zeek/scripts/base
Jon Siwek 51e738a1c0 GH-998: Fix Reporter::conn_weird() to handle expired connections
This introduces a new sampling state-map for expired connections to fix
segfaults that previously occured when passing in a `connection` record
to `Reporter::conn_weird()` for which the internal `Connection` object
had already been expired and deleted.  This also introduces a new event
called `expired_conn_weird`, which is similar to `conn_weird`, except
the full `connection` record is no longer available, just the `conn_id`
and UID string.
2020-06-15 12:57:47 -07:00
..
files X509 caching API change: callback gets entry directly 2020-03-12 11:31:13 -07:00
frameworks GH-998: Fix Reporter::conn_weird() to handle expired connections 2020-06-15 12:57:47 -07:00
misc GH-545: add "addl" parameter to flow_weird and net_weird events 2019-08-20 22:45:22 -04:00
protocols Merge branch 'add_bzar_dce_rpc_consts' of https://github.com/ct-square/zeek 2020-05-26 22:04:33 +00:00
utils Merge remote-tracking branch 'origin/topic/timw/906-find-all-urls-regex' 2020-05-13 15:05:54 -07:00
init-bare.zeek Deprecate internal_handler(), replace with EventRegistry::Register() 2020-05-14 17:25:02 -07:00
init-default.zeek MQTT Analyzer heavily updated and ported from the analyzer originally by Supriya Kumar 2019-07-29 13:45:10 -04:00
init-frameworks-and-bifs.zeek Add Supervisor BIF/event API skeleton 2019-10-15 12:59:45 -07:00