Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-03 23:28:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2
No description
8317 commits 384 branches 195 tags 258 MiB
Find a file
Justin Azoff 8fc83f5fee Remove redundant buffering in contentline 
The contentline analyzer has two code paths that buffer data:
 * right at the top of DeliverStream
 * later in DoDeliverOnce

However, contentline can be in plain delivery mode, and if so, the
buffer resize in DeliverStream does not need to be done just because
DeliverStream was passed an 8K data chunk.

This was causing contentline to resize it's buffer to fit chunks of HTTP
response data.  Additionally, the buffer was sized to be 3/2 of the
chunk, so an 8K chunk would result in a 12K allocation.
2019-02-24 11:17:33 -05:00
aux Updating submodule(s). 2019-02-15 15:26:47 -06:00
cmake@6135c1a663 Updating submodule(s). 2019-01-16 09:39:05 -06:00
doc@650a136dcc Merge branch 'master' of https://github.com/ZekeMedley/zeek 2019-02-15 17:51:29 -06:00
man Remove -z/--analysis option. 2016-08-04 17:44:38 -07:00
scripts Improve format of conn_state docs 2019-02-13 16:15:13 -08:00
src Remove redundant buffering in contentline 2019-02-24 11:17:33 -05:00
testing Be more liberal with whitespaces for ip-addresses, subnets, etc. 2019-02-19 15:06:06 -08:00
.gitignore Refactoring, making error messages nicer, & lcov 2018-07-24 13:19:14 -07:00
.gitmodules Change doc/ subdir into a git submodule 2019-01-17 14:15:45 -06:00
.travis.yml Use docker containers to run Bro tests on Travis CI 2018-06-22 10:36:49 -05:00
.update-changes.cfg Update external test suite locations 2018-12-06 20:11:57 -06:00
bro-config.h.in GH-205: prioritize use of sigaction() over sigset() 2019-01-14 16:12:38 -06:00
bro-config.in GH-184: add bro-config --build_type, outputs CMake build type 2018-10-05 14:27:12 -05:00
bro-path-dev.in Flesh out Broxygen doc-gathering skeleton. 2013-10-22 14:45:47 -05:00
CHANGES Merge remote-tracking branch 'origin/topic/johanna/input-whitespace' 2019-02-22 14:58:43 -06:00
CMakeLists.txt Add missing libkrb5 include dir to CMake config 2019-02-22 14:35:54 -06:00
configure Introduce --enable-static-broker configuration option. 2018-12-06 11:53:50 -08:00
COPYING Update license year for 2018 2018-11-01 13:54:07 -05:00
INSTALL Make INSTALL a symlink to doc/install/install.rst 2015-03-13 15:45:20 -05:00
Makefile Change doc/ subdir into a git submodule 2019-01-17 14:15:45 -06:00
NEWS Change doc/ subdir into a git submodule 2019-01-17 14:15:45 -06:00
README Update github/download links 2018-12-07 16:36:51 -06:00
README.rst Add README.rst -> README symlink. Addresses BIT-1413 2015-09-10 15:22:13 -05:00
VERSION Merge remote-tracking branch 'origin/topic/johanna/input-whitespace' 2019-02-22 14:58:43 -06:00

README 

=============================
Zeek Network Security Monitor
=============================

Zeek is a powerful framework for network analysis and security
monitoring.

(Zeek is the new name for the long-established Bro system. Note that
parts of the system retain the "Bro" name, and it also often appears in
the documentation and distributions.)

Please see the INSTALL file for installation instructions and pointers
for getting started.  NEWS contains release notes for the current
version, and CHANGES has the complete history of changes.  Please see
COPYING for licensing information.

You can download source and binary releases on:

    https://www.zeek.org/download

To get the current development version, clone our master git
repository:

    git clone --recursive https://github.com/zeek/zeek

For more documentation, research publications, and community contact
information, please see the home page:

    https://www.zeek.org

On behalf of the Zeek Development Team,

Vern Paxson & Robin Sommer,
International Computer Science Institute &
Lawrence Berkeley National Laboratory
vern@icir.org / robin@icir.org