zeek/scripts/policy/frameworks
Arne Welzel 8edec9885a cluster/websocket: Automatic WebSocket client topic subscription
Subscribe every WebSocket client to a unique topic, by default under

    zeek/cluster/websocket/client/<identifier>/

Add tests that verify that WebSocket clients receive messages on these topics
even if they didn't explicitly pass them in their handshake message.

This is somewhere between feature and bug fix. It aids the ZeroMQ backend
implementation: A WebSocket client that doesn't provide any subscriptions
and immediately starts publishing would discard events until receiving
other nodes subscriptions from the central XPUB/XSUB proxy. ZeroMQ does sender
side topic filtering. When using subscriptions, the client waits until
its own subscriptions are returned from the central XPUB/XSUB proxy,
thereby also learning about other node's subscriptions.

Also, make the no-subscriptions.zeek test use 32 clients sequentially to
trigger potential issues more quickly.
2025-04-24 14:14:22 +02:00
..
cluster cluster/websocket: Automatic WebSocket client topic subscription 2025-04-24 14:14:22 +02:00
control frameworks/control: Remove Broker::auto_publish() 2024-11-14 12:59:22 +01:00
dpd Introduce generic analyzer_confirmation_info and analyzer_violation_info 2022-09-27 17:49:51 +02:00
files Remove full scripts marked as 6.1 deprecations 2023-06-14 10:07:22 -07:00
intel intel/seen/file-names: Use file_over_new_connection() 2023-01-10 10:10:28 +01:00
management broker/main: Deprecate Broker::listen_websocket() 2025-04-23 14:27:43 +02:00
netcontrol netcontrol/catch-and-release: Move to Cluster::publish() 2024-12-12 17:54:42 +01:00
notice policy/community-id: Populate conn$community_id in new_connection() 2024-11-08 18:19:55 +01:00
packet-filter Fix errors from rst linting on the generated docs 2025-01-24 11:41:36 -07:00
signatures signatures/iso-9660: Add \x01 suffix to CD001 2024-02-26 21:00:01 +01:00
software policy: Use literal dots for patterns used against content-type and hostname 2022-07-11 10:34:47 +02:00
spicy all: Fix typos identified by typos pre-commit hook 2023-06-13 17:57:32 +02:00
storage/backend Update comments in script files, run zeek-format on all of them 2025-03-18 10:20:34 -07:00
telemetry Fix errors from rst linting on the generated docs 2025-01-24 11:41:36 -07:00