zeek/scripts
Jon Siwek 9b12967d40 Improve gap reporting in TCP connections that never see data.
The previous behavior was to accomodate SYN/FIN/RST-filtered traces by
not reporting missing data (via the content_gap event) for such
connections.  The new behavior always reports gaps for connections that
are established and terminate normally, but sequence numbers indicate
that all data packets of the connection were missed.  The behavior can
be reverted by redef'ing "detect_filtered_trace".
2014-01-24 16:21:02 -06:00
..
base Improve gap reporting in TCP connections that never see data. 2014-01-24 16:21:02 -06:00
broxygen More test updates. 2013-12-04 13:45:03 -08:00
policy fix the caching of recently validated certs 2013-12-10 11:27:19 -05:00
site Update local.bro for Bro 2.2 2013-11-15 11:39:27 -06:00
CMakeLists.txt Don't install test-all-policy.bro script as it's for testing only. 2011-10-12 12:42:12 -05:00
test-all-policy.bro More test updates. 2013-12-04 13:45:03 -08:00