zeek/testing/btest/Baseline/signatures.custom-event/id.out at a3af4a4b51a92d3ebfcfe2e5e04776da9e6ceb05 - Mirror/zeek - git.uphillsecurity.com: We code.

Mirror/zeek

mirror of https://github.com/zeek/zeek.git synced 2025-10-17 05:58:20 +00:00

Arne Welzel a7b077aa17 signatures: Support custom event via [event_name] syntax

This change allows to specify a per signature specific event, overriding
the default signature_match event. It further removes the message
parameter from such events if not provided in the signature.

This also tracks the message as StringValPtr directly to avoid
allocating the same StringVal for every DoAction() call.

Closes #3403

2023-12-05 15:28:21 +01:00

1 line

115 B

Text

Raw Blame History

### BTest baseline data generated by btest-diff. Do not edit. Use "btest -U/-u" to update. Requires BTest >= 0.63.