zeek/testing
Arne Welzel 629069f1b6 Conn/ConnSize/IPBasedAnalyzer: Keep connection record values up-to-date
This change ensures that a connection record in script-land is kept
current by setting the duration and history fields as well as any
analyzer controlled fields (endpoint fields by ConnSize analyzer) to
their most recent values even if no event was raised.

This writes various RecordVal fields for every packet, rather than
delaying until needed. The assumption here is that using fixed array
offsets and non-Val types is efficient enough and we don't need to
come up with anything more complicated.

Closes #4214 #4786
2025-08-25 13:34:35 +02:00
..
benchmark/broker
btest Conn/ConnSize/IPBasedAnalyzer: Keep connection record values up-to-date 2025-08-25 13:34:35 +02:00
builtin-plugins CI: Add external plugins to builtin plugins task 2025-03-31 14:19:18 +02:00
coverage Swap pre-commit yapf for ruff/ruff-format, fix findings 2024-12-11 11:08:37 -07:00
external Merge branch 'master' of https://github.com/blightzero/zeek 2025-08-18 13:14:34 +02:00
scripts Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
.gitignore
CMakeLists.txt
Makefile
README

This directory contains suites for testing for Zeek's correct
operation:

    btest/
        An ever-growing set of small unit tests testing Zeek's
        functionality.

    external/
        A framework for downloading additional test sets that run more
        complex Zeek configuration on larger traces files. Due to their
        size, these are not included directly. See the README for more
        information. 

    scripts/
        Helpers scripts used by some tests.