Arne Welzel 6517ed94f2 smb/dce-rpc: Cleanup DCE-RPC analyzers when fid is closed and limit them ... This patch does two things: 1) For SMB close requests, tear down any associated DCE-RPC analyzer if one exists. 2) Protect from fid_to_analyzer_map growing unbounded by introducing a new SMB::max_dce_rpc_analyzers limit and forcefully wipe the analyzers if exceeded. Propagate this to script land as event smb_discarded_dce_rpc_analyzers() for additional cleanup. This is mostly to fix how the binpac SMB analyzer tracks individual DCE-RPC analyzers per open fid. Connections that re-open the same or different pipe may currently allocate unbounded number of analyzers. Closes #3145.		2023-06-30 15:14:32 +02:00
..
conn	Expand Conn::Info$duration comment to clarify TCP end-of-connection handling	2022-11-30 09:39:57 -08:00
dce-rpc	smb/dce-rpc: Cleanup DCE-RPC analyzers when fid is closed and limit them	2023-06-30 15:14:32 +02:00
dhcp	Revert "Merge remote-tracking branch 'origin/topic/vern/at-if-analyze'"	2023-05-31 09:20:33 +02:00
dnp3	Support for log filter policy hooks	2020-09-30 12:32:45 -07:00
dns	dns: Remove AD and CD flags from log	2023-03-16 10:09:27 +01:00
finger	Add BIF have_spicy_analyzers().	2023-02-03 13:47:26 +01:00
ftp	Remove script functions marked as unused (6.1 deprecations)	2023-06-14 10:07:22 -07:00
http	fix http AUTHORIZATION base64 decode failed	2023-06-27 19:25:32 +08:00
imap	Merge remote-tracking branch 'origin/topic/seth/zeek_init'	2019-04-19 11:24:29 -07:00
irc	Revert "Merge remote-tracking branch 'origin/topic/vern/at-if-analyze'"	2023-05-31 09:20:33 +02:00
krb	Spelling fixes: scripts	2022-11-02 17:36:39 -04:00
modbus	Add a field to Modbus/TCP log to indicate the Modbus PDU type	2022-07-24 02:41:26 +00:00
mqtt	mqtt: Move from policy/ into base/	2022-11-30 10:14:20 +01:00
mysql	MySQL: Fix endianness, introduce mysql_eof() event	2023-01-27 10:59:23 +01:00
ntlm	scripts/dce-rpc,ntlm: Do not load base/frameworks/dpd	2022-08-31 16:50:37 +02:00
ntp	&is_set => &is_assigned	2021-02-04 12:18:46 -08:00
pop3	Rename all scripts to have ".zeek" file extension	2019-04-11 21:12:40 -05:00
radius	Remove script functions marked as unused (6.1 deprecations)	2023-06-14 10:07:22 -07:00
rdp	Merge remote-tracking branch 'jeff-bb/patch-2'	2023-01-23 12:50:23 -07:00
rfb	Support for log filter policy hooks	2020-09-30 12:32:45 -07:00
sip	Support for log filter policy hooks	2020-09-30 12:32:45 -07:00
smb	Remove script functions marked as unused (6.1 deprecations)	2023-06-14 10:07:22 -07:00
smtp	smtp: Validate mail transaction and disable SMTP analyzer if excessive	2023-03-27 18:41:47 +02:00
snmp	Spelling fixes: scripts	2022-11-02 17:36:39 -04:00
socks	socks/dpd: Add newer auth methods	2023-06-05 13:55:00 +02:00
ssh	ssh: Test for c$ssh$analyzer_id existence	2022-11-16 16:35:57 +01:00
ssl	Merge remote-tracking branch 'origin/master' into topic/johanna/dtls13	2023-05-10 13:02:08 +01:00
syslog	Add BIF have_spicy_analyzers().	2023-02-03 13:47:26 +01:00
tunnels	Add Teredo packet analyzer, disable old analyzer	2021-11-23 19:36:50 -07:00
xmpp	Merge remote-tracking branch 'origin/topic/seth/zeek_init'	2019-04-19 11:24:29 -07:00