zeek/src
Arne Welzel d4778f451c ldap: Add heuristic for wrap tokens
Instead of dissecting the GSSAPI handshake, add another heuristic
into MaybeEncrypted to check for the WRAP token identifier.

After this change, the pcap on the following ticket is processed
nicely: https://gitlab.com/wireshark/migration-test/-/issues/9398
2024-07-23 11:29:00 +02:00
..
3rdparty@96caa6a590 Merge remote-tracking branch 'origin/topic/christian/ci-updates' 2024-06-18 10:53:09 +02:00
analyzer ldap: Add heuristic for wrap tokens 2024-07-23 11:29:00 +02:00
broker Bump Broker to pull in new Prometheus support and pass in Zeek's registry 2024-07-11 12:13:05 -07:00
file_analysis Merge remote-tracking branch 'origin/topic/robin/gh-3573-replaces-cleanup' 2024-05-07 09:45:25 +02:00
fuzzers fuzzers: Add WebSocket fuzzer 2024-01-22 18:54:38 +01:00
include Creating a symlink src/include/zeek -> src/ 2022-11-09 18:16:13 +02:00
input Merge remote-tracking branch 'origin/topic/awelzel/3836-input-create-any-abort-crash' 2024-07-19 19:51:52 +02:00
iosource iosource/Manager: Reap dry sources while computing timeout 2024-07-02 11:32:05 +02:00
logging Remove is_sum arguments from counters and gauges 2024-05-31 13:36:37 -07:00
packet_analysis Merge remote-tracking branch 'origin/topic/timw/3417-packet-analysis-detail' 2024-05-08 09:55:16 -07:00
plugin Add component API to transparently remap one component to another one. 2024-05-06 09:45:11 +02:00
probabilistic Integrate review feedback 2024-01-06 13:48:14 +01:00
script_opt minor script optimization updates to reflect recent changes, Coverity findings 2024-07-06 16:44:27 -07:00
session Remove is_sum arguments from counters and gauges 2024-05-31 13:36:37 -07:00
spicy Bump auxil/spicy to latest development snapshot 2024-07-16 08:17:31 +02:00
supervisor Remove the Supervisor's internal ClusterEndpoint struct. 2024-07-02 14:52:17 -07:00
telemetry Harden the telemetry manager against unset Telemetry::metrics_address 2024-07-08 23:05:24 -07:00
threading threading/Manager: Warn if threads are added after termination 2024-07-02 12:34:28 +02:00
zeekygen Avoid segfault when generating Zeekygen docs on Zeek-internal identifiers. 2024-05-03 12:23:49 -07:00
Anon.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Anon.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Attr.cc improved error cascade for invalid attributes 2024-06-04 10:36:36 -07:00
Attr.h improved error cascade for invalid attributes 2024-06-04 10:36:36 -07:00
Base64.cc Bump pre-commit hooks 2023-10-30 09:41:12 +01:00
Base64.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
binpac-lib.pac Code modernization: Convert from deprecated C standard library headers 2022-06-27 09:47:31 -07:00
binpac.pac
binpac_zeek-lib.pac Spelling src 2022-11-09 12:08:15 -05:00
binpac_zeek.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
CCL.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
CCL.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
CMakeLists.txt CMakeLists: Disable -Werror for 3rdparty/sqlite3.c 2024-06-18 10:03:32 +02:00
communityid.bif Avoid OpenSSL header dependencies 2023-11-03 15:54:46 +01:00
CompHash.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
CompHash.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Conn.cc Conn/net_utils/fmt_mac: Avoid snprintf(), memcpy() and allocation 2024-02-13 19:37:15 +01:00
Conn.h factor some functionality used by BiFs to make accessible to ZAM instructions 2024-04-25 09:15:13 -07:00
const.bif Remove deprecations tagged for v6.1 2023-06-14 10:07:22 -07:00
DbgBreakpoint.cc Bump pre-commit hooks 2023-10-30 09:41:12 +01:00
DbgBreakpoint.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
DbgDisplay.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
DbgHelp.cc updated Bro->Zeek in comments in the source tree 2022-01-24 14:26:20 -08:00
DbgWatch.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
DbgWatch.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Debug.cc Fix unsafe and inefficient uses of copy_string 2023-11-03 15:25:38 +01:00
Debug.h Bump pre-commit hooks 2023-10-30 09:41:12 +01:00
DebugCmdInfoConstants.in Merge remote-tracking branch 'microsoft/master' 2022-11-11 15:23:21 -07:00
DebugCmds.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
DebugCmds.h Add missing include for int32_t in DebugCmds.h 2024-02-05 14:38:16 -07:00
DebugLogger.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
DebugLogger.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Desc.cc fix ZAM "cat" of doubles/times to include trailing ".0" per normal BiF behavior 2024-03-28 16:43:06 -07:00
Desc.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
DFA.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
DFA.h DFA: Extract inner Stats struct from DFA_State_Cache 2023-11-21 10:34:17 +01:00
Dict.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Dict.h Dict: Invalidate iterators during Clear() 2024-01-09 09:12:21 +01:00
digest.cc Avoid OpenSSL header dependencies 2023-11-03 15:54:46 +01:00
digest.h digest/digest_print: Use bytetohex() instead of snprintf() 2024-02-13 19:32:16 +01:00
Discard.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Discard.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
DNS_Mapping.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
DNS_Mapping.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
DNS_Mgr.cc Use <poll.h> instead of <sys/poll.h> 2024-01-08 13:26:57 -07:00
DNS_Mgr.h Change function return types to more concise types where possible 2023-11-28 13:40:28 -07:00
EquivClass.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
EquivClass.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
event.bif Fix a zeek_init -> zeek_done confusion in a docstring [skip ci] 2024-01-18 16:14:33 -08:00
Event.cc segment_profiling: Remove SegmentProfiler and load_sample event 2024-01-03 11:55:54 +01:00
Event.h EventMgr: Remove queue_flare, use GetNextTimeout() instead 2023-12-04 20:03:31 +01:00
EventHandler.cc Remove is_sum arguments from counters and gauges 2024-05-31 13:36:37 -07:00
EventHandler.h Change all instruments to only handle doubles 2024-05-31 13:36:37 -07:00
EventLauncher.cc Minor fixes for build problems after reformatting 2021-09-16 15:36:09 -07:00
EventLauncher.h Minor fixes for build problems after reformatting 2021-09-16 15:36:09 -07:00
EventRegistry.cc Merge remote-tracking branch 'origin/topic/vern/zam-EH-coalesce' 2023-11-17 18:05:32 +01:00
EventRegistry.h Add a method to register an event handler to a std::function via C++ 2024-03-18 16:36:25 -07:00
EventTrace.cc Avoid creating a few temporary values to avoid copy operations 2023-11-28 13:40:28 -07:00
EventTrace.h Add some uses of std::move in constructors and simple functions for pass-by-value arguments 2023-11-28 13:40:28 -07:00
Expr.cc script optimization for record operations sourced (in part) from other records 2024-06-24 09:38:37 +02:00
Expr.h script optimization for record operations sourced (in part) from other records 2024-06-24 09:38:37 +02:00
File.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
File.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Flare.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Flare.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Frag.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Frag.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Frame.cc Add facade types to avoid using raw Broker types 2023-12-04 15:23:28 +01:00
Frame.h Add facade types to avoid using raw Broker types 2023-12-04 15:23:28 +01:00
Func.cc Remove variant from StdFunctionStmt 2024-03-19 09:07:45 -07:00
Func.h Remove variant from StdFunctionStmt 2024-03-19 09:07:45 -07:00
Hash.cc Avoid OpenSSL header dependencies 2023-11-03 15:54:46 +01:00
Hash.h Make BIFs just return ValPtr directly instead of BifReturnVal 2024-01-22 10:35:34 -07:00
ID.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
ID.h allow explicitly marking an identifier as equivalent to special '_' identifier 2023-11-10 09:56:59 +01:00
input.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
IntrusivePtr.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
IntSet.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
IntSet.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
IP.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
IP.h Bump pre-commit hooks 2023-10-30 09:41:12 +01:00
IPAddr.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
IPAddr.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
List.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
List.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
main.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
make_dbg_constants.py Format Python scripts with yapf. 2021-11-24 23:13:24 +01:00
mmdb.bif Modernize various C++/Zeek-isms in the MMDB code. 2024-01-11 17:13:41 -08:00
MMDB.cc Fix MMDB::Lookup() to check result status correctly 2024-01-25 23:54:22 -08:00
MMDB.h Modernize various C++/Zeek-isms in the MMDB code. 2024-01-11 17:13:41 -08:00
module_util.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
module_util.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
net_util.cc Conn/net_utils/fmt_mac: Avoid snprintf(), memcpy() and allocation 2024-02-13 19:37:15 +01:00
net_util.h Conn/net_utils/fmt_mac: Avoid snprintf(), memcpy() and allocation 2024-02-13 19:37:15 +01:00
NetVar.cc segment_profiling: Remove SegmentProfiler and load_sample event 2024-01-03 11:55:54 +01:00
NetVar.h segment_profiling: Remove SegmentProfiler and load_sample event 2024-01-03 11:55:54 +01:00
NFA.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
NFA.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Notifier.cc fix for Trigger's whose termination leads to deleting other Trigger's 2023-12-12 09:45:19 +01:00
Notifier.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Obj.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Obj.h Obj: Implement with_location_of() as template 2024-02-06 11:03:06 +01:00
OpaqueVal.cc Move telemetry opaques out of OpaqueVal.h 2024-05-31 13:30:31 -07:00
OpaqueVal.h Move telemetry opaques out of OpaqueVal.h 2024-05-31 13:30:31 -07:00
option.bif option.bif: Short-circuit option changes when terminating 2022-07-29 18:22:03 +02:00
Options.cc framework for --enable-ZAM-profiling configuration 2024-03-19 10:59:49 -07:00
Options.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Overflow.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Overflow.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
PacketFilter.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
PacketFilter.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
parse.y "add" and "delete" are now expressions rather than statements 2024-05-29 12:40:06 -07:00
Pipe.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Pipe.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
PolicyFile.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
PolicyFile.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
PrefixTable.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
PrefixTable.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
PriorityQueue.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
PriorityQueue.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
RandTest.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
RandTest.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
re-parse.y RE/Specific_RE_Matcher: Make Compile() return false for syntax errors 2024-02-28 17:07:51 +01:00
re-scan.l RE/Specific_RE_Matcher: Make Compile() return false for syntax errors 2024-02-28 17:07:51 +01:00
RE.cc RE/Specific_RE_Matcher: Make Compile() return false for syntax errors 2024-02-28 17:07:51 +01:00
RE.h RE: Remove RE_DisjunctiveMatcher and re-use MatchAll() 2023-11-21 10:34:16 +01:00
Reassem.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Reassem.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
reporter.bif Update reporter.bif to describe special case of errors in init 2024-06-04 11:56:06 +02:00
Reporter.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Reporter.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
rule-parse.y rule-parse: Remove [event_name] syntax, deprecate msg as identifier 2023-12-14 10:16:35 +01:00
rule-scan.l rule-scan: Copy yytext strings 2023-12-05 15:26:40 +01:00
Rule.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Rule.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
RuleAction.cc rule-parse: Remove [event_name] syntax, deprecate msg as identifier 2023-12-14 10:16:35 +01:00
RuleAction.h rule-parse: Remove [event_name] syntax, deprecate msg as identifier 2023-12-14 10:16:35 +01:00
RuleCondition.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
RuleCondition.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
RuleMatcher.cc Constify classes in RuleMatcher, fixes c++20 build failure 2024-05-01 16:59:54 -07:00
RuleMatcher.h Constify classes in RuleMatcher, fixes c++20 build failure 2024-05-01 16:59:54 -07:00
RunState.cc segment_profiling: Remove SegmentProfiler and load_sample event 2024-01-03 11:55:54 +01:00
RunState.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
scan.l Add &default_insert attribute for tables 2023-08-04 12:30:36 +02:00
ScannedFile.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
ScannedFile.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Scope.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Scope.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
ScriptCoverageManager.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
ScriptCoverageManager.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
ScriptProfile.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
ScriptProfile.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
ScriptValidation.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
ScriptValidation.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
SerializationFormat.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
SerializationFormat.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
SmithWaterman.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
SmithWaterman.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Span.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
stats.bif Use std::move in return values from bif methods to avoid copies 2024-01-10 12:32:15 -07:00
Stats.cc segment_profiling: Remove SegmentProfiler and load_sample event 2024-01-03 11:55:54 +01:00
Stats.h segment_profiling: Remove SegmentProfiler and load_sample event 2024-01-03 11:55:54 +01:00
Stmt.cc removing now-vestigial "add" and "delete" statements 2024-05-29 12:40:06 -07:00
Stmt.h removing now-vestigial "add" and "delete" statements 2024-05-29 12:40:06 -07:00
StmtBase.h fixes & enhancements to location information associated w/ AST nodes & ZAM optimization 2024-02-06 11:03:02 +01:00
StmtEnums.h removing now-vestigial "add" and "delete" statements 2024-05-29 12:40:06 -07:00
strings.bif Change to use ToStdStringView() in a few other BIFs 2024-01-23 10:38:56 -07:00
Tag.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Tag.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Timer.cc Timer: Add LOG_DELAY_EXPIRE timer type 2023-11-29 11:53:11 +01:00
Timer.h Timer: Add LOG_DELAY_EXPIRE timer type 2023-11-29 11:53:11 +01:00
Traverse.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Traverse.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
TraverseTypes.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Trigger.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Trigger.h fix for Trigger's whose termination leads to deleting other Trigger's 2023-12-12 09:45:19 +01:00
TunnelEncapsulation.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
TunnelEncapsulation.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Type.cc bug fix for dealing with illegal types of initializers 2024-05-29 12:40:06 -07:00
Type.h Change all instruments to only handle doubles 2024-05-31 13:36:37 -07:00
types.bif Pass parsed file record information with ReadFile/WriteFile events 2023-08-07 13:44:38 -07:00
UID.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
UID.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
util.cc fix ZAM "cat" of doubles/times to include trailing ".0" per normal BiF behavior 2024-03-28 16:43:06 -07:00
util.h fix ZAM "cat" of doubles/times to include trailing ".0" per normal BiF behavior 2024-03-28 16:43:06 -07:00
Val.cc Support JSON roundtripping via to_json()/from_json() for patterns 2024-07-02 14:46:16 -07:00
Val.h Document the field_escape_pattern in the to_json() BiF 2024-07-02 14:46:16 -07:00
Var.cc framework for --enable-ZAM-profiling configuration 2024-03-19 10:59:49 -07:00
Var.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
version.c.in Support for configurable localversion 2024-04-17 14:16:47 -07:00
WeirdState.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
WeirdState.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
zeek-affinity.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
zeek-affinity.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
zeek-bif.h Make BIFs just return ValPtr directly instead of BifReturnVal 2024-01-22 10:35:34 -07:00
zeek-setup.cc Change all instruments to only handle doubles 2024-05-31 13:36:37 -07:00
zeek-setup.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
zeek.bif Document the field_escape_pattern in the to_json() BiF 2024-07-02 14:46:16 -07:00
zeek.pac Add GTPv1 packet analyzer, disable old analyzer 2021-11-23 19:36:50 -07:00
ZeekArgs.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
ZeekArgs.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
ZeekConfig.cmake.in Revert "Merge remote-tracking branch 'origin/topic/neverlord/gh-3247'" 2023-08-29 12:13:40 -07:00
ZeekList.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
ZeekPluginBootstrap.cmake.in ZeekPluginBootstrap: Encode Zeek's CMAKE_BUILD_TYPE 2023-06-15 10:46:06 +02:00
ZeekPluginConfig.cmake.in Fix install directory for plugins 2023-04-22 16:12:22 +02:00
ZeekString.cc Fix unsafe and inefficient uses of copy_string 2023-11-03 15:25:38 +01:00
ZeekString.h Fix unsafe and inefficient uses of copy_string 2023-11-03 15:25:38 +01:00
ZVal.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
ZVal.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00