zeek/scripts/base
Jon Siwek 995368e68c Remove variable content from weird names
This changes many weird names to move non-static content from the
weird name into the "addl" field to help ensure the total number of
weird names is reasonably bounded.  Note the net_weird and flow_weird
events do not have an "addl" parameter, so information may no longer
be available in those cases -- to make it available again we'd need
to either (1) define new events that contain such a parameter, or
(2) change net_weird/flow_weird event signature (which is a breaking
change for user-code at the moment).

Also, the generic handling of binpac exceptions for analyzers which
to not otherwise catch and handle them has been changed from a Weird
to a ProtocolViolation.

Finally, a new "file_weird" event has been added for reporting
weirdness found during file analysis.
2019-04-01 18:30:11 -07:00
..
files Migrate table-based for-loops to key-value iteration 2019-03-15 19:54:44 -07:00
frameworks Remove variable content from weird names 2019-04-01 18:30:11 -07:00
misc Fix base/misc/version.bro version parsing 2018-08-24 17:25:16 -07:00
protocols Merge branch 'smb2-fix' of https://github.com/mauropalumbo75/zeek 2019-03-20 18:01:35 -07:00
utils Deprecate str_shell_escape, add safe_shell_quote replacement 2019-03-25 17:51:04 -07:00
init-bare.bro Merge branch 'smb3-negotiate-response' of https://github.com/mauropalumbo75/zeek 2019-03-21 14:13:21 -07:00
init-default.bro Enable SMB by default by moving scripts from policy/ to base/ 2018-08-16 17:23:28 -05:00
init-frameworks-and-bifs.bro Allow BRO_DEFAULT_LISTEN_ADDRESS to control broker listen address 2018-06-01 15:38:11 -05:00