zeek/testing/btest/signatures
Arne Welzel a7b077aa17 signatures: Support custom event via [event_name] syntax
This change allows to specify a per signature specific event, overriding
the default signature_match event. It further removes the message
parameter from such events if not provided in the signature.

This also tracks the message as StringValPtr directly to avoid
allocating the same StringVal for every DoAction() call.

Closes #3403
2023-12-05 15:28:21 +01:00
..
bad-eval-condition.zeek General btest cleanup 2020-08-11 11:26:22 -07:00
custom-event-errors.zeek signatures: Support custom event via [event_name] syntax 2023-12-05 15:28:21 +01:00
custom-event.zeek signatures: Support custom event via [event_name] syntax 2023-12-05 15:28:21 +01:00
dpd.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
dst-ip-cidr-v4.zeek General btest cleanup 2020-08-11 11:26:22 -07:00
dst-ip-header-condition-v4-masks.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
dst-ip-header-condition-v4.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
dst-ip-header-condition-v6-masks.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
dst-ip-header-condition-v6.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
dst-port-header-condition.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
eval-condition-no-return-value.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
eval-condition.zeek Remove @load base/frameworks/dpd from tests 2022-08-31 17:00:55 +02:00
header-header-condition.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
http-body-match.zeek Test how the signature framework matches HTTP body 2023-11-03 15:28:15 +01:00
id-lookup.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
ip-proto-header-condition.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
load-sigs.zeek General btest cleanup 2020-08-11 11:26:22 -07:00
signature-cond-used-twice.zeek Attr: Duplicated &is_used is allowed 2022-12-02 17:15:05 +01:00
signature-cond-used.zeek Add is_used attribute to an ID if used in a signature eval statement 2022-08-31 14:58:23 -07:00
src-ip-header-condition-v4-masks.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
src-ip-header-condition-v4.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
src-ip-header-condition-v6-masks.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
src-ip-header-condition-v6.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
src-port-header-condition.zeek GH-173: Support ranges of values for value_list elements in the signature parser 2019-05-23 10:58:04 -07:00
tcp-syn-with-payload.zeek GH-664: fix signature matching for payload-carrying SYN packets 2019-10-29 17:20:08 -07:00
udp-packetwise-insensitive.zeek General btest cleanup 2020-08-11 11:26:22 -07:00
udp-packetwise-match.zeek General btest cleanup 2020-08-11 11:26:22 -07:00
udp-payload-size.zeek General btest cleanup 2020-08-11 11:26:22 -07:00
udp-state.zeek GH-779: Add "udp-state" signature condition 2020-10-09 13:43:17 -07:00