zeek/scripts/base
Arne Welzel e4ab7b2d70 files/main: No empty file_ids
When an analyzer calls DataIn(), there's a costly callback construct
going through the event queue. If an analyzer does not have a
get_file_handle() handler installed, the produced file_id would
end up empty and ignored. Consequently, the get_file_handle() callback
was invoked for every new DataIn() invocations.

This is surprising and costly. Log a warning when this happens and
instead set a generically generated file handle value instead to
prevent the repeated get_file_handle() invocations.
2023-02-06 18:08:05 +01:00
..
files Spelling fixes: scripts 2022-11-02 17:36:39 -04:00
frameworks files/main: No empty file_ids 2023-02-06 18:08:05 +01:00
misc annotate base scripts with &is_used as needed 2022-05-26 17:39:17 -07:00
packet-protocols gtpv1: Do not register for protocol detection 2022-08-26 10:47:38 +02:00
protocols Add BIF have_spicy_analyzers(). 2023-02-03 13:47:26 +01:00
utils Spelling fixes: scripts 2022-11-02 17:36:39 -04:00
init-bare.zeek Merge remote-tracking branch 'security/topic/timw/131-smb-fscontrol-overflow' 2023-02-01 10:48:16 -07:00
init-default.zeek Provide infrastructure to migrate legacy analyzers to Spicy. 2023-02-01 11:33:48 +01:00
init-frameworks-and-bifs.zeek analyzer: Add analyzer.log for logging violations/confirmations 2023-01-09 18:11:49 +01:00
init-supervisor.zeek Establish a separate init script when using the supervisor 2021-07-08 13:12:53 -07:00