.. |
bifs.addr_count_conversion
|
Change IPv6 output format to no longer automatically be bracketed.
|
2012-05-07 12:55:54 -05:00 |
bifs.addr_to_ptr_name
|
Add a test and baseline for addr_to_ptr_name BiF.
|
2012-02-08 11:23:02 -06:00 |
bifs.addr_version
|
Remove --enable-brov6 flag, IPv6 now supported by default.
|
2012-02-03 16:46:58 -06:00 |
bifs.all_set
|
GH-211: improve consistency of how scripting errors are handled
|
2019-01-30 11:20:09 -06:00 |
bifs.analyzer_name
|
Add tests for untested BIFs
|
2012-08-03 17:24:04 -05:00 |
bifs.any_set
|
Add more tests for previously-untested BIFs
|
2012-05-24 16:33:19 -05:00 |
bifs.bloomfilter
|
Also switch BloomFilters from H3 to siphash.
|
2016-07-13 09:04:10 -07:00 |
bifs.bloomfilter-seed
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
bifs.bytestring_to_count
|
Allow default function/hook/event parameters. Addresses #972.
|
2013-05-07 14:32:22 -05:00 |
bifs.bytestring_to_double
|
Add test cases for the bytestring_to_double BIF
|
2012-10-25 17:10:51 -05:00 |
bifs.bytestring_to_hexstr
|
Add more tests for previously-untested BIFs
|
2012-05-29 14:04:36 -05:00 |
bifs.capture_state_updates
|
Add more BIF tests
|
2012-08-07 14:10:55 -05:00 |
bifs.cat
|
Add more tests for previously-untested BIFs
|
2012-05-25 17:15:29 -05:00 |
bifs.check_subnet
|
Add check_subnet bif that allows exact membership test for subnet tables.
|
2016-03-09 16:52:25 -08:00 |
bifs.clear_table
|
Add more tests for previously-untested BIFs
|
2012-05-24 16:33:19 -05:00 |
bifs.convert_for_pattern
|
Add more tests for previously-untested BIFs
|
2012-05-29 14:04:36 -05:00 |
bifs.count_to_addr
|
SSH: Update baselines
|
2015-03-18 13:02:33 -04:00 |
bifs.create_file
|
Add more tests for previously-untested BIFs
|
2012-05-30 16:30:50 -05:00 |
bifs.decode_base64
|
Remove deprecated functions/events
|
2019-05-02 12:06:39 -07:00 |
bifs.decode_base64_conn
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
bifs.directory_operations
|
Add rename, unlink, and rmdir bifs.
|
2017-04-24 11:58:05 -07:00 |
bifs.dump_current_packet
|
Merge remote-tracking branch 'origin/topic/jazoff/fix-snaplen'
|
2018-08-21 14:54:55 -05:00 |
bifs.edit
|
Add tests for previously-untested strings BIFs
|
2012-05-23 16:34:03 -05:00 |
bifs.enable_raw_output
|
|
|
bifs.encode_base64
|
Remove deprecated functions/events
|
2019-05-02 12:06:39 -07:00 |
bifs.entropy_test
|
Add tests for untested BIFs
|
2012-08-03 17:24:04 -05:00 |
bifs.enum_to_int
|
[ADD] builtin function enum_to_int()
|
2014-11-10 18:24:27 -08:00 |
bifs.escape_string
|
Changing what's escaped when printing.
|
2015-04-15 16:59:50 -07:00 |
bifs.exit
|
Add more tests for previously-untested BIFs
|
2012-05-24 16:33:19 -05:00 |
bifs.file_mode
|
Add more tests for previously-untested BIFs
|
2012-05-29 14:04:36 -05:00 |
bifs.filter_subnet_table
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
bifs.find_all
|
Add tests for previously-untested strings BIFs
|
2012-05-23 16:34:03 -05:00 |
bifs.find_entropy
|
Add more tests for previously-untested BIFs
|
2012-05-30 16:30:50 -05:00 |
bifs.find_last
|
Add tests for previously-untested strings BIFs
|
2012-05-23 16:34:03 -05:00 |
bifs.fmt
|
Update docs and tests of the fmt() function
|
2016-04-27 15:34:47 -05:00 |
bifs.fmt_ftp_port
|
Add more tests for previously-untested BIFs
|
2012-05-30 16:30:50 -05:00 |
bifs.get_current_packet_header
|
Added test case for get_current_packet_header bif.
|
2016-04-20 00:05:33 +02:00 |
bifs.get_port_transport_proto
|
Add more tests for previously-untested BIFs
|
2012-05-30 16:30:50 -05:00 |
bifs.getsetenv
|
Add more tests for previously-untested BIFs
|
2012-05-24 16:33:19 -05:00 |
bifs.global_ids
|
Add more tests for previously-untested BIFs
|
2012-05-30 16:30:50 -05:00 |
bifs.global_sizes
|
Some more testing fixes.
|
2019-04-14 09:58:30 -04:00 |
bifs.haversine_distance
|
Add new functions for calculating geographic distance
|
2016-06-07 13:11:10 -05:00 |
bifs.hexdump
|
Changing what's escaped when printing.
|
2015-04-15 16:59:50 -07:00 |
bifs.hexstr_to_bytestring
|
Changing what's escaped when printing.
|
2015-04-15 16:59:50 -07:00 |
bifs.hll_cardinality
|
get hll ready for merging
|
2013-07-30 16:47:26 -07:00 |
bifs.hll_large_estimate
|
Misc. unit test improvements
|
2018-08-10 16:58:27 -05:00 |
bifs.identify_data
|
Replace libmagic w/ Bro signatures for file MIME type identification.
|
2014-03-04 11:12:06 -06:00 |
bifs.install_src_addr_filter
|
Update PacketFilter/Discarder code for IP version independence.
|
2012-03-08 13:12:04 -06:00 |
bifs.is_ascii
|
Add more tests for previously-untested BIFs
|
2012-05-30 16:30:50 -05:00 |
bifs.is_local_interface
|
Add more BIF tests
|
2012-08-07 14:10:55 -05:00 |
bifs.is_port
|
Add more tests for previously-untested BIFs
|
2012-05-29 14:04:36 -05:00 |
bifs.join_string
|
Remove deprecated functions/events
|
2019-05-02 12:06:39 -07:00 |
bifs.levenshtein_distance
|
Merge branch 'master' of https://github.com/anthonykasza/bro
|
2013-08-19 11:20:50 -07:00 |
bifs.lookup_ID
|
Add more tests for previously-untested BIFs
|
2012-05-25 17:15:29 -05:00 |
bifs.lowerupper
|
Add tests for previously-untested strings BIFs
|
2012-05-23 16:34:03 -05:00 |
bifs.lstrip
|
Merge branch 'master' of https://github.com/ZekeMedley/zeek
|
2019-02-15 17:51:29 -06:00 |
bifs.mask_addr
|
|
|
bifs.matching_subnets
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
bifs.math
|
Add more tests for previously-untested BIFs
|
2012-05-25 17:15:29 -05:00 |
bifs.md5
|
Add more tests for previously-untested BIFs
|
2012-05-24 16:33:19 -05:00 |
bifs.net_stats_trace
|
Merge branch 'stats-bytes-recvd' of https://github.com/msmiley/bro
|
2015-03-04 13:16:19 -08:00 |
bifs.netbios-functions
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
bifs.order
|
BIT-1894: fix bad integer casts in BIFs: sort, rand, order, to_int
|
2018-01-26 15:49:34 -06:00 |
bifs.parse_ftp
|
Add more tests for previously-untested BIFs
|
2012-05-29 14:04:36 -05:00 |
bifs.piped_exec
|
|
|
bifs.ptr_name_to_addr
|
Change IPv6 output format to no longer automatically be bracketed.
|
2012-05-07 12:55:54 -05:00 |
bifs.rand
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
bifs.raw_bytes_to_v4_addr
|
Add more tests for previously-untested BIFs
|
2012-05-29 14:04:36 -05:00 |
bifs.reading_traces
|
Add more BIF tests
|
2012-08-07 14:10:55 -05:00 |
bifs.record_type_to_vector
|
Add more tests for previously-untested BIFs
|
2012-05-25 17:15:29 -05:00 |
bifs.records_fields
|
Improve introspection of Record and TypeType values
|
2018-10-18 15:10:02 -05:00 |
bifs.remask_addr
|
Refactoring various usages of new IPAddr class.
|
2012-02-22 14:45:44 -06:00 |
bifs.resize
|
Add more tests for previously-untested BIFs
|
2012-05-24 16:33:19 -05:00 |
bifs.reverse
|
Added reverse() function to strings.bif.
|
2013-03-23 08:39:04 -07:00 |
bifs.rotate_file
|
Add more tests for previously-untested BIFs
|
2012-05-30 16:30:50 -05:00 |
bifs.rotate_file_by_name
|
Add more tests for previously-untested BIFs
|
2012-05-30 16:30:50 -05:00 |
bifs.routing0_data_to_addrs
|
Change IPv6 output format to no longer automatically be bracketed.
|
2012-05-07 12:55:54 -05:00 |
bifs.rstrip
|
Merge branch 'master' of https://github.com/ZekeMedley/zeek
|
2019-02-15 17:51:29 -06:00 |
bifs.safe_shell_quote
|
Deprecate str_shell_escape, add safe_shell_quote replacement
|
2019-03-25 17:51:04 -07:00 |
bifs.same_object
|
Add more tests for previously-untested BIFs
|
2012-05-30 16:30:50 -05:00 |
bifs.sha1
|
Add SHA1 and SHA256 hashing BIFs. (addresses #542)
|
2012-05-04 16:09:05 -05:00 |
bifs.sha256
|
Add SHA1 and SHA256 hashing BIFs. (addresses #542)
|
2012-05-04 16:09:05 -05:00 |
bifs.sort
|
BIT-1894: fix bad integer casts in BIFs: sort, rand, order, to_int
|
2018-01-26 15:49:34 -06:00 |
bifs.split_string
|
Deprecate split* family of BIFs.
|
2015-01-21 15:34:42 -06:00 |
bifs.str_shell_escape
|
Add tests for previously-untested strings BIFs
|
2012-05-23 16:34:03 -05:00 |
bifs.strcmp
|
Add tests for previously-untested strings BIFs
|
2012-05-23 16:34:03 -05:00 |
bifs.strftime
|
Add tests for untested BIFs
|
2012-08-03 17:24:04 -05:00 |
bifs.string_fill
|
Changing what's escaped when printing.
|
2015-04-15 16:59:50 -07:00 |
bifs.string_to_pattern
|
Add more tests for previously-untested BIFs
|
2012-05-29 14:04:36 -05:00 |
bifs.strip
|
Add tests for previously-untested strings BIFs
|
2012-05-23 16:34:03 -05:00 |
bifs.strptime
|
Quick pass over unit tests, adding -b flag to bro so they run faster.
|
2012-11-30 17:44:36 -06:00 |
bifs.strstr
|
Add tests for previously-untested strings BIFs
|
2012-05-23 16:34:03 -05:00 |
bifs.sub
|
Add tests for previously-untested strings BIFs
|
2012-05-23 16:34:03 -05:00 |
bifs.subnet_to_addr
|
fix acld plugin to use address instead of subnet (and add functions for
|
2015-06-05 00:00:20 -07:00 |
bifs.subnet_version
|
add bif function to test if a subnet revers to v4 or v6.
|
2015-04-14 14:51:52 -07:00 |
bifs.subst_string
|
Add tests for previously-untested strings BIFs
|
2012-05-23 16:34:03 -05:00 |
bifs.system
|
Add more tests for previously-untested BIFs
|
2012-05-24 16:33:19 -05:00 |
bifs.system_env
|
Fix documentation for system_env BIF
|
2012-06-01 13:12:55 -05:00 |
bifs.to_addr
|
Change IPv6 output format to no longer automatically be bracketed.
|
2012-05-07 12:55:54 -05:00 |
bifs.to_count
|
Fix the to_count function to use strtoull versus strtoll.
|
2015-04-16 09:56:18 -05:00 |
bifs.to_double
|
Updating tests for the #start/#end change.
|
2012-07-19 22:28:55 -07:00 |
bifs.to_double_from_string
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
bifs.to_int
|
BIT-1894: fix bad integer casts in BIFs: sort, rand, order, to_int
|
2018-01-26 15:49:34 -06:00 |
bifs.to_interval
|
Add more tests for previously-untested BIFs
|
2012-05-25 17:15:29 -05:00 |
bifs.to_port
|
Fix to_port() BIF for port strings with a port number of zero.
|
2012-12-18 15:08:18 -06:00 |
bifs.to_subnet
|
Change IPv6 output format to no longer automatically be bracketed.
|
2012-05-07 12:55:54 -05:00 |
bifs.to_time
|
Add more tests for previously-untested BIFs
|
2012-05-25 17:15:29 -05:00 |
bifs.topk
|
Allow iterating over bif functions with result type vector of any.
|
2014-02-25 15:30:29 -08:00 |
bifs.type_name
|
Merge remote-tracking branch 'origin/topic/dnthayer/bif-tests'
|
2012-06-06 11:42:16 -07:00 |
bifs.unique_id
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
bifs.unique_id-rnd
|
|
|
bifs.uuid_to_string
|
Add more tests for previously-untested BIFs
|
2012-05-30 16:30:50 -05:00 |
bifs.x509_verify
|
Adjust x509 unit tests to work around OpenSSL 1.0 vs. 1.1 differences
|
2018-06-29 16:01:23 -05:00 |
broker.connect-on-retry
|
Merge topic/actor-system throug a squashed commit.
|
2018-05-18 22:39:23 +00:00 |
broker.disconnect
|
BIT-1941: improve reliability of broker.disconnect unit test
|
2018-07-02 16:32:13 -05:00 |
broker.error
|
Merge topic/actor-system throug a squashed commit.
|
2018-05-18 22:39:23 +00:00 |
broker.remote_event
|
Merge topic/actor-system throug a squashed commit.
|
2018-05-18 22:39:23 +00:00 |
broker.remote_event_any
|
Support unserializing broker data into type 'any'
|
2018-05-31 10:39:40 -05:00 |
broker.remote_event_auto
|
Merge topic/actor-system throug a squashed commit.
|
2018-05-18 22:39:23 +00:00 |
broker.remote_event_ssl_auth
|
Merge topic/actor-system throug a squashed commit.
|
2018-05-18 22:39:23 +00:00 |
broker.remote_event_vector_any
|
Fix recursive type checks/casts of broker data into type 'any'
|
2018-09-10 14:55:50 -05:00 |
broker.remote_id
|
Improve broker.remote_id unit test
|
2018-10-03 15:50:07 -05:00 |
broker.remote_log
|
Merge topic/actor-system throug a squashed commit.
|
2018-05-18 22:39:23 +00:00 |
broker.remote_log_late_join
|
Merge topic/actor-system throug a squashed commit.
|
2018-05-18 22:39:23 +00:00 |
broker.remote_log_types
|
Merge topic/actor-system throug a squashed commit.
|
2018-05-18 22:39:23 +00:00 |
broker.ssl_auth_failure
|
Parallelize communication tests using btest TEST-PORT
|
2018-11-04 15:29:59 -06:00 |
broker.store.clone
|
Merge topic/actor-system throug a squashed commit.
|
2018-05-18 22:39:23 +00:00 |
broker.store.local
|
Merge topic/actor-system throug a squashed commit.
|
2018-05-18 22:39:23 +00:00 |
broker.store.ops
|
Merge topic/actor-system throug a squashed commit.
|
2018-05-18 22:39:23 +00:00 |
broker.store.record
|
Merge topic/actor-system throug a squashed commit.
|
2018-05-18 22:39:23 +00:00 |
broker.store.set
|
Merge topic/actor-system throug a squashed commit.
|
2018-05-18 22:39:23 +00:00 |
broker.store.sqlite
|
Merge topic/actor-system throug a squashed commit.
|
2018-05-18 22:39:23 +00:00 |
broker.store.table
|
Merge topic/actor-system throug a squashed commit.
|
2018-05-18 22:39:23 +00:00 |
broker.store.type-conversion
|
A few more updates to the digest functions.
|
2019-01-24 10:44:28 -08:00 |
broker.store.vector
|
Merge topic/actor-system throug a squashed commit.
|
2018-05-18 22:39:23 +00:00 |
broker.unpeer
|
Merge topic/actor-system throug a squashed commit.
|
2018-05-18 22:39:23 +00:00 |
core.bits_per_uid
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
core.check-unused-event-handlers
|
Add config framework.
|
2017-11-29 13:46:59 -08:00 |
core.checksums
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
core.cisco-fabric-path
|
Add Cisco FabricPath support
|
2018-07-27 16:00:54 -05:00 |
core.conn-size-threshold
|
Allow setting packet and byte thresholds for connections.
|
2015-04-17 06:57:51 -07:00 |
core.conn-uid
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
core.connection_flip_roles
|
Improve analysis of TCP SYN/SYN-ACK reversal situations.
|
2014-03-11 17:03:59 -05:00 |
core.disable-mobile-ipv6
|
Remove variable content from weird names
|
2019-04-01 18:30:11 -07:00 |
core.discarder
|
Change IPv6 output format to no longer automatically be bracketed.
|
2012-05-07 12:55:54 -05:00 |
core.div-by-zero
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
core.dns-init
|
Merge remote-tracking branch 'origin/topic/jsiwek/fix-dns-double-free'
|
2011-12-01 16:40:07 -08:00 |
core.embedded-null
|
Merge branch 'Reporter/MessageFix' of https://github.com/catenacyber/bro
|
2018-04-16 10:58:45 -07:00 |
core.erspan
|
Implement ERSPAN support.
|
2017-02-03 12:29:22 -08:00 |
core.erspanII
|
Improve ERSPAN Type III support
|
2019-01-17 18:06:10 -06:00 |
core.erspanIII
|
Added ERSPAN III testing
|
2019-01-24 14:05:13 +00:00 |
core.ether-addrs
|
Moved link-layer addresses into endpoints.
|
2016-06-02 01:46:26 +02:00 |
core.event-arg-reuse
|
Fix assignments to event arguments becoming visible to subsequent
|
2017-10-27 13:28:48 -07:00 |
core.expr-exception
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
core.fake_dns
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
core.file-caching-serialization
|
Changes to open-file caching limits and uncached file unserialization.
|
2012-05-03 13:13:58 -05:00 |
core.global_opaque_val
|
Fix global opaque val segfault, addresses BIT-1071
|
2013-08-29 17:17:40 -05:00 |
core.history-flip
|
Make tunnel_parents in conn.log optional.
|
2018-01-12 13:46:00 -08:00 |
core.icmp.icmp-context
|
Change IPv6 output format to no longer automatically be bracketed.
|
2012-05-07 12:55:54 -05:00 |
core.icmp.icmp-events
|
Changing what's escaped when printing.
|
2015-04-15 16:59:50 -07:00 |
core.icmp.icmp6-context
|
Change IPv6 output format to no longer automatically be bracketed.
|
2012-05-07 12:55:54 -05:00 |
core.icmp.icmp6-events
|
Extract ICMPv6 NDP options and include in ICMP events (addresses #833).
|
2012-06-26 17:10:00 -05:00 |
core.icmp.icmp6-nd-options
|
Changing what's escaped when printing.
|
2015-04-15 16:59:50 -07:00 |
core.icmp.icmp_sent
|
BIT-342: add "icmp_sent_payload" event.
|
2015-03-18 16:16:24 -05:00 |
core.init-error
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
core.ip-broken-header
|
Fix OOB read in Sessions.cc
|
2017-10-19 10:29:29 -07:00 |
core.ipv6-atomic-frag
|
Change IPv6 output format to no longer automatically be bracketed.
|
2012-05-07 12:55:54 -05:00 |
core.ipv6-flow-labels
|
Improve availability of IPv6 flow label in connection records.
|
2012-05-22 15:18:33 -05:00 |
core.ipv6-frag
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
core.ipv6_esp
|
Change IPv6 output format to no longer automatically be bracketed.
|
2012-05-07 12:55:54 -05:00 |
core.ipv6_ext_headers
|
Changing what's escaped when printing.
|
2015-04-15 16:59:50 -07:00 |
core.ipv6_zero_len_ah
|
Updated affected test case.
|
2016-04-20 00:23:11 +02:00 |
core.leaks.basic-cluster
|
Unit test tweaks/fixes.
|
2012-08-16 16:33:46 -05:00 |
core.leaks.broker.clone_store
|
Merge topic/actor-system throug a squashed commit.
|
2018-05-18 22:39:23 +00:00 |
core.leaks.broker.data
|
Merge topic/actor-system throug a squashed commit.
|
2018-05-18 22:39:23 +00:00 |
core.leaks.broker.remote_event
|
Fix memory leak due to enum type/val circular references
|
2019-01-29 18:28:13 -06:00 |
core.leaks.broker.remote_log
|
Fix memory leak due to enum type/val circular references
|
2019-01-29 18:28:13 -06:00 |
core.leaks.hll_cluster
|
add clustered leak test for hll. No issues.
|
2013-08-29 14:01:22 -07:00 |
core.load-explicit-bro-suffix-fallback
|
GH-237: add @load foo.bro -> foo.zeek fallback
|
2019-04-16 17:49:37 -07:00 |
core.load-file-extension
|
Add test cases to verify new file extension is recognized
|
2019-04-11 12:26:50 -05:00 |
core.load-pkg
|
Add test cases to verify new file extension is recognized
|
2019-04-11 12:26:50 -05:00 |
core.load-prefixes
|
Update tests and baselines due to renaming all scripts
|
2019-04-11 23:32:58 -05:00 |
core.load-relative
|
|
|
core.load-unload
|
Add test cases to verify new file extension is recognized
|
2019-04-11 12:26:50 -05:00 |
core.mobile-ipv6-home-addr
|
Change IPv6 output format to no longer automatically be bracketed.
|
2012-05-07 12:55:54 -05:00 |
core.mobile-ipv6-routing
|
Change IPv6 output format to no longer automatically be bracketed.
|
2012-05-07 12:55:54 -05:00 |
core.mobility-checksums
|
Fix mobility checksums unit test.
|
2012-05-17 14:47:09 -05:00 |
core.mobility_msg
|
Change IPv6 output format to no longer automatically be bracketed.
|
2012-05-07 12:55:54 -05:00 |
core.mpls-in-vlan
|
Make tunnel_parents in conn.log optional.
|
2018-01-12 13:46:00 -08:00 |
core.negative-time
|
Ignoring packets with negative timestamps.
|
2016-05-23 13:22:22 -07:00 |
core.nflog
|
Merge branch 'master' of https://github.com/rdenniston/zeek
|
2019-03-19 19:19:02 -07:00 |
core.nop
|
|
|
core.option-errors
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
core.option-errors-2
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
core.option-errors-3
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
core.option-priorities
|
Add config framework.
|
2017-11-29 13:46:59 -08:00 |
core.option-redef
|
Make options redef-able by default.
|
2018-08-10 11:53:36 -07:00 |
core.option-runtime-errors
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
core.option-runtime-errors-2
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
core.option-runtime-errors-3
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
core.option-runtime-errors-4
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
core.option-runtime-errors-5
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
core.option-runtime-errors-6
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
core.option-runtime-errors-7
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
core.option-runtime-errors-8
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
core.option-runtime-errors-9
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
core.option-runtime-errors-10
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
core.option-runtime-errors-11
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
core.option-runtime-errors-12
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
core.option-runtime-errors-13
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
core.pcap.dumper
|
Merge remote-tracking branch 'origin/topic/jazoff/fix-snaplen'
|
2018-08-21 14:54:55 -05:00 |
core.pcap.dynamic-filter
|
Make tunnel_parents in conn.log optional.
|
2018-01-12 13:46:00 -08:00 |
core.pcap.filter-error
|
Update tests and baselines due to renaming all scripts
|
2019-04-11 23:32:58 -05:00 |
core.pcap.input-error
|
A set of various fixes and smaller API tweaks, plus tests.
|
2014-08-24 19:55:26 -07:00 |
core.pcap.pseudo-realtime
|
A set of various fixes and smaller API tweaks, plus tests.
|
2014-08-24 19:55:26 -07:00 |
core.pcap.read-trace-with-filter
|
Make tunnel_parents in conn.log optional.
|
2018-01-12 13:46:00 -08:00 |
core.plugins.hooks
|
Rename Zeexygen to Zeekygen
|
2019-05-02 21:39:21 -07:00 |
core.pppoe
|
Make tunnel_parents in conn.log optional.
|
2018-01-12 13:46:00 -08:00 |
core.pppoe-over-qinq
|
Merge remote-tracking branch 'origin/topic/vern/perf-history'
|
2018-08-01 16:37:10 -05:00 |
core.print-bpf-filters
|
GH-250: Improve/cleanup VXLAN decapsulation support
|
2019-03-12 18:15:34 -07:00 |
core.q-in-q
|
Make tunnel_parents in conn.log optional.
|
2018-01-12 13:46:00 -08:00 |
core.radiotap
|
Make tunnel_parents in conn.log optional.
|
2018-01-12 13:46:00 -08:00 |
core.raw_packet
|
Allow for logging of the VLAN data about a connection in conn.log
|
2015-07-22 14:13:17 -04:00 |
core.reassembly
|
Rewrite weird logging.
|
2016-06-15 13:49:35 -07:00 |
core.recursive-event
|
Merge topic/actor-system throug a squashed commit.
|
2018-05-18 22:39:23 +00:00 |
core.reporter
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
core.reporter-error-in-handler
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
core.reporter-fmt-strings
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
core.reporter-parse-error
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
core.reporter-runtime-error
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
core.reporter-type-mismatch
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
core.reporter-weird-sampling
|
Add rate-limiting sampling mechanism for weird events
|
2018-07-26 19:57:36 -05:00 |
core.reporter-weird-sampling-disable
|
Permit weird sampling rate of 0.
|
2018-09-05 13:12:23 -07:00 |
core.tcp.fin-retransmit
|
Moved link-layer addresses into endpoints.
|
2016-06-02 01:46:26 +02:00 |
core.tcp.large-file-reassembly
|
Refined state machine update placement to (1) properly deal with gaps capped
|
2019-04-22 09:13:23 -07:00 |
core.tcp.miss-end-data
|
Refined state machine update placement to (1) properly deal with gaps capped
|
2019-04-22 09:13:23 -07:00 |
core.tcp.missing-syn
|
Make tunnel_parents in conn.log optional.
|
2018-01-12 13:46:00 -08:00 |
core.tcp.quantum-insert
|
Extending rexmit_inconsistency() event to receive an additional
|
2015-10-26 14:16:08 -07:00 |
core.tcp.rst-after-syn
|
Moved link-layer addresses into endpoints.
|
2016-06-02 01:46:26 +02:00 |
core.tcp.rxmit-history
|
added 'g' $history character for content gaps
|
2019-04-17 14:20:48 -07:00 |
core.tcp.truncated-header
|
Fix potential crash TCP headers were captured incompletely.
|
2015-08-30 18:49:05 -07:00 |
core.truncation
|
Fix OOB read in Sessions.cc
|
2017-10-19 10:29:29 -07:00 |
core.tunnels.ayiya
|
Merge branch 'patch-1' of https://github.com/neu5ron/bro
|
2019-03-13 13:49:17 -07:00 |
core.tunnels.gre
|
Update baselines for SSH capabilities fix
|
2018-10-16 10:33:52 -05:00 |
core.tunnels.gre-in-gre
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
core.tunnels.gre-pptp
|
BIT-1798: fix PPTP GRE tunnel decapsulation
|
2018-08-14 16:48:04 -05:00 |
core.tunnels.gtp.different_dl_and_ul
|
Merge branch 'patch-1' of https://github.com/neu5ron/bro
|
2019-03-13 13:49:17 -07:00 |
core.tunnels.gtp.ext_header
|
Add parsing for GTPv1 extension headers and control messages.
|
2013-02-07 14:59:02 -06:00 |
core.tunnels.gtp.false_gtp
|
Make tunnel_parents in conn.log optional.
|
2018-01-12 13:46:00 -08:00 |
core.tunnels.gtp.inner_ipv6
|
Make tunnel_parents in conn.log optional.
|
2018-01-12 13:46:00 -08:00 |
core.tunnels.gtp.inner_teredo
|
Make tunnel_parents in conn.log optional.
|
2018-01-12 13:46:00 -08:00 |
core.tunnels.gtp.non_recursive
|
Add parsing for GTPv1 extension headers and control messages.
|
2013-02-07 14:59:02 -06:00 |
core.tunnels.gtp.not_user_plane_data
|
Make tunnel_parents in conn.log optional.
|
2018-01-12 13:46:00 -08:00 |
core.tunnels.gtp.opt_header
|
Make tunnel_parents in conn.log optional.
|
2018-01-12 13:46:00 -08:00 |
core.tunnels.gtp.outer_ip_frag
|
Refined state machine update placement to (1) properly deal with gaps capped
|
2019-04-22 09:13:23 -07:00 |
core.tunnels.gtp.pdp_ctx_messages
|
Changing what's escaped when printing.
|
2015-04-15 16:59:50 -07:00 |
core.tunnels.gtp.unknown_or_too_short
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
core.tunnels.ip-in-ip
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
core.tunnels.ip-in-ip-version
|
Fix OOB read in Sessions.cc
|
2017-10-19 10:29:29 -07:00 |
core.tunnels.ip-tunnel-uid
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
core.tunnels.teredo
|
Merge branch 'patch-1' of https://github.com/neu5ron/bro
|
2019-03-13 13:49:17 -07:00 |
core.tunnels.teredo_bubble_with_payload
|
Merge branch 'patch-1' of https://github.com/neu5ron/bro
|
2019-03-13 13:49:17 -07:00 |
core.tunnels.vxlan
|
GH-250: Improve/cleanup VXLAN decapsulation support
|
2019-03-12 18:15:34 -07:00 |
core.vlan-mpls
|
Make tunnel_parents in conn.log optional.
|
2018-01-12 13:46:00 -08:00 |
core.when-interpreter-exceptions
|
Merge remote-tracking branch 'origin/topic/seth/zeek_init'
|
2019-04-19 11:24:29 -07:00 |
core.wlanmon
|
Merge branch 'p-l--topic/support-wlan-monitor'
|
2018-05-15 13:32:34 -04:00 |
core.x509-generalizedtime
|
Refactor X509 generalizedtime support and test.
|
2015-09-18 12:46:49 -07:00 |
coverage.bare-load-baseline
|
Rename Zeexygen to Zeekygen
|
2019-05-02 21:39:21 -07:00 |
coverage.bare-mode-errors
|
Remove previously deprecated policy/protocols/smb/__load__
|
2019-05-02 20:50:30 -07:00 |
coverage.coverage-blacklist
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
coverage.default-load-baseline
|
Rename Zeexygen to Zeekygen
|
2019-05-02 21:39:21 -07:00 |
coverage.find-bro-logs
|
Fix the find-bro-logs.test
|
2018-08-31 22:52:16 -05:00 |
coverage.init-default
|
Update tests and baselines due to renaming all scripts
|
2019-04-11 23:32:58 -05:00 |
doc.zeekygen.all_scripts
|
Rename Zeexygen to Zeekygen
|
2019-05-02 21:39:21 -07:00 |
doc.zeekygen.command_line
|
Rename Zeexygen to Zeekygen
|
2019-05-02 21:39:21 -07:00 |
doc.zeekygen.comment_retrieval_bifs
|
Rename Zeexygen to Zeekygen
|
2019-05-02 21:39:21 -07:00 |
doc.zeekygen.enums
|
Rename Zeexygen to Zeekygen
|
2019-05-02 21:39:21 -07:00 |
doc.zeekygen.example
|
Rename Zeexygen to Zeekygen
|
2019-05-02 21:39:21 -07:00 |
doc.zeekygen.func-params
|
Rename Zeexygen to Zeekygen
|
2019-05-02 21:39:21 -07:00 |
doc.zeekygen.identifier
|
Rename Zeexygen to Zeekygen
|
2019-05-02 21:39:21 -07:00 |
doc.zeekygen.package
|
Rename Zeexygen to Zeekygen
|
2019-05-02 21:39:21 -07:00 |
doc.zeekygen.package_index
|
Rename Zeexygen to Zeekygen
|
2019-05-02 21:39:21 -07:00 |
doc.zeekygen.records
|
Rename Zeexygen to Zeekygen
|
2019-05-02 21:39:21 -07:00 |
doc.zeekygen.script_index
|
Rename Zeexygen to Zeekygen
|
2019-05-02 21:39:21 -07:00 |
doc.zeekygen.script_summary
|
Rename Zeexygen to Zeekygen
|
2019-05-02 21:39:21 -07:00 |
doc.zeekygen.type-aliases
|
Rename Zeexygen to Zeekygen
|
2019-05-02 21:39:21 -07:00 |
doc.zeekygen.vectors
|
Rename Zeexygen to Zeekygen
|
2019-05-02 21:39:21 -07:00 |
language.addr
|
Add parsing rules for IPv4/IPv6 subnet literal constants, addresses #888
|
2012-10-22 15:57:21 -05:00 |
language.any
|
Add more language tests
|
2012-09-04 17:39:00 -05:00 |
language.at-deprecated
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
language.at-dir
|
Change @PATH to @DIR for clarity. Add @FILENAME. Addresses #869.
|
2013-06-05 11:01:11 -05:00 |
language.at-filename
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
language.at-if
|
Add more language tests
|
2012-08-31 14:05:02 -05:00 |
language.at-if-event
|
Merge remote-tracking branch 'origin/topic/johanna/bit-1976'
|
2018-08-29 18:28:54 -05:00 |
language.at-if-invalid
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
language.at-ifdef
|
Add more language tests
|
2012-08-31 14:05:02 -05:00 |
language.at-ifndef
|
Add more language tests
|
2012-08-31 14:05:02 -05:00 |
language.at-load
|
Add more language tests
|
2012-08-31 14:05:02 -05:00 |
language.attr-default-coercion
|
BIT-1288: Improve coercion of &default expressions.
|
2014-11-18 12:40:16 -06:00 |
language.attr-default-global-set-error
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
language.bool
|
Add more language tests
|
2012-09-04 17:39:00 -05:00 |
language.common-mistakes
|
Merge remote-tracking branch 'origin/topic/seth/zeek_init'
|
2019-04-19 11:24:29 -07:00 |
language.conditional-expression
|
Add more language tests
|
2012-08-29 17:14:03 -05:00 |
language.const
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
language.container-ctor-scope
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
language.copy
|
Add more language tests
|
2012-08-29 17:14:03 -05:00 |
language.count
|
test suite for bitwise operators
|
2018-04-26 13:25:04 -07:00 |
language.cross-product-init
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
language.default-params
|
Allow default function/hook/event parameters. Addresses #972.
|
2013-05-07 14:32:22 -05:00 |
language.delete-field
|
|
|
language.delete-field-set
|
|
|
language.deprecated
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
language.double
|
Add more language tests
|
2012-09-04 17:39:00 -05:00 |
language.enum
|
Add tests of the Bro scripting language
|
2012-08-24 11:32:49 -05:00 |
language.enum-desc
|
|
|
language.enum-scope
|
|
|
language.eof-parse-errors
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
language.event
|
Some more testing fixes.
|
2019-04-14 09:58:30 -04:00 |
language.event-local-var
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
language.expire-expr-error
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
language.expire-func-undef
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
language.expire-redef
|
Fix the expire-redef.bro test
|
2017-08-10 14:15:31 -05:00 |
language.expire-type-error
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
language.expire_func
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
language.expire_func_mod
|
Fix crash when modifying a table from within its &expire_func
|
2018-10-12 08:35:25 -04:00 |
language.expire_multiple
|
Check that there is only one of read, write, create_expire
|
2016-03-18 12:34:26 -07:00 |
language.expire_multiple-2
|
Check that there is only one of read, write, create_expire
|
2016-03-18 12:34:26 -07:00 |
language.expire_multiple-3
|
Check that there is only one of read, write, create_expire
|
2016-03-18 12:34:26 -07:00 |
language.expire_subnet
|
Tiny scoping updates and test baseline updates for Intel framework.
|
2016-08-05 09:29:23 -04:00 |
language.file
|
Add tests of the Bro scripting language
|
2012-08-24 11:32:49 -05:00 |
language.for
|
Add key-value for loop
|
2019-03-14 09:46:16 -07:00 |
language.func-assignment
|
Fix function type-equivalence requiring same param names, addresses #957
|
2013-03-07 13:02:33 -06:00 |
language.function
|
Add tests of the Bro scripting language
|
2012-08-24 11:32:49 -05:00 |
language.hook
|
Fix precedence of hook
|
2016-06-13 16:02:06 -07:00 |
language.hook_calls
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
language.if
|
Add tests of the Bro scripting language
|
2012-08-24 11:32:49 -05:00 |
language.incr-vec-expr
|
Fix segfault when incrementing whole vector values.
|
2012-07-13 14:32:50 -05:00 |
language.index-assignment-invalid
|
Merge remote-tracking branch 'origin/topic/seth/zeek_init'
|
2019-04-19 11:24:29 -07:00 |
language.init-in-anon-function
|
Merge branch 'patch-1' of https://github.com/neu5ron/bro
|
2019-03-13 13:49:17 -07:00 |
language.int
|
Add more language tests
|
2012-09-04 17:39:00 -05:00 |
language.interval
|
GH-219: fix |x| operator int overflow / floating point type inconsistency
|
2019-01-22 16:42:40 -06:00 |
language.invalid_index
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
language.ipv6-literals
|
Change IPv6 output format to no longer automatically be bracketed.
|
2012-05-07 12:55:54 -05:00 |
language.key-value-for
|
Add key-value for loop
|
2019-03-14 09:46:16 -07:00 |
language.module
|
Add more language tests
|
2012-08-29 17:14:03 -05:00 |
language.named-record-ctors
|
Fix record coercion tolerance of optional fields.
|
2013-10-23 11:37:23 -05:00 |
language.named-set-ctors
|
Improve set constructor argument coercion.
|
2013-05-29 16:49:12 -05:00 |
language.named-table-ctors
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
language.named-vector-ctors
|
Allow named vector constructors. Addresses #983.
|
2013-05-30 10:57:28 -05:00 |
language.next-test
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
language.no-module
|
Allow access to global variables using GLOBAL:: namespace.
|
2016-12-07 15:28:34 -08:00 |
language.null-statement
|
Add tests of the Bro scripting language
|
2012-08-24 11:32:49 -05:00 |
language.outer_param_binding
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
language.pattern
|
use PCRE syntax instead of the beautiful new (?i ...) syntax
|
2018-06-29 13:01:05 -07:00 |
language.port
|
Add more language tests
|
2012-09-04 17:39:00 -05:00 |
language.precedence
|
Add more language tests
|
2012-08-29 17:14:03 -05:00 |
language.raw_output_attr
|
|
|
language.raw_output_attr-2
|
|
|
language.rec-comp-init
|
|
|
language.rec-nested-opt
|
|
|
language.rec-of-tbl
|
|
|
language.rec-table-default
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
language.record-bad-ctor
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
language.record-bad-ctor2
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
language.record-ceorce-orphan
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
language.record-coerce-clash
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
language.record-default-coercion
|
Fix record coercion for default inner record fields (addresses #973).
|
2013-04-23 09:57:55 -05:00 |
language.record-default-set-mismatch
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
language.record-extension
|
|
|
language.record-function-recursion
|
Fix crash when printing type of recursive structures.
|
2016-02-03 13:22:05 -08:00 |
language.record-index-complex-fields
|
GH-151: fix hash calculation for nested sets
|
2019-01-18 20:54:22 -06:00 |
language.record-recursive-coercion
|
|
|
language.record-redef-after-init
|
BIT-1909: fix invalid redef'd record field accesses
|
2018-04-11 16:23:26 -05:00 |
language.record-ref-assign
|
|
|
language.record-type-checking
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
language.redef-same-prefixtable-idx
|
Fix use-after-free in some cases of reassigning a table index.
|
2014-06-10 13:38:32 -05:00 |
language.redef-vector
|
BIT-466: add redef += support to vectors
|
2018-08-17 15:16:15 -05:00 |
language.returnwhen
|
Some more testing fixes.
|
2019-04-14 09:58:30 -04:00 |
language.set
|
documentation, test suite update
|
2018-07-20 08:57:37 -07:00 |
language.set-opt-record-index
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
language.set-type-checking
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
language.short-circuit
|
Add tests of the Bro scripting language
|
2012-08-24 11:32:49 -05:00 |
language.sizeof
|
GH-219: fix |x| operator int overflow / floating point type inconsistency
|
2019-01-22 16:42:40 -06:00 |
language.smith-waterman-test
|
|
|
language.string
|
Add more language tests
|
2012-09-04 17:39:00 -05:00 |
language.string-indexing
|
Support omission of string slice low/high indices, BIT-1097.
|
2013-12-04 15:11:48 -06:00 |
language.strings
|
|
|
language.subnet
|
Add parsing rules for IPv4/IPv6 subnet literal constants, addresses #888
|
2012-10-22 15:57:21 -05:00 |
language.subnet-errors
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
language.switch-error-mixed
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
language.switch-incomplete
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
language.switch-statement
|
Finish implementation of script-layer switch statement. Addresses #754.
|
2012-12-20 12:49:50 -06:00 |
language.switch-types
|
Merge topic/actor-system throug a squashed commit.
|
2018-05-18 22:39:23 +00:00 |
language.switch-types-error-duplicate
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
language.switch-types-error-unsupported
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
language.switch-types-vars
|
Merge topic/actor-system throug a squashed commit.
|
2018-05-18 22:39:23 +00:00 |
language.table
|
Fix ambiguity between composite table index and record ctor expressions.
|
2012-11-16 12:43:39 -06:00 |
language.table-default-record
|
Table lookups return copy of non-const &default vals (addresses #981).
|
2013-05-03 11:22:15 -05:00 |
language.table-init
|
Allow local table variables to be initialized with {} list expressions.
|
2012-01-04 16:44:25 -06:00 |
language.table-init-attrs
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
language.table-init-container-ctors
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
language.table-init-record-idx
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
language.table-init-record-idx-2
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
language.table-init-record-idx-3
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
language.table-init-record-idx-4
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
language.table-redef
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
language.table-type-checking
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
language.ternary-record-mismatch
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
language.time
|
Add more language tests
|
2012-09-04 17:39:00 -05:00 |
language.timeout
|
Add tests of the Bro scripting language
|
2012-08-24 11:32:49 -05:00 |
language.type-cast-any
|
Merge topic/actor-system throug a squashed commit.
|
2018-05-18 22:39:23 +00:00 |
language.type-cast-error-dynamic
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
language.type-cast-error-static
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
language.type-cast-same
|
Merge topic/actor-system throug a squashed commit.
|
2018-05-18 22:39:23 +00:00 |
language.type-check-any
|
Merge topic/actor-system throug a squashed commit.
|
2018-05-18 22:39:23 +00:00 |
language.type-check-vector
|
Fix is/as operators on vector values
|
2018-09-10 14:54:54 -05:00 |
language.type-type-error
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
language.undefined-delete-field
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
language.uninitialized-local
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
language.uninitialized-local2
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
language.vector
|
forgot to update test suite results for v += e
|
2018-07-26 14:35:30 -07:00 |
language.vector-any-append
|
Support appending to vector of any
|
2018-11-07 11:48:43 -06:00 |
language.vector-coerce-expr
|
|
|
language.vector-in-operator
|
BIT-1280: Fix checking vector indices via "in".
|
2014-10-28 14:21:16 -05:00 |
language.vector-list-init-records
|
|
|
language.vector-type-checking
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
language.vector-unspecified
|
Allow iterating over bif functions with result type vector of any.
|
2014-02-25 15:30:29 -08:00 |
language.when
|
Fix race condition in language/when.bro test
|
2012-09-24 18:20:42 -05:00 |
language.when-unitialized-rhs
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
language.while
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
language.wrong-delete-field
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
language.wrong-record-extension
|
|
|
language.zeek_init
|
Update docs and tests for bro_(init|done) -> zeek_(init|done)
|
2019-04-14 08:49:12 -04:00 |
language.zeek_script_loaded
|
GH-236: Add zeek_script_loaded event, deprecate bro_script_loaded
|
2019-04-19 12:02:22 -07:00 |
plugins.bifs-and-scripts
|
Bro plugins should support a patch version (x.y.z)
|
2018-09-30 20:30:22 -04:00 |
plugins.bifs-and-scripts-install
|
Bro plugins should support a patch version (x.y.z)
|
2018-09-30 20:30:22 -04:00 |
plugins.file
|
Bro plugins should support a patch version (x.y.z)
|
2018-09-30 20:30:22 -04:00 |
plugins.hooks
|
Rename Zeexygen to Zeekygen
|
2019-05-02 21:39:21 -07:00 |
plugins.init-plugin
|
Bro plugins should support a patch version (x.y.z)
|
2018-09-30 20:30:22 -04:00 |
plugins.logging-hooks
|
Plugin: Add hooks for log init and writing.
|
2017-04-24 14:02:05 -07:00 |
plugins.pktdumper
|
Bro plugins should support a patch version (x.y.z)
|
2018-09-30 20:30:22 -04:00 |
plugins.pktsrc
|
Make tunnel_parents in conn.log optional.
|
2018-01-12 13:46:00 -08:00 |
plugins.plugin-nopatchversion
|
Bro plugins should support a patch version (x.y.z)
|
2018-09-30 20:30:22 -04:00 |
plugins.plugin-withpatchversion
|
Bro plugins should support a patch version (x.y.z)
|
2018-09-30 20:30:22 -04:00 |
plugins.protocol
|
Bro plugins should support a patch version (x.y.z)
|
2018-09-30 20:30:22 -04:00 |
plugins.reader
|
Bro plugins should support a patch version (x.y.z)
|
2018-09-30 20:30:22 -04:00 |
plugins.reporter-hook
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
plugins.writer
|
Merge branch 'patch-1' of https://github.com/neu5ron/bro
|
2019-03-13 13:49:17 -07:00 |
scripts.base.files.data_event.basic
|
Make "in" keyword work with binary data.
|
2017-09-18 12:12:38 -07:00 |
scripts.base.files.entropy.basic
|
Add a file entropy test.
|
2016-04-13 00:44:02 -04:00 |
scripts.base.files.extract.limit
|
Extend file extraction log.
|
2017-01-25 01:16:46 -05:00 |
scripts.base.files.pe.basic
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.files.unified2.alert
|
Changing what's escaped when printing.
|
2015-04-15 16:59:50 -07:00 |
scripts.base.files.x509.1999
|
Fix parsing of x509 pre-y2k dates
|
2016-04-26 12:30:28 -07:00 |
scripts.base.files.x509.signed_certificate_timestamp
|
SCT: Allow verification of SCTs in Certs.
|
2017-03-29 09:17:24 -07:00 |
scripts.base.files.x509.signed_certificate_timestamp_ocsp
|
SCT: add validation of proofs for extensions and OCSP.
|
2017-03-29 09:04:05 -07:00 |
scripts.base.frameworks.analyzer.schedule-analyzer
|
Moving all analyzers over to new structure.
|
2013-04-16 20:52:03 -07:00 |
scripts.base.frameworks.cluster.custom_pool_exclusivity
|
Merge topic/actor-system throug a squashed commit.
|
2018-05-18 22:39:23 +00:00 |
scripts.base.frameworks.cluster.custom_pool_limits
|
Merge topic/actor-system throug a squashed commit.
|
2018-05-18 22:39:23 +00:00 |
scripts.base.frameworks.cluster.forwarding
|
Add Broker::forward() function
|
2018-08-28 19:42:22 -05:00 |
scripts.base.frameworks.cluster.log_distribution
|
Merge topic/actor-system throug a squashed commit.
|
2018-05-18 22:39:23 +00:00 |
scripts.base.frameworks.cluster.start-it-up
|
Merge topic/actor-system throug a squashed commit.
|
2018-05-18 22:39:23 +00:00 |
scripts.base.frameworks.cluster.start-it-up-logger
|
Misc. unit test improvements
|
2018-08-10 16:58:27 -05:00 |
scripts.base.frameworks.cluster.topic_distribution
|
Merge topic/actor-system throug a squashed commit.
|
2018-05-18 22:39:23 +00:00 |
scripts.base.frameworks.cluster.topic_distribution_bifs
|
Merge topic/actor-system throug a squashed commit.
|
2018-05-18 22:39:23 +00:00 |
scripts.base.frameworks.config.basic
|
Ascii formatter: do not complain about port text.
|
2018-08-10 11:29:35 -07:00 |
scripts.base.frameworks.config.basic_cluster
|
Continue work on config framework clusterization.
|
2018-06-27 10:47:17 -07:00 |
scripts.base.frameworks.config.cluster_resend
|
Add sending of values to nodes that dropped out.
|
2018-06-29 13:10:00 -07:00 |
scripts.base.frameworks.config.read_config
|
Add config framework.
|
2017-11-29 13:46:59 -08:00 |
scripts.base.frameworks.config.read_config_cluster
|
Add vector to read_config_cluster test.
|
2018-07-20 13:41:44 -07:00 |
scripts.base.frameworks.config.several-files
|
Fixing unstable test.
|
2018-02-07 14:21:25 -08:00 |
scripts.base.frameworks.config.updates
|
Fix small bug in config reader.
|
2018-01-29 14:22:56 -08:00 |
scripts.base.frameworks.config.weird
|
Weird settings: make constants into options.
|
2018-09-05 13:12:23 -07:00 |
scripts.base.frameworks.control.configuration_update
|
|
|
scripts.base.frameworks.control.id_value
|
|
|
scripts.base.frameworks.file-analysis.actions.data_event
|
Changing what's escaped when printing.
|
2015-04-15 16:59:50 -07:00 |
scripts.base.frameworks.file-analysis.bifs.file_exists_lookup_file
|
Functions for retrieving files by their id.
|
2018-01-09 12:16:17 -05:00 |
scripts.base.frameworks.file-analysis.bifs.register_mime_type
|
Fixing tests
|
2017-01-25 02:06:35 -05:00 |
scripts.base.frameworks.file-analysis.bifs.remove_action
|
Changing what's escaped when printing.
|
2015-04-15 16:59:50 -07:00 |
scripts.base.frameworks.file-analysis.bifs.set_timeout_interval
|
Merge branch 'topic/robin/ascii-escape-normalization'
|
2015-04-21 15:59:54 -07:00 |
scripts.base.frameworks.file-analysis.bifs.stop
|
Updates the files event api and brings file reassembly up to master.
|
2014-09-26 00:40:37 -04:00 |
scripts.base.frameworks.file-analysis.big-bof-buffer
|
Fixing tests
|
2017-01-25 02:06:35 -05:00 |
scripts.base.frameworks.file-analysis.byteranges
|
Adding test with command line that used to trigger a crash.
|
2017-01-31 14:52:37 -08:00 |
scripts.base.frameworks.file-analysis.ftp
|
Updates the files event api and brings file reassembly up to master.
|
2014-09-26 00:40:37 -04:00 |
scripts.base.frameworks.file-analysis.http.get
|
Merge branch 'topic/robin/ascii-escape-normalization'
|
2015-04-21 15:59:54 -07:00 |
scripts.base.frameworks.file-analysis.http.multipart
|
Merge branch 'topic/robin/ascii-escape-normalization'
|
2015-04-21 15:59:54 -07:00 |
scripts.base.frameworks.file-analysis.http.partial-content
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.frameworks.file-analysis.http.pipeline
|
Changing what's escaped when printing.
|
2015-04-15 16:59:50 -07:00 |
scripts.base.frameworks.file-analysis.http.post
|
Merge branch 'topic/robin/ascii-escape-normalization'
|
2015-04-21 15:59:54 -07:00 |
scripts.base.frameworks.file-analysis.input.basic
|
Updates the files event api and brings file reassembly up to master.
|
2014-09-26 00:40:37 -04:00 |
scripts.base.frameworks.file-analysis.irc
|
Changing what's escaped when printing.
|
2015-04-15 16:59:50 -07:00 |
scripts.base.frameworks.file-analysis.logging
|
Fixing tests
|
2017-01-25 02:06:35 -05:00 |
scripts.base.frameworks.file-analysis.smtp
|
OCSP/TLS/SCT: Fix a number of test failures.
|
2017-05-06 08:01:20 -07:00 |
scripts.base.frameworks.input.basic
|
Make parsing of booleans a little bit more lenient.
|
2018-08-10 10:03:22 -07:00 |
scripts.base.frameworks.input.bignumber
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.frameworks.input.binary
|
Changing what's escaped when printing.
|
2015-04-15 16:59:50 -07:00 |
scripts.base.frameworks.input.config.basic
|
Add config framework.
|
2017-11-29 13:46:59 -08:00 |
scripts.base.frameworks.input.config.errors
|
Merge remote-tracking branch 'origin/topic/johanna/config'
|
2018-02-07 14:10:48 -08:00 |
scripts.base.frameworks.input.config.spaces
|
Be more liberal with whitespaces for ip-addresses, subnets, etc.
|
2019-02-19 15:06:06 -08:00 |
scripts.base.frameworks.input.default
|
Fixed &default values ignored by input framework.
|
2016-06-16 01:02:51 +02:00 |
scripts.base.frameworks.input.empty-values-hashing
|
Improve introspection of Record and TypeType values
|
2018-10-18 15:10:02 -05:00 |
scripts.base.frameworks.input.emptyvals
|
fix crash when all value fields of imported table are uninitialized.
|
2012-03-22 10:59:36 -07:00 |
scripts.base.frameworks.input.errors
|
Input: Further small changes to error handling
|
2016-07-25 15:35:46 -07:00 |
scripts.base.frameworks.input.event
|
Improve introspection of Record and TypeType values
|
2018-10-18 15:10:02 -05:00 |
scripts.base.frameworks.input.invalid-lines
|
Ascii reader error changes - fix small bugs
|
2017-03-03 12:42:44 -08:00 |
scripts.base.frameworks.input.invalidnumbers
|
Add error events to input framework.
|
2016-07-22 19:45:28 -07:00 |
scripts.base.frameworks.input.invalidset
|
Fix segmentation fault when parsing sets containing invalid elements.
|
2018-01-29 14:22:44 -08:00 |
scripts.base.frameworks.input.invalidtext
|
Input: Further small changes to error handling
|
2016-07-25 15:35:46 -07:00 |
scripts.base.frameworks.input.missing-enum
|
Tiny fix to correct a warning message.
|
2017-02-23 23:13:48 -05:00 |
scripts.base.frameworks.input.missing-file
|
Ascii reader error changes - fix small bugs
|
2017-03-03 12:42:44 -08:00 |
scripts.base.frameworks.input.missing-file-initially
|
Sort output of the missing-file-initially.bro test
|
2018-05-09 14:30:22 -05:00 |
scripts.base.frameworks.input.onecolumn-norecord
|
make want_record field for tablefilter work...
|
2011-11-21 15:09:00 -08:00 |
scripts.base.frameworks.input.onecolumn-record
|
make want_record field for tablefilter work...
|
2011-11-21 15:09:00 -08:00 |
scripts.base.frameworks.input.optional
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.frameworks.input.path-prefix.absolute-prefix
|
Source file path control for Input and Intel frameworks
|
2019-03-15 16:43:36 -07:00 |
scripts.base.frameworks.input.path-prefix.absolute-prefix-2
|
Source file path control for Input and Intel frameworks
|
2019-03-15 16:43:36 -07:00 |
scripts.base.frameworks.input.path-prefix.absolute-prefix-3
|
Source file path control for Input and Intel frameworks
|
2019-03-15 16:43:36 -07:00 |
scripts.base.frameworks.input.path-prefix.absolute-source
|
Source file path control for Input and Intel frameworks
|
2019-03-15 16:43:36 -07:00 |
scripts.base.frameworks.input.path-prefix.absolute-source-2
|
Source file path control for Input and Intel frameworks
|
2019-03-15 16:43:36 -07:00 |
scripts.base.frameworks.input.path-prefix.absolute-source-3
|
Source file path control for Input and Intel frameworks
|
2019-03-15 16:43:36 -07:00 |
scripts.base.frameworks.input.path-prefix.no-paths
|
Source file path control for Input and Intel frameworks
|
2019-03-15 16:43:36 -07:00 |
scripts.base.frameworks.input.path-prefix.no-paths-2
|
Source file path control for Input and Intel frameworks
|
2019-03-15 16:43:36 -07:00 |
scripts.base.frameworks.input.path-prefix.no-paths-3
|
Source file path control for Input and Intel frameworks
|
2019-03-15 16:43:36 -07:00 |
scripts.base.frameworks.input.path-prefix.relative-prefix
|
Source file path control for Input and Intel frameworks
|
2019-03-15 16:43:36 -07:00 |
scripts.base.frameworks.input.path-prefix.relative-prefix-2
|
Source file path control for Input and Intel frameworks
|
2019-03-15 16:43:36 -07:00 |
scripts.base.frameworks.input.path-prefix.relative-prefix-3
|
Source file path control for Input and Intel frameworks
|
2019-03-15 16:43:36 -07:00 |
scripts.base.frameworks.input.port
|
make test more robust.
|
2011-12-06 10:50:36 -08:00 |
scripts.base.frameworks.input.port-embedded
|
Ascii formatter: do not complain about port text.
|
2018-08-10 11:29:35 -07:00 |
scripts.base.frameworks.input.predicate
|
add very basic predicate test.
|
2011-11-21 15:36:03 -08:00 |
scripts.base.frameworks.input.predicate-stream
|
fix one of the bugs seth found in the input framework.
|
2012-02-22 10:46:35 -08:00 |
scripts.base.frameworks.input.predicatemodify
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.frameworks.input.predicatemodifyandreread
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.frameworks.input.predicaterefusesecondsamerecord
|
fix little sneaky bug in input framework with an edge case.
|
2012-08-04 22:38:26 -07:00 |
scripts.base.frameworks.input.raw.basic
|
Improve introspection of Record and TypeType values
|
2018-10-18 15:10:02 -05:00 |
scripts.base.frameworks.input.raw.execute
|
Improve introspection of Record and TypeType values
|
2018-10-18 15:10:02 -05:00 |
scripts.base.frameworks.input.raw.executestdin
|
BIT-1941: improve unit test stability
|
2018-07-03 15:00:52 -05:00 |
scripts.base.frameworks.input.raw.executestream
|
BIT-1941: improve unit test stability
|
2018-07-03 15:00:52 -05:00 |
scripts.base.frameworks.input.raw.long
|
small fixes.
|
2013-05-27 22:59:27 -07:00 |
scripts.base.frameworks.input.raw.offset
|
Fix offset=-1 (eof) for raw reader
|
2015-09-16 15:16:04 -07:00 |
scripts.base.frameworks.input.raw.rereadraw
|
Improve introspection of Record and TypeType values
|
2018-10-18 15:10:02 -05:00 |
scripts.base.frameworks.input.raw.stderr
|
Improve an input framework unit test
|
2018-07-17 17:51:52 -05:00 |
scripts.base.frameworks.input.raw.streamraw
|
BIT-1941: improve unit test stability
|
2018-07-03 15:00:52 -05:00 |
scripts.base.frameworks.input.repeat
|
Updating input framework unit tests.
|
2012-06-29 12:50:57 -05:00 |
scripts.base.frameworks.input.reread
|
Improve introspection of Record and TypeType values
|
2018-10-18 15:10:02 -05:00 |
scripts.base.frameworks.input.set
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.frameworks.input.setseparator
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.frameworks.input.setspecialcases
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.frameworks.input.sqlite.basic
|
Baseline updates for the addition of local_resp.
|
2015-02-23 16:25:11 -08:00 |
scripts.base.frameworks.input.sqlite.error
|
make sqlite3 executable required and add test-cases for errors
|
2013-05-14 22:09:46 -07:00 |
scripts.base.frameworks.input.sqlite.port
|
make sqlite support more or less work for logging and input
|
2013-01-15 16:01:30 -08:00 |
scripts.base.frameworks.input.sqlite.types
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.frameworks.input.stream
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.frameworks.input.subrecord
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.frameworks.input.subrecord-event
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.frameworks.input.tableevent
|
Fix race-condition in table-event test.
|
2013-03-07 20:28:18 -08:00 |
scripts.base.frameworks.input.twotables
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.frameworks.input.unsupported_types
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.frameworks.input.windows
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.frameworks.intel.cluster-transparency
|
Merge topic/actor-system throug a squashed commit.
|
2018-05-18 22:39:23 +00:00 |
scripts.base.frameworks.intel.cluster-transparency-with-proxy
|
Change Intel framework to round-robin insertion events across proxies
|
2018-05-24 14:36:22 -05:00 |
scripts.base.frameworks.intel.expire-item
|
Add subnet intel expiration to a test.
|
2018-04-27 19:55:22 -04:00 |
scripts.base.frameworks.intel.filter-item
|
Added test for intel item filtering.
|
2019-03-24 21:32:45 +01:00 |
scripts.base.frameworks.intel.input-and-match
|
Refactored FAF integration of intel framework.
|
2016-06-15 21:56:53 +02:00 |
scripts.base.frameworks.intel.match-subnet
|
Tiny scoping updates and test baseline updates for Intel framework.
|
2016-08-05 09:29:23 -04:00 |
scripts.base.frameworks.intel.path-prefix.input-intel-absolute-prefixes
|
Source file path control for Input and Intel frameworks
|
2019-03-15 16:43:36 -07:00 |
scripts.base.frameworks.intel.path-prefix.input-intel-relative-prefixes
|
Source file path control for Input and Intel frameworks
|
2019-03-15 16:43:36 -07:00 |
scripts.base.frameworks.intel.path-prefix.input-prefix
|
Source file path control for Input and Intel frameworks
|
2019-03-15 16:43:36 -07:00 |
scripts.base.frameworks.intel.path-prefix.no-paths
|
Source file path control for Input and Intel frameworks
|
2019-03-15 16:43:36 -07:00 |
scripts.base.frameworks.intel.read-file-dist-cluster
|
Refactored FAF integration of intel framework.
|
2016-06-15 21:56:53 +02:00 |
scripts.base.frameworks.intel.remove-item-cluster
|
Refactored FAF integration of intel framework.
|
2016-06-15 21:56:53 +02:00 |
scripts.base.frameworks.intel.remove-non-existing
|
Update tests and baselines due to renaming all scripts
|
2019-04-11 23:32:58 -05:00 |
scripts.base.frameworks.intel.updated-match
|
Merge topic/actor-system throug a squashed commit.
|
2018-05-18 22:39:23 +00:00 |
scripts.base.frameworks.logging.adapt-filter
|
Changing the start/end markers in logs to open/close now reflecting
|
2012-07-27 12:15:21 -07:00 |
scripts.base.frameworks.logging.ascii-binary
|
Changing the start/end markers in logs to open/close now reflecting
|
2012-07-27 12:15:21 -07:00 |
scripts.base.frameworks.logging.ascii-double
|
Fix ASCII logging of very large values of type "double"
|
2017-11-06 14:01:07 -06:00 |
scripts.base.frameworks.logging.ascii-empty
|
Updating tests for the #start/#end change.
|
2012-07-19 22:28:55 -07:00 |
scripts.base.frameworks.logging.ascii-escape
|
Tests updates for recent open/close log change.
|
2012-07-27 12:39:11 -07:00 |
scripts.base.frameworks.logging.ascii-escape-binary
|
In bifs, change ODesc objects to have RAW_STYLE.
|
2015-04-16 21:50:50 -07:00 |
scripts.base.frameworks.logging.ascii-escape-empty-str
|
Escape the empty indicator in logs if it occurs literally as a field's
|
2016-07-05 16:34:24 -07:00 |
scripts.base.frameworks.logging.ascii-escape-notset-str
|
Changing the start/end markers in logs to open/close now reflecting
|
2012-07-27 12:15:21 -07:00 |
scripts.base.frameworks.logging.ascii-escape-odd-url
|
Merge branch 'patch-1' of https://github.com/neu5ron/bro
|
2019-03-13 13:49:17 -07:00 |
scripts.base.frameworks.logging.ascii-escape-set-separator
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.frameworks.logging.ascii-gz
|
Add gzip log writing to the ascii writer.
|
2017-04-24 13:15:32 -07:00 |
scripts.base.frameworks.logging.ascii-json
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.frameworks.logging.ascii-json-iso-timestamps
|
GH-186: fix JSON formatting of timestamps before Unix epoch
|
2018-10-12 21:34:28 +00:00 |
scripts.base.frameworks.logging.ascii-json-optional
|
Merge branch 'master' of https://github.com/aeppert/bro
|
2015-10-26 16:52:47 -07:00 |
scripts.base.frameworks.logging.ascii-line-like-comment
|
Changing the start/end markers in logs to open/close now reflecting
|
2012-07-27 12:15:21 -07:00 |
scripts.base.frameworks.logging.ascii-options
|
Updating tests for the #start/#end change.
|
2012-07-19 22:28:55 -07:00 |
scripts.base.frameworks.logging.ascii-timestamps
|
Changing the start/end markers in logs to open/close now reflecting
|
2012-07-27 12:15:21 -07:00 |
scripts.base.frameworks.logging.ascii-tsv
|
Renaming ASCII writer filter option 'only_single_header_row' to 'tsv'.
|
2012-12-03 14:40:38 -08:00 |
scripts.base.frameworks.logging.attr
|
Changing the start/end markers in logs to open/close now reflecting
|
2012-07-27 12:15:21 -07:00 |
scripts.base.frameworks.logging.attr-extend
|
Changing the start/end markers in logs to open/close now reflecting
|
2012-07-27 12:15:21 -07:00 |
scripts.base.frameworks.logging.empty-event
|
Changing the start/end markers in logs to open/close now reflecting
|
2012-07-27 12:15:21 -07:00 |
scripts.base.frameworks.logging.enable-stream
|
Logging: implement get_filter_names and small fixes.
|
2018-01-17 09:47:20 -08:00 |
scripts.base.frameworks.logging.events
|
Updating tests for the #start/#end change.
|
2012-07-19 22:28:55 -07:00 |
scripts.base.frameworks.logging.exclude
|
Changing the start/end markers in logs to open/close now reflecting
|
2012-07-27 12:15:21 -07:00 |
scripts.base.frameworks.logging.field-extension
|
Make tunnel_parents in conn.log optional.
|
2018-01-12 13:46:00 -08:00 |
scripts.base.frameworks.logging.field-extension-cluster
|
Merge branch 'patch-1' of https://github.com/neu5ron/bro
|
2019-03-13 13:49:17 -07:00 |
scripts.base.frameworks.logging.field-extension-cluster-error
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
scripts.base.frameworks.logging.field-extension-complex
|
Make tunnel_parents in conn.log optional.
|
2018-01-12 13:46:00 -08:00 |
scripts.base.frameworks.logging.field-extension-invalid
|
Make tunnel_parents in conn.log optional.
|
2018-01-12 13:46:00 -08:00 |
scripts.base.frameworks.logging.field-extension-optional
|
Make tunnel_parents in conn.log optional.
|
2018-01-12 13:46:00 -08:00 |
scripts.base.frameworks.logging.field-extension-table
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
scripts.base.frameworks.logging.field-name-map
|
Make tunnel_parents in conn.log optional.
|
2018-01-12 13:46:00 -08:00 |
scripts.base.frameworks.logging.field-name-map2
|
Fix invalid memory free when using Log::default_field_name_map
|
2018-09-10 19:06:35 -05:00 |
scripts.base.frameworks.logging.file
|
Changing the start/end markers in logs to open/close now reflecting
|
2012-07-27 12:15:21 -07:00 |
scripts.base.frameworks.logging.include
|
Changing the start/end markers in logs to open/close now reflecting
|
2012-07-27 12:15:21 -07:00 |
scripts.base.frameworks.logging.none-debug
|
Extending the log writer DoInit() API.
|
2012-06-21 17:42:33 -07:00 |
scripts.base.frameworks.logging.path-func
|
Changing the start/end markers in logs to open/close now reflecting
|
2012-07-27 12:15:21 -07:00 |
scripts.base.frameworks.logging.path-func-column-demote
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.frameworks.logging.pred
|
Changing the start/end markers in logs to open/close now reflecting
|
2012-07-27 12:15:21 -07:00 |
scripts.base.frameworks.logging.remove
|
Logging: implement get_filter_names and small fixes.
|
2018-01-17 09:47:20 -08:00 |
scripts.base.frameworks.logging.rotate
|
Changing the start/end markers in logs to open/close now reflecting
|
2012-07-27 12:15:21 -07:00 |
scripts.base.frameworks.logging.rotate-custom
|
Changing the start/end markers in logs to open/close now reflecting
|
2012-07-27 12:15:21 -07:00 |
scripts.base.frameworks.logging.scope_sep
|
Make tunnel_parents in conn.log optional.
|
2018-01-12 13:46:00 -08:00 |
scripts.base.frameworks.logging.scope_sep_and_field_name_map
|
Make tunnel_parents in conn.log optional.
|
2018-01-12 13:46:00 -08:00 |
scripts.base.frameworks.logging.sqlite.error
|
rename the dbname configuration option to tablename.
|
2013-10-17 12:24:40 -07:00 |
scripts.base.frameworks.logging.sqlite.set
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.frameworks.logging.sqlite.simultaneous-writes
|
Enable SQLite shared cache mode.
|
2016-07-21 12:10:20 -07:00 |
scripts.base.frameworks.logging.sqlite.types
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.frameworks.logging.sqlite.wikipedia
|
Merge branch 'patch-1' of https://github.com/neu5ron/bro
|
2019-03-13 13:49:17 -07:00 |
scripts.base.frameworks.logging.stdout
|
Changing the start/end markers in logs to open/close now reflecting
|
2012-07-27 12:15:21 -07:00 |
scripts.base.frameworks.logging.test-logging
|
Changing the start/end markers in logs to open/close now reflecting
|
2012-07-27 12:15:21 -07:00 |
scripts.base.frameworks.logging.types
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.frameworks.logging.unset-record
|
Changing the start/end markers in logs to open/close now reflecting
|
2012-07-27 12:15:21 -07:00 |
scripts.base.frameworks.logging.vec
|
Changing the start/end markers in logs to open/close now reflecting
|
2012-07-27 12:15:21 -07:00 |
scripts.base.frameworks.logging.writer-path-conflict
|
Merge branch 'patch-1' of https://github.com/neu5ron/bro
|
2019-03-13 13:49:17 -07:00 |
scripts.base.frameworks.netcontrol.acld
|
Parallelize communication tests using btest TEST-PORT
|
2018-11-04 15:29:59 -06:00 |
scripts.base.frameworks.netcontrol.acld-hook
|
Parallelize communication tests using btest TEST-PORT
|
2018-11-04 15:29:59 -06:00 |
scripts.base.frameworks.netcontrol.basic
|
NetControl: add rule exists as state besides added and failure.
|
2016-03-24 15:06:07 -07:00 |
scripts.base.frameworks.netcontrol.basic-cluster
|
BIT-1941: improve unit test stability
|
2018-07-03 15:00:52 -05:00 |
scripts.base.frameworks.netcontrol.broker
|
Parallelize communication tests using btest TEST-PORT
|
2018-11-04 15:29:59 -06:00 |
scripts.base.frameworks.netcontrol.catch-and-release
|
NetControl: allow reasons in remove_rule calls.
|
2016-08-05 10:49:09 -07:00 |
scripts.base.frameworks.netcontrol.catch-and-release-2
|
NetControl: allow reasons in remove_rule calls.
|
2016-08-05 10:49:09 -07:00 |
scripts.base.frameworks.netcontrol.catch-and-release-forgotten
|
NetControl: allow reasons in remove_rule calls.
|
2016-08-05 10:49:09 -07:00 |
scripts.base.frameworks.netcontrol.delete-internal-state
|
NetControl: allow reasons in remove_rule calls.
|
2016-08-05 10:49:09 -07:00 |
scripts.base.frameworks.netcontrol.duplicate
|
Rewrite internal handling of rules.
|
2016-03-09 15:43:47 -08:00 |
scripts.base.frameworks.netcontrol.find-rules
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.frameworks.netcontrol.hook
|
Rewrite internal handling of rules.
|
2016-03-09 15:43:47 -08:00 |
scripts.base.frameworks.netcontrol.multiple
|
NetControl: add rule exists as state besides added and failure.
|
2016-03-24 15:06:07 -07:00 |
scripts.base.frameworks.netcontrol.openflow
|
NetControl: add rule exists as state besides added and failure.
|
2016-03-24 15:06:07 -07:00 |
scripts.base.frameworks.netcontrol.packetfilter
|
added 'g' $history character for content gaps
|
2019-04-17 14:20:48 -07:00 |
scripts.base.frameworks.netcontrol.quarantine-openflow
|
NetControl: add rule exists as state besides added and failure.
|
2016-03-24 15:06:07 -07:00 |
scripts.base.frameworks.netcontrol.timeout
|
Rewrite internal handling of rules.
|
2016-03-09 15:43:47 -08:00 |
scripts.base.frameworks.notice.cluster
|
Change #types description of sets to set
|
2014-04-01 16:25:47 -07:00 |
scripts.base.frameworks.notice.mail-alarms
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.frameworks.notice.suppression
|
Merge topic/actor-system throug a squashed commit.
|
2018-05-18 22:39:23 +00:00 |
scripts.base.frameworks.notice.suppression-cluster
|
Change #types description of sets to set
|
2014-04-01 16:25:47 -07:00 |
scripts.base.frameworks.openflow.broker-basic
|
Parallelize communication tests using btest TEST-PORT
|
2018-11-04 15:29:59 -06:00 |
scripts.base.frameworks.openflow.log-basic
|
Update OpenFlow API and events.
|
2016-02-11 13:10:40 -08:00 |
scripts.base.frameworks.openflow.log-cluster
|
Update OpenFlow API and events.
|
2016-02-11 13:10:40 -08:00 |
scripts.base.frameworks.openflow.ryu-basic
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.frameworks.reporter.disable-stderr
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
scripts.base.frameworks.reporter.stderr
|
Use .zeek file suffix in unit tests
|
2019-04-16 16:08:57 -07:00 |
scripts.base.frameworks.software.version-parsing
|
GH-281: Improve parsing of Google Pixel user agent
|
2019-02-25 14:07:53 -06:00 |
scripts.base.frameworks.sumstats.basic
|
Fix problems with SumStats non-cluster.bro script
|
2018-01-18 11:14:39 -06:00 |
scripts.base.frameworks.sumstats.basic-cluster
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.frameworks.sumstats.cluster-intermediate-update
|
Updates for SumStats API to deal with high memory stats.
|
2013-08-02 12:44:33 -04:00 |
scripts.base.frameworks.sumstats.last-cluster
|
Fix SumStats "last" plugin in cluster mode
|
2018-11-08 12:27:37 -06:00 |
scripts.base.frameworks.sumstats.on-demand
|
Updates for SumStats API to deal with high memory stats.
|
2013-08-02 12:44:33 -04:00 |
scripts.base.frameworks.sumstats.on-demand-cluster
|
Updates for SumStats API to deal with high memory stats.
|
2013-08-02 12:44:33 -04:00 |
scripts.base.frameworks.sumstats.sample
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.frameworks.sumstats.sample-cluster
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.frameworks.sumstats.thresholding
|
Updating tests for HLL merge.
|
2013-08-31 11:17:49 -07:00 |
scripts.base.frameworks.sumstats.topk
|
topk for sumstats
|
2013-04-23 15:19:01 -07:00 |
scripts.base.frameworks.sumstats.topk-cluster
|
add topk cluster test
|
2013-04-24 15:30:24 -07:00 |
scripts.base.misc.find-filtered-trace
|
Update tests and baselines due to renaming all scripts
|
2019-04-11 23:32:58 -05:00 |
scripts.base.misc.version
|
Update tests and baselines due to renaming all scripts
|
2019-04-11 23:32:58 -05:00 |
scripts.base.misc.version-2
|
Add convenient way to access version information to Bro.
|
2016-09-29 12:45:48 -07:00 |
scripts.base.protocols.arp.bad
|
Add bad ARP tests
|
2018-05-18 17:39:53 +02:00 |
scripts.base.protocols.arp.basic
|
ARP: remove unnecessary variables and add testcase
|
2016-04-27 06:51:04 -07:00 |
scripts.base.protocols.arp.radiotap
|
Add tests for ARP in 802.11 (w & w/o RadioTAP)
|
2018-05-15 18:15:17 +02:00 |
scripts.base.protocols.arp.wlanmon
|
Add tests for ARP in 802.11 (w & w/o RadioTAP)
|
2018-05-15 18:15:17 +02:00 |
scripts.base.protocols.conn.contents-default-extract
|
Change IPv6 address/prefix output format to be bracketed.
|
2012-05-04 11:21:18 -05:00 |
scripts.base.protocols.conn.new_connection_contents
|
Fix duplication of new_connection_contents event
|
2016-05-17 10:32:13 -07:00 |
scripts.base.protocols.conn.polling
|
Add an example of a GridFTP data channel detection script.
|
2012-10-01 12:32:24 -05:00 |
scripts.base.protocols.conn.threshold
|
Add high level api for thresholding that holds lists of thresholds
|
2015-04-17 06:57:58 -07:00 |
scripts.base.protocols.dce-rpc.context
|
Fix tracking of DCE-RPC context identifier mappings
|
2018-08-23 15:11:38 -05:00 |
scripts.base.protocols.dce-rpc.mapi
|
Merge remote-tracking branch 'origin/topic/seth/ntlm-fixes'
|
2018-09-04 17:18:56 -05:00 |
scripts.base.protocols.dhcp.dhcp-ack-msg-types
|
Rework to the DHCP analyzer.
|
2018-03-01 08:36:32 -08:00 |
scripts.base.protocols.dhcp.dhcp-all-msg-types
|
Rework to the DHCP analyzer.
|
2018-03-01 08:36:32 -08:00 |
scripts.base.protocols.dhcp.dhcp-discover-msg-types
|
Rework to the DHCP analyzer.
|
2018-03-01 08:36:32 -08:00 |
scripts.base.protocols.dhcp.dhcp-sub-opts
|
Rework to the DHCP analyzer.
|
2018-03-01 08:36:32 -08:00 |
scripts.base.protocols.dhcp.inform
|
Rework to the DHCP analyzer.
|
2018-03-01 08:36:32 -08:00 |
scripts.base.protocols.dnp3.dnp3_del_measure
|
Update &check'd fields in various protocol parsers
|
2018-04-18 18:16:34 -05:00 |
scripts.base.protocols.dnp3.dnp3_en_spon
|
Update &check'd fields in various protocol parsers
|
2018-04-18 18:16:34 -05:00 |
scripts.base.protocols.dnp3.dnp3_file_del
|
Update &check'd fields in various protocol parsers
|
2018-04-18 18:16:34 -05:00 |
scripts.base.protocols.dnp3.dnp3_file_read
|
Update &check'd fields in various protocol parsers
|
2018-04-18 18:16:34 -05:00 |
scripts.base.protocols.dnp3.dnp3_file_write
|
Update &check'd fields in various protocol parsers
|
2018-04-18 18:16:34 -05:00 |
scripts.base.protocols.dnp3.dnp3_link_only
|
Update &check'd fields in various protocol parsers
|
2018-04-18 18:16:34 -05:00 |
scripts.base.protocols.dnp3.dnp3_read
|
Update &check'd fields in various protocol parsers
|
2018-04-18 18:16:34 -05:00 |
scripts.base.protocols.dnp3.dnp3_rec_time
|
Update &check'd fields in various protocol parsers
|
2018-04-18 18:16:34 -05:00 |
scripts.base.protocols.dnp3.dnp3_select_operate
|
Update &check'd fields in various protocol parsers
|
2018-04-18 18:16:34 -05:00 |
scripts.base.protocols.dnp3.dnp3_udp_en_spon
|
Update &check'd fields in various protocol parsers
|
2018-04-18 18:16:34 -05:00 |
scripts.base.protocols.dnp3.dnp3_udp_read
|
Update &check'd fields in various protocol parsers
|
2018-04-18 18:16:34 -05:00 |
scripts.base.protocols.dnp3.dnp3_udp_select_operate
|
Update &check'd fields in various protocol parsers
|
2018-04-18 18:16:34 -05:00 |
scripts.base.protocols.dnp3.dnp3_udp_write
|
Update &check'd fields in various protocol parsers
|
2018-04-18 18:16:34 -05:00 |
scripts.base.protocols.dnp3.dnp3_write
|
Update &check'd fields in various protocol parsers
|
2018-04-18 18:16:34 -05:00 |
scripts.base.protocols.dnp3.events
|
Update &check'd fields in various protocol parsers
|
2018-04-18 18:16:34 -05:00 |
scripts.base.protocols.dns.caa
|
Add DNS tests for huge TLL and CAA
|
2016-04-25 15:43:20 -07:00 |
scripts.base.protocols.dns.dns-key
|
Merge branch 'fatemabw/bro' of https://github.com/fatemabw/bro into dev/2.7
|
2018-09-21 16:40:41 -05:00 |
scripts.base.protocols.dns.dnskey
|
Merge branch 'fatemabw/bro' of https://github.com/fatemabw/bro into dev/2.7
|
2018-09-21 16:40:41 -05:00 |
scripts.base.protocols.dns.ds
|
Merge branch 'fatemabw/bro' of https://github.com/fatemabw/bro into dev/2.7
|
2018-09-21 16:40:41 -05:00 |
scripts.base.protocols.dns.duplicate-reponses
|
Merge branch 'fatemabw/bro' of https://github.com/fatemabw/bro into dev/2.7
|
2018-09-21 16:40:41 -05:00 |
scripts.base.protocols.dns.flip
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.protocols.dns.huge-ttl
|
Add DNS tests for huge TLL and CAA
|
2016-04-25 15:43:20 -07:00 |
scripts.base.protocols.dns.multiple-txt-strings
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.protocols.dns.nsec
|
Merge branch 'fatemabw/bro' of https://github.com/fatemabw/bro into dev/2.7
|
2018-09-21 16:40:41 -05:00 |
scripts.base.protocols.dns.nsec3
|
Merge branch 'fatemabw/bro' of https://github.com/fatemabw/bro into dev/2.7
|
2018-09-21 16:40:41 -05:00 |
scripts.base.protocols.dns.rrsig
|
Merge branch 'fatemabw/bro' of https://github.com/fatemabw/bro into dev/2.7
|
2018-09-21 16:40:41 -05:00 |
scripts.base.protocols.dns.tsig
|
Changing what's escaped when printing.
|
2015-04-15 16:59:50 -07:00 |
scripts.base.protocols.dns.zero-responses
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.protocols.ftp.cwd-navigation
|
added 'g' $history character for content gaps
|
2019-04-17 14:20:48 -07:00 |
scripts.base.protocols.ftp.ftp-get-file-size
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.protocols.ftp.ftp-ipv4
|
Make tunnel_parents in conn.log optional.
|
2018-01-12 13:46:00 -08:00 |
scripts.base.protocols.ftp.ftp-ipv6
|
Make tunnel_parents in conn.log optional.
|
2018-01-12 13:46:00 -08:00 |
scripts.base.protocols.ftp.gridftp
|
Merge topic/actor-system throug a squashed commit.
|
2018-05-18 22:39:23 +00:00 |
scripts.base.protocols.http.100-continue
|
Merge branch 'patch-1' of https://github.com/neu5ron/bro
|
2019-03-13 13:49:17 -07:00 |
scripts.base.protocols.http.101-switching-protocols
|
Merge branch 'patch-1' of https://github.com/neu5ron/bro
|
2019-03-13 13:49:17 -07:00 |
scripts.base.protocols.http.content-range-gap
|
Fix file analysis placement of data after gap in HTTP Content-Range.
|
2014-09-11 12:25:43 -05:00 |
scripts.base.protocols.http.content-range-less-than-len
|
Merge branch 'patch-1' of https://github.com/neu5ron/bro
|
2019-03-13 13:49:17 -07:00 |
scripts.base.protocols.http.entity-gap
|
Changing what's escaped when printing.
|
2015-04-15 16:59:50 -07:00 |
scripts.base.protocols.http.entity-gap2
|
Changing what's escaped when printing.
|
2015-04-15 16:59:50 -07:00 |
scripts.base.protocols.http.fake-content-length
|
Merge branch 'patch-1' of https://github.com/neu5ron/bro
|
2019-03-13 13:49:17 -07:00 |
scripts.base.protocols.http.http-bad-request-with-version
|
Merge branch 'patch-1' of https://github.com/neu5ron/bro
|
2019-03-13 13:49:17 -07:00 |
scripts.base.protocols.http.http-connect
|
Merge branch 'patch-1' of https://github.com/neu5ron/bro
|
2019-03-13 13:49:17 -07:00 |
scripts.base.protocols.http.http-connect-with-header
|
Merge branch 'patch-1' of https://github.com/neu5ron/bro
|
2019-03-13 13:49:17 -07:00 |
scripts.base.protocols.http.http-filename
|
Merge branch 'patch-1' of https://github.com/neu5ron/bro
|
2019-03-13 13:49:17 -07:00 |
scripts.base.protocols.http.http-methods
|
Merge branch 'patch-1' of https://github.com/neu5ron/bro
|
2019-03-13 13:49:17 -07:00 |
scripts.base.protocols.http.http-pipelining
|
Merge branch 'patch-1' of https://github.com/neu5ron/bro
|
2019-03-13 13:49:17 -07:00 |
scripts.base.protocols.http.missing-zlib-header
|
Merge branch 'patch-1' of https://github.com/neu5ron/bro
|
2019-03-13 13:49:17 -07:00 |
scripts.base.protocols.http.multipart-extract
|
Merge branch 'patch-1' of https://github.com/neu5ron/bro
|
2019-03-13 13:49:17 -07:00 |
scripts.base.protocols.http.multipart-file-limit
|
Merge branch 'patch-1' of https://github.com/neu5ron/bro
|
2019-03-13 13:49:17 -07:00 |
scripts.base.protocols.http.no-uri
|
Merge branch 'patch-1' of https://github.com/neu5ron/bro
|
2019-03-13 13:49:17 -07:00 |
scripts.base.protocols.http.no-version
|
Merge branch 'patch-1' of https://github.com/neu5ron/bro
|
2019-03-13 13:49:17 -07:00 |
scripts.base.protocols.http.percent-end-of-line
|
Merge branch 'patch-1' of https://github.com/neu5ron/bro
|
2019-03-13 13:49:17 -07:00 |
scripts.base.protocols.http.x-gzip
|
Merge branch 'patch-1' of https://github.com/neu5ron/bro
|
2019-03-13 13:49:17 -07:00 |
scripts.base.protocols.imap.capabilities
|
Add support of getting server capabilities to IMAP parser.
|
2015-07-23 11:15:57 -07:00 |
scripts.base.protocols.imap.starttls
|
Make tunnel_parents in conn.log optional.
|
2018-01-12 13:46:00 -08:00 |
scripts.base.protocols.irc.basic
|
Make tunnel_parents in conn.log optional.
|
2018-01-12 13:46:00 -08:00 |
scripts.base.protocols.irc.events
|
Merge branch 'master' of https://github.com/marktayl/bro
|
2016-02-12 18:55:25 -08:00 |
scripts.base.protocols.irc.longline
|
add a max_line_length flag to ContentLine_Analyzer
|
2017-11-03 16:25:26 -04:00 |
scripts.base.protocols.irc.names-weird
|
Fix IRC names command parsing
|
2018-09-12 19:47:57 -05:00 |
scripts.base.protocols.irc.starttls
|
Make tunnel_parents in conn.log optional.
|
2018-01-12 13:46:00 -08:00 |
scripts.base.protocols.krb.kinit
|
KRB: do not set authentication info to nouser.
|
2018-06-01 12:32:34 -07:00 |
scripts.base.protocols.krb.smb2_krb
|
Add krb unit test
|
2018-05-10 10:14:30 -04:00 |
scripts.base.protocols.krb.smb2_krb_nokeytab
|
KRB: do not set keytab by default.
|
2018-06-01 12:46:26 -07:00 |
scripts.base.protocols.krb.smb_gssapi
|
Added and verified correct test results
|
2017-09-17 21:25:59 +00:00 |
scripts.base.protocols.krb.tgs
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.protocols.modbus.coil_parsing_big
|
Add some documentation for modbus data types.
|
2016-06-18 01:46:07 -04:00 |
scripts.base.protocols.modbus.coil_parsing_small
|
Add some documentation for modbus data types.
|
2016-06-18 01:46:07 -04:00 |
scripts.base.protocols.modbus.events
|
Remove variable content from weird names
|
2019-04-01 18:30:11 -07:00 |
scripts.base.protocols.modbus.exception_handling
|
Remove variable content from weird names
|
2019-04-01 18:30:11 -07:00 |
scripts.base.protocols.modbus.policy
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.protocols.modbus.register_parsing
|
Convert some BinPAC &check expressions to &enforce
|
2018-04-19 14:07:40 -05:00 |
scripts.base.protocols.mount.basic
|
Add return value checks for some RPC parsing functions
|
2018-10-04 11:33:57 -05:00 |
scripts.base.protocols.mysql.auth
|
Fixes for MySQL and SMB protocol parsers
|
2018-05-18 10:31:36 -05:00 |
scripts.base.protocols.mysql.encrypted
|
Add a test with an encrypted MySQL connection
|
2018-10-29 15:58:06 -05:00 |
scripts.base.protocols.mysql.wireshark
|
Fixes for MySQL and SMB protocol parsers
|
2018-05-18 10:31:36 -05:00 |
scripts.base.protocols.ncp.event
|
Migrate NCP analyzer to use latest analyzer API
|
2018-05-22 16:27:07 -05:00 |
scripts.base.protocols.ncp.frame_size_tuning
|
Add NCP::max_frame_size tuning option
|
2018-05-22 18:27:52 -05:00 |
scripts.base.protocols.nfs.basic
|
Add return value checks for some RPC parsing functions
|
2018-10-04 11:33:57 -05:00 |
scripts.base.protocols.pop3.starttls
|
Make tunnel_parents in conn.log optional.
|
2018-01-12 13:46:00 -08:00 |
scripts.base.protocols.radius.auth
|
Rework the RADIUS base script.
|
2017-02-20 00:07:14 -05:00 |
scripts.base.protocols.radius.radius-multiple-attempts
|
Rework the RADIUS base script.
|
2017-02-20 00:07:14 -05:00 |
scripts.base.protocols.rdp.rdp-proprietary-encryption
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.protocols.rdp.rdp-to-ssl
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.protocols.rdp.rdp-x509
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.protocols.rfb.rfb-apple-remote-desktop
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.protocols.rfb.vnc-mac-to-linux
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.protocols.sip.wireshark
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.protocols.smb.raw-ntlm
|
Including a test for raw NTLM in SMB
|
2016-10-26 10:41:08 -04:00 |
scripts.base.protocols.smb.smb1
|
Merge remote-tracking branch 'origin/master' into topic/seth/smb
|
2016-08-08 15:46:49 -04:00 |
scripts.base.protocols.smb.smb1-transaction-dcerpc
|
Merge remote-tracking branch 'origin/master' into topic/seth/smb
|
2016-08-08 15:46:49 -04:00 |
scripts.base.protocols.smb.smb1-transaction-request
|
add test for smb1_com_transaction_request event changes
|
2018-01-12 13:00:05 +01:00 |
scripts.base.protocols.smb.smb1-transaction-response
|
add test for smb1_com_transaction_response event changes
|
2018-01-19 14:29:31 +01:00 |
scripts.base.protocols.smb.smb1-transaction-secondary-request
|
add test for smb1_com_transaction_secondary_request event changes
|
2018-01-19 14:29:09 +01:00 |
scripts.base.protocols.smb.smb1-transaction2-request
|
add test for smb1_com_transaction2_request event changes
|
2018-01-19 14:29:20 +01:00 |
scripts.base.protocols.smb.smb1-transaction2-secondary-request
|
add test for smb1_com_transaction2_secondary_request event changes
|
2018-01-19 14:29:26 +01:00 |
scripts.base.protocols.smb.smb2
|
Add unit tests for new SMB2 event -- smb2_file_sattr.
|
2018-04-04 16:55:10 -04:00 |
scripts.base.protocols.smb.smb2-read-write
|
Merge branch 'smb2-fix' of https://github.com/mauropalumbo75/zeek
|
2019-03-20 18:01:35 -07:00 |
scripts.base.protocols.smb.smb2-write-response
|
Merge branch 'smb2_write_response' of https://github.com/mauropalumbo75/zeek
|
2019-04-12 10:13:41 -07:00 |
scripts.base.protocols.smb.smb3
|
clean up, test and pcap for transform_header added
|
2019-02-21 12:01:02 +01:00 |
scripts.base.protocols.smb.smb311
|
Merge branch 'smb3-negotiate-response' of https://github.com/mauropalumbo75/zeek
|
2019-03-21 14:13:21 -07:00 |
scripts.base.protocols.smtp.attachment
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.protocols.smtp.basic
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.protocols.smtp.one-side
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.protocols.smtp.starttls
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.protocols.snmp.snmp-addr
|
Correct endianness of IP addresses in SNMP.
|
2016-07-26 15:02:11 -07:00 |
scripts.base.protocols.snmp.v1
|
Correct endianness of IP addresses in SNMP.
|
2016-07-26 15:02:11 -07:00 |
scripts.base.protocols.snmp.v2
|
Add SNMP datagram parsing support.
|
2014-02-18 14:41:32 -06:00 |
scripts.base.protocols.snmp.v3
|
Changing what's escaped when printing.
|
2015-04-15 16:59:50 -07:00 |
scripts.base.protocols.socks.socks-auth
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.protocols.socks.socks-auth-2
|
Do not log SOCKS passwords by default.
|
2017-12-01 14:36:57 -08:00 |
scripts.base.protocols.socks.trace1
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.protocols.socks.trace2
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.protocols.socks.trace3
|
Changing the start/end markers in logs to open/close now reflecting
|
2012-07-27 12:15:21 -07:00 |
scripts.base.protocols.ssh.basic
|
Update btest baselines for fix in 46f727a6fa
|
2018-10-23 10:49:53 -05:00 |
scripts.base.protocols.ssh.curve25519_kex
|
Update baselines for SSH capabilities fix
|
2018-10-16 10:33:52 -05:00 |
scripts.base.protocols.ssh.one-auth-fail-only
|
Merge remote-tracking branch 'origin/topic/vladg/bit-1641'
|
2016-10-18 21:57:27 -04:00 |
scripts.base.protocols.ssl.basic
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.protocols.ssl.common_name
|
Do not log common name by default (it is most interesting for scripts)
|
2015-03-03 16:38:25 -08:00 |
scripts.base.protocols.ssl.comp_methods
|
Add compression methods to ssl_client_hello event.
|
2017-02-03 11:48:55 -08:00 |
scripts.base.protocols.ssl.cve-2015-3194
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.protocols.ssl.dhe
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.protocols.ssl.dpd
|
SSL: update dpd signature for TLS1.3
|
2017-04-05 08:58:08 -07:00 |
scripts.base.protocols.ssl.dtls
|
Make parsing of ServerKeyExchange work for D(TLS) < 1.2.
|
2017-11-30 12:20:45 -08:00 |
scripts.base.protocols.ssl.dtls-no-dtls
|
Update DTLS error handling
|
2019-04-04 12:27:42 -07:00 |
scripts.base.protocols.ssl.dtls-stun-dpd
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.protocols.ssl.ecdhe
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.protocols.ssl.ecdsa
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.protocols.ssl.fragment
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.protocols.ssl.handshake-events
|
Introduce ssl_plaintext_data event.
|
2017-02-03 13:58:26 -08:00 |
scripts.base.protocols.ssl.keyexchange
|
SSL: test updates for record_layer version
|
2018-08-28 11:02:20 -07:00 |
scripts.base.protocols.ssl.ocsp-http-get
|
Fix small OCSP parser bug.
|
2017-09-11 09:26:33 -07:00 |
scripts.base.protocols.ssl.ocsp-request-only
|
Fix small OCSP parser bug.
|
2017-09-11 09:26:33 -07:00 |
scripts.base.protocols.ssl.ocsp-request-response
|
Fix small OCSP parser bug.
|
2017-09-11 09:26:33 -07:00 |
scripts.base.protocols.ssl.ocsp-response-only
|
Fix small OCSP parser bug.
|
2017-09-11 09:26:33 -07:00 |
scripts.base.protocols.ssl.ocsp-revoked
|
Fix small OCSP parser bug.
|
2017-09-11 09:26:33 -07:00 |
scripts.base.protocols.ssl.ocsp-stapling
|
Implement verification of OCSP replies.
|
2014-05-16 10:32:08 -07:00 |
scripts.base.protocols.ssl.signed_certificate_timestamp
|
Make parsing of ServerKeyExchange work for D(TLS) < 1.2.
|
2017-11-30 12:20:45 -08:00 |
scripts.base.protocols.ssl.tls-1.2
|
SSL: test updates for record_layer version
|
2018-08-28 11:02:20 -07:00 |
scripts.base.protocols.ssl.tls-1.2-ciphers
|
Change ciphers in changes ciphers from a set to a vector.
|
2013-12-04 11:38:15 -08:00 |
scripts.base.protocols.ssl.tls-1.2-handshake-failure
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.protocols.ssl.tls-1.2-random
|
Changing what's escaped when printing.
|
2015-04-15 16:59:50 -07:00 |
scripts.base.protocols.ssl.tls-extension-events
|
update SSL consts from TLS 1.3
|
2019-04-22 22:57:45 +02:00 |
scripts.base.protocols.ssl.tls1_1
|
Make parsing of ServerKeyExchange work for D(TLS) < 1.2.
|
2017-11-30 12:20:45 -08:00 |
scripts.base.protocols.ssl.tls13
|
SSL: test updates for record_layer version
|
2018-08-28 11:02:20 -07:00 |
scripts.base.protocols.ssl.tls13-experiment
|
Recognize TLS 1.3 negotiation correctly.
|
2018-03-27 14:58:06 -07:00 |
scripts.base.protocols.ssl.tls13-version
|
Recognize TLS 1.3 negotiation correctly.
|
2018-03-27 14:58:06 -07:00 |
scripts.base.protocols.ssl.x509-invalid-extension
|
Fix read at invalid address in X509 extension parser.
|
2018-06-04 12:05:56 -07:00 |
scripts.base.protocols.ssl.x509_extensions
|
Changing what's escaped when printing.
|
2015-04-15 16:59:50 -07:00 |
scripts.base.protocols.syslog.missing-pri
|
Make Syslog analyzer accept messages that omit Priority
|
2019-03-14 18:47:32 -07:00 |
scripts.base.protocols.syslog.trace
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.protocols.tcp.pending
|
Fix behavior of connection_pending event
|
2016-07-26 15:49:51 -07:00 |
scripts.base.protocols.xmpp.client-dpd
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.protocols.xmpp.server-dialback-dpd
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.protocols.xmpp.starttls
|
Make tunnel_parents in conn.log optional.
|
2018-01-12 13:46:00 -08:00 |
scripts.base.utils.active-http
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.utils.addrs
|
GH-340: Improve IPv4/IPv6 regexes, extraction, and validity functions
|
2019-04-18 19:04:39 -07:00 |
scripts.base.utils.conn-ids
|
|
|
scripts.base.utils.decompose_uri
|
Changing what's escaped when printing.
|
2015-04-15 16:59:50 -07:00 |
scripts.base.utils.dir
|
Improve scripts/base/utils/dir unit test
|
2018-10-19 11:16:38 -05:00 |
scripts.base.utils.directions-and-hosts
|
|
|
scripts.base.utils.exec
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.utils.files
|
extract_filename_from_content_disposition is still hacky but more closely aligns with RFC5987
|
2013-07-09 14:05:36 -04:00 |
scripts.base.utils.hash_hrw
|
Merge topic/actor-system throug a squashed commit.
|
2018-05-18 22:39:23 +00:00 |
scripts.base.utils.json
|
Fix to_json() to not lose precision for values of type double
|
2017-02-02 13:03:05 -06:00 |
scripts.base.utils.numbers
|
|
|
scripts.base.utils.paths
|
|
|
scripts.base.utils.pattern
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.utils.queue
|
Fixed the measurement "sample" plugin.
|
2013-04-02 00:19:06 -04:00 |
scripts.base.utils.site
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.base.utils.strings
|
Changing what's escaped when printing.
|
2015-04-15 16:59:50 -07:00 |
scripts.base.utils.thresholds
|
|
|
scripts.base.utils.urls
|
Updates for the urls.bro script. Fixes BIT-1404.
|
2015-06-01 11:38:26 -04:00 |
scripts.check-test-all-policy
|
|
|
scripts.policy.frameworks.intel.removal
|
Added test for intel removal policy script.
|
2019-03-24 22:24:12 +01:00 |
scripts.policy.frameworks.intel.seen.certs
|
OCSP/TLS/SCT: Fix a number of test failures.
|
2017-05-06 08:01:20 -07:00 |
scripts.policy.frameworks.intel.seen.smb
|
Merge branch 'master' of https://github.com/hosom/zeek
|
2019-03-25 16:45:59 -07:00 |
scripts.policy.frameworks.intel.seen.smtp
|
Tiny scoping updates and test baseline updates for Intel framework.
|
2016-08-05 09:29:23 -04:00 |
scripts.policy.frameworks.intel.whitelisting
|
Tiny scoping updates and test baseline updates for Intel framework.
|
2016-08-05 09:29:23 -04:00 |
scripts.policy.frameworks.software.version-changes
|
Merge topic/actor-system throug a squashed commit.
|
2018-05-18 22:39:23 +00:00 |
scripts.policy.frameworks.software.vulnerable
|
Merge topic/actor-system throug a squashed commit.
|
2018-05-18 22:39:23 +00:00 |
scripts.policy.misc.dump-events
|
Update docs and tests for bro_(init|done) -> zeek_(init|done)
|
2019-04-14 08:49:12 -04:00 |
scripts.policy.misc.weird-stats
|
Add rate-limiting sampling mechanism for weird events
|
2018-07-26 19:57:36 -05:00 |
scripts.policy.misc.weird-stats-cluster
|
Add rate-limiting sampling mechanism for weird events
|
2018-07-26 19:57:36 -05:00 |
scripts.policy.protocols.conn.known-hosts
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.policy.protocols.conn.known-services
|
Change #types description of sets to set
|
2014-04-01 16:25:47 -07:00 |
scripts.policy.protocols.conn.mac-logging
|
Make tunnel_parents in conn.log optional.
|
2018-01-12 13:46:00 -08:00 |
scripts.policy.protocols.conn.vlan-logging
|
Make tunnel_parents in conn.log optional.
|
2018-01-12 13:46:00 -08:00 |
scripts.policy.protocols.http.flash-version
|
Adding tests for Flash version parsing and plugin detection.
|
2015-07-30 07:23:14 -07:00 |
scripts.policy.protocols.http.header-names
|
Merge branch 'patch-1' of https://github.com/neu5ron/bro
|
2019-03-13 13:49:17 -07:00 |
scripts.policy.protocols.http.test-sql-injection-regex
|
|
|
scripts.policy.protocols.krb.ticket-logging
|
I missed one test I needed to update for the kerberos commit that I just pushed.
|
2017-02-22 00:02:51 -05:00 |
scripts.policy.protocols.ssh.detect-bruteforcing
|
Merge topic/actor-system throug a squashed commit.
|
2018-05-18 22:39:23 +00:00 |
scripts.policy.protocols.ssl.expiring-certs
|
Merge topic/actor-system throug a squashed commit.
|
2018-05-18 22:39:23 +00:00 |
scripts.policy.protocols.ssl.extract-certs-pem
|
Finishing touches of the x509 file analyzer.
|
2014-03-13 15:21:30 -07:00 |
scripts.policy.protocols.ssl.heartbleed
|
Merge topic/actor-system throug a squashed commit.
|
2018-05-18 22:39:23 +00:00 |
scripts.policy.protocols.ssl.known-certs
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.policy.protocols.ssl.log-hostcerts-only
|
Fix x509 certificate Version (the +1 was missing...).
|
2014-03-19 21:46:19 -07:00 |
scripts.policy.protocols.ssl.validate-certs
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.policy.protocols.ssl.validate-certs-no-cache
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.policy.protocols.ssl.validate-ocsp
|
Baseline updates after hash function change.
|
2016-07-13 10:11:37 -07:00 |
scripts.policy.protocols.ssl.validate-sct
|
SCT: Add signed certificate timestamp validation script.
|
2017-03-29 09:17:30 -07:00 |
scripts.policy.protocols.ssl.weak-keys
|
Merge topic/actor-system throug a squashed commit.
|
2018-05-18 22:39:23 +00:00 |
signatures.bad-eval-condition
|
Add type checking for signature 'eval' condition functions.
|
2012-08-23 11:52:39 -05:00 |
signatures.dpd
|
Test-suite passes.
|
2013-03-26 15:40:23 -07:00 |
signatures.dst-ip-cidr-v4
|
Fix a couple of problems with signature matching.
|
2016-10-19 14:23:43 -07:00 |
signatures.dst-ip-header-condition-v4
|
Add IPv6 support to signature header conditions.
|
2012-10-17 11:11:51 -05:00 |
signatures.dst-ip-header-condition-v4-masks
|
Add IPv6 support to signature header conditions.
|
2012-10-17 11:11:51 -05:00 |
signatures.dst-ip-header-condition-v6
|
Add IPv6 support to signature header conditions.
|
2012-10-17 11:11:51 -05:00 |
signatures.dst-ip-header-condition-v6-masks
|
Add IPv6 support to signature header conditions.
|
2012-10-17 11:11:51 -05:00 |
signatures.dst-port-header-condition
|
Add IPv6 support to signature header conditions.
|
2012-10-17 11:11:51 -05:00 |
signatures.eval-condition
|
Make tunnel_parents in conn.log optional.
|
2018-01-12 13:46:00 -08:00 |
signatures.eval-condition-no-return-value
|
Fix segmentation fault on eval condition with no return value.
|
2017-09-19 09:23:09 -07:00 |
signatures.header-header-condition
|
Add IPv6 support to signature header conditions.
|
2012-10-17 11:11:51 -05:00 |
signatures.id-lookup
|
Fix signatures that use identifiers of type table.
|
2013-09-05 13:01:40 -05:00 |
signatures.ip-proto-header-condition
|
Add IPv6 support to signature header conditions.
|
2012-10-17 11:11:51 -05:00 |
signatures.load-sigs
|
Fix assignments to event arguments becoming visible to subsequent
|
2017-10-27 13:28:48 -07:00 |
signatures.src-ip-header-condition-v4
|
Add IPv6 support to signature header conditions.
|
2012-10-17 11:11:51 -05:00 |
signatures.src-ip-header-condition-v4-masks
|
Add IPv6 support to signature header conditions.
|
2012-10-17 11:11:51 -05:00 |
signatures.src-ip-header-condition-v6
|
Add IPv6 support to signature header conditions.
|
2012-10-17 11:11:51 -05:00 |
signatures.src-ip-header-condition-v6-masks
|
Add IPv6 support to signature header conditions.
|
2012-10-17 11:11:51 -05:00 |
signatures.src-port-header-condition
|
Add IPv6 support to signature header conditions.
|
2012-10-17 11:11:51 -05:00 |
signatures.udp-packetwise-match
|
Sorting test output for stability.
|
2015-04-09 15:22:59 -07:00 |
signatures.udp-payload-size
|
Fix a couple of problems with signature matching.
|
2016-10-19 14:23:43 -07:00 |