zeek/scripts
Jon Siwek 995368e68c Remove variable content from weird names
This changes many weird names to move non-static content from the
weird name into the "addl" field to help ensure the total number of
weird names is reasonably bounded.  Note the net_weird and flow_weird
events do not have an "addl" parameter, so information may no longer
be available in those cases -- to make it available again we'd need
to either (1) define new events that contain such a parameter, or
(2) change net_weird/flow_weird event signature (which is a breaking
change for user-code at the moment).

Also, the generic handling of binpac exceptions for analyzers which
to not otherwise catch and handle them has been changed from a Weird
to a ProtocolViolation.

Finally, a new "file_weird" event has been added for reporting
weirdness found during file analysis.
2019-04-01 18:30:11 -07:00
..
base Remove variable content from weird names 2019-04-01 18:30:11 -07:00
broxygen Add @deprecate to policy/protocols/smb/__load__.bro 2018-08-31 09:26:22 -05:00
policy Reduce weird-stats overhead 2019-03-27 11:06:39 -04:00
site Merge remote-tracking branch 'origin/topic/dnthayer/ticket1700-part2' 2018-08-20 15:02:41 -05:00
CMakeLists.txt Remove the node-specific local-*.bro scripts 2018-08-20 12:57:00 -05:00
test-all-policy.bro Merge branch 'master' of https://github.com/hosom/zeek 2019-03-25 16:45:59 -07:00