Johanna Amann 83d5243cf6 Optimize Conn::set_conn to minimize operations ... Now that Conn::set_conn is guaranteed to be called at the beginning and at the end of the connection, we can skip re-setting the elements that we know will not have changed. This prevents repeated lookups, e.g. to check that addresses are in the local networks. During `connection_state_remove`, only the duration, number of packets, service, and history fields are updated. local_orig and local_resp are updated when the connection is flipped. A test was added for that purpose. It uses the already existing http.zeek-image-post-1080-8000-x.pcap, which was slightly rewritten for this, so that one side of the connection has IP addresses different from 127.0.0.1. The existing history-flip test also was updated to have one side being in a local-net, to check that the flipping of local_orig and local_resp works correctly at the beginning of a connection.		2025-07-29 09:11:57 +01:00
..
base	Optimize Conn::set_conn to minimize operations	2025-07-29 09:11:57 +01:00
policy	Move Conn::set_conn() from connection_state_remove to new_connection	2025-07-29 09:11:57 +01:00
site	site/local: Switch to detect-sql-injection	2025-05-20 16:24:28 +02:00
spicy	Spicy: Add functions to check if Zeek provides an analyzer of a given name.	2025-07-15 14:22:27 +02:00
zeekygen	Add a VLAN-aware flow tuple implementation.	2025-06-25 13:19:26 +02:00
CMakeLists.txt	Use the same rules as cmake submodule to reformat Zeek	2023-05-09 08:31:43 -07:00
test-all-policy.zeek	PPPoE: add session id logging	2025-07-23 13:43:45 +01:00