripts.base.frameworks.input.from_json Merge remote-tracking branch 'amazing-pp/topic/fupeng/from_json_bif' 2023-05-09 10:36:58 +02:00
scripts.base.frameworks.input.invalid-lines input: Add location info for invalid enums 2022-11-29 12:36:11 +01:00
scripts.base.frameworks.input.invalid-lines-duplicate Fix input error test nondeterminism 2024-10-02 13:26:41 -04:00
scripts.base.frameworks.input.invalidnumbers
scripts.base.frameworks.input.invalidset Better input framework error messages for unset non-optionals 2023-07-21 15:11:31 +01:00
scripts.base.frameworks.input.invalidtable Better input framework error messages for unset non-optionals 2023-07-21 15:11:31 +01:00
scripts.base.frameworks.input.invalidtext
scripts.base.frameworks.input.missing-enum input: Add location info for invalid enums 2022-11-29 12:36:11 +01:00
scripts.base.frameworks.input.missing-file
scripts.base.frameworks.input.missing-file-initially
scripts.base.frameworks.input.missing-table-value
scripts.base.frameworks.input.onecolumn-norecord
scripts.base.frameworks.input.onecolumn-record
scripts.base.frameworks.input.optional
scripts.base.frameworks.input.path-prefix.absolute-prefix
scripts.base.frameworks.input.path-prefix.absolute-prefix-2
scripts.base.frameworks.input.path-prefix.absolute-prefix-3
scripts.base.frameworks.input.path-prefix.absolute-source
scripts.base.frameworks.input.path-prefix.absolute-source-2
scripts.base.frameworks.input.path-prefix.absolute-source-3
scripts.base.frameworks.input.path-prefix.no-paths
scripts.base.frameworks.input.path-prefix.no-paths-2
scripts.base.frameworks.input.path-prefix.no-paths-3
scripts.base.frameworks.input.path-prefix.relative-prefix
scripts.base.frameworks.input.path-prefix.relative-prefix-2
scripts.base.frameworks.input.path-prefix.relative-prefix-3
scripts.base.frameworks.input.patterns
scripts.base.frameworks.input.port
scripts.base.frameworks.input.port-embedded
scripts.base.frameworks.input.predicate
scripts.base.frameworks.input.predicate-stream
scripts.base.frameworks.input.predicatemodify
scripts.base.frameworks.input.predicatemodifyandreread
scripts.base.frameworks.input.predicaterefusesecondsamerecord
scripts.base.frameworks.input.raw.basic BTest baseline update for more complete function/lambda names 2024-09-27 14:16:10 -07:00
scripts.base.frameworks.input.raw.execute BTest baseline update for more complete function/lambda names 2024-09-27 14:16:10 -07:00
scripts.base.frameworks.input.raw.executestdin
scripts.base.frameworks.input.raw.executestream
scripts.base.frameworks.input.raw.executestream-leftover input/Raw: Rework GetLine() 2024-10-09 14:21:07 -07:00
scripts.base.frameworks.input.raw.executestream-no-last-separator input/Raw: Rework GetLine() 2024-10-09 14:21:07 -07:00
scripts.base.frameworks.input.raw.executestream-slow input/Raw: Rework GetLine() 2024-10-09 14:21:07 -07:00
scripts.base.frameworks.input.raw.executestream-slow-long input/Raw: Rework GetLine() 2024-10-09 14:21:07 -07:00
scripts.base.frameworks.input.raw.long
scripts.base.frameworks.input.raw.offset
scripts.base.frameworks.input.raw.rereadraw btest/input/raw: Fix reread test 2023-05-22 11:06:54 +02:00
scripts.base.frameworks.input.raw.rereadraw2 input/Raw: Avoid reading file twice in MODE_REREAD 2023-05-22 11:06:25 +02:00
scripts.base.frameworks.input.raw.stderr Spelling testing 2022-11-16 20:05:03 -05:00
scripts.base.frameworks.input.raw.streamraw
scripts.base.frameworks.input.raw.streamtail
scripts.base.frameworks.input.raw.streamtail2
scripts.base.frameworks.input.repeat
scripts.base.frameworks.input.reread
scripts.base.frameworks.input.set
scripts.base.frameworks.input.set-event-reread
scripts.base.frameworks.input.set-event-stream
scripts.base.frameworks.input.setseparator
scripts.base.frameworks.input.setspecialcases
scripts.base.frameworks.input.sqlite.basic btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.frameworks.input.sqlite.error
scripts.base.frameworks.input.sqlite.port
scripts.base.frameworks.input.sqlite.types
scripts.base.frameworks.input.stream
scripts.base.frameworks.input.subrecord
scripts.base.frameworks.input.subrecord-event
scripts.base.frameworks.input.tableevent
scripts.base.frameworks.input.twotables
scripts.base.frameworks.input.unsupported_types
scripts.base.frameworks.input.windows
scripts.base.frameworks.intel.cluster-indicator-inserted intel: Add indicator_inserted and indicator_removed hooks 2025-06-02 09:50:48 +02:00
scripts.base.frameworks.intel.cluster-indicator-inserted-new-min-store intel: Add indicator_inserted and indicator_removed hooks 2025-06-02 09:50:48 +02:00
scripts.base.frameworks.intel.cluster-transparency btest/frameworks/intel: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.intel.cluster-transparency-with-proxy btest/frameworks/intel: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.intel.expire-item
scripts.base.frameworks.intel.filter-item
scripts.base.frameworks.intel.input-and-match
scripts.base.frameworks.intel.match-subnet
scripts.base.frameworks.intel.path-prefix.input-intel-absolute-prefixes
scripts.base.frameworks.intel.path-prefix.input-intel-relative-prefixes
scripts.base.frameworks.intel.path-prefix.input-prefix
scripts.base.frameworks.intel.path-prefix.no-paths
scripts.base.frameworks.intel.read-file-dist-cluster btest/frameworks/intel: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.intel.remove-item-cluster btest/frameworks/intel: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.intel.remove-non-existing Intel: Introduce Intel::seen_policy() hook 2024-01-25 12:22:47 +01:00
scripts.base.frameworks.intel.seen-policy Intel: Introduce Intel::seen_policy() hook 2024-01-25 12:22:47 +01:00
scripts.base.frameworks.intel.updated-match
scripts.base.frameworks.logging.adapt-filter Increase size of proto fields to uint16_t, add common default value 2024-11-13 11:25:46 -07:00
scripts.base.frameworks.logging.ascii-binary
scripts.base.frameworks.logging.ascii-double
scripts.base.frameworks.logging.ascii-empty Increase size of proto fields to uint16_t, add common default value 2024-11-13 11:25:46 -07:00
scripts.base.frameworks.logging.ascii-escape Increase size of proto fields to uint16_t, add common default value 2024-11-13 11:25:46 -07:00
scripts.base.frameworks.logging.ascii-escape-binary
scripts.base.frameworks.logging.ascii-escape-empty-str
scripts.base.frameworks.logging.ascii-escape-notset-str
scripts.base.frameworks.logging.ascii-escape-odd-url
scripts.base.frameworks.logging.ascii-escape-set-separator
scripts.base.frameworks.logging.ascii-gz BTest baseline update for more complete function/lambda names 2024-09-27 14:16:10 -07:00
scripts.base.frameworks.logging.ascii-json BTest baseline update for more complete function/lambda names 2024-09-27 14:16:10 -07:00
scripts.base.frameworks.logging.ascii-json-iso-timestamps
scripts.base.frameworks.logging.ascii-json-optional
scripts.base.frameworks.logging.ascii-json-utf8
scripts.base.frameworks.logging.ascii-line-like-comment
scripts.base.frameworks.logging.ascii-logdir Increase size of proto fields to uint16_t, add common default value 2024-11-13 11:25:46 -07:00
scripts.base.frameworks.logging.ascii-negative-ts logging/ascii/json: Make TS_MILLIS signed, add TS_MILLIS_UNSIGNED 2025-05-30 17:23:29 +02:00
scripts.base.frameworks.logging.ascii-options Increase size of proto fields to uint16_t, add common default value 2024-11-13 11:25:46 -07:00
scripts.base.frameworks.logging.ascii-timestamps
scripts.base.frameworks.logging.ascii-tsv Increase size of proto fields to uint16_t, add common default value 2024-11-13 11:25:46 -07:00
scripts.base.frameworks.logging.ascii-utf8-enabled
scripts.base.frameworks.logging.ascii-utf8-enabled-control-characters
scripts.base.frameworks.logging.ascii-utf8-enabled-set-separator-escape
scripts.base.frameworks.logging.attr
scripts.base.frameworks.logging.attr-extend
scripts.base.frameworks.logging.delay.basic logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.basic-2 logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.basic-3 logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.basic-4 logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.basic-5 logging/Manager: Implement DelayTokenType as an actual opaque 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.coerce logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.delay-cb logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.delay-cb-2 logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.delay-cb-3 logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.delay-cb-4 logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.delay-cb-5 logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.delay-cb-6 logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.delay-cb-redelay logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.delay-cb-redelay-2 logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.errors logging: Better error messages for invalid Log::delay() calls 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.errors-2 logging: Better error messages for invalid Log::delay() calls 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.errors-3 logging: Better error messages for invalid Log::delay() calls 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.errors-4 logging/Manager: Implement DelayTokenType as an actual opaque 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.errors-5 logging/Manager: Implement DelayTokenType as an actual opaque 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.errors-6 logging: Better error messages for invalid Log::delay() calls 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.example btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.frameworks.logging.delay.multi-write logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.nested-write logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.nested-write-2 logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.queue-setter logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.queue-setter-2 logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.queue-size logging: Implement get_delay_queue_size() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.queue-test logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.queue-test-2 logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.queue-test-3 logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.queue-test-4 logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.queue-test-5 logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.queue-test-6 logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.queue-test-7 logging: Introduce Log::delay() and Log::delay_finish() 2023-11-29 11:53:11 +01:00
scripts.base.frameworks.logging.delay.static-errors added a space when rendering some expressions so they're more readable 2024-05-29 12:40:05 -07:00
scripts.base.frameworks.logging.delay.static-errors-2 added a space when rendering some expressions so they're more readable 2024-05-29 12:40:05 -07:00
scripts.base.frameworks.logging.delay.static-errors-3 added a space when rendering some expressions so they're more readable 2024-05-29 12:40:05 -07:00
scripts.base.frameworks.logging.delay.static-errors-4 added a space when rendering some expressions so they're more readable 2024-05-29 12:40:05 -07:00
scripts.base.frameworks.logging.empty-event Increase size of proto fields to uint16_t, add common default value 2024-11-13 11:25:46 -07:00
scripts.base.frameworks.logging.enable-stream Increase size of proto fields to uint16_t, add common default value 2024-11-13 11:25:46 -07:00
scripts.base.frameworks.logging.event-groups-integration logging: Add event_groups to Stream 2022-12-09 16:59:36 +01:00
scripts.base.frameworks.logging.events btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.frameworks.logging.exclude Increase size of proto fields to uint16_t, add common default value 2024-11-13 11:25:46 -07:00
scripts.base.frameworks.logging.field-extension Update btests for new local-only subnets 2025-01-09 22:16:42 -07:00
scripts.base.frameworks.logging.field-extension-cluster btest/frameworks/logging: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.logging.field-extension-cluster-error btest/frameworks/logging: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.logging.field-extension-complex Update btests for new local-only subnets 2025-01-09 22:16:42 -07:00
scripts.base.frameworks.logging.field-extension-include-exclude Update btests for new local-only subnets 2025-01-09 22:16:42 -07:00
scripts.base.frameworks.logging.field-extension-invalid Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.frameworks.logging.field-extension-optional Update btests for new local-only subnets 2025-01-09 22:16:42 -07:00
scripts.base.frameworks.logging.field-extension-table
scripts.base.frameworks.logging.field-name-map Update btests for new local-only subnets 2025-01-09 22:16:42 -07:00
scripts.base.frameworks.logging.field-name-map2 Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.frameworks.logging.file
scripts.base.frameworks.logging.hooks
scripts.base.frameworks.logging.hooks-2
scripts.base.frameworks.logging.hooks-3
scripts.base.frameworks.logging.hooks-4
scripts.base.frameworks.logging.hooks-5
scripts.base.frameworks.logging.hooks-6
scripts.base.frameworks.logging.hooks-7
scripts.base.frameworks.logging.hooks-8
scripts.base.frameworks.logging.hooks-9
scripts.base.frameworks.logging.hooks-10 Tighten the scripts.base.frameworks.logging.hooks test 2023-02-01 15:12:20 -08:00
scripts.base.frameworks.logging.hooks-11
scripts.base.frameworks.logging.include Increase size of proto fields to uint16_t, add common default value 2024-11-13 11:25:46 -07:00
scripts.base.frameworks.logging.none-debug
scripts.base.frameworks.logging.path-func Increase size of proto fields to uint16_t, add common default value 2024-11-13 11:25:46 -07:00
scripts.base.frameworks.logging.path-func-column-demote
scripts.base.frameworks.logging.pred Increase size of proto fields to uint16_t, add common default value 2024-11-13 11:25:46 -07:00
scripts.base.frameworks.logging.print-log
scripts.base.frameworks.logging.print-log-stdout
scripts.base.frameworks.logging.remove Increase size of proto fields to uint16_t, add common default value 2024-11-13 11:25:46 -07:00
scripts.base.frameworks.logging.rotate
scripts.base.frameworks.logging.rotate-ascii-logdir-leftover-log-rotation Remove LogAscii::logdir (6.1 deprecation) 2023-06-14 10:07:22 -07:00
scripts.base.frameworks.logging.rotate-custom
scripts.base.frameworks.logging.rotate-custom-fmt-func
scripts.base.frameworks.logging.rotate-custom-fmt-func-bad logging/Manager: Fix crash for rotation format function not returning 2023-04-13 09:23:51 +02:00
scripts.base.frameworks.logging.rotate-default-logdir
scripts.base.frameworks.logging.rotate-default-logdir-leftover-log-rotation-shadow-files
scripts.base.frameworks.logging.rotate-default-logdir-leftover-log-rotation-stale-shadow-files
scripts.base.frameworks.logging.rotate-leftover-log-rotation-shadow-files
scripts.base.frameworks.logging.rotate-leftover-log-rotation-shadow-files-postprocessor-errors logging/Ascii: Fix abort() for non-existing postrotation functions 2025-06-16 14:55:49 +02:00
scripts.base.frameworks.logging.rotate-pp-env logging: Support rotation_postprocessor_command_env 2023-04-17 13:10:14 +00:00
scripts.base.frameworks.logging.scope_sep Update btests for new local-only subnets 2025-01-09 22:16:42 -07:00
scripts.base.frameworks.logging.scope_sep_and_field_name_map Update btests for new local-only subnets 2025-01-09 22:16:42 -07:00
scripts.base.frameworks.logging.sqlite.default-logdir
scripts.base.frameworks.logging.sqlite.error
scripts.base.frameworks.logging.sqlite.pragma Test synchronous/journal mode options for SQLite log writer 2024-11-26 12:26:38 +00:00
scripts.base.frameworks.logging.sqlite.set
scripts.base.frameworks.logging.sqlite.simultaneous-writes BTest baseline update for more complete function/lambda names 2024-09-27 14:16:10 -07:00
scripts.base.frameworks.logging.sqlite.types BTest baseline update for more complete function/lambda names 2024-09-27 14:16:10 -07:00
scripts.base.frameworks.logging.sqlite.wikipedia Update btests for new local-only subnets 2025-01-09 22:16:42 -07:00
scripts.base.frameworks.logging.stdout Increase size of proto fields to uint16_t, add common default value 2024-11-13 11:25:46 -07:00
scripts.base.frameworks.logging.telemetry Move telmetry label names out of opts records, into main metric records 2024-06-04 14:14:58 -07:00
scripts.base.frameworks.logging.test-logging Increase size of proto fields to uint16_t, add common default value 2024-11-13 11:25:46 -07:00
scripts.base.frameworks.logging.types BTest baseline update for more complete function/lambda names 2024-09-27 14:16:10 -07:00
scripts.base.frameworks.logging.unset-record
scripts.base.frameworks.logging.vec
scripts.base.frameworks.logging.writer-path-conflict
scripts.base.frameworks.netcontrol.acld
scripts.base.frameworks.netcontrol.acld-hook
scripts.base.frameworks.netcontrol.basic
scripts.base.frameworks.netcontrol.basic-cluster
scripts.base.frameworks.netcontrol.broker
scripts.base.frameworks.netcontrol.delete-internal-state
scripts.base.frameworks.netcontrol.duplicate
scripts.base.frameworks.netcontrol.find-rules
scripts.base.frameworks.netcontrol.hook
scripts.base.frameworks.netcontrol.multiple
scripts.base.frameworks.netcontrol.openflow
scripts.base.frameworks.netcontrol.packetfilter Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.frameworks.netcontrol.quarantine-openflow
scripts.base.frameworks.netcontrol.rule-added-hook Netcontrol: add rule_added_policy 2024-02-05 18:52:27 +00:00
scripts.base.frameworks.netcontrol.rule-added-hook-2 logging: Dedicated log flush timer 2024-09-27 15:30:35 +02:00
scripts.base.frameworks.netcontrol.timeout
scripts.base.frameworks.notice.action-email
scripts.base.frameworks.notice.action-email-admin
scripts.base.frameworks.notice.action-email-custom-address
scripts.base.frameworks.notice.action-email-multiple
scripts.base.frameworks.notice.action-page
scripts.base.frameworks.notice.action-page-with-hostnames
scripts.base.frameworks.notice.cluster btest/frameworks/notice: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.notice.file-info-multiple-conns btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.frameworks.notice.file-info-no-conns analyzer/files: handle non-analyzer names in describe_file() 2022-12-06 11:17:30 +01:00
scripts.base.frameworks.notice.mail-alarms
scripts.base.frameworks.notice.suppression
scripts.base.frameworks.notice.suppression-cluster btest/frameworks/notice: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.openflow.broker-basic
scripts.base.frameworks.openflow.log-basic
scripts.base.frameworks.openflow.log-cluster btest remaining: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.openflow.ryu-basic
scripts.base.frameworks.reporter.disable-stderr
scripts.base.frameworks.reporter.stderr
scripts.base.frameworks.software.version-parsing
scripts.base.frameworks.storage.compound-types Completely rework return values from storage operations 2025-03-18 10:20:33 -07:00
scripts.base.frameworks.storage.redis-async Completely rework return values from storage operations 2025-03-18 10:20:33 -07:00
scripts.base.frameworks.storage.redis-async-reading-pcap Completely rework return values from storage operations 2025-03-18 10:20:33 -07:00
scripts.base.frameworks.storage.redis-auth Redis: Add support for sending AUTH commands during connection 2025-06-03 11:38:38 -07:00
scripts.base.frameworks.storage.redis-cluster Completely rework return values from storage operations 2025-03-18 10:20:33 -07:00
scripts.base.frameworks.storage.redis-disconnect Update redis btest baselines 2025-06-03 13:37:03 -07:00
scripts.base.frameworks.storage.redis-erase Redis: Fix sync erase, add btest for it 2025-03-18 10:20:34 -07:00
scripts.base.frameworks.storage.redis-error-handling Redis: return proper error if connection fails 2025-05-23 12:13:13 -07:00
scripts.base.frameworks.storage.redis-expiration Redis: Fix thread-contention issues with Expire(), add more tests 2025-03-18 10:20:33 -07:00
scripts.base.frameworks.storage.redis-native-expiration Redis: Fix thread-contention issues with Expire(), add more tests 2025-03-18 10:20:33 -07:00
scripts.base.frameworks.storage.redis-sync Update redis btest baselines 2025-06-03 13:37:03 -07:00
scripts.base.frameworks.storage.sqlite-basic Add busy_timeout script-level option, override any busy_timeout pragma 2025-06-05 10:21:50 -07:00
scripts.base.frameworks.storage.sqlite-basic-reading-pcap Completely rework return values from storage operations 2025-03-18 10:20:33 -07:00
scripts.base.frameworks.storage.sqlite-basic-sync-in-when Allow sync methods to be called from when conditions, add related btest 2025-03-18 10:20:34 -07:00
scripts.base.frameworks.storage.sqlite-cluster Add expiration to sqlite-cluster.btest 2025-06-05 10:21:50 -07:00
scripts.base.frameworks.storage.sqlite-erase Prefix sqlite-based btests with sqlite- to match redis tests 2025-05-21 09:38:27 -07:00
scripts.base.frameworks.storage.sqlite-error-handling Add Storage::is_connected BIF 2025-05-07 08:13:16 -07:00
scripts.base.frameworks.storage.sqlite-expiration SQLite: Reset expiration time on overwrite 2025-06-30 14:41:10 -07:00
scripts.base.frameworks.storage.sqlite-expiration-implicit Make PUT on SQLite backend implicitly overwrite expired entries 2025-07-15 15:50:43 -07:00
scripts.base.frameworks.storage.sqlite-overwriting Prefix sqlite-based btests with sqlite- to match redis tests 2025-05-21 09:38:27 -07:00
scripts.base.frameworks.sumstats.basic
scripts.base.frameworks.sumstats.basic-cluster btest/frameworks/sumstats: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.sumstats.cluster-intermediate-update btest/frameworks/sumstats: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.sumstats.final-epoch sumstat/non-cluster: Move last epoch processing to zeek_done() 2024-11-18 15:58:01 +01:00
scripts.base.frameworks.sumstats.last-cluster btest/frameworks/sumstats: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.sumstats.manual-epoch Spelling testing 2022-11-16 20:05:03 -05:00
scripts.base.frameworks.sumstats.manual-epoch-cluster btest/frameworks/sumstats: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.sumstats.on-demand
scripts.base.frameworks.sumstats.on-demand-cluster btest/frameworks/sumstats: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.sumstats.sample
scripts.base.frameworks.sumstats.sample-cluster btest/frameworks/sumstats: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.sumstats.thresholding
scripts.base.frameworks.sumstats.topk
scripts.base.frameworks.sumstats.topk-cluster btest/frameworks/sumstats: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.frameworks.telemetry.basic Add extra metrics to session_mgr 2024-08-05 13:21:44 -07:00
scripts.base.frameworks.telemetry.conn-duration-histogram Change all instruments to only handle doubles 2024-05-31 13:36:37 -07:00
scripts.base.frameworks.telemetry.event-handler-invocations Change all instruments to only handle doubles 2024-05-31 13:36:37 -07:00
scripts.base.frameworks.telemetry.internal-metrics Bump broker submodule 2025-04-23 14:27:43 +02:00
scripts.base.frameworks.telemetry.process-collect telemetry: Run callbacks at collect time 2025-03-26 12:07:27 +01:00
scripts.base.frameworks.telemetry.sync telemetry: Invoke Telemetry::sync() only at scrape/collection time 2024-10-22 18:49:11 +02:00
scripts.base.frameworks.telemetry.sync-collect telemetry: Invoke Telemetry::sync() only at scrape/collection time 2024-10-22 18:49:11 +02:00
scripts.base.frameworks.telemetry.sync-warnings telemetry: Invoke Telemetry::sync() only at scrape/collection time 2024-10-22 18:49:11 +02:00
scripts.base.misc.find-filtered-trace
scripts.base.misc.installation
scripts.base.misc.version Remove unneeded @loads from base/misc/version.zeek 2024-12-06 15:18:05 -08:00
scripts.base.misc.version-2
scripts.base.protocols.arp.bad
scripts.base.protocols.arp.basic
scripts.base.protocols.arp.linuxsll
scripts.base.protocols.arp.radiotap
scripts.base.protocols.arp.wlanmon
scripts.base.protocols.bittorrent.tracker btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.conn.conn_state-RST-behavior
scripts.base.protocols.conn.contents-default-extract
scripts.base.protocols.conn.new_connection_contents btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.conn.polling btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.conn.removal-hooks btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.conn.threshold btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.conn.threshold-delete
scripts.base.protocols.dce-rpc.context
scripts.base.protocols.dce-rpc.dce-rpc-backing-discard dce-rpc: Test cases for unbounded state growth 2023-06-30 15:14:35 +02:00
scripts.base.protocols.dce-rpc.dce-rpc-backing-size dce-rpc: Test cases for unbounded state growth 2023-06-30 15:14:35 +02:00
scripts.base.protocols.dce-rpc.dce_rpc_netlogon
scripts.base.protocols.dce-rpc.dce_rpc_ntlm
scripts.base.protocols.dce-rpc.mapi
scripts.base.protocols.dce-rpc.ntlm-empty-av-pair-seq Settle on analyzer.log for the dpd.log replacement 2025-06-03 17:33:36 +01:00
scripts.base.protocols.dce-rpc.ntlm-unterminated-av-pair-seq Settle on analyzer.log for the dpd.log replacement 2025-06-03 17:33:36 +01:00
scripts.base.protocols.dce-rpc.request-response-stub-events btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.dhcp.cluster btest remaining: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.base.protocols.dhcp.dhcp-ack-msg-types
scripts.base.protocols.dhcp.dhcp-all-msg-types Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.protocols.dhcp.dhcp-discover-msg-types
scripts.base.protocols.dhcp.dhcp-prevent-large-msgtypes
scripts.base.protocols.dhcp.dhcp-prevent-large-uids
scripts.base.protocols.dhcp.dhcp-sub-opts
scripts.base.protocols.dhcp.dhcp-time-nameserver-events
scripts.base.protocols.dhcp.hw-type0
scripts.base.protocols.dhcp.inform
scripts.base.protocols.dnp3.dnp3_del_measure
scripts.base.protocols.dnp3.dnp3_en_spon
scripts.base.protocols.dnp3.dnp3_file_del
scripts.base.protocols.dnp3.dnp3_file_read
scripts.base.protocols.dnp3.dnp3_file_write
scripts.base.protocols.dnp3.dnp3_link_only
scripts.base.protocols.dnp3.dnp3_read
scripts.base.protocols.dnp3.dnp3_rec_time
scripts.base.protocols.dnp3.dnp3_select_operate
scripts.base.protocols.dnp3.dnp3_udp_en_spon
scripts.base.protocols.dnp3.dnp3_udp_read
scripts.base.protocols.dnp3.dnp3_udp_select_operate
scripts.base.protocols.dnp3.dnp3_udp_write
scripts.base.protocols.dnp3.dnp3_write
scripts.base.protocols.dnp3.events
scripts.base.protocols.dns.ad-cd dns: Remove AD and CD flags from log 2023-03-16 10:09:27 +01:00
scripts.base.protocols.dns.binds DNS/dns_binds_rr: Fix complte to complete typo, switch to count 2024-12-09 19:02:28 +01:00
scripts.base.protocols.dns.caa
scripts.base.protocols.dns.dns-edns-cookie
scripts.base.protocols.dns.dns-edns-ecs
scripts.base.protocols.dns.dns-edns-tcp-keepalive
scripts.base.protocols.dns.dns-key dns: Remove AD and CD flags from log 2023-03-16 10:09:27 +01:00
scripts.base.protocols.dns.dnskey Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.dns.dnssec DNS: Add Ed25519 and Ed448 enum values to parser 2023-11-17 19:56:47 +01:00
scripts.base.protocols.dns.ds Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.dns.duplicate-reponses dns: Remove AD and CD flags from log 2023-03-16 10:09:27 +01:00
scripts.base.protocols.dns.dynamic-update Add weird for unhandled opcodes in DNS analyzer 2024-09-04 13:01:24 -07:00
scripts.base.protocols.dns.event-handler-warning Raise warnings when for DNS events that are not raised due to dns_skip_all_addl 2025-01-07 17:46:27 +00:00
scripts.base.protocols.dns.flip dns: Remove AD and CD flags from log 2023-03-16 10:09:27 +01:00
scripts.base.protocols.dns.hinfo Parse DNSSEC AD and CD bits 2023-03-13 14:35:06 -07:00
scripts.base.protocols.dns.https Spelling testing 2022-11-16 20:05:03 -05:00
scripts.base.protocols.dns.huge-ttl
scripts.base.protocols.dns.loc dns: Remove AD and CD flags from log 2023-03-16 10:09:27 +01:00
scripts.base.protocols.dns.multiple-txt-strings dns: Remove AD and CD flags from log 2023-03-16 10:09:27 +01:00
scripts.base.protocols.dns.naptr DNS: Implement NAPTR RR support 2025-06-24 17:43:27 +02:00
scripts.base.protocols.dns.nsec Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.dns.nsec3 Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.dns.nsec3param dns: Remove AD and CD flags from log 2023-03-16 10:09:27 +01:00
scripts.base.protocols.dns.rrsig Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.dns.spf dns: Remove AD and CD flags from log 2023-03-16 10:09:27 +01:00
scripts.base.protocols.dns.sshfp dns: Remove AD and CD flags from log 2023-03-16 10:09:27 +01:00
scripts.base.protocols.dns.svcb Spelling testing 2022-11-16 20:05:03 -05:00
scripts.base.protocols.dns.tkey Add DNS TKEY event 2024-08-16 10:20:42 -04:00
scripts.base.protocols.dns.tsig
scripts.base.protocols.dns.wks dns: Remove AD and CD flags from log 2023-03-16 10:09:27 +01:00
scripts.base.protocols.dns.zero-responses dns: Remove AD and CD flags from log 2023-03-16 10:09:27 +01:00
scripts.base.protocols.finger.events btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.ftp.bad-adat-encoding
scripts.base.protocols.ftp.cwd-navigation Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.protocols.ftp.ftp-auth-tls btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.ftp.ftp-get-file-size btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.ftp.ftp-invalid-reply-code Settle on analyzer.log for the dpd.log replacement 2025-06-03 17:33:36 +01:00
scripts.base.protocols.ftp.ftp-ipv4 btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.ftp.ftp-ipv6 btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.ftp.ftp-max-arg-length btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.ftp.ftp-max-command-length Settle on analyzer.log for the dpd.log replacement 2025-06-03 17:33:36 +01:00
scripts.base.protocols.ftp.ftp-max-pending-commands Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.protocols.ftp.ftp-max-user-length btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.ftp.ftp-missing-reply-code Settle on analyzer.log for the dpd.log replacement 2025-06-03 17:33:36 +01:00
scripts.base.protocols.ftp.ftp-missing-space-after-reply-code Settle on analyzer.log for the dpd.log replacement 2025-06-03 17:33:36 +01:00
scripts.base.protocols.ftp.ftp-multiline-reply ftp/main: Skip get_pending_command() for intermediate reply lines 2023-03-23 13:50:36 +01:00
scripts.base.protocols.ftp.ftp-password-pass-command Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.protocols.ftp.ftp-password-pass-command-hidden Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.protocols.ftp.ftp-samba-retr ftp/main: Skip get_pending_command() for intermediate reply lines 2023-03-23 13:50:36 +01:00
scripts.base.protocols.ftp.gridftp Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.http.100-continue
scripts.base.protocols.http.101-switching-protocols btest/http: Explain switching-protocols test change as comment 2024-01-22 18:54:38 +01:00
scripts.base.protocols.http.all-headers-event
scripts.base.protocols.http.bad-content-range HTTP: Make Content-Range parsing more robust 2023-03-13 18:00:39 +01:00
scripts.base.protocols.http.build-url
scripts.base.protocols.http.concurrent-range-requests btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.http.content-range-gap
scripts.base.protocols.http.content-range-less-than-len
scripts.base.protocols.http.curl-http-09 http: Heuristic around rejecting malformed HTTP/0.9 traffic 2022-11-18 18:19:58 +01:00
scripts.base.protocols.http.deeply-nested-mime MIME: Cap nested MIME analysis depth to 100 2024-01-17 10:18:13 -07:00
scripts.base.protocols.http.entity-gap
scripts.base.protocols.http.entity-gap2
scripts.base.protocols.http.fake-content-length
scripts.base.protocols.http.flip-content-line-orig HTTP: Implement FlipRoles() 2024-07-04 11:38:33 +02:00
scripts.base.protocols.http.flip-content-line-resp HTTP: Implement FlipRoles() 2024-07-04 11:38:33 +02:00
scripts.base.protocols.http.http-09 Add weird for unknown HTTP/0.9 request method 2023-03-10 15:45:11 -07:00
scripts.base.protocols.http.http-09-content-length-confusion http: Prevent request/response de-synchronization and unbounded state growth 2023-08-28 15:02:58 +02:00
scripts.base.protocols.http.http-11-request-then-cruft Settle on analyzer.log for the dpd.log replacement 2025-06-03 17:33:36 +01:00
scripts.base.protocols.http.http-bad-request-with-version
scripts.base.protocols.http.http-basic-auth-colon http: fix password capture when enabled 2024-08-28 21:44:39 +02:00
scripts.base.protocols.http.http-basic-auth-extra-space Merge branch 'master' of https://github.com/progmboy/zeek 2023-06-27 18:21:34 +02:00
scripts.base.protocols.http.http-connect Make conn.log service field ordered 2025-01-30 16:59:44 +00:00
scripts.base.protocols.http.http-connect-with-header Make conn.log service field ordered 2025-01-30 16:59:44 +00:00
scripts.base.protocols.http.http-desynched http: Prevent request/response de-synchronization and unbounded state growth 2023-08-28 15:02:58 +02:00
scripts.base.protocols.http.http-dpd-large-req
scripts.base.protocols.http.http-filename
scripts.base.protocols.http.http-lower-case Ignore case when matching prefix in http analyzer 2025-04-25 10:33:11 -07:00
scripts.base.protocols.http.http-methods Add weird for unknown HTTP/0.9 request method 2023-03-10 15:45:11 -07:00
scripts.base.protocols.http.http-no-crlf Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.protocols.http.http-pending-state-growth http: Prevent request/response de-synchronization and unbounded state growth 2023-08-28 15:02:58 +02:00
scripts.base.protocols.http.http-pipelining
scripts.base.protocols.http.missing-http-entity http: Prevent script errors when http$current_entity is not set 2022-09-26 10:18:24 +02:00
scripts.base.protocols.http.missing-zlib-header
scripts.base.protocols.http.multipart-body-length
scripts.base.protocols.http.multipart-extract
scripts.base.protocols.http.multipart-file-limit
scripts.base.protocols.http.no-uri
scripts.base.protocols.http.no-version Special case HTTP 0.9 early on 2023-03-10 09:52:34 -07:00
scripts.base.protocols.http.percent-end-of-line
scripts.base.protocols.http.upgrade-to-tcp btest/http: Demo StreamEvent analyzer with HTTP::upgrade_analyzers 2024-12-06 16:12:40 +01:00
scripts.base.protocols.http.version-mismatch Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.http.x-gzip
scripts.base.protocols.icmp.dnssl
scripts.base.protocols.imap.capabilities
scripts.base.protocols.imap.starttls Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.irc.basic btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.irc.events
scripts.base.protocols.irc.longline
scripts.base.protocols.irc.names-weird
scripts.base.protocols.irc.starttls Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.krb.enc_part Add a revised script for detecting HTTP SQL injection, deprecate original 2025-05-20 16:24:20 +02:00
scripts.base.protocols.krb.kinit Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.krb.krb-service-name Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.krb.pa_data Expose PA_ENC_TIMESTAMP to script land 2022-12-02 15:43:19 +02:00
scripts.base.protocols.krb.smb2_krb
scripts.base.protocols.krb.smb2_krb_nokeytab
scripts.base.protocols.krb.smb_gssapi
scripts.base.protocols.krb.tgs
scripts.base.protocols.ldap.add Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.protocols.ldap.aduser1 ldap: Add Sicily Authentication constants 2025-04-15 20:10:56 +02:00
scripts.base.protocols.ldap.attributes Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.protocols.ldap.basic Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.protocols.ldap.diff_port Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.protocols.ldap.invalid_credentials btest/ldap: Add regression test for #3919 2024-09-06 19:16:49 +02:00
scripts.base.protocols.ldap.ldap_substring_search ldap: Fix substring filter parsing and rendering 2024-01-05 16:06:23 +01:00
scripts.base.protocols.ldap.log_policy Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.protocols.ldap.sasl-encrypted Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.protocols.ldap.sasl-ntlm Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.protocols.ldap.sasl-scram-sha-512 Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.protocols.ldap.sasl-signed-clear Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.protocols.ldap.sasl-signed-clear-2 Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.protocols.ldap.sasl-srp-who-am-i Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.protocols.ldap.search_filter_extended ldap: Use scalar values in logs where appropriate 2024-01-03 11:57:31 +01:00
scripts.base.protocols.ldap.spnego-ntlmssp Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.protocols.ldap.starttls Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.protocols.ldap.who-am-i Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.protocols.modbus.coil_parsing_big btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.modbus.coil_parsing_small btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.modbus.events btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.modbus.exception_handling Fix issues with Modbus message logging 2024-10-30 13:12:27 +01:00
scripts.base.protocols.modbus.modbus_and_non_modbus_on_port_502 Analyzer failure logging: tweaks and test fixes 2025-06-03 15:56:42 +01:00
scripts.base.protocols.modbus.policy Fix issues with Modbus message logging 2024-10-30 13:12:27 +01:00
scripts.base.protocols.modbus.register_parsing btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.mount.basic btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.mqtt.mqtt
scripts.base.protocols.mqtt.mqtt-payload-cap
scripts.base.protocols.mqtt.mqtt-payload-cap-dynamic
scripts.base.protocols.mysql.auth
scripts.base.protocols.mysql.caching_sha2_password mysql: Add mysql_auth_plugin, mysql_auth_more_data and mysql_auth_switch_request events 2024-07-25 11:53:41 +02:00
scripts.base.protocols.mysql.caching_sha2_password-after-auth-switch mysql: Add mysql_auth_plugin, mysql_auth_more_data and mysql_auth_switch_request events 2024-07-25 11:53:41 +02:00
scripts.base.protocols.mysql.caching_sha2_password-auth-switch-to-test-sha256_password mysql: Handle server connection phase separately from command phase 2024-08-13 22:06:25 +02:00
scripts.base.protocols.mysql.change-user-error mysql: Implement and test COM_CHANGE_USER 2024-08-14 10:20:01 +02:00
scripts.base.protocols.mysql.change-user-success mysql: Implement and test COM_CHANGE_USER 2024-08-14 10:20:01 +02:00
scripts.base.protocols.mysql.encrypted Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.mysql.encrypted-aws-rds Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.mysql.many-query-attr mysql: Support non-string query attributes 2024-07-25 11:53:41 +02:00
scripts.base.protocols.mysql.plain-aws-rds testing/mysql: Add traces recorded with a free-tier MySQL instance 2023-01-27 10:59:23 +01:00
scripts.base.protocols.mysql.query-attr Add support for "auth switch" and "query attrs" 2024-07-25 11:53:40 +02:00
scripts.base.protocols.mysql.query-attr-non-string mysql: Support non-string query attributes 2024-07-25 11:53:41 +02:00
scripts.base.protocols.mysql.selects_with_new_proto
scripts.base.protocols.mysql.show-engine-innodb-status MySQL: Fix endianness, introduce mysql_eof() event 2023-01-27 10:59:23 +01:00
scripts.base.protocols.mysql.wireshark MySQL: Fix endianness, introduce mysql_eof() event 2023-01-27 10:59:23 +01:00
scripts.base.protocols.ncp.event
scripts.base.protocols.ncp.frame_size_tuning
scripts.base.protocols.nfs.basic btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.ntp.misordered-ntp Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.ntp.ntp Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.ntp.ntp-digest Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.ntp.ntp2 Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.ntp.ntp3 Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.ntp.ntpmode67
scripts.base.protocols.pop3.bad-list-retr-crafted Analyzer failure logging: tweaks and test fixes 2025-06-03 15:56:42 +01:00
scripts.base.protocols.pop3.basic Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.protocols.pop3.redis Analyzer failure logging: tweaks and test fixes 2025-06-03 15:56:42 +01:00
scripts.base.protocols.pop3.starttls Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.portmap.basic
scripts.base.protocols.postgresql.bad-backend-message Analyzer failure logging: tweaks and test fixes 2025-06-03 15:56:42 +01:00
scripts.base.protocols.postgresql.bad-startup-message postgresql: Initial parser implementation 2024-09-06 16:10:48 +02:00
scripts.base.protocols.postgresql.dump-events btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.postgresql.http-on-port-5432 Analyzer failure logging: tweaks and test fixes 2025-06-03 15:56:42 +01:00
scripts.base.protocols.postgresql.mysql-on-port-5432 Analyzer failure logging: tweaks and test fixes 2025-06-03 15:56:42 +01:00
scripts.base.protocols.postgresql.parameter-status postgresql: Initial parser implementation 2024-09-06 16:10:48 +02:00
scripts.base.protocols.postgresql.psql-auth postgresql: Initial parser implementation 2024-09-06 16:10:48 +02:00
scripts.base.protocols.postgresql.psql-aws-ssl-disable postgresql: Initial parser implementation 2024-09-06 16:10:48 +02:00
scripts.base.protocols.postgresql.psql-aws-ssl-disable-15432 postgresql: Initial parser implementation 2024-09-06 16:10:48 +02:00
scripts.base.protocols.postgresql.psql-aws-ssl-require Make conn.log service field ordered 2025-01-30 16:59:44 +00:00
scripts.base.protocols.postgresql.psql-aws-ssl-require-15432 Make conn.log service field ordered 2025-01-30 16:59:44 +00:00
scripts.base.protocols.postgresql.psql-create-insert-select postgresql: Initial parser implementation 2024-09-06 16:10:48 +02:00
scripts.base.protocols.postgresql.psql-insert-fail-drop-fail postgresql: Initial parser implementation 2024-09-06 16:10:48 +02:00
scripts.base.protocols.postgresql.psql-login-fail postgresql: Initial parser implementation 2024-09-06 16:10:48 +02:00
scripts.base.protocols.postgresql.psql-login-no-sslrequest postgresql: Initial parser implementation 2024-09-06 16:10:48 +02:00
scripts.base.protocols.postgresql.psql-select-now postgresql: Initial parser implementation 2024-09-06 16:10:48 +02:00
scripts.base.protocols.postgresql.startup-parameter postgresql: Initial parser implementation 2024-09-06 16:10:48 +02:00
scripts.base.protocols.quic.analyzer-confirmations Merge remote-tracking branch 'origin/master' into topic/johanna/dpd-changes 2025-02-05 09:31:16 +00:00
scripts.base.protocols.quic.chromium Merge remote-tracking branch 'origin/master' into topic/johanna/dpd-changes 2025-02-05 09:31:16 +00:00
scripts.base.protocols.quic.curl-http3 QUIC: Do not consume EncryptedLongPacketPayload 2025-05-05 14:34:11 +02:00
scripts.base.protocols.quic.decrypt-crash Analyzer failure logging: tweaks and test fixes 2025-06-03 15:56:42 +01:00
scripts.base.protocols.quic.decrypt-fail-google-de-51833 QUIC: Use initial destination conn_id for decryption 2025-05-05 14:34:11 +02:00
scripts.base.protocols.quic.events QUIC: Do not consume EncryptedLongPacketPayload 2025-05-05 14:34:11 +02:00
scripts.base.protocols.quic.firefox Merge remote-tracking branch 'origin/master' into topic/johanna/dpd-changes 2025-02-05 09:31:16 +00:00
scripts.base.protocols.quic.fragmented-crypto Merge remote-tracking branch 'origin/master' into topic/johanna/dpd-changes 2025-02-05 09:31:16 +00:00
scripts.base.protocols.quic.interop.quic-go_quic-go.handshake Merge remote-tracking branch 'origin/master' into topic/johanna/dpd-changes 2025-02-05 09:31:16 +00:00
scripts.base.protocols.quic.interop.quic-go_quic-go.retry Merge remote-tracking branch 'origin/master' into topic/johanna/dpd-changes 2025-02-05 09:31:16 +00:00
scripts.base.protocols.quic.interop.quic-go_quic-go.zerortt QUIC: Do not consume EncryptedLongPacketPayload 2025-05-05 14:34:11 +02:00
scripts.base.protocols.quic.max-history-length quic: Bump maximum history length, make configurable 2023-10-20 20:42:30 +02:00
scripts.base.protocols.quic.merlinc2 Merge remote-tracking branch 'origin/master' into topic/johanna/dpd-changes 2025-02-05 09:31:16 +00:00
scripts.base.protocols.quic.multiple-initial-fragmented-crypto QUIC: Handle CRYPTO frames across multiple INITIAL packets 2025-05-05 14:34:11 +02:00
scripts.base.protocols.quic.multiple-initial-fragmented-crypto-only-initial QUIC: Handle CRYPTO frames across multiple INITIAL packets 2025-05-05 14:34:11 +02:00
scripts.base.protocols.quic.quic-log quic: Log client's source connection id, too. 2024-01-30 21:46:38 +01:00
scripts.base.protocols.quic.quicdoq Merge remote-tracking branch 'origin/master' into topic/johanna/dpd-changes 2025-02-05 09:31:16 +00:00
scripts.base.protocols.quic.quicv2-echo-443 QUIC: Do not consume EncryptedLongPacketPayload 2025-05-05 14:34:11 +02:00
scripts.base.protocols.quic.quicv2-http3-443 Merge remote-tracking branch 'origin/master' into topic/johanna/dpd-changes 2025-02-05 09:31:16 +00:00
scripts.base.protocols.quic.run-pcap Merge remote-tracking branch 'origin/master' into topic/johanna/dpd-changes 2025-02-05 09:31:16 +00:00
scripts.base.protocols.quic.vector-max-size-crash Analyzer failure logging: tweaks and test fixes 2025-06-03 15:56:42 +01:00
scripts.base.protocols.radius.auth
scripts.base.protocols.radius.radius-multiple-attempts
scripts.base.protocols.rdp.rdp-client-cluster-data
scripts.base.protocols.rdp.rdp-client-security-data
scripts.base.protocols.rdp.rdp-invalid-length Analyzer failure logging: tweaks and test fixes 2025-06-03 15:56:42 +01:00
scripts.base.protocols.rdp.rdp-native-encrypted-data
scripts.base.protocols.rdp.rdp-no-cookie-msthash RDP: cookie is optional 2025-03-04 13:38:01 +00:00
scripts.base.protocols.rdp.rdp-proprietary-encryption
scripts.base.protocols.rdp.rdp-to-ssl
scripts.base.protocols.rdp.rdp-unknown-keyboard Add test for new handling of unknown RDP keyboards 2023-01-23 13:01:48 -07:00
scripts.base.protocols.rdp.rdp-x509
scripts.base.protocols.rdp.rdpeudp-handshake-fail btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.rdp.rdpeudp-handshake-success btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.rdp.rdpeudp2-handshake-success btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.redis.almost-redis spicy-redis: Separate error replies from success 2025-05-27 09:31:25 -04:00
scripts.base.protocols.redis.attributes Handle more Redis RESP3 protocol pieces 2025-07-01 14:14:15 -04:00
scripts.base.protocols.redis.auth spicy-redis: Separate error replies from success 2025-05-27 09:31:25 -04:00
scripts.base.protocols.redis.bulk spicy-redis: Add synchronization and pipeline support 2025-05-27 09:28:12 -04:00
scripts.base.protocols.redis.client-reply-off spicy-redis: Separate error replies from success 2025-05-27 09:31:25 -04:00
scripts.base.protocols.redis.client-reply-off-2conn spicy-redis: Separate error replies from success 2025-05-27 09:31:25 -04:00
scripts.base.protocols.redis.client-skip-while-off spicy-redis: Separate error replies from success 2025-05-27 09:31:25 -04:00
scripts.base.protocols.redis.django-cloud spicy-redis: Separate error replies from success 2025-05-27 09:31:25 -04:00
scripts.base.protocols.redis.excessive-pipelining spicy-redis: Separate error replies from success 2025-05-27 09:31:25 -04:00
scripts.base.protocols.redis.pipeline-with-quotes spicy-redis: Separate error replies from success 2025-05-27 09:31:25 -04:00
scripts.base.protocols.redis.pipelined spicy-redis: Separate error replies from success 2025-05-27 09:31:25 -04:00
scripts.base.protocols.redis.pipelined-with-commands spicy-redis: Separate error replies from success 2025-05-27 09:31:25 -04:00
scripts.base.protocols.redis.pubsub Handle more Redis RESP3 protocol pieces 2025-07-01 14:14:15 -04:00
scripts.base.protocols.redis.pubsub-resp3 Handle more Redis RESP3 protocol pieces 2025-07-01 14:14:15 -04:00
scripts.base.protocols.redis.set spicy-redis: Add synchronization and pipeline support 2025-05-27 09:28:12 -04:00
scripts.base.protocols.redis.start-with-server spicy-redis: Abort parsing if server data comes first 2025-05-27 09:28:12 -04:00
scripts.base.protocols.redis.stream Add Redis analyzer array stringification 2025-07-01 10:23:57 -04:00
scripts.base.protocols.rfb.rfb-apple-remote-desktop
scripts.base.protocols.rfb.vnc-mac-to-linux
scripts.base.protocols.rfb.vnc-scanner
scripts.base.protocols.sip.junk
scripts.base.protocols.sip.wireshark
scripts.base.protocols.smb.compression-cap
scripts.base.protocols.smb.raw-ntlm
scripts.base.protocols.smb.smb1 Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.smb.smb1-OSS-fuzz-54883 Analyzer failure logging: tweaks and test fixes 2025-06-03 15:56:42 +01:00
scripts.base.protocols.smb.smb1-transaction-dcerpc
scripts.base.protocols.smb.smb1-transaction-request
scripts.base.protocols.smb.smb1-transaction-response
scripts.base.protocols.smb.smb1-transaction-secondary-request
scripts.base.protocols.smb.smb1-transaction2-request
scripts.base.protocols.smb.smb1-transaction2-secondary-request
scripts.base.protocols.smb.smb2 Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.smb.smb2-create-delete-on-close Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.smb.smb2-fscontrol Update btest baselines to reflect the use of local address ranges. 2023-03-15 17:11:04 -07:00
scripts.base.protocols.smb.smb2-max-pending-messages Allow SMB_TCP record to contain multiple protocol identifiers/headers 2024-04-22 15:55:25 -07:00
scripts.base.protocols.smb.smb2-multiple-pdus Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.smb.smb2-read-write Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.smb.smb2-write-response
scripts.base.protocols.smb.smb2-zero-byte-error-ioctl Fix handling of zero-length SMB2 error responses 2024-07-24 12:44:46 -07:00
scripts.base.protocols.smb.smb3
scripts.base.protocols.smb.smb3-multichannel Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.smb.smb3-negotiate-context
scripts.base.protocols.smb.smb311 Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.smtp.attachment Update btest baselines to reflect the use of local address ranges. 2023-03-15 17:11:04 -07:00
scripts.base.protocols.smtp.attachment-msg
scripts.base.protocols.smtp.basic
scripts.base.protocols.smtp.bdat smtp: Fix last_reply column in smtp.log for BDAT LAST 2025-06-06 10:40:49 +02:00
scripts.base.protocols.smtp.bdat-0-last smtp: Fix last_reply column in smtp.log for BDAT LAST 2025-06-06 10:40:49 +02:00
scripts.base.protocols.smtp.bdat-chunk-size-overflow btest/smtp/bdat: Move tests into proper directory 2024-01-23 21:49:50 +01:00
scripts.base.protocols.smtp.bdat-chunk-size-overflow2 btest/smtp/bdat: Move tests into proper directory 2024-01-23 21:49:50 +01:00
scripts.base.protocols.smtp.bdat-cmd-invalid BDAT: Harden parse_bdat_arg() 2024-01-23 21:49:50 +01:00
scripts.base.protocols.smtp.bdat-multipart smtp: Fix last_reply column in smtp.log for BDAT LAST 2025-06-06 10:40:49 +02:00
scripts.base.protocols.smtp.bdat-multipart-chunked smtp: Fix last_reply column in smtp.log for BDAT LAST 2025-06-06 10:40:49 +02:00
scripts.base.protocols.smtp.bdat-negative-chunk-size btest/smtp/bdat: Move tests into proper directory 2024-01-23 21:49:50 +01:00
scripts.base.protocols.smtp.bdat-pipeline-8bitmime smtp: Fix last_reply column in smtp.log for BDAT LAST 2025-06-06 10:40:49 +02:00
scripts.base.protocols.smtp.mail-transactions-invalid smtp: Validate mail transaction and disable SMTP analyzer if excessive 2023-03-27 18:41:47 +02:00
scripts.base.protocols.smtp.mail-transactions-invalid-disable-analyzer smtp: Validate mail transaction and disable SMTP analyzer if excessive 2023-03-27 18:41:47 +02:00
scripts.base.protocols.smtp.mime-all-headers-event
scripts.base.protocols.smtp.one-side
scripts.base.protocols.smtp.starttls Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.snap.snap-arp Remove non-standard way of forwarding out of the Ethernet analyzer 2023-04-25 12:29:55 -07:00
scripts.base.protocols.snap.snap-cdp Make SNAP analyzer use both OUI and protocol for forwarding 2025-03-24 15:20:50 -07:00
scripts.base.protocols.snap.snap-tcp Add test for TCP over 802.3/SNAP 2024-10-31 14:37:44 +00:00
scripts.base.protocols.snmp.snmp-addr
scripts.base.protocols.snmp.v1 btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.snmp.v2 btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.snmp.v3 btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.socks.socks-auth
scripts.base.protocols.socks.socks-auth-2
scripts.base.protocols.socks.socks-auth-10080 socks/dpd: Fix socks5_server side signature 2023-06-05 13:54:47 +02:00
scripts.base.protocols.socks.trace1
scripts.base.protocols.socks.trace2
scripts.base.protocols.socks.trace3
scripts.base.protocols.ssh.basic Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.base.protocols.ssh.curve25519_kex
scripts.base.protocols.ssh.fingerprints
scripts.base.protocols.ssh.half-duplex-client Analyzer failure logging: tweaks and test fixes 2025-06-03 15:56:42 +01:00
scripts.base.protocols.ssh.half-duplex-server Settle on analyzer.log for the dpd.log replacement 2025-06-03 17:33:36 +01:00
scripts.base.protocols.ssh.http-port-22 Analyzer failure logging: tweaks and test fixes 2025-06-03 15:56:42 +01:00
scripts.base.protocols.ssh.one-auth-fail-only
scripts.base.protocols.ssh.pre-banner SSH: make banner parsing more robust 2025-03-18 16:19:33 +00:00
scripts.base.protocols.ssh.set_version btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.ssh.ssh-reverse-connection Added several events for detailed info on the SSH2 key init directions 2022-12-05 12:35:05 +01:00
scripts.base.protocols.ssh.ssh_dh_gex_direction Added several events for detailed info on the SSH2 key init directions 2022-12-05 12:35:05 +01:00
scripts.base.protocols.ssh.ssh_segmented_encryption_transition
scripts.base.protocols.ssh.ssh_version_199
scripts.base.protocols.ssl.basic Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.ssl.certificate_request SSL/TLS: Parse CertificateRequest message 2023-03-09 09:12:29 +01:00
scripts.base.protocols.ssl.common_name
scripts.base.protocols.ssl.comp_methods
scripts.base.protocols.ssl.cve-2015-3194
scripts.base.protocols.ssl.dhe
scripts.base.protocols.ssl.dpd Fix parsing of version field in SSLv2 client hello 2024-08-22 13:14:24 +01:00
scripts.base.protocols.ssl.dtls Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.ssl.dtls-13 btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.ssl.dtls-no-dtls
scripts.base.protocols.ssl.dtls-stun-dpd Settle on analyzer.log for the dpd.log replacement 2025-06-03 17:33:36 +01:00
scripts.base.protocols.ssl.ecdhe Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.ssl.ecdsa Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.ssl.fragment
scripts.base.protocols.ssl.handshake-events
scripts.base.protocols.ssl.keyexchange Make ssl_history work for SSLv2 handshakes/connections 2024-08-13 18:03:06 +01:00
scripts.base.protocols.ssl.max-history-length ssl: Prevent unbounded ssl_history growth 2023-10-25 09:35:45 +02:00
scripts.base.protocols.ssl.ocsp-http-get Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.ssl.ocsp-request-only
scripts.base.protocols.ssl.ocsp-request-response Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.ssl.ocsp-response-only Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.ssl.ocsp-revoked Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.ssl.ocsp-stapling
scripts.base.protocols.ssl.prevent-disable-analyzer btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.ssl.session-ticket Only pass session ticket data in ssl_session_ticket_handshake event 2025-06-24 16:33:14 +01:00
scripts.base.protocols.ssl.signed_certificate_timestamp
scripts.base.protocols.ssl.tls-1.2 Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.ssl.tls-1.2-ciphers
scripts.base.protocols.ssl.tls-1.2-handshake-failure
scripts.base.protocols.ssl.tls-1.2-random
scripts.base.protocols.ssl.tls-extension-events
scripts.base.protocols.ssl.tls-protocol-violation SSL: do not try to disable failed analyzer 2023-05-03 11:16:14 +01:00
scripts.base.protocols.ssl.tls1_1 Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.ssl.tls13 btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.ssl.tls13-encrypted-client-hello SSL: Add new extension types and ECH test 2023-10-30 14:19:16 +00:00
scripts.base.protocols.ssl.tls13-experiment
scripts.base.protocols.ssl.tls13-version
scripts.base.protocols.ssl.tls13_encrypted_handshake_events btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.ssl.x509-invalid-extension
scripts.base.protocols.ssl.x509_extensions
scripts.base.protocols.syslog.missing-pri Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.syslog.trace
scripts.base.protocols.tcp.krb-tcp-tso Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.protocols.tcp.pending btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.tcp.timestamp
scripts.base.protocols.websocket.broker-websocket Make conn.log service field ordered 2025-01-30 16:59:44 +00:00
scripts.base.protocols.websocket.coalesced-reply-ping websocket: Address review feedback for BinPac code 2024-01-22 18:54:41 +01:00
scripts.base.protocols.websocket.events btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.base.protocols.websocket.fragmented-http-reply websocket: Fix opcode for continuation frames 2024-01-24 22:57:24 +01:00
scripts.base.protocols.websocket.jupyter-websocket Make conn.log service field ordered 2025-01-30 16:59:44 +00:00
scripts.base.protocols.websocket.key-accept-wrong websocket: Verify Sec-WebSocket-Key/Accept headers and review feedback 2024-01-22 18:54:38 +01:00
scripts.base.protocols.websocket.wstunnel-http Make conn.log service field ordered 2025-01-30 16:59:44 +00:00
scripts.base.protocols.websocket.wstunnel-https Make conn.log service field ordered 2025-01-30 16:59:44 +00:00
scripts.base.protocols.websocket.wstunnel-ssh Make conn.log service field ordered 2025-01-30 16:59:44 +00:00
scripts.base.protocols.websocket.wstunnel-ssh-configure Make conn.log service field ordered 2025-01-30 16:59:44 +00:00
scripts.base.protocols.websocket.wstunnel-ssh-configure-break websocket: Handle breaking from WebSocket::configure_analyzer() 2024-01-22 18:54:41 +01:00
scripts.base.protocols.websocket.wstunnel-ssh-configure-wrong Make conn.log service field ordered 2025-01-30 16:59:44 +00:00
scripts.base.protocols.websocket.wstunnel-ssh-disabled Merge remote-tracking branch 'origin/topic/awelzel/3424-http-upgrade-websocket-v1' 2024-01-23 18:17:50 +01:00
scripts.base.protocols.websocket.wstunnel-ssh-spicy Make conn.log service field ordered 2025-01-30 16:59:44 +00:00
scripts.base.protocols.xmpp.client-dpd
scripts.base.protocols.xmpp.server-dialback-dpd
scripts.base.protocols.xmpp.starttls Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.base.utils.active-http
scripts.base.utils.addrs Add is_valid_subnet BiF 2025-03-18 20:25:32 -07:00
scripts.base.utils.conn-ids
scripts.base.utils.decompose_uri
scripts.base.utils.dir
scripts.base.utils.directions-and-hosts Update btest baselines to reflect the use of local address ranges. 2023-03-15 17:11:04 -07:00
scripts.base.utils.email UPDATED: improving email address splitting for common comma case 2022-08-05 17:38:54 -04:00
scripts.base.utils.exec
scripts.base.utils.files {http,smtp}/entities: Align header regexes with extract_filename_from_content_disposition() 2022-11-08 16:45:25 -07:00
scripts.base.utils.hash_hrw Improvements in FNV1A hash functions 2024-10-22 16:07:12 +02:00
scripts.base.utils.json Change all instruments to only handle doubles 2024-05-31 13:36:37 -07:00
scripts.base.utils.json-roundtrip Add interval_as_double argument to control how intervals are converted to JSON 2024-12-03 09:26:08 -07:00
scripts.base.utils.numbers
scripts.base.utils.packages utils: Introduce packages.zeek with can_load() helper 2024-02-22 11:41:50 +01:00
scripts.base.utils.paths
scripts.base.utils.pattern
scripts.base.utils.queue
scripts.base.utils.site GH-2319: Add change handlers to Site 2022-08-05 16:17:50 +02:00
scripts.base.utils.site-defaults Add btests for new Site::local_nets behavior 2023-03-15 17:11:08 -07:00
scripts.base.utils.site-defaults-2 Add btests for new Site::local_nets behavior 2023-03-15 17:11:08 -07:00
scripts.base.utils.site-defaults-3 Add btests for new Site::local_nets behavior 2023-03-15 17:11:08 -07:00
scripts.base.utils.site-defaults-4 Add btests for new Site::local_nets behavior 2023-03-15 17:11:08 -07:00
scripts.base.utils.site-defaults-5 Add btests for new Site::local_nets behavior 2023-03-15 17:11:08 -07:00
scripts.base.utils.site-defaults-6 Add btests for new Site::local_nets behavior 2023-03-15 17:11:08 -07:00
scripts.base.utils.site-defaults-7 Add btests for new Site::local_nets behavior 2023-03-15 17:11:08 -07:00
scripts.base.utils.site-defaults-8 Add btests for new Site::local_nets behavior 2023-03-15 17:11:08 -07:00
scripts.base.utils.site-defaults-9 Add btests for new Site::local_nets behavior 2023-03-15 17:11:08 -07:00
scripts.base.utils.strings strings: Implement join_string_set() as bif 2022-09-20 23:07:26 +02:00
scripts.base.utils.thresholds
scripts.base.utils.urls
scripts.check-test-all-policy Update btest baselines to reflect the use of local address ranges. 2023-03-15 17:11:04 -07:00
scripts.policy.frameworks.analyzer.logging-debug Analyzer failure logging: tweaks and test fixes 2025-06-03 15:56:42 +01:00
scripts.policy.frameworks.analyzer.packet-segment-logging Settle on analyzer.log for the dpd.log replacement 2025-06-03 17:33:36 +01:00
scripts.policy.frameworks.cluster.cluster_started btest/policy: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.policy.frameworks.cluster.cluster_started_logger btest/policy: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.policy.frameworks.cluster.cluster_started_restart_manager Add cluster_started restart tests. 2023-04-21 19:04:52 +02:00
scripts.policy.frameworks.cluster.cluster_started_restart_worker Add cluster_started restart tests. 2023-04-21 19:04:52 +02:00
scripts.policy.frameworks.conn_key.vlan_fivetuple Add a VLAN-aware flow tuple implementation. 2025-06-25 13:19:26 +02:00
scripts.policy.frameworks.conn_key.vlan_fivetuple-2 ip/vlan_fivetuple: Populate nested conn_id_context, not conn_id 2025-07-03 18:19:46 +02:00
scripts.policy.frameworks.conn_key.vlan_fivetuple-3 Add a VLAN-aware flow tuple implementation. 2025-06-25 13:19:26 +02:00
scripts.policy.frameworks.conn_key.vlan_fivetuple-4 ip/vlan_fivetuple: Populate nested conn_id_context, not conn_id 2025-07-03 18:19:46 +02:00
scripts.policy.frameworks.conn_key.vlan_fivetuple-5 ip/vlan_fivetuple: Populate nested conn_id_context, not conn_id 2025-07-03 18:19:46 +02:00
scripts.policy.frameworks.conn_key.vlan_fivetuple-6 ip/vlan_fivetuple: Populate nested conn_id_context, not conn_id 2025-07-03 18:19:46 +02:00
scripts.policy.frameworks.conn_key.vlan_fivetuple_conn_id_ctx_usage ip/vlan_fivetuple: Populate nested conn_id_context, not conn_id 2025-07-03 18:19:46 +02:00
scripts.policy.frameworks.conn_key.vlan_fivetuple_conn_id_ctx_usage-2 ip/vlan_fivetuple: Populate nested conn_id_context, not conn_id 2025-07-03 18:19:46 +02:00
scripts.policy.frameworks.conn_key.vlan_fivetuple_lookup_connection ip/vlan_fivetuple: Populate nested conn_id_context, not conn_id 2025-07-03 18:19:46 +02:00
scripts.policy.frameworks.dpd.packet-segment-logging Introduce generic analyzer_confirmation_info and analyzer_violation_info 2022-09-27 17:49:51 +02:00
scripts.policy.frameworks.intel.removal
scripts.policy.frameworks.intel.seen.certs
scripts.policy.frameworks.intel.seen.filename-in-http-get-response intel/seen/file-names: Use file_over_new_connection() 2023-01-10 10:10:28 +01:00
scripts.policy.frameworks.intel.seen.filename-in-http-post intel/seen/file-names: Use file_over_new_connection() 2023-01-10 10:10:28 +01:00
scripts.policy.frameworks.intel.seen.manage-event-groups.basic-smtp intel/seen/manage-event-groups: Policy script for toggling intel event groups 2025-06-02 09:51:14 +02:00
scripts.policy.frameworks.intel.seen.smb performance speed-up for SMB base scripts 2024-04-25 09:15:12 -07:00
scripts.policy.frameworks.intel.seen.smtp
scripts.policy.frameworks.intel.seen.smtp-cluster btest/policy: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.policy.frameworks.intel.whitelisting
scripts.policy.frameworks.management.controller.agent-checkin
scripts.policy.frameworks.netcontrol.catch-and-release Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.policy.frameworks.netcontrol.catch-and-release-2 Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.policy.frameworks.netcontrol.catch-and-release-forgotten Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.policy.frameworks.netcontrol.catch-and-release-two-plugins Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.policy.frameworks.netcontrol.catch-and-release-two-plugins-2 Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.policy.frameworks.notice.community-id policy/community-id: Populate conn$community_id in new_connection() 2024-11-08 18:19:55 +01:00
scripts.policy.frameworks.notice.extend-email.hostnames Merge remote-tracking branch 'origin/topic/jazoff/gh-3268t ' 2023-09-04 14:01:23 +02:00
scripts.policy.frameworks.software.version-changes
scripts.policy.frameworks.software.vulnerable
scripts.policy.frameworks.telemetry.log misc/stats: Add zeek_net_timestamp_seconds 2024-10-22 18:49:17 +02:00
scripts.policy.frameworks.telemetry.log-prefixes Remove prefix column from telemetry.log 2024-06-04 14:14:58 -07:00
scripts.policy.frameworks.telemetry.prometheus telemetry: Rename endpoint label to node label 2025-06-25 09:33:01 +02:00
scripts.policy.misc.capture-loss GH-163: Use ID name (including module name) to create EventExpr when possible 2022-08-17 13:15:01 -07:00
scripts.policy.misc.dump-events SMTP: Adapt scripts for enable_rfc822_msg_file_analysis 2025-07-16 12:37:33 +02:00
scripts.policy.misc.stats
scripts.policy.misc.weird-stats
scripts.policy.misc.weird-stats-cluster btest/policy: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
scripts.policy.protocols.conn.community-id-logging policy: Import zeek-community-id scripts into protocols/conn frameworks/notice 2023-04-24 09:43:19 +02:00
scripts.policy.protocols.conn.community-id-logging-flipped policy/community-id: Populate conn$community_id in new_connection() 2024-11-08 18:19:55 +01:00
scripts.policy.protocols.conn.ip-proto-name-logging Add btests for ip_proto policy files 2024-11-15 16:49:10 -07:00
scripts.policy.protocols.conn.known-hosts
scripts.policy.protocols.conn.known-services Modify known-services policy script to add storage framework support 2025-07-10 08:55:01 -07:00
scripts.policy.protocols.conn.known-services-multi
scripts.policy.protocols.conn.mac-logging Update btests for new local-only subnets 2025-01-09 22:16:42 -07:00
scripts.policy.protocols.conn.speculative-service Update btests for new local-only subnets 2025-01-09 22:16:42 -07:00
scripts.policy.protocols.conn.vlan-logging Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
scripts.policy.protocols.dns.detect-external-names-mdns-broadcast IPv6 support for detect-external-names and testcase 2025-02-04 17:34:43 +00:00
scripts.policy.protocols.dns.detect-external-names-mdns-broadcast-2 IPv6 support for detect-external-names and testcase 2025-02-04 17:34:43 +00:00
scripts.policy.protocols.dns.original_case dns: Remove AD and CD flags from log 2023-03-16 10:09:27 +01:00
scripts.policy.protocols.ftp.ftp ftp/main: Skip get_pending_command() for intermediate reply lines 2023-03-23 13:50:36 +01:00
scripts.policy.protocols.http.flash-version
scripts.policy.protocols.http.header-names
scripts.policy.protocols.http.sql-injection-plus-dvwa btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.policy.protocols.http.sql-injection-plus-dvwa2 btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
scripts.policy.protocols.http.test-sql-injection-regex
scripts.policy.protocols.krb.ticket-logging
scripts.policy.protocols.ssh.detect-bruteforcing
scripts.policy.protocols.ssl.certificate-request-info SSL/TLS: Parse CertificateRequest message 2023-03-09 09:12:29 +01:00
scripts.policy.protocols.ssl.decryption
scripts.policy.protocols.ssl.expiring-certs
scripts.policy.protocols.ssl.heartbleed
scripts.policy.protocols.ssl.known-certs Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.policy.protocols.ssl.log-certs-base64 Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.policy.protocols.ssl.log-hostcerts-only Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
scripts.policy.protocols.ssl.ssl-log-ext Fix parsing of version field in SSLv2 client hello 2024-08-22 13:14:24 +01:00
scripts.policy.protocols.ssl.validate-certs
scripts.policy.protocols.ssl.validate-certs-no-cache
scripts.policy.protocols.ssl.validate-ocsp
scripts.policy.protocols.ssl.validate-sct
scripts.policy.protocols.ssl.weak-keys
signatures.bad-eval-condition rule-parse: Remove [event_name] syntax, deprecate msg as identifier 2023-12-14 10:16:35 +01:00
signatures.custom-event btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
signatures.custom-event-errors signatures: Add data_end_offset to signature_match() and custom events 2024-10-30 13:29:58 +01:00
signatures.dpd btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
signatures.dst-ip-cidr-v4
signatures.dst-ip-header-condition-v4 btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
signatures.dst-ip-header-condition-v4-masks btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
signatures.dst-ip-header-condition-v6 btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
signatures.dst-ip-header-condition-v6-masks btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
signatures.dst-port-header-condition btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
signatures.eval-condition Rename protocol_id field to ip_proto and similar renaming for name field 2024-11-13 12:02:00 -07:00
signatures.eval-condition-no-return-value
signatures.header-header-condition btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
signatures.http-body-match Test how the signature framework matches HTTP body 2023-11-03 15:28:15 +01:00
signatures.id-lookup btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
signatures.ip-proto-header-condition btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
signatures.load-sigs btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
signatures.signature-cond-used Add is_used attribute to an ID if used in a signature eval statement 2022-08-31 14:58:23 -07:00
signatures.signature-cond-used-twice Attr: Duplicated &is_used is allowed 2022-12-02 17:15:05 +01:00
signatures.src-ip-header-condition-v4 btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
signatures.src-ip-header-condition-v4-masks btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
signatures.src-ip-header-condition-v6 btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
signatures.src-ip-header-condition-v6-masks btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
signatures.src-port-header-condition btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
signatures.tcp-end-of-match Order rule traversal in RuleMatcher::Match() operations by Rule index 2024-11-18 09:45:09 -08:00
signatures.tcp-end-of-match-2 signatures: Add data_end_offset to signature_match() and custom events 2024-10-30 13:29:58 +01:00
signatures.tcp-syn-with-payload btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
signatures.udp-end-of-match btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
signatures.udp-packetwise-insensitive
signatures.udp-packetwise-match
signatures.udp-payload-size
signatures.udp-state btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
spicy.analyzer-id Add spicy runtime-support current_analyzer_id(), use it to set id in events 2024-12-18 15:44:09 -07:00
spicy.analyzer-tag Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.conn-id Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.context Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.decline_input Analyzer failure logging: tweaks and test fixes 2025-06-03 15:56:42 +01:00
spicy.decline_input-2 Analyzer failure logging: tweaks and test fixes 2025-06-03 15:56:42 +01:00
spicy.dns Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.double-event Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.double-types Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.event-args Bump Spicy to current main. 2024-01-29 09:59:46 +01:00
spicy.event-args-fail Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.event-args-fail-2 Port Spicy integration to new AST API. 2024-03-04 15:48:39 +01:00
spicy.event-args-fail-3 Port Spicy integration to new AST API. 2024-03-04 15:48:39 +01:00
spicy.event-args-fail-4 Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.event-args-fail-5 Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.event-args-fail-6 Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.event-args-mismatch Spicy: Rework code for converting Spicy values to Zeek values. 2025-04-02 17:45:19 +02:00
spicy.event-cond Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.event-unit-type-fail Spicy: Improve error messages reporting malformed unit names in EVT files. 2024-11-08 13:44:09 +01:00
spicy.event-unit-type-fail-2 Spicy: Improve error messages reporting malformed unit names in EVT files. 2024-11-08 13:44:09 +01:00
spicy.event-unit-type-fail-3 Spicy: Improve error messages reporting malformed unit names in EVT files. 2024-11-08 13:44:09 +01:00
spicy.event-user-type Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.export-bitfield Spicy: Fix support for exporting bitfields. 2023-09-21 09:55:12 +02:00
spicy.export-enum Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.export-protocol-enum Spicy: Map Spicy's Protocol enum to Zeek's transport_proto. 2024-04-29 08:38:53 +02:00
spicy.export-switch [Spicy] Support switch fields when exporting Spicy types to Zeek. 2023-07-06 08:40:54 +02:00
spicy.export-type-ambigious-fail [Spicy] Extend functionality of export in EVT files. 2023-08-21 10:26:25 +02:00
spicy.export-type-e2e Fix disappearing unit fields in Spicy type export. 2023-05-26 11:37:23 +02:00
spicy.export-type-fail Port Spicy integration to new AST API. 2024-03-04 15:48:39 +01:00
spicy.export-type-with-fields [Spicy] Extend functionality of export in EVT files. 2023-08-21 10:26:25 +02:00
spicy.export-type-with-fields-fail Port Spicy integration to new AST API. 2024-03-04 15:48:39 +01:00
spicy.export-types Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.file-analysis-data-in Spicy: Query Zeek scriptland for file handles. 2024-05-06 09:20:38 +02:00
spicy.file-analysis-data-in-concurrent Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.file-analyzer Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.file-analyzer-nested Move the options from policy/tuning/defaults to actual Zeek defaults, deprecate that package 2024-05-06 11:13:04 -07:00
spicy.file-analyzer-property Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.file-data-in-at-offset Spicy: Query Zeek scriptland for file handles. 2024-05-06 09:20:38 +02:00
spicy.file-replaces Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.gap-recovery Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.get-values Spicy: Provide runtime API to access Zeek-side globals. 2024-06-20 12:02:54 +02:00
spicy.hook-priority Test .evt file &priority 2024-10-14 08:51:58 -04:00
spicy.import-from Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.list-conversion btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
spicy.module-path Do not automatically load Spicy modules in dot paths. 2023-09-26 11:56:52 +02:00
spicy.multiple-enum Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.network-time Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.optional Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.packet-analyzer Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.packet-analyzer-on-ip Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.packet-analyzer-replaces Fix packet analyzer replacement. 2024-05-06 09:45:11 +02:00
spicy.packet-analyzer-violation Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.parse-error Settle on analyzer.log for the dpd.log replacement 2025-06-03 17:33:36 +01:00
spicy.port Spicy: Register well-known ports through an event handler. 2024-08-22 10:24:55 +02:00
spicy.port-fail Spicy: Register well-known ports through an event handler. 2024-08-22 10:24:55 +02:00
spicy.port-fail-2 Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.port-fail-3 Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.port-fail-4 Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.port-fail-5 Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.port-range-one-port Make ports for LDAP analyzers fully configurable 2023-10-10 18:28:13 +02:00
spicy.preprocessor Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.preprocessor-fail Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.preprocessor-fail-2 Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.preprocessor-fail-3 Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.preprocessor-fail-4 Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.preprocessor-fail-5 Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.preprocessor-fail-6 Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.preprocessor-fail-7 Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.preprocessor-spicy Spicy: Port over to Spicy's new tuple representation. 2025-04-02 14:14:26 +02:00
spicy.profiling btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
spicy.protocol-analyzer-data-in Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.protocol-analyzer-data-in-from-tcp-to-udp Spicy: Support UDP in Spicy's protocol_* runtime functions. 2024-05-07 18:19:46 +02:00
spicy.protocol-analyzer-data-in-udp Spicy: Support UDP in Spicy's protocol_* runtime functions. 2024-05-07 18:19:46 +02:00
spicy.protocol-analyzer-explicit-forwarding Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.protocol-analyzer-tcp-over-udp Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.replaces btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
spicy.replaces-conflicts btest/spicy: Make replaces-conflicts trigger replaces code path 2024-08-06 11:52:52 +02:00
spicy.replaces-conflicts-2 Spicy: Disallow repeating replacements of the same analyzer. 2024-06-14 13:10:47 +02:00
spicy.replaces-conflicts-3 Spicy: Disallow repeating replacements of the same analyzer. 2024-06-14 13:10:47 +02:00
spicy.replaces-mismatch Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.resource-usage Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.reuse-parser-across-hltos Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.skip-input-file Spicy: Provide zeek::skip_input() to disable deliver to current analyzer. 2023-11-09 10:43:49 +01:00
spicy.skip-input-protocol Spicy: Provide zeek::skip_input() to disable deliver to current analyzer. 2023-11-09 10:43:49 +01:00
spicy.spicy-dump
spicy.spicyz Provide infrastructure to migrate legacy analyzers to Spicy. 2023-02-01 11:33:48 +01:00
spicy.ssh-banner btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
spicy.tcp-eod-behavior Analyzer failure logging: tweaks and test fixes 2025-06-03 15:56:42 +01:00
spicy.tcp-eod-behavior-child [Spicy] Let zeek::protocol_handle_close() send a TCP EOF. 2025-07-09 17:28:19 +02:00
spicy.tcp-eod-behavior-on-destroy Bump Spicy to pull in fix. 2025-05-28 15:50:47 +02:00
spicy.terminate-session Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.toggle-protocol-analyzer btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
spicy.tuple-arg Spicy: Port over to Spicy's new tuple representation. 2025-04-02 14:14:26 +02:00
spicy.tuple-enum Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.tuple-optional Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
spicy.type-converter btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
spicy.udp btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
spicy.zeekygen spicy/manager: Ensure Zeekygen knows identifier for registered types 2023-10-11 13:31:20 +02:00
spicy.zeekygen-enum-zeek-side spicy/manager: Ensure Zeekygen knows identifier for registered types 2023-10-11 13:31:20 +02:00
supervisor.config-bare-mode
supervisor.config-cluster
supervisor.config-cluster-leftover-log-archival
supervisor.config-cluster-log-archival
supervisor.config-cluster-multi-logger cluster/supervisor: Multi-logger awareness 2023-05-05 12:27:25 +02:00
supervisor.config-cluster-pcap Add pcap_file option to supervised nodes. 2023-03-21 16:18:02 +01:00
supervisor.config-directory
supervisor.config-env
supervisor.config-output-redirect
supervisor.config-scripts Remove Supervisor::NodeConfig (6.1 deprecation) 2023-06-14 10:07:22 -07:00
supervisor.create
supervisor.create-interface-pcap-file-error Add pcap_file option to supervised nodes. 2023-03-21 16:18:02 +01:00
supervisor.destroy
supervisor.large-cluster Remove deprecated Cluster::Node::interface field 2024-08-07 11:58:22 -07:00
supervisor.node_status
supervisor.output-redirect
supervisor.output-redirect-hook
supervisor.restart
supervisor.revive-leaf
supervisor.revive-stem
supervisor.status
telemetry.counter Change all instruments to only handle doubles 2024-05-31 13:36:37 -07:00
telemetry.gauge Change all instruments to only handle doubles 2024-05-31 13:36:37 -07:00
telemetry.histogram Change all instruments to only handle doubles 2024-05-31 13:36:37 -07:00
save-load-seeds.zeek cluster/zeromq: Fix node_topic() and nodeid_topic() 2025-03-24 18:36:26 +01:00