Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 06:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1
zeek/src
History
Arne Welzel 2c8b97c522 NTP: Detect out-of-order packets 
The NTP mode provides us with the identity of the endpoints. For the
simple CLIENT / SERVER modes, flip the connection if we detect
orig/resp disagreeing with what the message says. This mainly
results in the history getting a ^ and the ntp.log / conn.log
showing the corrected endpoints.

Closes #2998.
2023-05-04 19:44:02 +02:00
..
3rdparty@410ada8bbe Update SQLite to 3.41.2 2023-05-03 14:22:08 +01:00
analyzer NTP: Detect out-of-order packets 2023-05-04 19:44:02 +02:00
broker Remove references to bro_broker in broker/Manager.h 2023-04-24 15:21:09 -07:00
file_analysis Use workaround for setvbuf on Windows in DebugLogger/Extract file analyzer 2023-05-02 10:28:50 -07:00
fuzzers Redesign subdir-libs and plugin scaffolding 2023-04-13 22:23:46 +02:00
include Creating a symlink src/include/zeek -> src/ 2022-11-09 18:16:13 +02:00
input Redesign subdir-libs and plugin scaffolding 2023-04-13 22:23:46 +02:00
iosource pcap/Source: Allow more than 32bit for link and dropped stats 2023-04-28 09:59:26 +02:00
logging Merge remote-tracking branch 'origin/topic/vern/record-optimizations.Apr23B' 2023-04-19 11:59:56 +02:00
packet_analysis Add additional length check to IEEE 802.11 analyzer 2023-05-02 16:12:43 -07:00
plugin dlclose() handle if the library loaded wasn't a plugin 2023-03-13 08:08:40 -07:00
probabilistic Redesign subdir-libs and plugin scaffolding 2023-04-13 22:23:46 +02:00
script_opt file_analysis/Manager: Remove RunState.h include 2023-04-19 15:53:33 +02:00
session Redesign subdir-libs and plugin scaffolding 2023-04-13 22:23:46 +02:00
supervisor Add pcap_file option to supervised nodes. 2023-03-21 16:18:02 +01:00
telemetry Redesign subdir-libs and plugin scaffolding 2023-04-13 22:23:46 +02:00
threading Redesign subdir-libs and plugin scaffolding 2023-04-13 22:23:46 +02:00
zeekygen Redesign subdir-libs and plugin scaffolding 2023-04-13 22:23:46 +02:00
Anon.cc Fix/simplify some if statement comparisons 2023-01-27 13:03:19 -07:00
Anon.h Replace most uses of typedef with using for type aliasing 2021-10-11 14:51:10 -07:00
Attr.cc Tame error reporting and abort() for undefined types 2023-01-26 20:05:02 +01:00
Attr.h Add &ordered attribute for tables/sets 2022-10-16 15:31:42 -07:00
Base64.cc Base64: report byte as positive integer 2023-02-02 15:49:22 +01:00
Base64.h clang-format: Force zeek-config.h to be earlier in the config ordering 2021-09-25 11:52:55 -07:00
BifReturnVal.cc Reformat the world 2021-09-16 15:35:39 -07:00
BifReturnVal.h clang-format: Force zeek-config.h to be earlier in the config ordering 2021-09-25 11:52:55 -07:00
binpac-lib.pac Code modernization: Convert from deprecated C standard library headers 2022-06-27 09:47:31 -07:00
binpac.pac
binpac_zeek-lib.pac Spelling src 2022-11-09 12:08:15 -05:00
binpac_zeek.h Add GTPv1 packet analyzer, disable old analyzer 2021-11-23 19:36:50 -07:00
CCL.cc Remove deprecated MemoryAllocation() methods and related code 2022-06-30 18:56:52 +00:00
CCL.h Remove deprecated MemoryAllocation() methods and related code 2022-06-30 18:56:52 +00:00
CMakeLists.txt Merge remote-tracking branch 'origin/topic/neverlord/gh-2806' 2023-04-27 13:23:14 +02:00
communityid.bif Add community_id_v1() based on corelight/zeek-community-id 2023-04-21 20:44:09 +02:00
CompHash.cc Fix a bunch of variable shadowing issues from LGTM 2022-11-02 15:54:51 -07:00
CompHash.h Spelling src 2022-11-09 12:08:15 -05:00
Conn.cc Spelling src 2022-11-09 12:08:15 -05:00
Conn.h Add missing field initializations for ConnTuple 2023-03-13 08:08:40 -07:00
const.bif RunState: Implement forward_network_time_if_applicable() 2023-03-23 12:40:39 +01:00
DbgBreakpoint.cc Code modernization: Convert from deprecated C standard library headers 2022-06-27 09:47:31 -07:00
DbgBreakpoint.h updated Bro->Zeek in comments in the source tree 2022-01-24 14:26:20 -08:00
DbgDisplay.h updated Bro->Zeek in comments in the source tree 2022-01-24 14:26:20 -08:00
DbgHelp.cc updated Bro->Zeek in comments in the source tree 2022-01-24 14:26:20 -08:00
DbgWatch.cc clang-format: Force zeek-config.h to be earlier in the config ordering 2021-09-25 11:52:55 -07:00
DbgWatch.h updated Bro->Zeek in comments in the source tree 2022-01-24 14:26:20 -08:00
Debug.cc Rename all of bro lexer methods and such 2022-07-12 12:01:23 -07:00
Debug.h Fix a bunch of missing class member initializations 2023-01-27 13:03:18 -07:00
DebugCmdInfoConstants.in Merge remote-tracking branch 'microsoft/master' 2022-11-11 15:23:21 -07:00
DebugCmds.cc Code modernization: Convert from deprecated C standard library headers 2022-06-27 09:47:31 -07:00
DebugCmds.h Code modernization: Convert from deprecated C standard library headers 2022-06-27 09:47:31 -07:00
DebugLogger.cc Use workaround for setvbuf on Windows in DebugLogger/Extract file analyzer 2023-05-02 10:28:50 -07:00
DebugLogger.h Merge remote-tracking branch 'microsoft/master' 2022-11-11 15:23:21 -07:00
Desc.cc Desc: Add obj_desc_short() 2023-04-04 16:05:08 +02:00
Desc.h Desc: Add obj_desc_short() 2023-04-04 16:05:08 +02:00
DFA.cc Fix sprintf warnings on macOS 2023-01-03 12:14:41 -07:00
DFA.h dfa: Remove transition_counter 2022-12-06 17:27:31 +01:00
Dict.cc Add support for itertors with ordered dictionaries 2022-10-10 10:08:58 -07:00
Dict.h A bunch of other minor issues reported by PVS-Studio 2023-01-27 13:03:52 -07:00
digest.cc Reformat the world 2021-09-16 15:35:39 -07:00
digest.h Spelling src 2022-11-09 12:08:15 -05:00
Discard.cc Change Packet::ip_hdr to be a shared_ptr so it can be copied into EncapsulatingConn 2021-11-23 19:36:49 -07:00
Discard.h Change Packet::ip_hdr to be a shared_ptr so it can be copied into EncapsulatingConn 2021-11-23 19:36:49 -07:00
DNS_Mapping.cc Clang format again but now with v13.0.1 2022-11-09 18:56:00 +02:00
DNS_Mapping.h Stop skipping expiration of empty DNS mappings 2023-03-23 09:50:37 -07:00
DNS_Mgr.cc get_dns_stats: Expose total cache size and cached text entries 2023-03-10 09:22:45 +01:00
DNS_Mgr.h get_dns_stats: Expose total cache size and cached text entries 2023-03-10 09:22:45 +01:00
EquivClass.cc clang-format: Force zeek-config.h to be earlier in the config ordering 2021-09-25 11:52:55 -07:00
EquivClass.h Reformat the world 2021-09-16 15:35:39 -07:00
event.bif Expand docstrings of file_new and file_over_new_connection events 2023-01-09 19:06:27 -08:00
Event.cc Event: No more network_time updates 2023-03-23 12:41:56 +01:00
Event.h Reformat the world 2021-09-16 15:35:39 -07:00
EventHandler.cc EventHandler: Use telemetry framework for EventHandler.call_count 2023-02-22 12:10:10 +01:00
EventHandler.h EventHandler: Use telemetry framework for EventHandler.call_count 2023-02-22 12:10:10 +01:00
EventLauncher.cc Minor fixes for build problems after reformatting 2021-09-16 15:36:09 -07:00
EventLauncher.h Minor fixes for build problems after reformatting 2021-09-16 15:36:09 -07:00
EventRegistry.cc EventRegistry/Func: Disable events when all bodies are disabled 2023-01-05 12:03:58 +01:00
EventRegistry.h Spelling src 2022-11-09 12:08:15 -05:00
EventTrace.cc EventTrace: take size_t as a constructor argument instead of int 2023-02-22 16:39:54 -07:00
EventTrace.h EventTrace: take size_t as a constructor argument instead of int 2023-02-22 16:39:54 -07:00
Expr.cc remove redundant record coercions 2023-04-10 11:42:48 -07:00
Expr.h changed function_ingredients struct to FunctionIngredients class with accessors 2023-04-02 11:34:16 -07:00
File.cc Use workaround for setvbuf on Windows in DebugLogger/Extract file analyzer 2023-05-02 10:28:50 -07:00
File.h Fix a bunch of missing class member initializations 2023-01-27 13:03:18 -07:00
Flare.cc Clang format again but now with v13.0.1 2022-11-09 18:56:00 +02:00
Flare.h Rewrote usages of define(_MSC_VER) to ifdef _MSC_VER 2022-11-09 18:56:00 +02:00
Frag.cc Remove deprecated MemoryAllocation() methods and related code 2022-06-30 18:56:52 +00:00
Frag.h Deprecate bro_int_t and bro_uint_t 2022-07-12 12:01:23 -07:00
Frame.cc Merge remote-tracking branch 'origin/topic/vern/when-cleanup' 2023-04-04 10:02:01 +02:00
Frame.h Merge remote-tracking branch 'origin/topic/vern/when-cleanup' 2023-04-04 10:02:01 +02:00
Func.cc Add community_id_v1() based on corelight/zeek-community-id 2023-04-21 20:44:09 +02:00
Func.h changed function_ingredients struct to FunctionIngredients class with accessors 2023-04-02 11:34:16 -07:00
Hash.cc HashKey: Do not call Describe() unconditionally in DEBUG mode 2023-02-14 10:52:54 +01:00
Hash.h Fix a bunch of missing class member initializations 2023-01-27 13:03:18 -07:00
ID.cc ID: Add AddAttr() helper 2022-12-02 18:06:39 +01:00
ID.h Remove unnecessary virtual specifiers from final classes 2023-01-27 13:03:18 -07:00
input.h parse.y/directives: Reject directives as statements 2022-08-26 09:42:50 +02:00
IntrusivePtr.h different fix for MSVC compiler issues 2023-04-18 17:12:52 -07:00
IntSet.cc Code modernization: Convert from deprecated C standard library headers 2022-06-27 09:47:31 -07:00
IntSet.h Code modernization: Convert from deprecated C standard library headers 2022-06-27 09:47:31 -07:00
IP.cc ip4_hdr: Add DF, MF, offset and sum fields 2023-04-29 17:09:43 +02:00
IP.h IP_Hdr: take length value as uint64_t instead of int 2023-02-22 16:39:54 -07:00
IPAddr.cc Deprecate bro_inet_ntop.{c,h} 2022-07-12 12:01:23 -07:00
IPAddr.h Remove other general deprecations 2022-06-30 19:17:13 +00:00
List.cc Fix a few minor int pointer value initializations 2023-01-27 13:03:18 -07:00
List.h Remove deprecated MemoryAllocation() methods and related code 2022-06-30 18:56:52 +00:00
main.cc Fixes to support the Npcap library on Windows 2023-01-11 11:42:58 -07:00
make_dbg_constants.py Format Python scripts with yapf. 2021-11-24 23:13:24 +01:00
module_util.cc module_util: Change streq helper method to just return bool 2023-02-22 16:39:54 -07:00
module_util.h updated Bro->Zeek in comments in the source tree 2022-01-24 14:26:20 -08:00
net_util.cc clang-format: Force zeek-config.h to be earlier in the config ordering 2021-09-25 11:52:55 -07:00
net_util.h Re-enable the float/double versions of hton{d,f} on Windows 2023-01-19 09:13:33 -07:00
NetVar.cc Deprecate bro_int_t and bro_uint_t 2022-07-12 12:01:23 -07:00
NetVar.h Deprecate bro_int_t and bro_uint_t 2022-07-12 12:01:23 -07:00
NFA.cc Remove deprecated MemoryAllocation() methods and related code 2022-06-30 18:56:52 +00:00
NFA.h Remove deprecated MemoryAllocation() methods and related code 2022-06-30 18:56:52 +00:00
Notifier.cc Reformat the world 2021-09-16 15:35:39 -07:00
Notifier.h Spelling src 2022-11-09 12:08:15 -05:00
Obj.cc Compile Zeek with MSVC 2022-11-09 18:15:30 +02:00
Obj.h Code modernization: Convert from deprecated C standard library headers 2022-06-27 09:47:31 -07:00
OpaqueVal.cc Partially revert OpenSSL hashing changes 2022-05-17 08:52:06 +00:00
OpaqueVal.h Merge remote-tracking branch 'microsoft/master' 2022-11-11 15:23:21 -07:00
option.bif option.bif: Short-circuit option changes when terminating 2022-07-29 18:22:03 +02:00
Options.cc Add call stacks to script profiler output 2023-04-19 08:45:17 -07:00
Options.h Add zeek -V/--build-info 2023-02-13 12:23:29 +01:00
Overflow.cc Reformat the world 2021-09-16 15:35:39 -07:00
Overflow.h Deprecate bro_int_t and bro_uint_t 2022-07-12 12:01:23 -07:00
PacketFilter.cc Change Packet::ip_hdr to be a shared_ptr so it can be copied into EncapsulatingConn 2021-11-23 19:36:49 -07:00
PacketFilter.h Change Packet::ip_hdr to be a shared_ptr so it can be copied into EncapsulatingConn 2021-11-23 19:36:49 -07:00
parse.y Remove parser error message for bro_init, et al 2023-05-02 12:06:41 -07:00
Pipe.cc Code modernization: Convert from deprecated C standard library headers 2022-06-27 09:47:31 -07:00
Pipe.h Spelling src 2022-11-09 12:08:15 -05:00
PolicyFile.cc Compile Zeek with MSVC 2022-11-09 18:15:30 +02:00
PolicyFile.h updated Bro->Zeek in comments in the source tree 2022-01-24 14:26:20 -08:00
PrefixTable.cc clang-format: Set penalty for breaking after assignment operator 2021-09-27 10:49:48 -07:00
PrefixTable.h Move 3rdparty source files to 3rdparty/ 2021-11-09 07:20:18 +01:00
PriorityQueue.cc Code modernization: Convert from deprecated C standard library headers 2022-06-27 09:47:31 -07:00
PriorityQueue.h Code modernization: Convert from deprecated C standard library headers 2022-06-27 09:47:31 -07:00
RandTest.cc A bunch of other minor issues reported by PVS-Studio 2023-01-27 13:03:52 -07:00
RandTest.h Fix a bunch of missing class member initializations 2023-01-27 13:03:18 -07:00
re-parse.y Add support for /s modifier to RE matcher and parser 2022-08-02 11:31:57 -07:00
re-scan.l Include stdint.h early in flex files to prevent redefinition of int type macros 2023-02-22 16:39:54 -07:00
RE.cc Add support for /s modifier to RE matcher and parser 2022-08-02 11:31:57 -07:00
RE.h Spelling src 2022-11-09 12:08:15 -05:00
Reassem.cc Reassem: Reject blocks overflowing 64bit upper 2023-04-03 16:45:03 +02:00
Reassem.h Remove deprecated MemoryAllocation() methods and related code 2022-06-30 18:56:52 +00:00
reporter.bif Fix a bunch of -Wunqualified-std-cast-call warnings from clang 15 2023-03-24 13:58:01 -07:00
Reporter.cc Reporter: Add dedicated Deprecation() method 2023-04-04 16:05:08 +02:00
Reporter.h Reporter: Add dedicated Deprecation() method 2023-04-04 16:05:08 +02:00
rule-parse.y Add missing zeek/ to header includes 2021-01-29 19:16:29 -08:00
rule-scan.l Include stdint.h early in flex files to prevent redefinition of int type macros 2023-02-22 16:39:54 -07:00
Rule.cc clang-format: Force zeek-config.h to be earlier in the config ordering 2021-09-25 11:52:55 -07:00
Rule.h Code modernization: Convert from deprecated C standard library headers 2022-06-27 09:47:31 -07:00
RuleAction.cc Remove uses of deprecated Tag types 2021-11-23 19:36:49 -07:00
RuleAction.h Remove separate Tag types, note breaking change in NEWS 2021-12-06 11:25:13 -07:00
RuleCondition.cc ID: Add AddAttr() helper 2022-12-02 18:06:39 +01:00
RuleCondition.h Code modernization: Convert from deprecated C standard library headers 2022-06-27 09:47:31 -07:00
RuleMatcher.cc Spelling src 2022-11-09 12:08:15 -05:00
RuleMatcher.h Spelling src 2022-11-09 12:08:15 -05:00
RunState.cc Merge remote-tracking branch 'origin/topic/timw/continue-processing-math' 2023-04-08 11:23:06 -07:00
RunState.h Add bare_mode bif. 2022-05-16 09:07:11 +02:00
scan.l unload: Fix unloading of packages 2023-04-28 11:47:55 +02:00
ScannedFile.cc Reduce startup time on Windows by using std::filesystem::canonical 2023-01-19 09:13:33 -07:00
ScannedFile.h Reduce startup time on Windows by using std::filesystem::canonical 2023-01-19 09:13:33 -07:00
Scope.cc Stmt: Error on deprecated when/local usage 2023-03-20 21:35:53 +01:00
Scope.h Stmt: Error on deprecated when/local usage 2023-03-20 21:35:53 +01:00
ScriptCoverageManager.cc extend ZEEK_PROFILER_FILE profiling to include summaries for functions/hooks/event handlers 2023-04-26 12:23:52 -07:00
ScriptCoverageManager.h extend ZEEK_PROFILER_FILE profiling to include summaries for functions/hooks/event handlers 2023-04-26 12:23:52 -07:00
ScriptProfile.cc Fix a few warnings from recent changes 2023-04-27 15:38:02 -07:00
ScriptProfile.h Add call stacks to script profiler output 2023-04-19 08:45:17 -07:00
ScriptValidation.cc extended script validation to be call-able on a per-function basis 2023-04-01 12:55:29 -07:00
ScriptValidation.h extended script validation to be call-able on a per-function basis 2023-04-01 12:55:29 -07:00
SerializationFormat.cc Fixing some issues from rebasing 2022-11-09 18:16:13 +02:00
SerializationFormat.h Fixing some issues from rebasing 2022-11-09 18:16:13 +02:00
SmithWaterman.cc Fix smith-waterman sorting to follow correct Compare semantics 2023-04-30 11:54:08 -07:00
SmithWaterman.h Reformat the world 2021-09-16 15:35:39 -07:00
Span.h Fix some member-variable shadowing issues 2023-01-27 13:03:19 -07:00
stats.bif Add optional packet filtered statistics for packet sources 2023-04-06 09:47:04 -07:00
Stats.cc Remove deprecated MemoryAllocation() methods and related code 2022-06-30 18:56:52 +00:00
Stats.h Code modernization: Convert from deprecated C standard library headers 2022-06-27 09:47:31 -07:00
Stmt.cc simplify WhenInfo and Trigger classes given removal of old capture semantics 2023-04-02 11:36:39 -07:00
Stmt.h simplify WhenInfo and Trigger classes given removal of old capture semantics 2023-04-02 11:36:39 -07:00
StmtBase.h parse.y/directives: Reject directives as statements 2022-08-26 09:42:50 +02:00
StmtEnums.h Reformat the world 2021-09-16 15:35:39 -07:00
strings.bif Add max_size argument for find_all/find_all_ordered BIFs 2023-02-21 12:27:54 -07:00
Tag.cc GH-1873: Deprecate the tag types differently to avoid type clashes 2021-12-01 09:43:28 -07:00
Tag.h GH-1873: Deprecate the tag types differently to avoid type clashes 2021-12-01 09:43:28 -07:00
Timer.cc TimerMgr: No network_time updates in Process() 2023-03-23 12:41:56 +01:00
Timer.h TimerMgr: Add back max_timer_expires=0 special case 2022-11-27 15:02:14 +01:00
Traverse.cc Reformat the world 2021-09-16 15:35:39 -07:00
Traverse.h broader support for AST traversal, including Attr and Attributes objects 2022-05-26 17:38:34 -07:00
TraverseTypes.h broader support for AST traversal, including Attr and Attributes objects 2022-05-26 17:38:34 -07:00
Trigger.cc Merge remote-tracking branch 'origin/topic/vern/when-cleanup' 2023-04-04 10:02:01 +02:00
Trigger.h simplify WhenInfo and Trigger classes given removal of old capture semantics 2023-04-02 11:36:39 -07:00
TunnelEncapsulation.cc Add support for 802.11 A-MSDU aggregates 2023-04-25 09:28:20 -07:00
TunnelEncapsulation.h Add support for 802.11 A-MSDU aggregates 2023-04-25 09:28:20 -07:00
Type.cc record_fields: Include information about optionality of fields 2023-04-27 21:18:35 +02:00
Type.h Merge remote-tracking branch 'origin/topic/vern/record-optimizations.Apr23B' 2023-04-19 11:59:56 +02:00
types.bif GH-1517: Add Geneve decap support 2021-04-27 11:21:29 +02:00
UID.cc Deprecate bro_int_t and bro_uint_t 2022-07-12 12:01:23 -07:00
UID.h Deprecate bro_int_t and bro_uint_t 2022-07-12 12:01:23 -07:00
util-config.h.in cmake: Fixup BRO_PLUGIN_INSTALL_PATH references 2023-04-24 12:15:37 +02:00
util.cc Add ifdef'd implementation of setvbuf to zeek::util 2023-05-02 10:28:50 -07:00
util.h Add ifdef'd implementation of setvbuf to zeek::util 2023-05-02 10:28:50 -07:00
Val.cc Merge remote-tracking branch 'origin/topic/vern/record-optimizations.Apr23B' 2023-04-19 11:59:56 +02:00
Val.h restored RecordType::Create, now marked as deprecated 2023-04-18 09:41:45 -07:00
Var.cc extend ZEEK_PROFILER_FILE profiling to include summaries for functions/hooks/event handlers 2023-04-26 12:23:52 -07:00
Var.h Reintroduce event groups 2022-10-25 18:03:26 +02:00
version.c.in zeek-config: Move ZEEK_VERSION* out of zeek-config.h 2023-02-22 16:48:39 +01:00
WeirdState.cc Reformat the world 2021-09-16 15:35:39 -07:00
WeirdState.h Add cstdint to WeirdState.h to fix compilation error on gcc13 2023-04-11 11:55:34 -07:00
zeek-affinity.cc clang-format: Other include ordering changes 2021-09-27 10:49:48 -07:00
zeek-affinity.h Reformat the world 2021-09-16 15:35:39 -07:00
zeek-bif.h Reformat the world 2021-09-16 15:35:39 -07:00
zeek-setup.cc Given the -C flag, set script-layer ignore_checksums to true. 2023-04-24 21:19:05 -07:00
zeek-setup.h Reformat the world 2021-09-16 15:35:39 -07:00
zeek.bif zeek.bif: Remove cat_sep() fully var_arg changes 2023-04-19 19:30:46 +02:00
zeek.pac Add GTPv1 packet analyzer, disable old analyzer 2021-11-23 19:36:50 -07:00
ZeekArgs.cc Reformat the world 2021-09-16 15:35:39 -07:00
ZeekArgs.h Reformat the world 2021-09-16 15:35:39 -07:00
ZeekConfig.cmake.in Redesign subdir-libs and plugin scaffolding 2023-04-13 22:23:46 +02:00
ZeekList.h Reformat the world 2021-09-16 15:35:39 -07:00
ZeekPluginBootstrap.cmake.in Fix install directory for plugins 2023-04-22 16:12:22 +02:00
ZeekPluginConfig.cmake.in Fix install directory for plugins 2023-04-22 16:12:22 +02:00
ZeekString.cc zeek-setup: Load scrips before running unit tests 2023-03-27 15:16:47 +02:00
ZeekString.h Spelling src 2022-11-09 12:08:15 -05:00
ZVal.cc remove deprecated union and timer types, addressing #1898 2022-02-19 19:17:51 +13:00
ZVal.h optimize record construction by deferring initializations of aggregates 2023-04-10 11:44:11 -07:00