| .. |
|
af_packet.plugin
|
Include in Jan's AF_PACKET plugin as builtin plugin
|
2022-10-13 13:29:27 +02:00 |
|
bifs.addr_count_conversion
|
|
|
|
bifs.addr_to_ptr_name
|
|
|
|
bifs.addr_version
|
|
|
|
bifs.all_set
|
|
|
|
bifs.analyzer_name
|
|
|
|
bifs.any_set
|
|
|
|
bifs.backtrace
|
|
|
|
bifs.bare_mode
|
|
|
|
bifs.bloomfilter
|
|
|
|
bifs.bloomfilter-seed
|
|
|
|
bifs.bytestring_to_count
|
Support other byte lengths in bytestring_to_count
|
2022-08-17 15:45:30 -07:00 |
|
bifs.bytestring_to_double
|
GH-696: Add bytestring_to_float BIF
|
2022-07-13 10:44:24 -07:00 |
|
bifs.bytestring_to_float
|
GH-696: Add bytestring_to_float BIF
|
2022-07-13 10:44:24 -07:00 |
|
bifs.bytestring_to_hexstr
|
|
|
|
bifs.cat
|
cat_sep: Make fully vararg and do explicit runtime type checks
|
2022-10-27 13:06:06 +02:00 |
|
bifs.cat_sep_errors
|
zeek.bif: Remove cat_sep() fully var_arg changes
|
2023-04-19 19:30:46 +02:00 |
|
bifs.cat_sep_errors-2
|
zeek.bif: Remove cat_sep() fully var_arg changes
|
2023-04-19 19:30:46 +02:00 |
|
bifs.cat_sep_errors-3
|
zeek.bif: Remove cat_sep() fully var_arg changes
|
2023-04-19 19:30:46 +02:00 |
|
bifs.cat_sep_errors-4
|
zeek.bif: Remove cat_sep() fully var_arg changes
|
2023-04-19 19:30:46 +02:00 |
|
bifs.cat_sep_errors-5
|
zeek.bif: Remove cat_sep() fully var_arg changes
|
2023-04-19 19:30:46 +02:00 |
|
bifs.check_subnet
|
|
|
|
bifs.clear_table
|
|
|
|
bifs.clear_table_expire_func
|
|
|
|
bifs.community_id.run-pcaps
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
bifs.community_id.v1
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
bifs.compress_path
|
|
|
|
bifs.convert_for_pattern
|
|
|
|
bifs.count_to_addr
|
|
|
|
bifs.create_file
|
|
|
|
bifs.decode_base64
|
|
|
|
bifs.decode_base64_conn
|
|
|
|
bifs.decode_base64_errors
|
btest/decode_base_errors: Avoid binary output in baseline
|
2023-02-02 18:49:00 +01:00 |
|
bifs.directory_operations
|
Downgrade internal errors to reporter warnings in file/directory BiFs
|
2025-02-05 17:49:37 -08:00 |
|
bifs.disable_analyzer
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
bifs.disable_analyzer-early
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
bifs.disable_analyzer-for-conn
|
DPD: change handling of pre-confirmation violations, remove max_violations
|
2025-01-30 16:59:44 +00:00 |
|
bifs.disable_analyzer-for-conn-2
|
Add btests for the lookup_connection_analyzer_id() BiF.
|
2024-05-30 16:38:09 -07:00 |
|
bifs.disable_analyzer-for-conn-3
|
Add btests for the lookup_connection_analyzer_id() BiF.
|
2024-05-30 16:38:09 -07:00 |
|
bifs.disable_analyzer-hook
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
bifs.disable_analyzer-hook-module
|
analyzer: Move disabling_analyzer() hook into Analyzer module
|
2023-01-23 12:22:05 +01:00 |
|
bifs.disable_analyzer-invalid-aid
|
More precise error reporting for the disable_analyzer() BiF
|
2024-05-30 16:38:22 -07:00 |
|
bifs.disable_analyzer-tcp-packet-children
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
bifs.do_find_str
|
|
|
|
bifs.dump_current_packet
|
|
|
|
bifs.edit
|
|
|
|
bifs.enable_raw_output
|
|
|
|
bifs.encode_base64
|
|
|
|
bifs.entropy_test
|
|
|
|
bifs.enum_names
|
enum_names: Support naming types with a string
|
2022-10-21 20:09:48 +02:00 |
|
bifs.enum_to_int
|
|
|
|
bifs.escape_string
|
|
|
|
bifs.event-handler-stats
|
telemetry: Invoke Telemetry::sync() only at scrape/collection time
|
2024-10-22 18:49:11 +02:00 |
|
bifs.exit
|
|
|
|
bifs.file_mode
|
|
|
|
bifs.filter_subnet_table
|
|
|
|
bifs.find_all
|
Add max_size argument for find_all/find_all_ordered BIFs
|
2023-02-21 12:27:54 -07:00 |
|
bifs.find_all_ordered
|
Add max_size argument for find_all/find_all_ordered BIFs
|
2023-02-21 12:27:54 -07:00 |
|
bifs.find_entropy
|
|
|
|
bifs.find_first
|
Add baseline for find_first test, update comments, and reorder function imports
|
2025-05-02 11:51:45 +08:00 |
|
bifs.find_in_zeekpath
|
zeek.bif: Add find_in_zeekpath() helper
|
2024-02-22 11:33:03 +01:00 |
|
bifs.find_last
|
|
|
|
bifs.fmt
|
|
|
|
bifs.fmt_ftp_port
|
|
|
|
bifs.fnv1a_hash
|
Improvements in FNV1A hash functions
|
2024-10-22 16:07:12 +02:00 |
|
bifs.footprint
|
refine Val "footprint" to equate long strings with multiple objects
|
2024-04-29 12:39:36 -07:00 |
|
bifs.from_json
|
Change from_json to return an error rather than print it.
|
2025-04-23 15:56:12 -07:00 |
|
bifs.from_json-2
|
Change from_json to return an error rather than print it.
|
2025-04-23 15:56:12 -07:00 |
|
bifs.from_json-3
|
Change from_json to return an error rather than print it.
|
2025-04-23 15:56:12 -07:00 |
|
bifs.from_json-4
|
Change from_json to return an error rather than print it.
|
2025-04-23 15:56:12 -07:00 |
|
bifs.from_json-5
|
Change from_json to return an error rather than print it.
|
2025-04-23 15:56:12 -07:00 |
|
bifs.from_json-6
|
Change from_json to return an error rather than print it.
|
2025-04-23 15:56:12 -07:00 |
|
bifs.from_json-7
|
Change from_json to return an error rather than print it.
|
2025-04-23 15:56:12 -07:00 |
|
bifs.from_json-8
|
Change from_json to return an error rather than print it.
|
2025-04-23 15:56:12 -07:00 |
|
bifs.from_json-9
|
Change from_json to return an error rather than print it.
|
2025-04-23 15:56:12 -07:00 |
|
bifs.from_json-10
|
Change from_json to return an error rather than print it.
|
2025-04-23 15:56:12 -07:00 |
|
bifs.from_json-11
|
Change from_json to return an error rather than print it.
|
2025-04-23 15:56:12 -07:00 |
|
bifs.from_json-12
|
Change from_json to return an error rather than print it.
|
2025-04-23 15:56:12 -07:00 |
|
bifs.from_json-13
|
Change from_json to return an error rather than print it.
|
2025-04-23 15:56:12 -07:00 |
|
bifs.from_json-14
|
Add test with MUD example
|
2023-06-29 15:57:52 +02:00 |
|
bifs.get_current_packet_header
|
|
|
|
bifs.get_dns_stats
|
get_dns_stats: Expose total cache size and cached text entries
|
2023-03-10 09:22:45 +01:00 |
|
bifs.get_plugin_components
|
Added Baseline
|
2025-06-25 21:22:21 +05:30 |
|
bifs.get_port_transport_proto
|
|
|
|
bifs.getsetenv
|
|
|
|
bifs.global_ids
|
global_ids: Align script_id$type_name field with type_name()
|
2024-02-23 17:26:56 +01:00 |
|
bifs.global_ids-modules
|
global_ids(): Include module names
|
2023-07-05 14:09:20 +02:00 |
|
bifs.haversine_distance
|
|
|
|
bifs.hexdump
|
|
|
|
bifs.hexstr_to_bytestring
|
|
|
|
bifs.hll_cardinality
|
|
|
|
bifs.hll_cluster
|
btest remaining: Use generic cluster-layout.zeek
|
2025-05-20 20:30:01 +02:00 |
|
bifs.hll_large_estimate
|
|
|
|
bifs.icmp_connection_exists
|
conn_key/fivetuple: Handle one-way ICMP conns in DoConnKeyFromVal()
|
2025-07-24 09:48:33 +02:00 |
|
bifs.identify_data
|
|
|
|
bifs.install_src_addr_filter
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
bifs.is_ascii
|
|
|
|
bifs.is_event_handled
|
Address review comments and small updates for DNS warnings
|
2025-01-14 09:33:48 +00:00 |
|
bifs.is_local_interface
|
|
|
|
bifs.is_port
|
|
|
|
bifs.join_string
|
strings: Implement join_string_set() as bif
|
2022-09-20 23:07:26 +02:00 |
|
bifs.levenshtein_distance
|
|
|
|
bifs.lookup_connection
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
bifs.lookup_ID
|
|
|
|
bifs.lowerupper
|
|
|
|
bifs.lstrip
|
|
|
|
bifs.mask_addr
|
|
|
|
bifs.matching_subnets
|
|
|
|
bifs.math
|
zeek.bif: Add log2() and ceil()
|
2023-05-09 18:57:57 +02:00 |
|
bifs.md5
|
|
|
|
bifs.net_stats_trace
|
Add optional packet filtered statistics for packet sources
|
2023-04-06 09:47:04 -07:00 |
|
bifs.netbios-functions
|
netbios_decode: use unsigned char for result
|
2023-02-02 15:48:58 +01:00 |
|
bifs.order
|
|
|
|
bifs.packet_sources
|
|
|
|
bifs.parse_ftp
|
bifs/parse_eftp: Prevent reporter warnings/errors on invalid input
|
2023-01-16 15:20:02 +01:00 |
|
bifs.piped_exec
|
tweak btest so it's recognized as a candidate for C++ compilation testing
|
2022-09-16 16:49:55 -07:00 |
|
bifs.print_raw
|
|
|
|
bifs.ptr_name_to_addr
|
|
|
|
bifs.rand
|
|
|
|
bifs.raw_bytes_to_v4_addr
|
|
|
|
bifs.raw_bytes_to_v6_addr
|
|
|
|
bifs.reading_traces
|
|
|
|
bifs.record_type_to_vector
|
|
|
|
bifs.records_fields
|
Type/RecordType: Make table returned by GetRecordFieldsVal() ordered
|
2025-07-22 16:58:40 +02:00 |
|
bifs.remask_addr
|
|
|
|
bifs.resize
|
|
|
|
bifs.reverse
|
|
|
|
bifs.rotate_file
|
|
|
|
bifs.rotate_file_by_name
|
|
|
|
bifs.routing0_data_to_addrs
|
|
|
|
bifs.rstrip
|
|
|
|
bifs.safe_shell_quote
|
|
|
|
bifs.same_object
|
|
|
|
bifs.sha1
|
|
|
|
bifs.sha256
|
|
|
|
bifs.sleep
|
Add sleep() BiF.
|
2024-12-07 00:36:45 -08:00 |
|
bifs.sort
|
|
|
|
bifs.split_string
|
strings.bif/do_split_string: Pass bol and eol to MatchPrefix()
|
2023-11-16 08:36:08 +01:00 |
|
bifs.strcmp
|
|
|
|
bifs.strftime
|
|
|
|
bifs.string_fill
|
|
|
|
bifs.string_to_pattern
|
|
|
|
bifs.string_utils
|
Convert remove_prefix/suffix BIFs to use std::string_view
|
2024-01-23 10:38:56 -07:00 |
|
bifs.string_utils_errors
|
Add type checking to string_cat arguments
|
2022-08-29 08:45:59 -07:00 |
|
bifs.strip
|
|
|
|
bifs.strptime
|
|
|
|
bifs.strstr
|
|
|
|
bifs.sub
|
strings.bif/sub,gsub: Respect anchors in pattern
|
2023-11-17 14:37:25 +01:00 |
|
bifs.sub_bytes
|
BTest updates for ZAM regularization changes
|
2024-08-16 11:18:58 +02:00 |
|
bifs.subnet_to_addr
|
|
|
|
bifs.subnet_version
|
|
|
|
bifs.subst_string
|
|
|
|
bifs.system
|
|
|
|
bifs.system_env
|
|
|
|
bifs.table_keys
|
Add more test cases
|
2022-08-11 13:35:27 +08:00 |
|
bifs.table_values
|
update test suite to avoid GH-2385 problems, including incorrect typing
|
2022-12-04 17:56:30 -08:00 |
|
bifs.to_addr
|
|
|
|
bifs.to_count
|
Merge remote-tracking branch 'markoverholser/master'
|
2025-02-24 11:38:11 -07:00 |
|
bifs.to_double
|
|
|
|
bifs.to_double_from_string
|
|
|
|
bifs.to_int
|
Merge remote-tracking branch 'markoverholser/master'
|
2025-02-24 11:38:11 -07:00 |
|
bifs.to_interval
|
|
|
|
bifs.to_port
|
bifs/to_port: Avoid ASAN errors when calling to_port("")
|
2022-08-31 17:15:50 +02:00 |
|
bifs.to_subnet
|
|
|
|
bifs.to_time
|
|
|
|
bifs.topk
|
|
|
|
bifs.type_aliases
|
|
|
|
bifs.type_name
|
Var/Func: Render function parameters using comma, not semicolon
|
2023-10-04 17:42:30 +02:00 |
|
bifs.unique_id
|
|
|
|
bifs.unique_id-rnd
|
|
|
|
bifs.uuid_to_string
|
|
|
|
bifs.x509_check_hostname
|
|
|
|
bifs.x509_parse_dn
|
SSL/TLS: Parse CertificateRequest message
|
2023-03-09 09:12:29 +01:00 |
|
bifs.x509_verify
|
btest/x509_verify: Drop OpenSSL 1.0 hack
|
2025-02-04 09:44:03 +01:00 |
|
bifs.zeek_args
|
|
|
|
broker.connect-on-retry
|
|
|
|
broker.disconnect
|
|
|
|
broker.error
|
|
|
|
broker.event-group-interaction
|
EventRegistry/Func: Disable events when all bodies are disabled
|
2023-01-05 12:03:58 +01:00 |
|
broker.opaque
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
broker.peering-directionality
|
Expand Broker APIs to allow tracking directionality of peering establishment
|
2025-04-21 14:08:42 -07:00 |
|
broker.publish-errors
|
btest/broker/publish-errors: Avoid exit(0)
|
2025-06-24 19:06:52 +02:00 |
|
broker.publish_unspecified_table
|
broker: Support publish() of unspecified set() / table()
|
2024-11-06 15:27:26 +01:00 |
|
broker.python-bindings
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
broker.remote_event
|
base/frameworks/spicy: Do not load base/misc/version
|
2023-10-24 13:15:21 +02:00 |
|
broker.remote_event_any
|
base/frameworks/spicy: Do not load base/misc/version
|
2023-10-24 13:15:21 +02:00 |
|
broker.remote_event_auto
|
|
|
|
broker.remote_event_auto_ts
|
Add timestamps to auto published broker events.
|
2023-05-11 12:54:11 +02:00 |
|
broker.remote_event_index_types
|
BTest baseline update for more complete function/lambda names
|
2024-09-27 14:16:10 -07:00 |
|
broker.remote_event_schedule_ts
|
Prevent event timestamps set to future
|
2025-04-11 13:06:33 +02:00 |
|
broker.remote_event_ssl_auth
|
base/frameworks/spicy: Do not load base/misc/version
|
2023-10-24 13:15:21 +02:00 |
|
broker.remote_event_ts
|
Add timestamps to manually published broker events.
|
2023-05-11 12:53:52 +02:00 |
|
broker.remote_event_ts_compat
|
Add compatibility tests for timestamped events.
|
2023-05-11 12:54:11 +02:00 |
|
broker.remote_event_vector_any
|
|
|
|
broker.remote_id
|
Spelling testing
|
2022-11-16 20:05:03 -05:00 |
|
broker.remote_log
|
|
|
|
broker.remote_log_batch
|
|
|
|
broker.remote_log_late_join
|
|
|
|
broker.remote_log_types
|
BTest baseline update for more complete function/lambda names
|
2024-09-27 14:16:10 -07:00 |
|
broker.ssl-mismatch
|
|
|
|
broker.ssl_auth_failure
|
|
|
|
broker.store.brokerstore-attr-clone
|
|
|
|
broker.store.brokerstore-attr-expire
|
|
|
|
broker.store.brokerstore-attr-persistence
|
|
|
|
broker.store.brokerstore-attr-persistence-clone
|
|
|
|
broker.store.brokerstore-attr-simple
|
|
|
|
broker.store.brokerstore-backend-delete-composite-key
|
btest/broker: Use generic cluster-layout.zeek
|
2025-05-20 20:30:01 +02:00 |
|
broker.store.brokerstore-backend-invalid
|
|
|
|
broker.store.brokerstore-backend-simple
|
|
|
|
broker.store.brokerstore-backend-simple-incompatible
|
|
|
|
broker.store.brokerstore-backend-simple-reverse
|
|
|
|
broker.store.brokerstore-backend-sqlite
|
|
|
|
broker.store.brokerstore-backend-sqlite-corrupt-delete
|
broker/store: Extend SQLiteOptions around data safety and performance
|
2023-01-30 10:25:37 +01:00 |
|
broker.store.brokerstore-backend-sqlite-corrupt-fail
|
broker/store: Extend SQLiteOptions around data safety and performance
|
2023-01-30 10:25:37 +01:00 |
|
broker.store.brokerstore-backend-sqlite-incompatible
|
|
|
|
broker.store.brokerstore-backend-sqlite-integrity-check
|
broker/store: Extend SQLiteOptions around data safety and performance
|
2023-01-30 10:25:37 +01:00 |
|
broker.store.brokerstore-backend-sqlite-wal-mode
|
broker/store: Extend SQLiteOptions around data safety and performance
|
2023-01-30 10:25:37 +01:00 |
|
broker.store.clone
|
|
|
|
broker.store.create-failure
|
|
|
|
broker.store.create-global-failure
|
Return a warning and fail if creating a store at global scope
|
2024-12-17 11:32:43 -07:00 |
|
broker.store.handle-copy
|
|
|
|
broker.store.invalid-handle
|
added a space when rendering some expressions so they're more readable
|
2024-05-29 12:40:05 -07:00 |
|
broker.store.local
|
|
|
|
broker.store.ops
|
|
|
|
broker.store.record
|
|
|
|
broker.store.set
|
|
|
|
broker.store.sqlite
|
|
|
|
broker.store.table
|
|
|
|
broker.store.type-conversion
|
|
|
|
broker.store.vector
|
|
|
|
broker.telemetry
|
telemetry: Rename endpoint label to node label
|
2025-06-25 09:33:01 +02:00 |
|
broker.unpeer
|
|
|
|
broker.web-socket-events
|
Add WebSocket support for exchanging events with external clients.
|
2022-06-02 10:31:52 +02:00 |
|
broker.web-socket-events-metadata
|
Add compatibility tests for timestamped events.
|
2023-05-11 12:54:11 +02:00 |
|
cluster.backend-enum
|
broker: Add WebSocketShim backend
|
2025-04-23 14:27:43 +02:00 |
|
cluster.broker.cluster-hello-zero-network-timestamp
|
btest: Add test for Cluster::hello zero-timestamp
|
2025-05-26 16:08:27 +02:00 |
|
cluster.broker.cluster-publish
|
cluster: Add Cluster scoped bifs
|
2024-11-26 12:58:23 +01:00 |
|
cluster.broker.logging
|
btest/cluster: Use generic cluster-layout.zeek
|
2025-05-20 20:30:01 +02:00 |
|
cluster.broker.publish-any
|
cluster: Fix Cluster::publish() of Broker::Data
|
2024-12-12 17:54:37 +01:00 |
|
cluster.broker.publish-warning
|
Broker::publish: Warn on using Broker::publish() when inactive
|
2024-12-11 17:20:42 +01:00 |
|
cluster.generic.cluster-publish-errors
|
cluster: Move publish_hrw() and publish_rr() to cluster.bif
|
2024-12-10 20:33:02 +01:00 |
|
cluster.generic.errors
|
cluster: Add Cluster scoped bifs
|
2024-11-26 12:58:23 +01:00 |
|
cluster.generic.logging-rr
|
btest/generic: Add publish_hrw(), publish_rr() and logging tests
|
2024-12-10 20:33:02 +01:00 |
|
cluster.generic.make_event
|
cluster: Add Cluster scoped bifs
|
2024-11-26 12:58:23 +01:00 |
|
cluster.generic.publish-any
|
cluster: Fix Cluster::publish() of Broker::Data
|
2024-12-12 17:54:37 +01:00 |
|
cluster.generic.publish-hrw
|
btest/generic: Add publish_hrw(), publish_rr() and logging tests
|
2024-12-10 20:33:02 +01:00 |
|
cluster.generic.publish-no-handler
|
cluster/serializer/broker: Fix handler lookup
|
2025-02-05 10:39:56 +01:00 |
|
cluster.generic.publish-rr
|
btest/generic: Add publish_hrw(), publish_rr() and logging tests
|
2024-12-10 20:33:02 +01:00 |
|
cluster.generic.publish-unspecified
|
cluster/Backend: Handle unspecified table/set
|
2024-12-12 17:54:42 +01:00 |
|
cluster.generic.publish-vec-hole
|
broker/Data/data_to_val: Fail on vectors/lists with holes
|
2025-04-28 18:23:37 +02:00 |
|
cluster.serializer-enum
|
cluster/serializer: Add binary-serialization-format
|
2024-12-04 12:40:35 +01:00 |
|
cluster.telemetry.two-nodes
|
btest/cluster/telemetry: Add smoke testing for telemetry
|
2025-06-25 17:13:01 +02:00 |
|
cluster.telemetry.ws
|
btest/cluster/telemetry: Add smoke testing for telemetry
|
2025-06-25 17:13:01 +02:00 |
|
cluster.telemetry.ws-app
|
btest/cluster/telemetry: Add smoke testing for telemetry
|
2025-06-25 17:13:01 +02:00 |
|
cluster.telemetry.ws-invalid-app
|
RE: Add MatchAll() and MatchSet() for std::string_view
|
2025-06-30 13:22:31 +02:00 |
|
cluster.websocket.bad-event-args
|
Align WebSocket error in cluster with one in Broker
|
2025-06-21 18:13:09 +02:00 |
|
cluster.websocket.bad-subscriptions
|
Align WebSocket error in cluster with one in Broker
|
2025-06-21 18:13:09 +02:00 |
|
cluster.websocket.bad-url
|
Align WebSocket error in cluster with one in Broker
|
2025-06-21 18:13:09 +02:00 |
|
cluster.websocket.broker.manager-recvs
|
btest/cluster/websocket: Add tests using broker
|
2025-04-23 14:27:43 +02:00 |
|
cluster.websocket.broker.manager-sends
|
btest/cluster/websocket: Add tests using broker
|
2025-04-23 14:27:43 +02:00 |
|
cluster.websocket.broker.manager-worker-ping-pong
|
btest/cluster/websocket: Add tests using broker
|
2025-04-23 14:27:43 +02:00 |
|
cluster.websocket.broker.no-subscriptions
|
btest/cluster/websocket: Move no-subscriptions test
|
2025-04-25 10:01:23 +00:00 |
|
cluster.websocket.broker.oneshot
|
cluster/zeromq: Attempt publish during termination
|
2025-04-23 14:27:43 +02:00 |
|
cluster.websocket.cluster-log
|
cluster/WebSocket: Include X-Application-Name in cluster.log
|
2025-06-30 17:55:24 +02:00 |
|
cluster.websocket.listen-idempotent
|
cluster/websocket: Make websocket dispatcher queue size configurable
|
2025-04-23 14:27:43 +02:00 |
|
cluster.websocket.one
|
cluster/websocket: Implement WebSocket server
|
2025-03-10 17:07:30 +01:00 |
|
cluster.websocket.one-ipv6
|
cluster/websocket: Deprecate $listen_host, introduce $listen_addr
|
2025-05-30 11:02:41 +02:00 |
|
cluster.websocket.one-ipv6-deprecated
|
cluster/websocket: Deprecate $listen_host, introduce $listen_addr
|
2025-05-30 11:02:41 +02:00 |
|
cluster.websocket.one-pipelining
|
cluster/websocket: Implement WebSocket server
|
2025-03-10 17:07:30 +01:00 |
|
cluster.websocket.ping-timeout
|
cluster/websocket: Propagate code and reason to websocket_client_lost()
|
2025-05-13 18:26:03 +02:00 |
|
cluster.websocket.terminate-while-queuing
|
Websocket: Close onloop during Terminate()
|
2025-05-06 14:19:08 +02:00 |
|
cluster.websocket.three
|
btest/cluster/websocket: Harden multi-client tests
|
2025-03-24 18:36:26 +01:00 |
|
cluster.websocket.tls
|
cluster/websocket: Implement WebSocket server
|
2025-03-10 17:07:30 +01:00 |
|
cluster.websocket.tls-nocert
|
btest/cluster/websocket: Add cert-less test
|
2025-06-16 13:47:33 +02:00 |
|
cluster.websocket.tls-usage-error
|
cluster/websocket: Deprecate $listen_host, introduce $listen_addr
|
2025-05-30 11:02:41 +02:00 |
|
cluster.websocket.two-pipelining
|
btest/cluster/websocket: Harden multi-client tests
|
2025-03-24 18:36:26 +01:00 |
|
cluster.websocket.zeromq.manager-worker-ping-pong
|
btest/cluster/websocket: Move ZeroMQ test and use wstest.py
|
2025-04-23 14:27:43 +02:00 |
|
cluster.websocket.zeromq.no-subscriptions
|
btest/cluster/websocket: Move no-subscriptions test
|
2025-04-25 10:01:23 +00:00 |
|
cluster.websocket.zeromq.oneshot
|
cluster/zeromq: Attempt publish during termination
|
2025-04-23 14:27:43 +02:00 |
|
cluster.zeromq.ipv6-error
|
cluster/zeromq: Hook up and enable IPV6 by default
|
2025-06-24 17:12:45 +02:00 |
|
cluster.zeromq.ipv6-logging
|
cluster/zeromq: Hook up and enable IPV6 by default
|
2025-06-24 17:12:45 +02:00 |
|
cluster.zeromq.logging
|
cluster/backend/zeromq: Add ZeroMQ based cluster backend
|
2024-12-10 20:33:02 +01:00 |
|
cluster.zeromq.manager-is-logger
|
cluster/backend/zeromq: Add ZeroMQ based cluster backend
|
2024-12-10 20:33:02 +01:00 |
|
cluster.zeromq.node-topic-prefix
|
cluster/zeromq: Fix node_topic() and nodeid_topic()
|
2025-03-24 18:36:26 +01:00 |
|
cluster.zeromq.overload-drop
|
btest/cluster/zeromq: Add tests for overload behavior
|
2025-07-29 11:23:53 +02:00 |
|
cluster.zeromq.overload-no-drop
|
btest/cluster/zeromq: Add tests for overload behavior
|
2025-07-29 11:23:53 +02:00 |
|
cluster.zeromq.overload-worker-proxy-topic-drop
|
btest/cluster/zeromq: Add tests for overload behavior
|
2025-07-29 11:23:53 +02:00 |
|
cluster.zeromq.overload-worker-proxy-topic-no-drop
|
btest/cluster/zeromq: Add tests for overload behavior
|
2025-07-29 11:23:53 +02:00 |
|
cluster.zeromq.supervisor
|
cluster/backend/zeromq: Add ZeroMQ based cluster backend
|
2024-12-10 20:33:02 +01:00 |
|
cluster.zeromq.two-nodes
|
cluster/backend/zeromq: Add ZeroMQ based cluster backend
|
2024-12-10 20:33:02 +01:00 |
|
cluster.zeromq.unsubscribe
|
cluster/zeromq: Fix Unsubscribe() bug caused by \x00 prefix
|
2025-02-05 10:39:56 +01:00 |
|
cluster.zeromq.unsubscribe-two-workers
|
cluster/zeromq: Fix unsubscription visibility
|
2025-03-24 18:36:16 +01:00 |
|
core.analyzer-confirmation-violation-info
|
PPPoE: don't forward more bytes than header indicates
|
2025-07-08 10:20:59 +01:00 |
|
core.analyzer-confirmation-violation-info-ftp
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
core.analyzer-stream-event
|
protocol: Add StreamEvent analyzer
|
2024-12-06 16:12:40 +01:00 |
|
core.analyzer-stream-event-disable
|
protocol: Add StreamEvent analyzer
|
2024-12-06 16:12:40 +01:00 |
|
core.bits_per_uid
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
core.check-unused-event-handlers
|
EventRegistry: Deprecate UsedHandlers() and UnusedHandlers()
|
2023-11-07 16:06:17 +01:00 |
|
core.checksums
|
|
|
|
core.checksums-cli
|
Add btest for "-C" flag vs the script-layer ignore_checksums global.
|
2023-04-24 21:19:05 -07:00 |
|
core.checksums_ignore_nets
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
core.checksums_ignore_nets_runtime_update
|
|
|
|
core.cisco-fabric-path
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
core.command-line-option-redefs
|
|
|
|
core.conn-generic-packet-threshold
|
Merge branch 'topic/jgras/connection-packet-threshold' of https://github.com/J-Gras/zeek
|
2025-07-08 17:54:27 +02:00 |
|
core.conn-size-threshold
|
Add support for ircv3 tags
|
2025-07-28 14:06:33 -07:00 |
|
core.conn-stats
|
ConnStats: Expose num_packets_unprocessed
|
2025-07-28 14:10:53 +02:00 |
|
core.conn-uid
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
core.connection_flip_roles
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
core.connection_flipped
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
core.connection_status_update
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
core.disable-mobile-ipv6
|
|
|
|
core.discarder
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
core.div-by-zero
|
|
|
|
core.dns-init
|
scan.l: Deprecate DNS resolutions of hostname literals
|
2025-03-05 19:23:08 +01:00 |
|
core.embedded-null
|
|
|
|
core.erspan
|
|
|
|
core.erspanI
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
core.erspanII
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
core.erspanIII
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
core.ether-addrs
|
|
|
|
core.event-arg-reuse
|
|
|
|
core.event-groups.basic
|
Reintroduce event groups
|
2022-10-25 18:03:26 +02:00 |
|
core.event-groups.errors
|
Reintroduce event groups
|
2022-10-25 18:03:26 +02:00 |
|
core.event-groups.errors-2
|
Reintroduce event groups
|
2022-10-25 18:03:26 +02:00 |
|
core.event-groups.errors-3
|
Reintroduce event groups
|
2022-10-25 18:03:26 +02:00 |
|
core.event-groups.errors-4
|
Reintroduce event groups
|
2022-10-25 18:03:26 +02:00 |
|
core.event-groups.existence
|
zeek.bif: Add has_event_group() / has_module_events()
|
2022-12-09 16:59:07 +01:00 |
|
core.event-groups.hooks-basic
|
Reintroduce event groups
|
2022-10-25 18:03:26 +02:00 |
|
core.event-groups.hooks-module
|
Reintroduce event groups
|
2022-10-25 18:03:26 +02:00 |
|
core.event-groups.module
|
Reintroduce event groups
|
2022-10-25 18:03:26 +02:00 |
|
core.event-groups.multi-group
|
Reintroduce event groups
|
2022-10-25 18:03:26 +02:00 |
|
core.event-groups.runtime
|
Reintroduce event groups
|
2022-10-25 18:03:26 +02:00 |
|
core.event-metadata.add-missing-remote-network-timestamp-error
|
Event: Bail on add_missing_remote_network_timestamp without add_network_timestamp
|
2025-06-02 17:31:36 +02:00 |
|
core.event-metadata.current-event-time
|
Event: Use -1.0 for undefined/unset timestamps
|
2025-06-02 17:31:36 +02:00 |
|
core.event-metadata.network-timestamp
|
Event/zeek.bif: Add EventMetadata current() and current_values() accessors
|
2025-05-23 19:32:50 +02:00 |
|
core.event-metadata.non-event
|
Event/zeek.bif: Add EventMetadata current() and current_values() accessors
|
2025-05-23 19:32:50 +02:00 |
|
core.event-metadata.register
|
Event/zeek.bif: Add EventMetadata current() and current_values() accessors
|
2025-05-23 19:32:50 +02:00 |
|
core.event-metadata.register-type-errors
|
EventRegistry/zeek.bif/init-bare: Add event metadata infrastructure
|
2025-05-23 19:31:58 +02:00 |
|
core.event-trace
|
btest/core: Add event-trace test
|
2025-05-19 18:23:08 +02:00 |
|
core.expire-all-timers
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
core.expired-conn-weird
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
core.expr-exception
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
core.fake_dns
|
scan.l: Deprecate DNS resolutions of hostname literals
|
2025-03-05 19:23:08 +01:00 |
|
core.file-analyzer-violation
|
threading/Manager: Warn if threads are added after termination
|
2024-07-02 12:34:28 +02:00 |
|
core.global_opaque_val
|
|
|
|
core.history-flip
|
Optimize Conn::set_conn to minimize operations
|
2025-07-29 09:11:57 +01:00 |
|
core.hostname-literal-resolve
|
scan.l: Deprecate DNS resolutions of hostname literals
|
2025-03-05 19:23:08 +01:00 |
|
core.icmp.icmp-context
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
core.icmp.icmp-events
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
core.icmp.icmp6-context
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
core.icmp.icmp6-events
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
core.icmp.icmp6-nd-options
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
core.icmp.icmp_sent
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
core.init-error
|
|
|
|
core.ip-broken-header
|
Update baselines after AnalyzePacket changes
|
2022-11-08 16:44:15 -07:00 |
|
core.ipv6-atomic-frag
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
core.ipv6-flow-labels
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
core.ipv6-frag
|
dns: Remove AD and CD flags from log
|
2023-03-16 10:09:27 +01:00 |
|
core.ipv6_esp
|
|
|
|
core.ipv6_ext_headers
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
core.ipv6_zero_len_ah
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
core.linuxsll2
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
core.load-duplicates-links
|
|
|
|
core.load-explicit-bro-suffix-fallback
|
|
|
|
core.load-file-extension
|
Cleanup unused baselines
|
2025-07-10 16:46:09 -04:00 |
|
core.load-pkg
|
Cleanup unused baselines
|
2025-07-10 16:46:09 -04:00 |
|
core.load-prefixes
|
|
|
|
core.load-relative
|
|
|
|
core.load-stdin
|
Add btests to verify Zeek's handling of SIGTERM and reading stdin
|
2022-07-09 11:17:14 -07:00 |
|
core.load-unload
|
Cleanup unused baselines
|
2025-07-10 16:46:09 -04:00 |
|
core.local-flip
|
Optimize Conn::set_conn to minimize operations
|
2025-07-29 09:11:57 +01:00 |
|
core.max-analyzer-violations
|
pop3: Prevent unbounded state growth
|
2024-09-18 19:05:39 +02:00 |
|
core.mmdb.explicit-open
|
Add btest to verify behavior of re-opened MMDBs opened directly via BIFs
|
2024-01-10 20:44:40 -08:00 |
|
core.mmdb.lookup
|
Add btest for succeeding/failing IPv4/IPv6 lookups
|
2024-01-25 23:54:20 -08:00 |
|
core.mmdb.reopen
|
btest/core/mmdb: Basic lookup_autonomous_system / lookup_location tests
|
2023-10-24 13:15:18 +02:00 |
|
core.mmdb.temporary-error
|
Fix mmdb.temporary-error testcase when MMDBs are installed on system
|
2024-01-10 20:28:41 -08:00 |
|
core.mobile-ipv6-dst-opts
|
Update baselines after AnalyzePacket changes
|
2022-11-08 16:44:15 -07:00 |
|
core.mobile-ipv6-home-addr
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
core.mobile-ipv6-routing
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
core.mobility-checksums
|
|
|
|
core.mobility_msg
|
|
|
|
core.mpls-in-vlan
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
core.network-time
|
|
|
|
core.network-time-init
|
|
|
|
core.network_time.broker
|
core.network_time.broker: Test reliability improvement
|
2023-05-05 14:08:29 +02:00 |
|
core.network_time.no-update
|
A set of tests around set_network_time() and timer expiration
|
2023-03-23 12:41:56 +01:00 |
|
core.network_time.packet_ts
|
Add btest for get_current_packet_ts()
|
2024-12-09 16:39:38 +01:00 |
|
core.network_time.set-network-time
|
A set of tests around set_network_time() and timer expiration
|
2023-03-23 12:41:56 +01:00 |
|
core.network_time.set-network-time-expiration
|
A set of tests around set_network_time() and timer expiration
|
2023-03-23 12:41:56 +01:00 |
|
core.nflog
|
|
|
|
core.nop
|
|
|
|
core.option-errors
|
|
|
|
core.option-errors-2
|
|
|
|
core.option-errors-3
|
|
|
|
core.option-priorities
|
|
|
|
core.option-redef
|
|
|
|
core.option-runtime-errors
|
added a space when rendering some expressions so they're more readable
|
2024-05-29 12:40:05 -07:00 |
|
core.option-runtime-errors-2
|
added a space when rendering some expressions so they're more readable
|
2024-05-29 12:40:05 -07:00 |
|
core.option-runtime-errors-3
|
added a space when rendering some expressions so they're more readable
|
2024-05-29 12:40:05 -07:00 |
|
core.option-runtime-errors-4
|
added a space when rendering some expressions so they're more readable
|
2024-05-29 12:40:05 -07:00 |
|
core.option-runtime-errors-5
|
added a space when rendering some expressions so they're more readable
|
2024-05-29 12:40:05 -07:00 |
|
core.option-runtime-errors-6
|
added a space when rendering some expressions so they're more readable
|
2024-05-29 12:40:05 -07:00 |
|
core.option-runtime-errors-7
|
added a space when rendering some expressions so they're more readable
|
2024-05-29 12:40:05 -07:00 |
|
core.option-runtime-errors-8
|
added a space when rendering some expressions so they're more readable
|
2024-05-29 12:40:05 -07:00 |
|
core.option-runtime-errors-9
|
added a space when rendering some expressions so they're more readable
|
2024-05-29 12:40:05 -07:00 |
|
core.option-runtime-errors-10
|
added a space when rendering some expressions so they're more readable
|
2024-05-29 12:40:05 -07:00 |
|
core.option-runtime-errors-11
|
added a space when rendering some expressions so they're more readable
|
2024-05-29 12:40:05 -07:00 |
|
core.option-runtime-errors-12
|
added a space when rendering some expressions so they're more readable
|
2024-05-29 12:40:05 -07:00 |
|
core.option-runtime-errors-13
|
added a space when rendering some expressions so they're more readable
|
2024-05-29 12:40:05 -07:00 |
|
core.option-zeek-done
|
option.bif: Short-circuit option changes when terminating
|
2022-07-29 18:22:03 +02:00 |
|
core.packet-analyzer-override
|
Reintroduce info when overriding packet analyzer mappings.
|
2023-03-30 16:19:39 +02:00 |
|
core.parse-only-signature-file-issues
|
rule-parse: Remove [event_name] syntax, deprecate msg as identifier
|
2023-12-14 10:16:35 +01:00 |
|
core.parse-only-usage-issues
|
|
|
|
core.pbb
|
Move Conn::set_conn() from connection_state_remove to new_connection
|
2025-07-29 09:11:57 +01:00 |
|
core.pcap.dumper
|
|
|
|
core.pcap.dynamic-filter
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
core.pcap.filter-warning
|
Update core.pcap.filter-warning baseline
|
2024-04-18 12:27:46 +00:00 |
|
core.pcap.input-error
|
iosource/pcap: Support configurable buffer size
|
2023-10-10 15:08:51 +02:00 |
|
core.pcap.pseudo-realtime
|
|
|
|
core.pcap.read-trace-with-filter
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
core.pcap.wrong-format
|
iosource/pcap: Support configurable buffer size
|
2023-10-10 15:08:51 +02:00 |
|
core.pcap_file_done
|
|
|
|
core.ppp
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
core.pppoe
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
core.pppoe-over-qinq
|
PPPoE: don't forward more bytes than header indicates
|
2025-07-08 10:20:59 +01:00 |
|
core.print-bpf-filters
|
spciy-redis: Bring Redis analyzer into Zeek proper
|
2025-05-27 09:28:12 -04:00 |
|
core.print-interval
|
|
|
|
core.proc-status-file
|
|
|
|
core.protocol-registration-error
|
|
|
|
core.q-in-q
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
core.radiotap
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
core.raw-truncation
|
Add length checking to ToRawPktHdrVal for truncated packets
|
2023-05-19 09:37:18 -07:00 |
|
core.raw_packet
|
ip4_hdr: Add DF, MF, offset and sum fields
|
2023-04-29 17:09:43 +02:00 |
|
core.reassembly
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
core.record-field-defer
|
testing/btest: Un-deferred record initalization tests
|
2023-09-12 12:12:46 +02:00 |
|
core.record-field-defer-2
|
testing/btest: Un-deferred record initalization tests
|
2023-09-12 12:12:46 +02:00 |
|
core.record-field-defer-3
|
testing/btest: Un-deferred record initalization tests
|
2023-09-12 12:12:46 +02:00 |
|
core.record-field-defer-4
|
testing/btest: Un-deferred record initalization tests
|
2023-09-12 12:12:46 +02:00 |
|
core.record-field-defer-parse-time
|
testing/btest: Un-deferred record initalization tests
|
2023-09-12 12:12:46 +02:00 |
|
core.record-field-defer-parse-time-nested
|
testing/btest: Un-deferred record initalization tests
|
2023-09-12 12:12:46 +02:00 |
|
core.record-field-defer-table
|
testing/btest: Un-deferred record initalization tests
|
2023-09-12 12:12:46 +02:00 |
|
core.record-field-defer-table-2
|
testing/btest: Un-deferred record initalization tests
|
2023-09-12 12:12:46 +02:00 |
|
core.record-field-defer-table-3
|
testing/btest: Un-deferred record initalization tests
|
2023-09-12 12:12:46 +02:00 |
|
core.record-field-redef
|
Type/RecordType: Make table returned by GetRecordFieldsVal() ordered
|
2025-07-22 16:58:40 +02:00 |
|
core.record-field-redef-errors
|
Support redef'ing the &log attribute of record fields
|
2022-08-10 17:27:05 +02:00 |
|
core.record-field-redef-errors-2
|
Support redef'ing the &log attribute of record fields
|
2022-08-10 17:27:05 +02:00 |
|
core.record-field-redef-errors-3
|
Support redef'ing the &log attribute of record fields
|
2022-08-10 17:27:05 +02:00 |
|
core.record-field-redef-errors-4
|
Support redef'ing the &log attribute of record fields
|
2022-08-10 17:27:05 +02:00 |
|
core.record-field-redef-errors-5
|
Support redef'ing the &log attribute of record fields
|
2022-08-10 17:27:05 +02:00 |
|
core.record-field-redef-errors-6
|
Support redef'ing the &log attribute of record fields
|
2022-08-10 17:27:05 +02:00 |
|
core.record-field-redef-errors-7
|
Support redef'ing the &log attribute of record fields
|
2022-08-10 17:27:05 +02:00 |
|
core.record-field-redef-errors-8
|
Support redef'ing the &log attribute of record fields
|
2022-08-10 17:27:05 +02:00 |
|
core.record-field-redef-errors-9
|
Support redef'ing the &log attribute of record fields
|
2022-08-10 17:27:05 +02:00 |
|
core.record-field-redef-errors-10
|
Support redef'ing the &log attribute of record fields
|
2022-08-10 17:27:05 +02:00 |
|
core.record-field-redef-errors-11
|
Support redef'ing the &log attribute of record fields
|
2022-08-10 17:27:05 +02:00 |
|
core.record-field-redef-errors-12
|
Support redef'ing the &log attribute of record fields
|
2022-08-10 17:27:05 +02:00 |
|
core.recursive-event
|
btest: More verbose recursive-event output
|
2023-03-23 12:41:56 +01:00 |
|
core.reporter
|
|
|
|
core.reporter-error-in-handler
|
|
|
|
core.reporter-fmt-strings
|
|
|
|
core.reporter-parse-error
|
|
|
|
core.reporter-paths
|
Btest for normalized reporter path reporting
|
2023-10-03 22:16:00 -07:00 |
|
core.reporter-runtime-error
|
|
|
|
core.reporter-type-mismatch
|
|
|
|
core.reporter-weird-sampling
|
|
|
|
core.reporter-weird-sampling-disable
|
|
|
|
core.reporter-weird-sampling-global
|
|
|
|
core.save-load-seeds
|
util/init_random_seed: write_file implies deterministic
|
2025-02-04 11:57:51 +01:00 |
|
core.script-args
|
|
|
|
core.seed
|
Introduce ZEEK_SEED_VALUES environment variable
|
2023-05-12 19:50:37 +02:00 |
|
core.seed-errors
|
Introduce ZEEK_SEED_VALUES environment variable
|
2023-05-12 19:50:37 +02:00 |
|
core.skip_analyzer
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
core.suspend_processing.broker
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
core.suspend_processing.config
|
Add a set of suspend_processing tests
|
2023-03-23 12:41:56 +01:00 |
|
core.suspend_processing.event-from-zeek-init
|
ip4_hdr: Add DF, MF, offset and sum fields
|
2023-04-29 17:09:43 +02:00 |
|
core.suspend_processing.event-order
|
ip4_hdr: Add DF, MF, offset and sum fields
|
2023-04-29 17:09:43 +02:00 |
|
core.suspend_processing.raw-input
|
Add a set of suspend_processing tests
|
2023-03-23 12:41:56 +01:00 |
|
core.suspend_processing.scheduled-event-from-zeek-init
|
ip4_hdr: Add DF, MF, offset and sum fields
|
2023-04-29 17:09:43 +02:00 |
|
core.suspend_processing.suspension-stack
|
Fix a long-standing bug in the math around continue_processing
|
2023-04-06 10:49:05 -07:00 |
|
core.tcp-padding
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
core.tcp.fin-retransmit
|
|
|
|
core.tcp.flip-without-syn
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
core.tcp.large-file-reassembly
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
core.tcp.miss-end-data
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
core.tcp.missing-syn
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
core.tcp.options
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
core.tcp.quantum-insert
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
core.tcp.reassembly-known-ports
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
core.tcp.rst-after-syn
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
core.tcp.rxmit-history
|
Update btests for new local-only subnets
|
2025-01-09 22:16:42 -07:00 |
|
core.tcp.tcp-dups
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
core.tcp.truncated-header
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
core.truncation
|
IP: fix weird name to not be ipv6 specific
|
2023-05-24 16:29:29 +02:00 |
|
core.tunnels.analyzer-confirmation
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
core.tunnels.ayiya
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
core.tunnels.geneve
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
core.tunnels.geneve-47101
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
core.tunnels.geneve-get-options
|
PacketAnalyzer::Geneve: Add get_options()
|
2025-02-22 12:19:42 -08:00 |
|
core.tunnels.geneve-many-options
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
core.tunnels.geneve-truncated
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
core.tunnels.geneve-vxlan-truncated
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
core.tunnels.gre
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
core.tunnels.gre-aruba
|
|
|
|
core.tunnels.gre-aruba-amsdu
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
core.tunnels.gre-erspan3-dot1q
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
core.tunnels.gre-in-gre
|
Update btests for new local-only subnets
|
2025-01-09 22:16:42 -07:00 |
|
core.tunnels.gre-in-gre-min-depth
|
Remove setting non-existent session history for IPTunnel
|
2024-01-23 12:39:58 -07:00 |
|
core.tunnels.gre-over-udp
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
core.tunnels.gre-pptp
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
core.tunnels.gtp.different_dl_and_ul
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
core.tunnels.gtp.ext_header
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
core.tunnels.gtp.false_gtp
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
core.tunnels.gtp.inner_ipv6
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
core.tunnels.gtp.inner_teredo
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
core.tunnels.gtp.non_recursive
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
core.tunnels.gtp.not_user_plane_data
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
core.tunnels.gtp.opt_header
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
core.tunnels.gtp.outer_ip_frag
|
Update btests for new local-only subnets
|
2025-01-09 22:16:42 -07:00 |
|
core.tunnels.gtp.pdp_ctx_messages
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
core.tunnels.gtp.unknown_or_too_short
|
Settle on analyzer.log for the dpd.log replacement
|
2025-06-03 17:33:36 +01:00 |
|
core.tunnels.ip-in-ip
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
core.tunnels.ip-in-ip-version
|
|
|
|
core.tunnels.ip-tunnel-uid
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
core.tunnels.max-depth
|
init-bare: Default Tunnel::max_depth to 4
|
2024-01-11 10:22:36 +01:00 |
|
core.tunnels.max-depth-exceeded
|
tunnels: Add 'X' to history when reaching Tunnel::max_depth
|
2024-01-11 10:22:44 +01:00 |
|
core.tunnels.teredo
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
core.tunnels.teredo-known-services
|
Update some btests due to timing changes
|
2025-03-18 10:20:33 -07:00 |
|
core.tunnels.teredo-udp-in-udp
|
|
|
|
core.tunnels.teredo_bubble_with_payload
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
core.tunnels.vxlan
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
core.tunnels.vxlan-unknown-internal-packet
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
core.udp-broadcast-no-flip
|
IPBasedAnalyzer: Don't flip connections when destination is broadcast
|
2023-08-28 12:15:55 +02:00 |
|
core.udp-content-ports
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
core.udp-contents-delivery-ports-use-resp
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
core.udp-padding
|
Do not forward more than the remaining data to downstream UDP analyzer
|
2023-07-27 13:35:41 +01:00 |
|
core.unknown-ip-protocol
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
core.unknown-protocol-event
|
Update btest baselines for analyzer history
|
2024-08-12 12:21:09 +02:00 |
|
core.unknown-protocol-log
|
Add btest for unknown_protocols.log
|
2024-12-10 14:54:19 +01:00 |
|
core.vlan-mpls
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
core.vntag
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
core.vntag-in-vlan
|
Add analyzer registration from VLAN to VNTAG
|
2025-03-18 11:51:27 -07:00 |
|
core.when-interpreter-exceptions
|
|
|
|
core.wlanmon
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
core.x509-generalizedtime
|
|
|
|
coverage.bare-load-baseline
|
PPPoE: add session id logging
|
2025-07-23 13:43:45 +01:00 |
|
coverage.bare-mode-errors
|
Suppress warnings on deprecated DPD scripts during Zeekygen
|
2025-06-05 17:44:10 -07:00 |
|
coverage.basic-no-errors
|
Introduce basic test triggering when zeek -r triggers script errors
|
2022-09-27 17:49:58 +02:00 |
|
coverage.coverage-blacklist
|
updates for gen-C++ maintenance, including skipping some inappropriate tests
|
2022-08-01 16:47:17 -07:00 |
|
coverage.default-load-baseline
|
PPPoE: add session id logging
|
2025-07-23 13:43:45 +01:00 |
|
coverage.find-bro-logs
|
Settle on analyzer.log for the dpd.log replacement
|
2025-06-03 17:33:36 +01:00 |
|
coverage.global-ids-to-json
|
OpaqueVal: Register TelemetryVals, too
|
2023-11-28 09:21:31 +01:00 |
|
coverage.init-default
|
Add cluster framework telemetry for Broker's send-buffer use
|
2025-04-25 09:14:33 -07:00 |
|
coverage.record-fields
|
Move c$service_violation to deprecated-dpd-log.zeek
|
2025-07-30 07:58:36 +01:00 |
|
coverage.test-all-policy-cluster
|
btest/coverage: Avoid warnings in test-all-policy-cluster
|
2024-12-11 17:20:45 +01:00 |
|
coverage.test-all-policy-zeekygen
|
btest/coverage/test-all-policy-zeekygen: Load test-all-policy with zeekygen enabled
|
2025-05-21 11:49:12 +02:00 |
|
coverage.zeek-profiler-file
|
extend script coverage profiling to track whether conditionals evaluate to true/false
|
2025-06-26 16:10:50 +02:00 |
|
dns_mgr.blocking_lookup_hostname
|
zeek.bif: Introduce blocking_lookup_hostname()
|
2025-03-05 19:22:57 +01:00 |
|
dns_mgr.lookup_addr
|
btest: Add integration test for DNS_Mgr
|
2024-11-08 11:29:31 +01:00 |
|
dns_mgr.lookup_hostname
|
btest: Add integration test for DNS_Mgr
|
2024-11-08 11:29:31 +01:00 |
|
dns_mgr.lookup_hostname_cname
|
btest/dns_mgr: Update run-dnsmasq, use --host-record
|
2025-03-05 12:39:15 +01:00 |
|
dns_mgr.lookup_hostname_txt
|
btest: Add integration test for DNS_Mgr
|
2024-11-08 11:29:31 +01:00 |
|
doc.zeekygen.all_scripts
|
|
|
|
doc.zeekygen.command_line
|
Squelch the zeekygen warnings for command line
|
2022-08-06 11:35:05 +08:00 |
|
doc.zeekygen.comment_retrieval_bifs
|
|
|
|
doc.zeekygen.declaring_script
|
Type/RecordType: Make table returned by GetRecordFieldsVal() ordered
|
2025-07-22 16:58:40 +02:00 |
|
doc.zeekygen.declaring_script_enum
|
zeekygen: Add BIFs to access declaring scripts
|
2022-11-22 13:23:01 +01:00 |
|
doc.zeekygen.declaring_script_errors
|
zeekygen: Add BIFs to access declaring scripts
|
2022-11-22 13:23:01 +01:00 |
|
doc.zeekygen.enums
|
|
|
|
doc.zeekygen.example
|
RecordType:DescribeReST: Render RecordType using zeek:field directive
|
2025-05-28 15:59:50 +02:00 |
|
doc.zeekygen.func-params
|
RecordType:DescribeReST: Render RecordType using zeek:field directive
|
2025-05-28 15:59:50 +02:00 |
|
doc.zeekygen.identifier
|
RecordType:DescribeReST: Render RecordType using zeek:field directive
|
2025-05-28 15:59:50 +02:00 |
|
doc.zeekygen.identifier_without_script
|
Add btest for Zeekygen docs extraction on identifiers defined by the Zeek core.
|
2024-05-03 12:22:42 -07:00 |
|
doc.zeekygen.package
|
Spelling fixes: scripts
|
2022-11-02 17:36:39 -04:00 |
|
doc.zeekygen.package_index
|
|
|
|
doc.zeekygen.records
|
RecordType:DescribeReST: Render RecordType using zeek:field directive
|
2025-05-28 15:59:50 +02:00 |
|
doc.zeekygen.script_index
|
|
|
|
doc.zeekygen.script_summary
|
Spelling fixes: scripts
|
2022-11-02 17:36:39 -04:00 |
|
doc.zeekygen.type-aliases
|
RecordType:DescribeReST: Render RecordType using zeek:field directive
|
2025-05-28 15:59:50 +02:00 |
|
doc.zeekygen.vectors
|
Spelling testing
|
2022-11-16 20:05:03 -05:00 |
|
javascript.file-sniff
|
btest/javascript: Add file_sniff() and file_state_remove() test
|
2025-03-10 19:15:06 +01:00 |
|
javascript.hello
|
Add experimental JavaScript support when libnode is available
|
2023-04-14 11:26:41 +02:00 |
|
javascript.http-request
|
Add experimental JavaScript support when libnode is available
|
2023-04-14 11:26:41 +02:00 |
|
javascript.http-uri-sha256
|
Add experimental JavaScript support when libnode is available
|
2023-04-14 11:26:41 +02:00 |
|
javascript.intel
|
Add experimental JavaScript support when libnode is available
|
2023-04-14 11:26:41 +02:00 |
|
javascript.log-delay
|
testing/btest: Log::delay() from JavaScript
|
2023-11-29 12:52:19 +01:00 |
|
javascript.suspend-continue
|
Add experimental JavaScript support when libnode is available
|
2023-04-14 11:26:41 +02:00 |
|
language.add-del-expr-void
|
crash fixes for constructs that expect add/delete expressions to return values
|
2025-07-11 12:56:08 -04:00 |
|
language.addr
|
ensure that language tests pay attention to .stderr
|
2022-07-29 21:30:40 -07:00 |
|
language.alternate-event-hook-prototypes
|
Var/Func: Render function parameters using comma, not semicolon
|
2023-10-04 17:42:30 +02:00 |
|
language.alternate-event-hook-prototypes-invalid-arg
|
Var/Func: Render function parameters using comma, not semicolon
|
2023-10-04 17:42:30 +02:00 |
|
language.alternate-prototypes-arg-matching
|
|
|
|
language.alternate-prototypes-default-args
|
Var/Func: Render function parameters using comma, not semicolon
|
2023-10-04 17:42:30 +02:00 |
|
language.alternate-prototypes-deprecated-args
|
Var/Func: Render function parameters using comma, not semicolon
|
2023-10-04 17:42:30 +02:00 |
|
language.any
|
ensure that language tests pay attention to .stderr
|
2022-07-29 21:30:40 -07:00 |
|
language.any-script-func-variadic-errors
|
Func: Do not crash on va_args confusion for script funcs
|
2022-11-01 08:55:14 +01:00 |
|
language.any-script-func-variadic-errors-2
|
Func: Do not crash on va_args confusion for script funcs
|
2022-11-01 08:55:14 +01:00 |
|
language.any-when
|
|
|
|
language.assert
|
BTest updates for ZAM support of (optionally) keeping "assert" statements
|
2024-12-03 10:40:41 -07:00 |
|
language.assert-2
|
Stmt: Introduce assert statement and related hooks
|
2023-06-12 18:16:02 +02:00 |
|
language.assert-3
|
update BIFs to_int() and to_count() to accept optional 'base' argument; allows more more exotic conversions from hex, octal, binary
|
2025-02-18 06:49:55 -06:00 |
|
language.assert-4
|
Stmt: Introduce assert statement and related hooks
|
2023-06-12 18:16:02 +02:00 |
|
language.assert-5
|
Stmt: Introduce assert statement and related hooks
|
2023-06-12 18:16:02 +02:00 |
|
language.assert-6
|
Stmt: Introduce assert statement and related hooks
|
2023-06-12 18:16:02 +02:00 |
|
language.assert-7
|
simplified "assert" by not trying to catch messages that themselves have errors
|
2024-12-02 10:37:10 -08:00 |
|
language.assert-8
|
Stmt: Introduce assert statement and related hooks
|
2023-06-12 18:16:02 +02:00 |
|
language.assert-error
|
Stmt: Introduce assert statement and related hooks
|
2023-06-12 18:16:02 +02:00 |
|
language.assert-error-2
|
Stmt: Introduce assert statement and related hooks
|
2023-06-12 18:16:02 +02:00 |
|
language.assert-error-3
|
Stmt: Introduce assert statement and related hooks
|
2023-06-12 18:16:02 +02:00 |
|
language.assert-error-4
|
Stmt: Introduce assert statement and related hooks
|
2023-06-12 18:16:02 +02:00 |
|
language.assert-hook
|
BTest updates for ZAM support of (optionally) keeping "assert" statements
|
2024-12-03 10:40:41 -07:00 |
|
language.assert-hook-2
|
update BIFs to_int() and to_count() to accept optional 'base' argument; allows more more exotic conversions from hex, octal, binary
|
2025-02-18 06:49:55 -06:00 |
|
language.assert-hook-3
|
Stmt: Rework assertion hooks break semantics
|
2023-06-13 16:18:01 +02:00 |
|
language.assert-hook-4
|
Stmt: Introduce assert statement and related hooks
|
2023-06-12 18:16:02 +02:00 |
|
language.assert-hook-5
|
Stmt: Rework assertion hooks break semantics
|
2023-06-13 16:18:01 +02:00 |
|
language.assert-hook-6
|
simplified "assert" by not trying to catch messages that themselves have errors
|
2024-12-02 10:37:10 -08:00 |
|
language.assert-hook-7
|
Stmt: Rework assertion hooks break semantics
|
2023-06-13 16:18:01 +02:00 |
|
language.assert-hook-8
|
Stmt: Fix assert evaluating cond twice
|
2024-03-04 15:30:09 +01:00 |
|
language.assert-misc
|
update BIFs to_int() and to_count() to accept optional 'base' argument; allows more more exotic conversions from hex, octal, binary
|
2025-02-18 06:49:55 -06:00 |
|
language.assert-top-level
|
BTest updates for ZAM support of (optionally) keeping "assert" statements
|
2024-12-03 10:40:41 -07:00 |
|
language.at-deprecated
|
|
|
|
language.at-dir
|
|
|
|
language.at-filename
|
|
|
|
language.at-if
|
ensure that language tests pay attention to .stderr
|
2022-07-29 21:30:40 -07:00 |
|
language.at-if-else-if-no-way
|
parse.y/directives: Reject directives as statements
|
2022-08-26 09:42:50 +02:00 |
|
language.at-if-event
|
ensure that language tests pay attention to .stderr
|
2022-07-29 21:30:40 -07:00 |
|
language.at-if-invalid
|
|
|
|
language.at-if-lambda
|
Var/Func: Render function parameters using comma, not semicolon
|
2023-10-04 17:42:30 +02:00 |
|
language.at-if-lambda-2
|
Var/Func: Render function parameters using comma, not semicolon
|
2023-10-04 17:42:30 +02:00 |
|
language.at-if-lambda-3
|
Var/Func: Render function parameters using comma, not semicolon
|
2023-10-04 17:42:30 +02:00 |
|
language.at-if-lambda-4
|
Var/Func: Render function parameters using comma, not semicolon
|
2023-10-04 17:42:30 +02:00 |
|
language.at-if-record
|
parse: Support @if conditionals in record definitions
|
2024-01-08 15:21:48 +01:00 |
|
language.at-if-record-2
|
parse: Support @if conditionals in record definitions
|
2024-01-08 15:21:48 +01:00 |
|
language.at-if-record-3
|
parse: Support @if conditionals in record definitions
|
2024-01-08 15:21:48 +01:00 |
|
language.at-if-record-4
|
parse: Support @if conditionals in record definitions
|
2024-01-08 15:21:48 +01:00 |
|
language.at-if-record-5
|
parse: Support @if conditionals in record definitions
|
2024-01-08 15:21:48 +01:00 |
|
language.at-if-record-6
|
parse: Support @if conditionals in record definitions
|
2024-01-08 15:21:48 +01:00 |
|
language.at-if-record-7
|
parse: Support @if conditionals in record definitions
|
2024-01-08 15:21:48 +01:00 |
|
language.at-if-reject
|
parse.y/directives: Reject directives as statements
|
2022-08-26 09:42:50 +02:00 |
|
language.at-if-reject-2
|
parse.y/directives: Reject directives as statements
|
2022-08-26 09:42:50 +02:00 |
|
language.at-if-reject-3
|
parse.y/directives: Reject directives as statements
|
2022-08-26 09:42:50 +02:00 |
|
language.at-if-reject-4
|
parse.y/directives: Reject directives as statements
|
2022-08-26 09:42:50 +02:00 |
|
language.at-if-reject-5
|
parse.y/directives: Reject directives as statements
|
2022-08-26 09:42:50 +02:00 |
|
language.at-ifdef
|
GH-2034: Store module names and use them in lookups for ifdef
|
2022-08-05 15:36:21 +00:00 |
|
language.at-ifndef
|
GH-2034: Store module names and use them in lookups for ifdef
|
2022-08-05 15:36:21 +00:00 |
|
language.at-load
|
ensure that language tests pay attention to .stderr
|
2022-07-29 21:30:40 -07:00 |
|
language.attr-default-coercion
|
|
|
|
language.attr-default-global-set-error
|
improved error cascade for invalid attributes
|
2024-06-04 10:36:36 -07:00 |
|
language.blank-expr-errors
|
Introduce special treatment for the blank identifier _
|
2022-10-24 10:36:01 +02:00 |
|
language.blank-expr-errors-2
|
Introduce special treatment for the blank identifier _
|
2022-10-24 10:36:01 +02:00 |
|
language.blank-expr-errors-3
|
Introduce special treatment for the blank identifier _
|
2022-10-24 10:36:01 +02:00 |
|
language.blank-expr-errors-4
|
Introduce special treatment for the blank identifier _
|
2022-10-24 10:36:01 +02:00 |
|
language.blank-expr-errors-5
|
Introduce special treatment for the blank identifier _
|
2022-10-24 10:36:01 +02:00 |
|
language.blank-for
|
Introduce special treatment for the blank identifier _
|
2022-10-24 10:36:01 +02:00 |
|
language.blank-local
|
Introduce special treatment for the blank identifier _
|
2022-10-24 10:36:01 +02:00 |
|
language.blank-option-error
|
Introduce special treatment for the blank identifier _
|
2022-10-24 10:36:01 +02:00 |
|
language.bool
|
ensure that language tests pay attention to .stderr
|
2022-07-29 21:30:40 -07:00 |
|
language.closure-binding
|
|
|
|
language.closure-binding-errors
|
Cleanup unused baselines
|
2025-07-10 16:46:09 -04:00 |
|
language.closure-sending
|
|
|
|
language.closure-sending-naming
|
Use one-based index in warning message
|
2025-03-28 14:09:11 +01:00 |
|
language.closure-sending2
|
|
|
|
language.common-mistakes
|
Cleanup unused baselines
|
2025-07-10 16:46:09 -04:00 |
|
language.common-mistakes2
|
updates for gen-C++ maintenance, including skipping some inappropriate tests
|
2022-08-01 16:47:17 -07:00 |
|
language.complex-delete
|
|
|
|
language.conditional-expression
|
ensure that language tests pay attention to .stderr
|
2022-07-29 21:30:40 -07:00 |
|
language.const
|
|
|
|
language.container-ctor-scope
|
|
|
|
language.container-option-init
|
GH-2920: Don't warn on uninitialized container options
|
2023-04-13 09:05:17 -07:00 |
|
language.copy
|
ensure that language tests pay attention to .stderr
|
2022-07-29 21:30:40 -07:00 |
|
language.copy-all-opaques
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
language.copy-all-types
|
|
|
|
language.copy-cycle
|
|
|
|
language.count
|
ensure that language tests pay attention to .stderr
|
2022-07-29 21:30:40 -07:00 |
|
language.count-underflow
|
Expr: Warn on count underflow for c -= 1 and c = c - 1
|
2022-11-30 10:08:52 +01:00 |
|
language.crlf-parsing
|
|
|
|
language.cross-product-init
|
|
|
|
language.dangling-at
|
|
|
|
language.default-params
|
|
|
|
language.delete-containers
|
Allow delete statement for tables, sets and vectors
|
2024-02-21 18:00:00 +01:00 |
|
language.delete-field
|
|
|
|
language.delete-field-set
|
RecordType: Allow deferring &default=vector(), set(), table() fields
|
2025-07-30 10:26:06 +02:00 |
|
language.delete-field-set-2
|
RecordType: Ensure &default fields are always re-initialized
|
2025-07-30 10:26:06 +02:00 |
|
language.delete-table-set
|
Allow delete statement for tables, sets and vectors
|
2024-02-21 18:00:00 +01:00 |
|
language.deprecated
|
Replace all the Warning() calls after IsFieldDeprecated() over to Warn()
|
2022-09-03 19:15:47 +08:00 |
|
language.double
|
ensure that language tests pay attention to .stderr
|
2022-07-29 21:30:40 -07:00 |
|
language.duplicate-attributes
|
|
|
|
language.enum
|
ensure that language tests pay attention to .stderr
|
2022-07-29 21:30:40 -07:00 |
|
language.enum-desc
|
|
|
|
language.enum-multiple-decls
|
|
|
|
language.enum-name-conflict
|
|
|
|
language.enum-negative
|
Add enum value negative check
|
2024-09-17 12:04:19 -04:00 |
|
language.enum-nonexisting
|
Spelling testing
|
2022-11-16 20:05:03 -05:00 |
|
language.enum-scope
|
|
|
|
language.eof-parse-errors
|
|
|
|
language.event
|
|
|
|
language.event-invoke-mismatch-error
|
Skip somer error reporting when the record type has errors
|
2023-01-27 20:49:22 +01:00 |
|
language.event-local-var
|
|
|
|
language.event-shadowing
|
Support :: prefix to reference global namespace, deprecate GLOBAL::
|
2023-07-11 12:51:21 +02:00 |
|
language.event-ts
|
Add timestamp to events.
|
2023-05-11 12:51:06 +02:00 |
|
language.event-ts-scheduled
|
Prevent event timestamps set to future
|
2025-04-11 13:06:33 +02:00 |
|
language.expire-expr-error
|
BTest updates in support of compiling-scripts-to-C++
|
2024-12-12 14:30:23 -08:00 |
|
language.expire-func-type-check
|
Var/Func: Render function parameters using comma, not semicolon
|
2023-10-04 17:42:30 +02:00 |
|
language.expire-func-undef
|
|
|
|
language.expire-redef
|
|
|
|
language.expire-type-error
|
|
|
|
language.expire_func
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
language.expire_func-copy
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
language.expire_func_mod
|
|
|
|
language.expire_multiple
|
|
|
|
language.expire_multiple-2
|
|
|
|
language.expire_multiple-3
|
|
|
|
language.expire_subnet
|
|
|
|
language.file
|
|
|
|
language.for
|
ensure that language tests pay attention to .stderr
|
2022-07-29 21:30:40 -07:00 |
|
language.for-var-check
|
GH-2669: Give script location for type clash in for-loop construction
|
2023-01-26 09:11:10 -07:00 |
|
language.func-assignment
|
|
|
|
language.func-equality
|
|
|
|
language.function
|
ensure that language tests pay attention to .stderr
|
2022-07-29 21:30:40 -07:00 |
|
language.function-already-defined
|
|
|
|
language.function-closures
|
|
|
|
language.function-invoke-mismatch-error
|
Skip somer error reporting when the record type has errors
|
2023-01-27 20:49:22 +01:00 |
|
language.function-sending
|
BTest baseline update for more complete function/lambda names
|
2024-09-27 14:16:10 -07:00 |
|
language.global-colon-colon
|
Return an error if GLOBAL:: prefix is used
|
2024-08-07 11:58:22 -07:00 |
|
language.global-colon-colon-errors
|
Support :: prefix to reference global namespace, deprecate GLOBAL::
|
2023-07-11 12:51:21 +02:00 |
|
language.global-colon-colon-errors-2
|
Support :: prefix to reference global namespace, deprecate GLOBAL::
|
2023-07-11 12:51:21 +02:00 |
|
language.global-colon-colon-errors-3
|
Support :: prefix to reference global namespace, deprecate GLOBAL::
|
2023-07-11 12:51:21 +02:00 |
|
language.global-colon-colon-errors-4
|
Support :: prefix to reference global namespace, deprecate GLOBAL::
|
2023-07-11 12:51:21 +02:00 |
|
language.global-colon-colon-errors-5
|
Support :: prefix to reference global namespace, deprecate GLOBAL::
|
2023-07-11 12:51:21 +02:00 |
|
language.global-colon-colon-errors-6
|
Support :: prefix to reference global namespace, deprecate GLOBAL::
|
2023-07-11 12:51:21 +02:00 |
|
language.global-colon-colon-redef
|
Support :: prefix to reference global namespace, deprecate GLOBAL::
|
2023-07-11 12:51:21 +02:00 |
|
language.global-init-calls-bif
|
|
|
|
language.global-init-calls-bif-using-builtin-type
|
|
|
|
language.global-type-clash
|
Fix module-scoped type definitions that conflict with existing global ones
|
2022-08-08 15:30:34 -07:00 |
|
language.global-unset-addto
|
|
|
|
language.hook
|
|
|
|
language.hook_calls
|
|
|
|
language.identifier-not-defined-error
|
Tame error reporting and abort() for undefined types
|
2023-01-26 20:05:02 +01:00 |
|
language.if
|
ensure that language tests pay attention to .stderr
|
2022-07-29 21:30:40 -07:00 |
|
language.ignore-deprecations
|
scan.l: Support @pragma, specifically push/pop ignore-deprecations
|
2023-04-05 10:24:30 +02:00 |
|
language.ignore-deprecations-2
|
scan.l: Support @pragma, specifically push/pop ignore-deprecations
|
2023-04-05 10:24:30 +02:00 |
|
language.ignore-deprecations-3
|
scan.l: Support @pragma, specifically push/pop ignore-deprecations
|
2023-04-05 10:24:30 +02:00 |
|
language.ignore-deprecations-4
|
scan.l: Support @pragma, specifically push/pop ignore-deprecations
|
2023-04-05 10:24:30 +02:00 |
|
language.incr-vec-expr-error
|
Expr: Remove vector scalar operations
|
2023-03-20 21:35:48 +01:00 |
|
language.index-assignment-invalid
|
|
|
|
language.ineffective-default-args
|
|
|
|
language.init-in-anon-function
|
|
|
|
language.init-integration
|
Remove deprecated Cluster::Node::interface field
|
2024-08-07 11:58:22 -07:00 |
|
language.init-mismatch
|
Change table initialization deprecation to error
|
2023-06-14 10:07:23 -07:00 |
|
language.inlined-nested-loop
|
|
|
|
language.int
|
split basic "int" btests into main part versus now-separate overflow part
|
2022-09-16 16:49:22 -07:00 |
|
language.int-min-max
|
btest tweaks for recent changes
|
2022-09-16 17:04:06 -07:00 |
|
language.int-negation-range
|
|
|
|
language.interval
|
ensure that language tests pay attention to .stderr
|
2022-07-29 21:30:40 -07:00 |
|
language.invalid-hostnames
|
|
|
|
language.invalid-hostnames-2
|
|
|
|
language.invalid_index
|
|
|
|
language.ipv6-literals
|
|
|
|
language.key-value-for
|
|
|
|
language.lambda-escaping
|
|
|
|
language.lambda-nested-copy
|
|
|
|
language.lambda-record-field
|
|
|
|
language.lambda-zeek-init
|
|
|
|
language.locals-to-global
|
Do not export locals
|
2025-02-12 13:49:12 -08:00 |
|
language.mismatched-container-ctor-types
|
|
|
|
language.module
|
ensure that language tests pay attention to .stderr
|
2022-07-29 21:30:40 -07:00 |
|
language.more-closure-tests
|
|
|
|
language.named-record-ctors
|
|
|
|
language.named-set-ctors
|
|
|
|
language.named-table-ctors
|
|
|
|
language.named-vector-ctors
|
|
|
|
language.next-break-context-errors
|
Make break/next/continue outside loops an error (6.1 deprecation)
|
2023-06-14 10:07:22 -07:00 |
|
language.next-break-context-errors-2
|
Make break/next/continue outside loops an error (6.1 deprecation)
|
2023-06-14 10:07:22 -07:00 |
|
language.next-break-context-errors-3
|
Make break/next/continue outside loops an error (6.1 deprecation)
|
2023-06-14 10:07:22 -07:00 |
|
language.next-break-context-errors-4
|
Make break/next/continue outside loops an error (6.1 deprecation)
|
2023-06-14 10:07:22 -07:00 |
|
language.next-break-context-errors-5
|
Make break/next/continue outside loops an error (6.1 deprecation)
|
2023-06-14 10:07:22 -07:00 |
|
language.next-break-context-errors-6
|
Make break/next/continue outside loops an error (6.1 deprecation)
|
2023-06-14 10:07:22 -07:00 |
|
language.next-break-context-errors-7
|
Make break/next/continue outside loops an error (6.1 deprecation)
|
2023-06-14 10:07:22 -07:00 |
|
language.next-break-context-errors-8
|
Make break/next/continue outside loops an error (6.1 deprecation)
|
2023-06-14 10:07:22 -07:00 |
|
language.next-break-context-errors-9
|
Make break/next/continue outside loops an error (6.1 deprecation)
|
2023-06-14 10:07:22 -07:00 |
|
language.next-test
|
|
|
|
language.no-module
|
ensure that language tests pay attention to .stderr
|
2022-07-29 21:30:40 -07:00 |
|
language.null-statement
|
|
|
|
language.on_change
|
|
|
|
language.on_change-copy
|
TableVal: Propagate &on_change attribute through copy()
|
2023-02-17 16:21:32 +01:00 |
|
language.on_change-recurse
|
|
|
|
language.on_change_expire
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
language.optional-and-default-field
|
Attr: Deprecate using &default and &optional together on record fields
|
2025-07-30 10:26:06 +02:00 |
|
language.orphan-endif
|
|
|
|
language.outer_param_binding
|
|
|
|
language.paraglob
|
|
|
|
language.paraglob-serialization
|
|
|
|
language.pattern
|
Merge remote-tracking branch 'origin/topic/vern/bit-shift-fixes'
|
2022-08-03 09:56:55 -07:00 |
|
language.pattern-sets
|
Expr/Val: Add support for in set[pattern]
|
2023-11-21 10:34:17 +01:00 |
|
language.pattern-tables
|
Expr: Implement string in table[pattern] of X
|
2023-11-21 10:34:17 +01:00 |
|
language.pattern-tables-stats
|
Expr/Val: Add support for in set[pattern]
|
2023-11-21 10:34:17 +01:00 |
|
language.pattern-tables-when
|
Expr: Implement string in table[pattern] of X
|
2023-11-21 10:34:17 +01:00 |
|
language.patterns-stored-in-containers
|
|
|
|
language.port
|
ensure that language tests pay attention to .stderr
|
2022-07-29 21:30:40 -07:00 |
|
language.pragma
|
scan.l: Support @pragma, specifically push/pop ignore-deprecations
|
2023-04-05 10:24:30 +02:00 |
|
language.pragma-2
|
scan.l: Support @pragma, specifically push/pop ignore-deprecations
|
2023-04-05 10:24:30 +02:00 |
|
language.pragma-3
|
scan.l: Support @pragma, specifically push/pop ignore-deprecations
|
2023-04-05 10:24:30 +02:00 |
|
language.pragma-4
|
scan.l: Support @pragma, specifically push/pop ignore-deprecations
|
2023-04-05 10:24:30 +02:00 |
|
language.pragma-5
|
scan.l: Support @pragma, specifically push/pop ignore-deprecations
|
2023-04-05 10:24:30 +02:00 |
|
language.pragma-6
|
scan.l: Support @pragma, specifically push/pop ignore-deprecations
|
2023-04-05 10:24:30 +02:00 |
|
language.pragma-7
|
scan.l: Support @pragma, specifically push/pop ignore-deprecations
|
2023-04-05 10:24:30 +02:00 |
|
language.pragma-8
|
scan.l: Support @pragma, specifically push/pop ignore-deprecations
|
2023-04-05 10:24:30 +02:00 |
|
language.pragma-9
|
scan.l: Support @pragma, specifically push/pop ignore-deprecations
|
2023-04-05 10:24:30 +02:00 |
|
language.pragma-10
|
scan.l: Support @pragma, specifically push/pop ignore-deprecations
|
2023-04-05 10:24:30 +02:00 |
|
language.pragma-11
|
scan.l: Support @pragma, specifically push/pop ignore-deprecations
|
2023-04-05 10:24:30 +02:00 |
|
language.pragma-12
|
scan.l: Support @pragma, specifically push/pop ignore-deprecations
|
2023-04-05 10:24:30 +02:00 |
|
language.precedence
|
ensure that language tests pay attention to .stderr
|
2022-07-29 21:30:40 -07:00 |
|
language.raw_output_attr
|
|
|
|
language.raw_output_attr-2
|
|
|
|
language.rec-comp-init
|
|
|
|
language.rec-nested-opt
|
|
|
|
language.rec-of-tbl
|
|
|
|
language.rec-table-default
|
|
|
|
language.record-bad-ctor
|
|
|
|
language.record-bad-ctor2
|
|
|
|
language.record-bad-ctor3
|
|
|
|
language.record-bad-ctor4
|
|
|
|
language.record-chain-assign
|
script optimization for record operations sourced (in part) from other records
|
2024-06-24 09:38:37 +02:00 |
|
language.record-coerce-clash
|
|
|
|
language.record-coerce-error
|
Skip somer error reporting when the record type has errors
|
2023-01-27 20:49:22 +01:00 |
|
language.record-coerce-orphan
|
|
|
|
language.record-default-coercion
|
|
|
|
language.record-default-set-mismatch
|
|
|
|
language.record-duplicate-fields
|
fix for crashes when record definitions repeat a field name
|
2023-01-10 13:56:47 -08:00 |
|
language.record-empty-vector
|
|
|
|
language.record-extension
|
|
|
|
language.record-function-recursion
|
|
|
|
language.record-global-init-exception
|
|
|
|
language.record-index-complex-fields
|
|
|
|
language.record-option-init
|
GH-2920: Don't warn on uninitialized container options
|
2023-04-13 09:05:17 -07:00 |
|
language.record-recursive-coercion
|
|
|
|
language.record-recursive-table
|
Type/is_supported_index_type: Deal with recursive record types
|
2023-02-17 17:35:05 +01:00 |
|
language.record-recursive-table-2
|
Type/is_supported_index_type: Deal with recursive record types
|
2023-02-17 17:35:05 +01:00 |
|
language.record-recursive-table2
|
BTest updates in support of compiling-scripts-to-C++
|
2024-12-12 14:30:23 -08:00 |
|
language.record-redef-after-init
|
|
|
|
language.record-ref-assign
|
|
|
|
language.record-type-checking
|
|
|
|
language.redeclaration-redefinition-errors
|
Var: Fix null-pointer deref on redefinition of lambdas
|
2023-10-04 15:18:24 +02:00 |
|
language.redeclaration-redefinition-errors-2
|
Var: Fix null-pointer deref on redefinition of lambdas
|
2023-10-04 15:18:24 +02:00 |
|
language.redeclaration-redefinition-errors-3
|
Var: Fix null-pointer deref on redefinition of lambdas
|
2023-10-04 15:18:24 +02:00 |
|
language.redeclaration-redefinition-errors-4
|
Var: Fix null-pointer deref on redefinition of lambdas
|
2023-10-04 15:18:24 +02:00 |
|
language.redeclaration-redefinition-errors-5
|
Var: Fix null-pointer deref on redefinition of lambdas
|
2023-10-04 15:18:24 +02:00 |
|
language.redeclaration-redefinition-errors-6
|
Var: Fix null-pointer deref on redefinition of lambdas
|
2023-10-04 15:18:24 +02:00 |
|
language.redeclaration-redefinition-errors-7
|
Var/Func: Render function parameters using comma, not semicolon
|
2023-10-04 17:42:30 +02:00 |
|
language.redeclaration-redefinition-errors-8
|
Var/Func: Render function parameters using comma, not semicolon
|
2023-10-04 17:42:30 +02:00 |
|
language.redeclaration-redefinition-errors-9
|
Var/Func: Render function parameters using comma, not semicolon
|
2023-10-04 17:42:30 +02:00 |
|
language.redeclaration-redefinition-errors-10
|
Var/Func: Render function parameters using comma, not semicolon
|
2023-10-04 17:42:30 +02:00 |
|
language.redeclaration-redefinition-errors-11
|
Var/Func: Render function parameters using comma, not semicolon
|
2023-10-04 17:42:30 +02:00 |
|
language.redef-global-function
|
Return an error if redef'ing a variable without redef attribute
|
2022-07-25 09:43:19 -07:00 |
|
language.redef-missing-type
|
parse.y: Improve error reporting of type redef
|
2023-02-21 11:58:33 +01:00 |
|
language.redef-missing-type-2
|
parse.y: Improve error reporting of type redef
|
2023-02-21 11:58:33 +01:00 |
|
language.redef-missing-type-3
|
parse.y: Improve error reporting of type redef
|
2023-02-21 11:58:33 +01:00 |
|
language.redef-missing-type-4
|
parse.y: Improve error reporting of type redef
|
2023-02-21 11:58:33 +01:00 |
|
language.redef-missing-type-5
|
parse.y: Improve error reporting of type redef
|
2023-02-21 11:58:33 +01:00 |
|
language.redef-missing-type-6
|
parse.y: Improve error reporting of type redef
|
2023-02-21 11:58:33 +01:00 |
|
language.redef-same-prefixtable-idx
|
Change table initialization deprecation to error
|
2023-06-14 10:07:23 -07:00 |
|
language.redef-vector
|
|
|
|
language.returnwhen
|
|
|
|
language.set
|
Support JSON roundtripping via to_json()/from_json() for patterns
|
2024-07-02 14:46:16 -07:00 |
|
language.set-iteration
|
Fix &ordered attribute not preserved in table initializer assignments
|
2025-06-04 17:07:34 +08:00 |
|
language.set-opt-record-index
|
|
|
|
language.set-type-checking
|
|
|
|
language.set-vector-index
|
|
|
|
language.short-circuit
|
ensure that language tests pay attention to .stderr
|
2022-07-29 21:30:40 -07:00 |
|
language.sizeof
|
Fix port/enum values SizeOf not being a count
|
2024-09-17 10:55:45 -04:00 |
|
language.sizeof-any
|
|
|
|
language.smith-waterman-test
|
Fix smith-waterman sorting to follow correct Compare semantics
|
2023-04-30 11:54:08 -07:00 |
|
language.spurious-table-expires
|
fix for needing to always flush optimization information for identifiers
|
2024-01-15 15:03:56 +01:00 |
|
language.string
|
ensure that language tests pay attention to .stderr
|
2022-07-29 21:30:40 -07:00 |
|
language.string-indexing
|
|
|
|
language.strings
|
|
|
|
language.subnet
|
ensure that language tests pay attention to .stderr
|
2022-07-29 21:30:40 -07:00 |
|
language.subnet-errors
|
|
|
|
language.switch-error-mixed
|
|
|
|
language.switch-incomplete
|
|
|
|
language.switch-statement
|
|
|
|
language.switch-type-cast-fallthrough-error
|
|
|
|
language.switch-types
|
Spelling testing
|
2022-11-16 20:05:03 -05:00 |
|
language.switch-types-error-duplicate
|
|
|
|
language.switch-types-error-unsupported
|
|
|
|
language.switch-types-vars
|
|
|
|
language.table
|
Support table deserialization in from_json()
|
2024-07-02 14:46:16 -07:00 |
|
language.table-aggr-init-type-check
|
|
|
|
language.table-default-insert
|
Add &default_insert attribute for tables
|
2023-08-04 12:30:36 +02:00 |
|
language.table-default-insert-copy
|
Add &default_insert attribute for tables
|
2023-08-04 12:30:36 +02:00 |
|
language.table-default-insert-errors
|
Add &default_insert attribute for tables
|
2023-08-04 12:30:36 +02:00 |
|
language.table-default-insert-errors-2
|
Add &default_insert attribute for tables
|
2023-08-04 12:30:36 +02:00 |
|
language.table-default-insert-errors-3
|
Add &default_insert attribute for tables
|
2023-08-04 12:30:36 +02:00 |
|
language.table-default-insert-errors-4
|
BTest baseline update for more complete function/lambda names
|
2024-09-27 14:16:10 -07:00 |
|
language.table-default-insert-errors-5
|
BTest baseline update for more complete function/lambda names
|
2024-09-27 14:16:10 -07:00 |
|
language.table-default-insert-errors-6
|
Add &default_insert attribute for tables
|
2023-08-04 12:30:36 +02:00 |
|
language.table-default-insert-errors-7
|
Add &default_insert attribute for tables
|
2023-08-04 12:30:36 +02:00 |
|
language.table-default-record
|
|
|
|
language.table-index-unsupported-types
|
|
|
|
language.table-init
|
|
|
|
language.table-init-attrs
|
|
|
|
language.table-init-container-ctors
|
|
|
|
language.table-init-record-idx
|
|
|
|
language.table-init-record-idx-2
|
|
|
|
language.table-init-record-idx-3
|
|
|
|
language.table-init-record-idx-4
|
|
|
|
language.table-iterate-record-key-default
|
CompositeHash: Skip record initialization when recovering vals
|
2023-09-08 13:02:34 +02:00 |
|
language.table-iterate-record-key-default-2
|
ID/Stmt: Introduce INIT_SKIP and use in ForStmt
|
2023-09-08 13:05:44 +02:00 |
|
language.table-iterate-record-key-default-3
|
ID/Stmt: Introduce INIT_SKIP and use in ForStmt
|
2023-09-08 13:05:44 +02:00 |
|
language.table-iteration
|
Fix &ordered attribute not preserved in table initializer assignments
|
2025-06-04 17:07:34 +08:00 |
|
language.table-list-assign-type-check
|
|
|
|
language.table-nested-set-ordering
|
|
|
|
language.table-optional-subrecord-index
|
|
|
|
language.table-pattern-index
|
|
|
|
language.table-record-idx-redef
|
|
|
|
language.table-redef
|
Change table initialization deprecation to error
|
2023-06-14 10:07:23 -07:00 |
|
language.table-redef-default
|
|
|
|
language.table-set-iterator-invalidation
|
Reporter: Add ExprRuntimeWarning()
|
2022-11-29 15:28:58 +01:00 |
|
language.table-type-checking
|
code formatting and more btest updates
|
2022-05-26 18:15:48 -07:00 |
|
language.ternary-type-check
|
|
|
|
language.time
|
ensure that language tests pay attention to .stderr
|
2022-07-29 21:30:40 -07:00 |
|
language.timeout
|
|
|
|
language.trailing-comma
|
update test suite to avoid GH-2385 problems, including incorrect typing
|
2022-12-04 17:56:30 -08:00 |
|
language.trailing-comma-2
|
parse.y: Allow trailing commas for table, set, vector and record construction
|
2022-12-01 12:05:29 +01:00 |
|
language.trailing-comma-error
|
parse.y: Allow trailing commas for table, set, vector and record construction
|
2022-12-01 12:05:29 +01:00 |
|
language.trailing-comma-error-2
|
parse.y: Allow trailing commas for table, set, vector and record construction
|
2022-12-01 12:05:29 +01:00 |
|
language.trailing-comma-error-3
|
parse.y: Allow trailing commas for table, set, vector and record construction
|
2022-12-01 12:05:29 +01:00 |
|
language.trailing-comma-error-4
|
parse.y: Allow trailing commas for table, set, vector and record construction
|
2022-12-01 12:05:29 +01:00 |
|
language.trailing-comma-error-5
|
parse.y: Allow trailing commas for table, set, vector and record construction
|
2022-12-01 12:05:29 +01:00 |
|
language.trailing-comma-error-6
|
parse.y: Allow trailing commas for table, set, vector and record construction
|
2022-12-01 12:05:29 +01:00 |
|
language.trailing-comma-error-7
|
parse.y: Allow trailing commas for table, set, vector and record construction
|
2022-12-01 12:05:29 +01:00 |
|
language.trailing-comma-error-8
|
parse.y: Allow trailing commas for table, set, vector and record construction
|
2022-12-01 12:05:29 +01:00 |
|
language.trailing-comma-error-9
|
parse.y: Allow trailing commas for table, set, vector and record construction
|
2022-12-01 12:05:29 +01:00 |
|
language.trailing-comma-error-10
|
parse.y: Allow trailing commas for table, set, vector and record construction
|
2022-12-01 12:05:29 +01:00 |
|
language.trailing-comma-error-11
|
parse.y: Allow trailing commas for table, set, vector and record construction
|
2022-12-01 12:05:29 +01:00 |
|
language.trailing-comma-error-12
|
parse.y: Allow trailing commas for table, set, vector and record construction
|
2022-12-01 12:05:29 +01:00 |
|
language.type-alias-error
|
GH-1344: Give better warning when using a type that doesn't exist
|
2022-07-29 12:38:25 -07:00 |
|
language.type-cast-any
|
|
|
|
language.type-cast-error-dynamic
|
BTest updates for latest ZAM maintenance
|
2023-11-10 09:57:35 +01:00 |
|
language.type-cast-error-static
|
|
|
|
language.type-cast-same
|
|
|
|
language.type-check-any
|
|
|
|
language.type-check-func-call
|
|
|
|
language.type-check-operator-in
|
|
|
|
language.type-check-vector
|
|
|
|
language.type-coerce-numerics
|
Type coercion fix: transform +=/-= operators with arithmetic targets to explict assignments
|
2022-11-22 13:01:10 -08:00 |
|
language.type-expr
|
Change from_json to return an error rather than print it.
|
2025-04-23 15:56:12 -07:00 |
|
language.type-type-error
|
|
|
|
language.undeclared-alternate-event-hook-prototype
|
Var/Func: Render function parameters using comma, not semicolon
|
2023-10-04 17:42:30 +02:00 |
|
language.undefined-delete-field
|
|
|
|
language.uninitialized-local
|
Updates to BTest baselines due to previous BTest tweaks
|
2023-06-30 09:36:14 +02:00 |
|
language.uninitialized-local2
|
parse.y: Make out-of-scope use errors
|
2023-03-20 21:35:48 +01:00 |
|
language.unspecified
|
types: Fix table() resulting in table_type->IsSet() == true
|
2024-11-06 13:28:57 +01:00 |
|
language.unterminated-pattern
|
|
|
|
language.unused-assignment
|
updates for gen-C++ maintenance, including skipping some inappropriate tests
|
2022-08-01 16:47:17 -07:00 |
|
language.usage-analyzer
|
UsageAnalyzer: Collect identifiers found in attributes as seeds
|
2023-08-01 15:46:10 +02:00 |
|
language.usage-analyzer-record-attributes
|
UsageAnalyzer: Collect identifiers found in attributes as seeds
|
2023-08-01 15:46:10 +02:00 |
|
language.usage-analyzer-table-attributes
|
UsageAnalyzer: Collect identifiers found in attributes as seeds
|
2023-08-01 15:46:10 +02:00 |
|
language.vector
|
Expr: Fix folding of pattern values to support == and !=
|
2024-12-16 10:56:02 +01:00 |
|
language.vector-any-append
|
minor BTest reordering to diminish differences with script optimization
|
2023-09-01 12:17:06 -07:00 |
|
language.vector-coerce-expr
|
|
|
|
language.vector-coerce-expr2
|
BTest baseline update for more complete function/lambda names
|
2024-09-27 14:16:10 -07:00 |
|
language.vector-for-value
|
stmt: Support iterating over vector values
|
2022-08-22 16:57:37 +02:00 |
|
language.vector-hole-loop
|
|
|
|
language.vector-in-operator
|
|
|
|
language.vector-iterate-record-default
|
CompositeHash: Skip record initialization when recovering vals
|
2023-09-08 13:02:34 +02:00 |
|
language.vector-iterate-record-default-2
|
ID/Stmt: Introduce INIT_SKIP and use in ForStmt
|
2023-09-08 13:05:44 +02:00 |
|
language.vector-list-init-records
|
|
|
|
language.vector-neg-index
|
BTest to check for invalid negative vector indices
|
2023-06-14 17:35:08 -07:00 |
|
language.vector-of-enum
|
|
|
|
language.vector-of-enum-mismatch
|
|
|
|
language.vector-of-interval-arithmetic
|
|
|
|
language.vector-set-conversions
|
Fix conversion with record types
|
2023-08-10 13:42:23 -07:00 |
|
language.vector-set-conversions-errors
|
Add conversion between set and vector using 'as' keyword
|
2023-08-09 14:41:54 -07:00 |
|
language.vector-slice-assign
|
|
|
|
language.vector-type-checking
|
BTest updates for ZAM regularization changes
|
2024-08-16 11:18:58 +02:00 |
|
language.vector-unspecified
|
|
|
|
language.void-errors
|
Expr: Handle TYPE_VOID in SizeExpr and AssignExpr::Typecheck()
|
2024-03-07 11:24:28 +01:00 |
|
language.void-errors-2
|
Expr: Handle TYPE_VOID in SizeExpr and AssignExpr::Typecheck()
|
2024-03-07 11:24:28 +01:00 |
|
language.void-errors-3
|
Expr: Handle TYPE_VOID in SizeExpr and AssignExpr::Typecheck()
|
2024-03-07 11:24:28 +01:00 |
|
language.void-errors-4
|
Expr: Handle TYPE_VOID in SizeExpr and AssignExpr::Typecheck()
|
2024-03-07 11:24:28 +01:00 |
|
language.void-errors-5
|
added a space when rendering some expressions so they're more readable
|
2024-05-29 12:40:05 -07:00 |
|
language.void-errors-6
|
Expr: Handle TYPE_VOID in SizeExpr and AssignExpr::Typecheck()
|
2024-03-07 11:24:28 +01:00 |
|
language.void-errors-7
|
added a space when rendering some expressions so they're more readable
|
2024-05-29 12:40:05 -07:00 |
|
language.when
|
Merge remote-tracking branch 'origin/topic/vern/script-opt-maint.Aug24'
|
2024-07-24 11:18:18 +02:00 |
|
language.when-aggregates
|
Stmt: Error on deprecated when/local usage
|
2023-03-20 21:35:53 +01:00 |
|
language.when-capture-errors
|
Updates to BTest baselines due to previous BTest tweaks
|
2023-06-30 09:36:14 +02:00 |
|
language.when-local-function-capture-error
|
Check for valid identifier in WhenStmt::Describe
|
2024-04-10 16:20:36 -07:00 |
|
language.when-on-globals
|
|
|
|
language.when-order-of-eval
|
|
|
|
language.when-scope
|
Fix for nested "when" statements leading to confusion over scoping
|
2023-07-05 17:10:38 -07:00 |
|
language.when-unitialized-rhs
|
Updates to BTest baselines due to previous BTest tweaks
|
2023-06-30 09:36:14 +02:00 |
|
language.while
|
|
|
|
language.wrong-delete-field
|
"add" and "delete" are now expressions rather than statements
|
2024-05-29 12:40:06 -07:00 |
|
language.wrong-record-extension
|
|
|
|
language.zeek_init
|
|
|
|
language.zeek_script_loaded
|
|
|
|
opt.basic
|
Update btests for new local-only subnets
|
2025-01-09 22:16:42 -07:00 |
|
opt.coalescence
|
BTest baseline update for more complete function/lambda names
|
2024-09-27 14:16:10 -07:00 |
|
opt.confluence-test
|
BTests to catch regressions for recent ZAM fixes
|
2024-01-15 15:03:56 +01:00 |
|
opt.infinite-empty-loop
|
fixes for ZAM's propagation of control flow information for some degenerate constructs
|
2024-11-08 15:34:21 +01:00 |
|
opt.no-coalescence
|
BTest baseline update for more complete function/lambda names
|
2024-09-27 14:16:10 -07:00 |
|
opt.null-inline
|
fixes for ZAM's propagation of control flow information for some degenerate constructs
|
2024-11-08 15:34:21 +01:00 |
|
opt.opt-files
|
BTest baseline update for more complete function/lambda names
|
2024-09-27 14:16:10 -07:00 |
|
opt.opt-files2
|
BTest baseline update for more complete function/lambda names
|
2024-09-27 14:16:10 -07:00 |
|
opt.opt-files3
|
BTest baseline update for more complete function/lambda names
|
2024-09-27 14:16:10 -07:00 |
|
opt.opt-func
|
BTest baseline update for more complete function/lambda names
|
2024-09-27 14:16:10 -07:00 |
|
opt.opt-func2
|
BTest baseline update for more complete function/lambda names
|
2024-09-27 14:16:10 -07:00 |
|
opt.opt-func3
|
BTest baseline update for more complete function/lambda names
|
2024-09-27 14:16:10 -07:00 |
|
opt.opt-no-files
|
script optimization for record operations sourced (in part) from other records
|
2024-06-24 09:38:37 +02:00 |
|
opt.opt-no-func
|
script optimization for record operations sourced (in part) from other records
|
2024-06-24 09:38:37 +02:00 |
|
opt.opt-no-func2
|
script optimization for record operations sourced (in part) from other records
|
2024-06-24 09:38:37 +02:00 |
|
opt.pure-inlining
|
BTest baseline update for more complete function/lambda names
|
2024-09-27 14:16:10 -07:00 |
|
opt.regress-aggr-change-in-loop
|
fix for ZAM optimization when an aggregate is modified inside of a loop
|
2025-05-09 15:01:55 -07:00 |
|
opt.regress-any
|
ZAM fixes for assignments involving "any" record fields
|
2024-11-11 09:19:54 +01:00 |
|
opt.regress-any-leak
|
fixes for (mostly ZAM) vector operation issues found by ASAN
|
2024-11-11 09:19:54 +01:00 |
|
opt.regress-constant-prop
|
fix for error in ZAM's constant propagation logic
|
2025-07-04 16:05:46 -07:00 |
|
opt.regress-field-assign-in-op
|
fix for ZAM optimization of assigning a record field to result of "in" operation
|
2024-12-17 19:49:43 -08:00 |
|
opt.regress-inlining-temps
|
fixed incorrect ZAM optimization of expressions seen in single-statement inlined functions
|
2025-04-29 14:29:07 -07:00 |
|
opt.regress-missing-fields
|
fixes for specialized ZAM operations needing to check whether record fields exist
|
2025-07-30 08:36:04 +02:00 |
|
opt.regress-record-multi-assign
|
fix for crash when interpreting transformed ASTs that include multi-field record assignments/additions
|
2025-05-30 09:44:26 -07:00 |
|
opt.regress-set-op-opt
|
ZAM optimizer fix for += / -= set operations
|
2025-07-09 13:40:33 -07:00 |
|
opt.regress-vector-mismatch
|
fixes for (mostly ZAM) vector operation issues found by ASAN
|
2024-11-11 09:19:54 +01:00 |
|
opt.table-choose
|
BTests to catch regressions for recent ZAM fixes
|
2024-01-15 15:03:56 +01:00 |
|
opt.vector-any-concretize1
|
BTests to catch regressions for recent ZAM fixes
|
2024-01-15 15:03:56 +01:00 |
|
opt.vector-any-concretize2
|
BTests to catch regressions for recent ZAM fixes
|
2024-01-15 15:03:56 +01:00 |
|
opt.vector-loop-managed
|
Merge remote-tracking branch 'origin/topic/vern/zam-vector-loop-leak'
|
2024-11-08 15:32:57 +01:00 |
|
opt.ZAM-bif-tracking
|
Add get_tags_by_category BIF method
|
2025-06-24 13:47:49 -07:00 |
|
plugins.api-plugin
|
btest/plugin: Add plugin testing enum identifiers
|
2025-04-04 15:36:42 +02:00 |
|
plugins.bifs-and-scripts
|
|
|
|
plugins.bifs-and-scripts-install
|
|
|
|
plugins.bifs-and-scripts-install-delete-source
|
tests: Add regression tests for zeek/cmake#61
|
2023-02-24 19:37:52 +01:00 |
|
plugins.binpac-flowbuffer-frame-length
|
|
|
|
plugins.conflict-plugin
|
Spelling testing
|
2022-11-16 20:05:03 -05:00 |
|
plugins.connkey
|
ConnKey: Extend DoPopulateConnIdVal() with ctx
|
2025-07-03 18:19:46 +02:00 |
|
plugins.debug-streams
|
Sort streams in "-B help" output, and match case-insensitively throughout
|
2024-11-15 12:50:13 -08:00 |
|
plugins.doctest-disabled
|
|
|
|
plugins.doctest-supported
|
|
|
|
plugins.doctest-unsupported
|
|
|
|
plugins.duplicate-pktsrc
|
plugin/Manager: Warn when plugin with the same name is found
|
2023-06-14 17:36:18 +02:00 |
|
plugins.enum-bif-plugin
|
scan.l: Fix @load-plugin scripts loading
|
2025-03-04 09:35:00 +01:00 |
|
plugins.file
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
plugins.func-hook
|
|
|
|
plugins.hooks
|
Move c$service_violation to deprecated-dpd-log.zeek
|
2025-07-30 07:58:36 +01:00 |
|
plugins.init-hooks
|
btest/plugins: Add a plugin testing Init and Done hooks
|
2024-11-22 13:37:03 +01:00 |
|
plugins.init-plugin
|
|
|
|
plugins.iosource-plugin
|
Add a new plugin test with verbose IO source output
|
2023-03-21 09:15:39 +01:00 |
|
plugins.legacy-func-hook
|
|
|
|
plugins.logging-hooks
|
BTest baseline update for more complete function/lambda names
|
2024-09-27 14:16:10 -07:00 |
|
plugins.meta-hook
|
Cleanup unused baselines
|
2025-07-10 16:46:09 -04:00 |
|
plugins.packet-protocol
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
plugins.pktdumper
|
|
|
|
plugins.pktsrc
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
plugins.plugin-load-dependency
|
|
|
|
plugins.plugin-load-file-extended
|
|
|
|
plugins.plugin-nopatchversion
|
|
|
|
plugins.plugin-withpatchversion
|
|
|
|
plugins.protocol
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
plugins.publish-event-hook
|
btest/plugin: Test for PublishEventHook()
|
2025-04-30 17:26:33 +02:00 |
|
plugins.publish-event-metadata
|
Cleanup unused baselines
|
2025-07-10 16:46:09 -04:00 |
|
plugins.reader
|
|
|
|
plugins.reporter-hook
|
|
|
|
plugins.storage
|
Add STORAGE_ prefixes for backends and serializers
|
2025-04-14 10:11:13 -07:00 |
|
plugins.tap-analyzer
|
btest/plugins/tap-analyzer: Update baseline
|
2025-08-06 14:17:42 +02:00 |
|
plugins.unprocessed-packet-hook
|
Spelling testing
|
2022-11-16 20:05:03 -05:00 |
|
plugins.writer
|
Analyzer failure logging: tweaks and test fixes
|
2025-06-03 15:56:42 +01:00 |
|
scripts.base.files.data_event.basic
|
|
|
|
scripts.base.files.entropy.basic
|
|
|
|
scripts.base.files.extract.limit
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.base.files.extract.limit-large-hole
|
Add extract_limit_includes_missing option for file extraction
|
2023-09-14 12:11:42 -07:00 |
|
scripts.base.files.mime.iso-9660
|
signatures: Fix ISO 9960 signature
|
2024-02-22 12:37:40 +01:00 |
|
scripts.base.files.mime.vnd.ms-cab-compressed-multi-conn
|
test-all-policy: Do not load iso-9660.zeek
|
2024-02-26 17:58:26 +01:00 |
|
scripts.base.files.pe.basic
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.base.files.x509.1999
|
Change x509 not_before/not_after to not be based on local timezone
|
2025-06-18 13:21:35 +01:00 |
|
scripts.base.files.x509.caching-hook
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.files.x509.disable-certificate-events-known-certs
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.files.x509.disable-certificate-events-known-certs-2
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.files.x509.disable-certificate-events-known-certs-3
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.files.x509.event-caching
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.files.x509.files
|
btest/files/x509/files: Sort analyzers in baseline
|
2025-04-10 15:02:44 +02:00 |
|
scripts.base.files.x509.log-caching
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.files.x509.log-caching-cluster
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.files.x509.log-caching-disabled-cluster
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.files.x509.signed_certificate_timestamp
|
|
|
|
scripts.base.files.x509.signed_certificate_timestamp_ocsp
|
|
|
|
scripts.base.files.x509.tbs_sig_alg
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.files.x509.x509_check_cert_hostname
|
|
|
|
scripts.base.frameworks.analyzer.disabled-packet-analyzers
|
packet_analysis: Introduce PacketAnalyzer::__disable_analyzer()
|
2022-09-30 09:27:22 +02:00 |
|
scripts.base.frameworks.analyzer.dpd-logging-configuration
|
DPD: change policy script for service violation logging; add NEWS
|
2025-02-06 18:56:30 +00:00 |
|
scripts.base.frameworks.analyzer.dpd-logging-configuration-2
|
Fix policy/protocols/conn/failed-service-logging.zeek
|
2025-05-06 13:37:12 +01:00 |
|
scripts.base.frameworks.analyzer.request-analyzer
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
scripts.base.frameworks.analyzer.request-response-protocol-differences
|
Add two protocol mismatch testcases
|
2025-03-04 15:38:20 +00:00 |
|
scripts.base.frameworks.analyzer.schedule-analyzer
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.base.frameworks.analyzer.tags
|
|
|
|
scripts.base.frameworks.analyzer.toggle-packet-analyzers
|
ip4_hdr: Add DF, MF, offset and sum fields
|
2023-04-29 17:09:43 +02:00 |
|
scripts.base.frameworks.cluster.custom_pool_exclusivity
|
btest/frameworks/cluster: Use generic cluster-layout.zeek
|
2025-05-20 20:30:01 +02:00 |
|
scripts.base.frameworks.cluster.custom_pool_limits
|
btest/frameworks/cluster: Use generic cluster-layout.zeek
|
2025-05-20 20:30:01 +02:00 |
|
scripts.base.frameworks.cluster.forwarding
|
btest/frameworks/cluster: Use generic cluster-layout.zeek
|
2025-05-20 20:30:01 +02:00 |
|
scripts.base.frameworks.cluster.leftover-log-rotation-multi-logger
|
cluster/logger: Fix leftover-log-rotation in multi-logger setups
|
2023-06-13 10:47:20 +02:00 |
|
scripts.base.frameworks.cluster.log_distribution
|
|
|
|
scripts.base.frameworks.cluster.publish-hrw-type-check
|
broker/messaging: Runtime type checks for pool
|
2023-04-19 19:30:46 +02:00 |
|
scripts.base.frameworks.cluster.start-it-up
|
btest/frameworks/cluster: Use generic cluster-layout.zeek
|
2025-05-20 20:30:01 +02:00 |
|
scripts.base.frameworks.cluster.start-it-up-logger
|
btest/frameworks/cluster: Use generic cluster-layout.zeek
|
2025-05-20 20:30:01 +02:00 |
|
scripts.base.frameworks.cluster.topic_distribution
|
btest/frameworks/cluster: Use generic cluster-layout.zeek
|
2025-05-20 20:30:01 +02:00 |
|
scripts.base.frameworks.cluster.topic_distribution_bifs
|
btest/frameworks/cluster: Use generic cluster-layout.zeek
|
2025-05-20 20:30:01 +02:00 |
|
scripts.base.frameworks.cluster.topic_distribution_make_event
|
btest/frameworks/cluster: Use generic cluster-layout.zeek
|
2025-05-20 20:30:01 +02:00 |
|
scripts.base.frameworks.config.basic
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.frameworks.config.basic_cluster
|
btest/frameworks/config: Use generic cluster-layout.zeek
|
2025-05-20 20:30:01 +02:00 |
|
scripts.base.frameworks.config.cluster_resend
|
btest/frameworks/config: Use generic cluster-layout.zeek
|
2025-05-20 20:30:01 +02:00 |
|
scripts.base.frameworks.config.container-options
|
|
|
|
scripts.base.frameworks.config.missing-enum-value
|
testing/missing-enum-value: redef exit_only_after_terminate=T
|
2022-07-29 18:22:03 +02:00 |
|
scripts.base.frameworks.config.read_config
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.frameworks.config.read_config_cluster
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.frameworks.config.several-files
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.frameworks.config.updates
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.frameworks.config.weird
|
|
|
|
scripts.base.frameworks.control.configuration_update
|
|
|
|
scripts.base.frameworks.control.id_value
|
|
|
|
scripts.base.frameworks.file-analysis.actions.data_event
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.base.frameworks.file-analysis.bifs.enable-disable
|
|
|
|
scripts.base.frameworks.file-analysis.bifs.file_exists_lookup_file
|
|
|
|
scripts.base.frameworks.file-analysis.bifs.register_mime_type
|
Update btest baselines to reflect the use of local address ranges.
|
2023-03-15 17:11:04 -07:00 |
|
scripts.base.frameworks.file-analysis.bifs.remove_action
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.base.frameworks.file-analysis.bifs.set_timeout_interval
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.base.frameworks.file-analysis.bifs.stop
|
|
|
|
scripts.base.frameworks.file-analysis.big-bof-buffer
|
Update btest baselines to reflect the use of local address ranges.
|
2023-03-15 17:11:04 -07:00 |
|
scripts.base.frameworks.file-analysis.byteranges
|
Update btest baselines to reflect the use of local address ranges.
|
2023-03-15 17:11:04 -07:00 |
|
scripts.base.frameworks.file-analysis.ftp
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.base.frameworks.file-analysis.http.get
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.base.frameworks.file-analysis.http.multipart
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.base.frameworks.file-analysis.http.partial-content
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.base.frameworks.file-analysis.http.pipeline
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.base.frameworks.file-analysis.http.post
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.base.frameworks.file-analysis.input.basic
|
|
|
|
scripts.base.frameworks.file-analysis.irc
|
Add support for ircv3 tags
|
2025-07-28 14:06:33 -07:00 |
|
scripts.base.frameworks.file-analysis.log-files-event-flattening
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.base.frameworks.file-analysis.logging
|
Update btest baselines to reflect the use of local address ranges.
|
2023-03-15 17:11:04 -07:00 |
|
scripts.base.frameworks.file-analysis.logging-input-analysis
|
files.log: Unroll and introduce uid and id fields
|
2022-08-16 17:22:20 +02:00 |
|
scripts.base.frameworks.file-analysis.smtp
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.base.frameworks.input.bad_patterns
|
|
|
|
scripts.base.frameworks.input.basic
|
|
|
|
scripts.base.frameworks.input.bignumber
|
|
|
|
scripts.base.frameworks.input.binary
|
|
|
|
scripts.base.frameworks.input.config.basic
|
|
|
|
scripts.base.frameworks.input.config.enum-set
|
|
|
|
scripts.base.frameworks.input.config.errors
|
|
|
|
scripts.base.frameworks.input.config.spaces
|
|
|
|
scripts.base.frameworks.input.default
|
|
|
|
scripts.base.frameworks.input.empty-nested-record
|
input/Manager: Ignore empty record types
|
2025-07-03 18:21:15 +02:00 |
|
scripts.base.frameworks.input.empty-values-hashing
|
|
|
|
scripts.base.frameworks.input.emptyvals
|
|
|
|
scripts.base.frameworks.input.errors
|
input/Manager: Improve type checks of record fields with type any
|
2024-07-19 11:35:54 +02:00 |
|
scripts.base.frameworks.input.event
|
BTest baseline update for more complete function/lambda names
|
2024-09-27 14:16:10 -07:00 |
|
scripts.base.frameworks.input.from_json
|
Merge remote-tracking branch 'amazing-pp/topic/fupeng/from_json_bif'
|
2023-05-09 10:36:58 +02:00 |
|
scripts.base.frameworks.input.invalid-lines
|
input: Add location info for invalid enums
|
2022-11-29 12:36:11 +01:00 |
|
scripts.base.frameworks.input.invalid-lines-duplicate
|
Fix input error test nondeterminism
|
2024-10-02 13:26:41 -04:00 |
|
scripts.base.frameworks.input.invalidnumbers
|
|
|
|
scripts.base.frameworks.input.invalidset
|
Better input framework error messages for unset non-optionals
|
2023-07-21 15:11:31 +01:00 |
|
scripts.base.frameworks.input.invalidtable
|
Better input framework error messages for unset non-optionals
|
2023-07-21 15:11:31 +01:00 |
|
scripts.base.frameworks.input.invalidtext
|
|
|
|
scripts.base.frameworks.input.missing-enum
|
input: Add location info for invalid enums
|
2022-11-29 12:36:11 +01:00 |
|
scripts.base.frameworks.input.missing-file
|
|
|
|
scripts.base.frameworks.input.missing-file-initially
|
|
|
|
scripts.base.frameworks.input.missing-table-value
|
|
|
|
scripts.base.frameworks.input.onecolumn-norecord
|
|
|
|
scripts.base.frameworks.input.onecolumn-record
|
|
|
|
scripts.base.frameworks.input.optional
|
|
|
|
scripts.base.frameworks.input.path-prefix.absolute-prefix
|
|
|
|
scripts.base.frameworks.input.path-prefix.absolute-prefix-2
|
|
|
|
scripts.base.frameworks.input.path-prefix.absolute-prefix-3
|
|
|
|
scripts.base.frameworks.input.path-prefix.absolute-source
|
|
|
|
scripts.base.frameworks.input.path-prefix.absolute-source-2
|
|
|
|
scripts.base.frameworks.input.path-prefix.absolute-source-3
|
|
|
|
scripts.base.frameworks.input.path-prefix.no-paths
|
|
|
|
scripts.base.frameworks.input.path-prefix.no-paths-2
|
|
|
|
scripts.base.frameworks.input.path-prefix.no-paths-3
|
|
|
|
scripts.base.frameworks.input.path-prefix.relative-prefix
|
|
|
|
scripts.base.frameworks.input.path-prefix.relative-prefix-2
|
|
|
|
scripts.base.frameworks.input.path-prefix.relative-prefix-3
|
|
|
|
scripts.base.frameworks.input.patterns
|
|
|
|
scripts.base.frameworks.input.port
|
|
|
|
scripts.base.frameworks.input.port-embedded
|
|
|
|
scripts.base.frameworks.input.predicate
|
|
|
|
scripts.base.frameworks.input.predicate-stream
|
|
|
|
scripts.base.frameworks.input.predicatemodify
|
|
|
|
scripts.base.frameworks.input.predicatemodifyandreread
|
|
|
|
scripts.base.frameworks.input.predicaterefusesecondsamerecord
|
|
|
|
scripts.base.frameworks.input.raw.basic
|
BTest baseline update for more complete function/lambda names
|
2024-09-27 14:16:10 -07:00 |
|
scripts.base.frameworks.input.raw.execute
|
BTest baseline update for more complete function/lambda names
|
2024-09-27 14:16:10 -07:00 |
|
scripts.base.frameworks.input.raw.executestdin
|
|
|
|
scripts.base.frameworks.input.raw.executestream
|
|
|
|
scripts.base.frameworks.input.raw.executestream-leftover
|
input/Raw: Rework GetLine()
|
2024-10-09 14:21:07 -07:00 |
|
scripts.base.frameworks.input.raw.executestream-no-last-separator
|
input/Raw: Rework GetLine()
|
2024-10-09 14:21:07 -07:00 |
|
scripts.base.frameworks.input.raw.executestream-slow
|
input/Raw: Rework GetLine()
|
2024-10-09 14:21:07 -07:00 |
|
scripts.base.frameworks.input.raw.executestream-slow-long
|
input/Raw: Rework GetLine()
|
2024-10-09 14:21:07 -07:00 |
|
scripts.base.frameworks.input.raw.long
|
|
|
|
scripts.base.frameworks.input.raw.offset
|
|
|
|
scripts.base.frameworks.input.raw.rereadraw
|
btest/input/raw: Fix reread test
|
2023-05-22 11:06:54 +02:00 |
|
scripts.base.frameworks.input.raw.rereadraw2
|
input/Raw: Avoid reading file twice in MODE_REREAD
|
2023-05-22 11:06:25 +02:00 |
|
scripts.base.frameworks.input.raw.stderr
|
Spelling testing
|
2022-11-16 20:05:03 -05:00 |
|
scripts.base.frameworks.input.raw.streamraw
|
|
|
|
scripts.base.frameworks.input.raw.streamtail
|
Fix tail -F semantics when want_record=F and add tests for the new features
|
2022-07-12 17:57:50 -07:00 |
|
scripts.base.frameworks.input.raw.streamtail2
|
Fix tail -F semantics when want_record=F and add tests for the new features
|
2022-07-12 17:57:50 -07:00 |
|
scripts.base.frameworks.input.repeat
|
|
|
|
scripts.base.frameworks.input.reread
|
|
|
|
scripts.base.frameworks.input.set
|
|
|
|
scripts.base.frameworks.input.set-event-reread
|
|
|
|
scripts.base.frameworks.input.set-event-stream
|
|
|
|
scripts.base.frameworks.input.setseparator
|
|
|
|
scripts.base.frameworks.input.setspecialcases
|
Fix a bug with splitting strings in Ascii input reader
|
2022-07-21 11:53:47 -07:00 |
|
scripts.base.frameworks.input.sqlite.basic
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.base.frameworks.input.sqlite.error
|
|
|
|
scripts.base.frameworks.input.sqlite.port
|
|
|
|
scripts.base.frameworks.input.sqlite.types
|
|
|
|
scripts.base.frameworks.input.stream
|
|
|
|
scripts.base.frameworks.input.subrecord
|
|
|
|
scripts.base.frameworks.input.subrecord-event
|
|
|
|
scripts.base.frameworks.input.tableevent
|
|
|
|
scripts.base.frameworks.input.twotables
|
|
|
|
scripts.base.frameworks.input.unsupported_types
|
|
|
|
scripts.base.frameworks.input.windows
|
|
|
|
scripts.base.frameworks.intel.cluster-indicator-inserted
|
intel: Add indicator_inserted and indicator_removed hooks
|
2025-06-02 09:50:48 +02:00 |
|
scripts.base.frameworks.intel.cluster-indicator-inserted-new-min-store
|
intel: Add indicator_inserted and indicator_removed hooks
|
2025-06-02 09:50:48 +02:00 |
|
scripts.base.frameworks.intel.cluster-transparency
|
btest/frameworks/intel: Use generic cluster-layout.zeek
|
2025-05-20 20:30:01 +02:00 |
|
scripts.base.frameworks.intel.cluster-transparency-with-proxy
|
btest/frameworks/intel: Use generic cluster-layout.zeek
|
2025-05-20 20:30:01 +02:00 |
|
scripts.base.frameworks.intel.expire-item
|
|
|
|
scripts.base.frameworks.intel.filter-item
|
|
|
|
scripts.base.frameworks.intel.input-and-match
|
|
|
|
scripts.base.frameworks.intel.match-subnet
|
|
|
|
scripts.base.frameworks.intel.path-prefix.input-intel-absolute-prefixes
|
|
|
|
scripts.base.frameworks.intel.path-prefix.input-intel-relative-prefixes
|
|
|
|
scripts.base.frameworks.intel.path-prefix.input-prefix
|
|
|
|
scripts.base.frameworks.intel.path-prefix.no-paths
|
|
|
|
scripts.base.frameworks.intel.read-file-dist-cluster
|
btest/frameworks/intel: Use generic cluster-layout.zeek
|
2025-05-20 20:30:01 +02:00 |
|
scripts.base.frameworks.intel.remove-item-cluster
|
btest/frameworks/intel: Use generic cluster-layout.zeek
|
2025-05-20 20:30:01 +02:00 |
|
scripts.base.frameworks.intel.remove-non-existing
|
Intel: Introduce Intel::seen_policy() hook
|
2024-01-25 12:22:47 +01:00 |
|
scripts.base.frameworks.intel.seen-policy
|
Intel: Introduce Intel::seen_policy() hook
|
2024-01-25 12:22:47 +01:00 |
|
scripts.base.frameworks.intel.updated-match
|
|
|
|
scripts.base.frameworks.logging.adapt-filter
|
Increase size of proto fields to uint16_t, add common default value
|
2024-11-13 11:25:46 -07:00 |
|
scripts.base.frameworks.logging.ascii-binary
|
|
|
|
scripts.base.frameworks.logging.ascii-double
|
|
|
|
scripts.base.frameworks.logging.ascii-empty
|
Increase size of proto fields to uint16_t, add common default value
|
2024-11-13 11:25:46 -07:00 |
|
scripts.base.frameworks.logging.ascii-escape
|
Increase size of proto fields to uint16_t, add common default value
|
2024-11-13 11:25:46 -07:00 |
|
scripts.base.frameworks.logging.ascii-escape-binary
|
|
|
|
scripts.base.frameworks.logging.ascii-escape-empty-str
|
|
|
|
scripts.base.frameworks.logging.ascii-escape-notset-str
|
|
|
|
scripts.base.frameworks.logging.ascii-escape-odd-url
|
|
|
|
scripts.base.frameworks.logging.ascii-escape-set-separator
|
|
|
|
scripts.base.frameworks.logging.ascii-gz
|
BTest baseline update for more complete function/lambda names
|
2024-09-27 14:16:10 -07:00 |
|
scripts.base.frameworks.logging.ascii-json
|
BTest baseline update for more complete function/lambda names
|
2024-09-27 14:16:10 -07:00 |
|
scripts.base.frameworks.logging.ascii-json-iso-timestamps
|
|
|
|
scripts.base.frameworks.logging.ascii-json-optional
|
|
|
|
scripts.base.frameworks.logging.ascii-json-utf8
|
|
|
|
scripts.base.frameworks.logging.ascii-line-like-comment
|
|
|
|
scripts.base.frameworks.logging.ascii-logdir
|
Increase size of proto fields to uint16_t, add common default value
|
2024-11-13 11:25:46 -07:00 |
|
scripts.base.frameworks.logging.ascii-negative-ts
|
logging/ascii/json: Make TS_MILLIS signed, add TS_MILLIS_UNSIGNED
|
2025-05-30 17:23:29 +02:00 |
|
scripts.base.frameworks.logging.ascii-options
|
Increase size of proto fields to uint16_t, add common default value
|
2024-11-13 11:25:46 -07:00 |
|
scripts.base.frameworks.logging.ascii-timestamps
|
|
|
|
scripts.base.frameworks.logging.ascii-tsv
|
Increase size of proto fields to uint16_t, add common default value
|
2024-11-13 11:25:46 -07:00 |
|
scripts.base.frameworks.logging.ascii-utf8-enabled
|
|
|
|
scripts.base.frameworks.logging.ascii-utf8-enabled-control-characters
|
|
|
|
scripts.base.frameworks.logging.ascii-utf8-enabled-set-separator-escape
|
|
|
|
scripts.base.frameworks.logging.attr
|
|
|
|
scripts.base.frameworks.logging.attr-extend
|
|
|
|
scripts.base.frameworks.logging.delay.basic
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.basic-2
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.basic-3
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.basic-4
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.basic-5
|
logging/Manager: Implement DelayTokenType as an actual opaque
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.coerce
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.delay-cb
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.delay-cb-2
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.delay-cb-3
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.delay-cb-4
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.delay-cb-5
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.delay-cb-6
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.delay-cb-redelay
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.delay-cb-redelay-2
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.errors
|
logging: Better error messages for invalid Log::delay() calls
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.errors-2
|
logging: Better error messages for invalid Log::delay() calls
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.errors-3
|
logging: Better error messages for invalid Log::delay() calls
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.errors-4
|
logging/Manager: Implement DelayTokenType as an actual opaque
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.errors-5
|
logging/Manager: Implement DelayTokenType as an actual opaque
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.errors-6
|
logging: Better error messages for invalid Log::delay() calls
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.example
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.base.frameworks.logging.delay.multi-write
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.nested-write
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.nested-write-2
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.queue-setter
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.queue-setter-2
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.queue-size
|
logging: Implement get_delay_queue_size()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.queue-test
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.queue-test-2
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.queue-test-3
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.queue-test-4
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.queue-test-5
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.queue-test-6
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.queue-test-7
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.static-errors
|
added a space when rendering some expressions so they're more readable
|
2024-05-29 12:40:05 -07:00 |
|
scripts.base.frameworks.logging.delay.static-errors-2
|
added a space when rendering some expressions so they're more readable
|
2024-05-29 12:40:05 -07:00 |
|
scripts.base.frameworks.logging.delay.static-errors-3
|
added a space when rendering some expressions so they're more readable
|
2024-05-29 12:40:05 -07:00 |
|
scripts.base.frameworks.logging.delay.static-errors-4
|
added a space when rendering some expressions so they're more readable
|
2024-05-29 12:40:05 -07:00 |
|
scripts.base.frameworks.logging.empty-event
|
Increase size of proto fields to uint16_t, add common default value
|
2024-11-13 11:25:46 -07:00 |
|
scripts.base.frameworks.logging.enable-stream
|
Increase size of proto fields to uint16_t, add common default value
|
2024-11-13 11:25:46 -07:00 |
|
scripts.base.frameworks.logging.event-groups-integration
|
logging: Add event_groups to Stream
|
2022-12-09 16:59:36 +01:00 |
|
scripts.base.frameworks.logging.events
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.base.frameworks.logging.exclude
|
Increase size of proto fields to uint16_t, add common default value
|
2024-11-13 11:25:46 -07:00 |
|
scripts.base.frameworks.logging.field-extension
|
Move Conn::set_conn() from connection_state_remove to new_connection
|
2025-07-29 09:11:57 +01:00 |
|
scripts.base.frameworks.logging.field-extension-cluster
|
btest/frameworks/logging: Use generic cluster-layout.zeek
|
2025-05-20 20:30:01 +02:00 |
|
scripts.base.frameworks.logging.field-extension-cluster-error
|
btest/frameworks/logging: Use generic cluster-layout.zeek
|
2025-05-20 20:30:01 +02:00 |
|
scripts.base.frameworks.logging.field-extension-complex
|
Move Conn::set_conn() from connection_state_remove to new_connection
|
2025-07-29 09:11:57 +01:00 |
|
scripts.base.frameworks.logging.field-extension-include-exclude
|
Move Conn::set_conn() from connection_state_remove to new_connection
|
2025-07-29 09:11:57 +01:00 |
|
scripts.base.frameworks.logging.field-extension-invalid
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
scripts.base.frameworks.logging.field-extension-optional
|
Move Conn::set_conn() from connection_state_remove to new_connection
|
2025-07-29 09:11:57 +01:00 |
|
scripts.base.frameworks.logging.field-extension-table
|
|
|
|
scripts.base.frameworks.logging.field-name-map
|
Move Conn::set_conn() from connection_state_remove to new_connection
|
2025-07-29 09:11:57 +01:00 |
|
scripts.base.frameworks.logging.field-name-map2
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
scripts.base.frameworks.logging.file
|
|
|
|
scripts.base.frameworks.logging.hooks
|
|
|
|
scripts.base.frameworks.logging.hooks-2
|
|
|
|
scripts.base.frameworks.logging.hooks-3
|
|
|
|
scripts.base.frameworks.logging.hooks-4
|
|
|
|
scripts.base.frameworks.logging.hooks-5
|
|
|
|
scripts.base.frameworks.logging.hooks-6
|
|
|
|
scripts.base.frameworks.logging.hooks-7
|
|
|
|
scripts.base.frameworks.logging.hooks-8
|
|
|
|
scripts.base.frameworks.logging.hooks-9
|
|
|
|
scripts.base.frameworks.logging.hooks-10
|
Tighten the scripts.base.frameworks.logging.hooks test
|
2023-02-01 15:12:20 -08:00 |
|
scripts.base.frameworks.logging.hooks-11
|
|
|
|
scripts.base.frameworks.logging.include
|
Increase size of proto fields to uint16_t, add common default value
|
2024-11-13 11:25:46 -07:00 |
|
scripts.base.frameworks.logging.length-checking
|
Return weird if a log line is over a configurable size limit
|
2025-07-21 09:14:52 -07:00 |
|
scripts.base.frameworks.logging.none-debug
|
|
|
|
scripts.base.frameworks.logging.path-func
|
Increase size of proto fields to uint16_t, add common default value
|
2024-11-13 11:25:46 -07:00 |
|
scripts.base.frameworks.logging.path-func-column-demote
|
|
|
|
scripts.base.frameworks.logging.pred
|
Increase size of proto fields to uint16_t, add common default value
|
2024-11-13 11:25:46 -07:00 |
|
scripts.base.frameworks.logging.print-log
|
|
|
|
scripts.base.frameworks.logging.print-log-stdout
|
|
|
|
scripts.base.frameworks.logging.remove
|
Increase size of proto fields to uint16_t, add common default value
|
2024-11-13 11:25:46 -07:00 |
|
scripts.base.frameworks.logging.rotate
|
|
|
|
scripts.base.frameworks.logging.rotate-ascii-logdir-leftover-log-rotation
|
Remove LogAscii::logdir (6.1 deprecation)
|
2023-06-14 10:07:22 -07:00 |
|
scripts.base.frameworks.logging.rotate-custom
|
|
|
|
scripts.base.frameworks.logging.rotate-custom-fmt-func
|
|
|
|
scripts.base.frameworks.logging.rotate-custom-fmt-func-bad
|
logging/Manager: Fix crash for rotation format function not returning
|
2023-04-13 09:23:51 +02:00 |
|
scripts.base.frameworks.logging.rotate-default-logdir
|
logging: Introduce Log::default_logdir deprecate LogAscii::logdir and per writer logdir
|
2022-07-06 18:54:29 +02:00 |
|
scripts.base.frameworks.logging.rotate-default-logdir-leftover-log-rotation-shadow-files
|
logging: Introduce Log::default_logdir deprecate LogAscii::logdir and per writer logdir
|
2022-07-06 18:54:29 +02:00 |
|
scripts.base.frameworks.logging.rotate-default-logdir-leftover-log-rotation-stale-shadow-files
|
logging: Introduce Log::default_logdir deprecate LogAscii::logdir and per writer logdir
|
2022-07-06 18:54:29 +02:00 |
|
scripts.base.frameworks.logging.rotate-leftover-log-rotation-shadow-files
|
logging/ascii: Fix .shadow paths when using LogAscii::logdir
|
2022-07-06 13:21:21 +02:00 |
|
scripts.base.frameworks.logging.rotate-leftover-log-rotation-shadow-files-postprocessor-errors
|
logging/Ascii: Fix abort() for non-existing postrotation functions
|
2025-06-16 14:55:49 +02:00 |
|
scripts.base.frameworks.logging.rotate-pp-env
|
logging: Support rotation_postprocessor_command_env
|
2023-04-17 13:10:14 +00:00 |
|
scripts.base.frameworks.logging.scope_sep
|
Move Conn::set_conn() from connection_state_remove to new_connection
|
2025-07-29 09:11:57 +01:00 |
|
scripts.base.frameworks.logging.scope_sep_and_field_name_map
|
Move Conn::set_conn() from connection_state_remove to new_connection
|
2025-07-29 09:11:57 +01:00 |
|
scripts.base.frameworks.logging.sqlite.default-logdir
|
sqlite default-logdir test: Remove ls ./logs baseline
|
2022-07-06 22:57:14 +02:00 |
|
scripts.base.frameworks.logging.sqlite.error
|
|
|
|
scripts.base.frameworks.logging.sqlite.pragma
|
Test synchronous/journal mode options for SQLite log writer
|
2024-11-26 12:26:38 +00:00 |
|
scripts.base.frameworks.logging.sqlite.set
|
|
|
|
scripts.base.frameworks.logging.sqlite.simultaneous-writes
|
BTest baseline update for more complete function/lambda names
|
2024-09-27 14:16:10 -07:00 |
|
scripts.base.frameworks.logging.sqlite.types
|
BTest baseline update for more complete function/lambda names
|
2024-09-27 14:16:10 -07:00 |
|
scripts.base.frameworks.logging.sqlite.wikipedia
|
Update btests for new local-only subnets
|
2025-01-09 22:16:42 -07:00 |
|
scripts.base.frameworks.logging.stdout
|
Increase size of proto fields to uint16_t, add common default value
|
2024-11-13 11:25:46 -07:00 |
|
scripts.base.frameworks.logging.telemetry
|
Return weird if a log line is over a configurable size limit
|
2025-07-21 09:14:52 -07:00 |
|
scripts.base.frameworks.logging.test-logging
|
Increase size of proto fields to uint16_t, add common default value
|
2024-11-13 11:25:46 -07:00 |
|
scripts.base.frameworks.logging.types
|
BTest baseline update for more complete function/lambda names
|
2024-09-27 14:16:10 -07:00 |
|
scripts.base.frameworks.logging.unset-record
|
|
|
|
scripts.base.frameworks.logging.vec
|
|
|
|
scripts.base.frameworks.logging.writer-path-conflict
|
|
|
|
scripts.base.frameworks.netcontrol.acld
|
|
|
|
scripts.base.frameworks.netcontrol.acld-hook
|
|
|
|
scripts.base.frameworks.netcontrol.basic
|
|
|
|
scripts.base.frameworks.netcontrol.basic-cluster
|
|
|
|
scripts.base.frameworks.netcontrol.broker
|
|
|
|
scripts.base.frameworks.netcontrol.delete-internal-state
|
|
|
|
scripts.base.frameworks.netcontrol.duplicate
|
|
|
|
scripts.base.frameworks.netcontrol.find-rules
|
|
|
|
scripts.base.frameworks.netcontrol.hook
|
|
|
|
scripts.base.frameworks.netcontrol.multiple
|
|
|
|
scripts.base.frameworks.netcontrol.openflow
|
|
|
|
scripts.base.frameworks.netcontrol.packetfilter
|
Move Conn::set_conn() from connection_state_remove to new_connection
|
2025-07-29 09:11:57 +01:00 |
|
scripts.base.frameworks.netcontrol.quarantine-openflow
|
|
|
|
scripts.base.frameworks.netcontrol.rule-added-hook
|
Netcontrol: add rule_added_policy
|
2024-02-05 18:52:27 +00:00 |
|
scripts.base.frameworks.netcontrol.rule-added-hook-2
|
logging: Dedicated log flush timer
|
2024-09-27 15:30:35 +02:00 |
|
scripts.base.frameworks.netcontrol.timeout
|
|
|
|
scripts.base.frameworks.notice.action-email
|
|
|
|
scripts.base.frameworks.notice.action-email-admin
|
|
|
|
scripts.base.frameworks.notice.action-email-custom-address
|
|
|
|
scripts.base.frameworks.notice.action-email-multiple
|
|
|
|
scripts.base.frameworks.notice.action-page
|
|
|
|
scripts.base.frameworks.notice.action-page-with-hostnames
|
|
|
|
scripts.base.frameworks.notice.cluster
|
btest/frameworks/notice: Use generic cluster-layout.zeek
|
2025-05-20 20:30:01 +02:00 |
|
scripts.base.frameworks.notice.file-info-multiple-conns
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.base.frameworks.notice.file-info-no-conns
|
analyzer/files: handle non-analyzer names in describe_file()
|
2022-12-06 11:17:30 +01:00 |
|
scripts.base.frameworks.notice.mail-alarms
|
|
|
|
scripts.base.frameworks.notice.suppression
|
|
|
|
scripts.base.frameworks.notice.suppression-cluster
|
btest/frameworks/notice: Use generic cluster-layout.zeek
|
2025-05-20 20:30:01 +02:00 |
|
scripts.base.frameworks.openflow.broker-basic
|
|
|
|
scripts.base.frameworks.openflow.log-basic
|
|
|
|
scripts.base.frameworks.openflow.log-cluster
|
btest remaining: Use generic cluster-layout.zeek
|
2025-05-20 20:30:01 +02:00 |
|
scripts.base.frameworks.openflow.ryu-basic
|
|
|
|
scripts.base.frameworks.reporter.disable-stderr
|
|
|
|
scripts.base.frameworks.reporter.stderr
|
|
|
|
scripts.base.frameworks.software.version-parsing
|
|
|
|
scripts.base.frameworks.storage.compound-types
|
Completely rework return values from storage operations
|
2025-03-18 10:20:33 -07:00 |
|
scripts.base.frameworks.storage.redis-async
|
Fix swapped storage metrics names
|
2025-07-23 13:14:46 -07:00 |
|
scripts.base.frameworks.storage.redis-async-reading-pcap
|
Completely rework return values from storage operations
|
2025-03-18 10:20:33 -07:00 |
|
scripts.base.frameworks.storage.redis-auth
|
Redis: Add support for sending AUTH commands during connection
|
2025-06-03 11:38:38 -07:00 |
|
scripts.base.frameworks.storage.redis-cluster
|
Completely rework return values from storage operations
|
2025-03-18 10:20:33 -07:00 |
|
scripts.base.frameworks.storage.redis-disconnect
|
Add flag to force synchronous mode when calling storage script-land functions
|
2025-07-23 13:14:34 -07:00 |
|
scripts.base.frameworks.storage.redis-erase
|
Redis: Fix sync erase, add btest for it
|
2025-03-18 10:20:34 -07:00 |
|
scripts.base.frameworks.storage.redis-error-handling
|
Redis: return proper error if connection fails
|
2025-05-23 12:13:13 -07:00 |
|
scripts.base.frameworks.storage.redis-expiration
|
Redis: Fix thread-contention issues with Expire(), add more tests
|
2025-03-18 10:20:33 -07:00 |
|
scripts.base.frameworks.storage.redis-forced-sync
|
Fix swapped storage metrics names
|
2025-07-23 13:14:46 -07:00 |
|
scripts.base.frameworks.storage.redis-native-expiration
|
Redis: Fix thread-contention issues with Expire(), add more tests
|
2025-03-18 10:20:33 -07:00 |
|
scripts.base.frameworks.storage.redis-sync
|
Fix swapped storage metrics names
|
2025-07-23 13:14:46 -07:00 |
|
scripts.base.frameworks.storage.sqlite-basic
|
Add flag to force synchronous mode when calling storage script-land functions
|
2025-07-23 13:14:34 -07:00 |
|
scripts.base.frameworks.storage.sqlite-basic-reading-pcap
|
Completely rework return values from storage operations
|
2025-03-18 10:20:33 -07:00 |
|
scripts.base.frameworks.storage.sqlite-basic-sync-in-when
|
Add flag to force synchronous mode when calling storage script-land functions
|
2025-07-23 13:14:34 -07:00 |
|
scripts.base.frameworks.storage.sqlite-cluster
|
Add expiration to sqlite-cluster.btest
|
2025-06-05 10:21:50 -07:00 |
|
scripts.base.frameworks.storage.sqlite-erase
|
Add flag to force synchronous mode when calling storage script-land functions
|
2025-07-23 13:14:34 -07:00 |
|
scripts.base.frameworks.storage.sqlite-error-handling
|
Add Storage::is_connected BIF
|
2025-05-07 08:13:16 -07:00 |
|
scripts.base.frameworks.storage.sqlite-expiration
|
SQLite: Reset expiration time on overwrite
|
2025-06-30 14:41:10 -07:00 |
|
scripts.base.frameworks.storage.sqlite-expiration-implicit
|
Make PUT on SQLite backend implicitly overwrite expired entries
|
2025-07-15 15:50:43 -07:00 |
|
scripts.base.frameworks.storage.sqlite-metrics
|
Add SQLite page_count and file_size metrics
|
2025-07-18 14:28:04 -07:00 |
|
scripts.base.frameworks.storage.sqlite-overwriting
|
Prefix sqlite-based btests with sqlite- to match redis tests
|
2025-05-21 09:38:27 -07:00 |
|
scripts.base.frameworks.sumstats.basic
|
|
|
|
scripts.base.frameworks.sumstats.basic-cluster
|
btest/frameworks/sumstats: Use generic cluster-layout.zeek
|
2025-05-20 20:30:01 +02:00 |
|
scripts.base.frameworks.sumstats.cluster-intermediate-update
|
btest/frameworks/sumstats: Use generic cluster-layout.zeek
|
2025-05-20 20:30:01 +02:00 |
|
scripts.base.frameworks.sumstats.final-epoch
|
sumstat/non-cluster: Move last epoch processing to zeek_done()
|
2024-11-18 15:58:01 +01:00 |
|
scripts.base.frameworks.sumstats.last-cluster
|
btest/frameworks/sumstats: Use generic cluster-layout.zeek
|
2025-05-20 20:30:01 +02:00 |
|
scripts.base.frameworks.sumstats.manual-epoch
|
Spelling testing
|
2022-11-16 20:05:03 -05:00 |
|
scripts.base.frameworks.sumstats.manual-epoch-cluster
|
btest/frameworks/sumstats: Use generic cluster-layout.zeek
|
2025-05-20 20:30:01 +02:00 |
|
scripts.base.frameworks.sumstats.on-demand
|
|
|
|
scripts.base.frameworks.sumstats.on-demand-cluster
|
btest/frameworks/sumstats: Use generic cluster-layout.zeek
|
2025-05-20 20:30:01 +02:00 |
|
scripts.base.frameworks.sumstats.sample
|
|
|
|
scripts.base.frameworks.sumstats.sample-cluster
|
btest/frameworks/sumstats: Use generic cluster-layout.zeek
|
2025-05-20 20:30:01 +02:00 |
|
scripts.base.frameworks.sumstats.thresholding
|
|
|
|
scripts.base.frameworks.sumstats.topk
|
|
|
|
scripts.base.frameworks.sumstats.topk-cluster
|
btest/frameworks/sumstats: Use generic cluster-layout.zeek
|
2025-05-20 20:30:01 +02:00 |
|
scripts.base.frameworks.telemetry.basic
|
Fix ordering of telemtry metrics when running under test
|
2025-07-18 14:28:04 -07:00 |
|
scripts.base.frameworks.telemetry.conn-duration-histogram
|
Change all instruments to only handle doubles
|
2024-05-31 13:36:37 -07:00 |
|
scripts.base.frameworks.telemetry.event-handler-invocations
|
Change all instruments to only handle doubles
|
2024-05-31 13:36:37 -07:00 |
|
scripts.base.frameworks.telemetry.internal-metrics
|
Fix ordering of telemtry metrics when running under test
|
2025-07-18 14:28:04 -07:00 |
|
scripts.base.frameworks.telemetry.process-collect
|
Add process_start_time_seconds and process_pid metrics
|
2025-07-24 10:39:14 -07:00 |
|
scripts.base.frameworks.telemetry.sync
|
telemetry: Invoke Telemetry::sync() only at scrape/collection time
|
2024-10-22 18:49:11 +02:00 |
|
scripts.base.frameworks.telemetry.sync-collect
|
telemetry: Invoke Telemetry::sync() only at scrape/collection time
|
2024-10-22 18:49:11 +02:00 |
|
scripts.base.frameworks.telemetry.sync-warnings
|
telemetry: Invoke Telemetry::sync() only at scrape/collection time
|
2024-10-22 18:49:11 +02:00 |
|
scripts.base.misc.find-filtered-trace
|
|
|
|
scripts.base.misc.installation
|
|
|
|
scripts.base.misc.version
|
Remove unneeded @loads from base/misc/version.zeek
|
2024-12-06 15:18:05 -08:00 |
|
scripts.base.misc.version-2
|
|
|
|
scripts.base.protocols.arp.bad
|
|
|
|
scripts.base.protocols.arp.basic
|
|
|
|
scripts.base.protocols.arp.linuxsll
|
|
|
|
scripts.base.protocols.arp.radiotap
|
|
|
|
scripts.base.protocols.arp.wlanmon
|
|
|
|
scripts.base.protocols.bittorrent.tracker
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.base.protocols.conn.conn_state-RST-behavior
|
|
|
|
scripts.base.protocols.conn.contents-default-extract
|
|
|
|
scripts.base.protocols.conn.new_connection_contents
|
Add support for ircv3 tags
|
2025-07-28 14:06:33 -07:00 |
|
scripts.base.protocols.conn.polling
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.base.protocols.conn.removal-hooks
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.base.protocols.conn.threshold
|
Add support for ircv3 tags
|
2025-07-28 14:06:33 -07:00 |
|
scripts.base.protocols.conn.threshold-delete
|
|
|
|
scripts.base.protocols.dce-rpc.context
|
|
|
|
scripts.base.protocols.dce-rpc.dce-rpc-backing-discard
|
dce-rpc: Test cases for unbounded state growth
|
2023-06-30 15:14:35 +02:00 |
|
scripts.base.protocols.dce-rpc.dce-rpc-backing-size
|
dce-rpc: Test cases for unbounded state growth
|
2023-06-30 15:14:35 +02:00 |
|
scripts.base.protocols.dce-rpc.dce_rpc_netlogon
|
|
|
|
scripts.base.protocols.dce-rpc.dce_rpc_ntlm
|
|
|
|
scripts.base.protocols.dce-rpc.mapi
|
|
|
|
scripts.base.protocols.dce-rpc.ntlm-empty-av-pair-seq
|
Settle on analyzer.log for the dpd.log replacement
|
2025-06-03 17:33:36 +01:00 |
|
scripts.base.protocols.dce-rpc.ntlm-unterminated-av-pair-seq
|
Settle on analyzer.log for the dpd.log replacement
|
2025-06-03 17:33:36 +01:00 |
|
scripts.base.protocols.dce-rpc.request-response-stub-events
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.base.protocols.dhcp.cluster
|
btest remaining: Use generic cluster-layout.zeek
|
2025-05-20 20:30:01 +02:00 |
|
scripts.base.protocols.dhcp.dhcp-ack-msg-types
|
|
|
|
scripts.base.protocols.dhcp.dhcp-all-msg-types
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
scripts.base.protocols.dhcp.dhcp-discover-msg-types
|
|
|
|
scripts.base.protocols.dhcp.dhcp-prevent-large-msgtypes
|
Prevent large dhcp log entries
|
2022-07-28 11:34:18 -07:00 |
|
scripts.base.protocols.dhcp.dhcp-prevent-large-uids
|
Prevent large dhcp log entries
|
2022-07-28 11:34:18 -07:00 |
|
scripts.base.protocols.dhcp.dhcp-sub-opts
|
|
|
|
scripts.base.protocols.dhcp.dhcp-time-nameserver-events
|
|
|
|
scripts.base.protocols.dhcp.hw-type0
|
|
|
|
scripts.base.protocols.dhcp.inform
|
|
|
|
scripts.base.protocols.dnp3.dnp3_del_measure
|
|
|
|
scripts.base.protocols.dnp3.dnp3_en_spon
|
|
|
|
scripts.base.protocols.dnp3.dnp3_file_del
|
|
|
|
scripts.base.protocols.dnp3.dnp3_file_read
|
|
|
|
scripts.base.protocols.dnp3.dnp3_file_write
|
|
|
|
scripts.base.protocols.dnp3.dnp3_link_only
|
|
|
|
scripts.base.protocols.dnp3.dnp3_read
|
|
|
|
scripts.base.protocols.dnp3.dnp3_rec_time
|
|
|
|
scripts.base.protocols.dnp3.dnp3_select_operate
|
|
|
|
scripts.base.protocols.dnp3.dnp3_udp_en_spon
|
|
|
|
scripts.base.protocols.dnp3.dnp3_udp_read
|
|
|
|
scripts.base.protocols.dnp3.dnp3_udp_select_operate
|
|
|
|
scripts.base.protocols.dnp3.dnp3_udp_write
|
|
|
|
scripts.base.protocols.dnp3.dnp3_write
|
|
|
|
scripts.base.protocols.dnp3.events
|
|
|
|
scripts.base.protocols.dns.ad-cd
|
dns: Remove AD and CD flags from log
|
2023-03-16 10:09:27 +01:00 |
|
scripts.base.protocols.dns.binds
|
DNS/dns_binds_rr: Fix complte to complete typo, switch to count
|
2024-12-09 19:02:28 +01:00 |
|
scripts.base.protocols.dns.caa
|
|
|
|
scripts.base.protocols.dns.dns-edns-cookie
|
|
|
|
scripts.base.protocols.dns.dns-edns-ecs
|
Fix hang in DNS analyzer with malformed packet
|
2022-06-03 10:32:03 -07:00 |
|
scripts.base.protocols.dns.dns-edns-tcp-keepalive
|
|
|
|
scripts.base.protocols.dns.dns-key
|
dns: Remove AD and CD flags from log
|
2023-03-16 10:09:27 +01:00 |
|
scripts.base.protocols.dns.dnskey
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.protocols.dns.dnssec
|
DNS: Add Ed25519 and Ed448 enum values to parser
|
2023-11-17 19:56:47 +01:00 |
|
scripts.base.protocols.dns.ds
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.protocols.dns.duplicate-reponses
|
dns: Remove AD and CD flags from log
|
2023-03-16 10:09:27 +01:00 |
|
scripts.base.protocols.dns.dynamic-update
|
Add weird for unhandled opcodes in DNS analyzer
|
2024-09-04 13:01:24 -07:00 |
|
scripts.base.protocols.dns.edns-rcode
|
Fix parsing of EDNS rcode
|
2025-07-24 14:57:00 +01:00 |
|
scripts.base.protocols.dns.event-handler-warning
|
Raise warnings when for DNS events that are not raised due to dns_skip_all_addl
|
2025-01-07 17:46:27 +00:00 |
|
scripts.base.protocols.dns.flip
|
dns: Remove AD and CD flags from log
|
2023-03-16 10:09:27 +01:00 |
|
scripts.base.protocols.dns.hinfo
|
Parse DNSSEC AD and CD bits
|
2023-03-13 14:35:06 -07:00 |
|
scripts.base.protocols.dns.https
|
Spelling testing
|
2022-11-16 20:05:03 -05:00 |
|
scripts.base.protocols.dns.huge-ttl
|
|
|
|
scripts.base.protocols.dns.loc
|
dns: Remove AD and CD flags from log
|
2023-03-16 10:09:27 +01:00 |
|
scripts.base.protocols.dns.multiple-txt-strings
|
dns: Remove AD and CD flags from log
|
2023-03-16 10:09:27 +01:00 |
|
scripts.base.protocols.dns.naptr
|
DNS: Implement NAPTR RR support
|
2025-06-24 17:43:27 +02:00 |
|
scripts.base.protocols.dns.nsec
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.protocols.dns.nsec3
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.protocols.dns.nsec3param
|
dns: Remove AD and CD flags from log
|
2023-03-16 10:09:27 +01:00 |
|
scripts.base.protocols.dns.rrsig
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.protocols.dns.spf
|
dns: Remove AD and CD flags from log
|
2023-03-16 10:09:27 +01:00 |
|
scripts.base.protocols.dns.sshfp
|
dns: Remove AD and CD flags from log
|
2023-03-16 10:09:27 +01:00 |
|
scripts.base.protocols.dns.svcb
|
Spelling testing
|
2022-11-16 20:05:03 -05:00 |
|
scripts.base.protocols.dns.tkey
|
Add DNS TKEY event
|
2024-08-16 10:20:42 -04:00 |
|
scripts.base.protocols.dns.tsig
|
|
|
|
scripts.base.protocols.dns.wks
|
dns: Remove AD and CD flags from log
|
2023-03-16 10:09:27 +01:00 |
|
scripts.base.protocols.dns.zero-responses
|
dns: Remove AD and CD flags from log
|
2023-03-16 10:09:27 +01:00 |
|
scripts.base.protocols.finger.events
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.base.protocols.ftp.bad-adat-encoding
|
|
|
|
scripts.base.protocols.ftp.cwd-navigation
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
scripts.base.protocols.ftp.ftp-auth-tls
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.base.protocols.ftp.ftp-get-file-size
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.base.protocols.ftp.ftp-invalid-reply-code
|
Settle on analyzer.log for the dpd.log replacement
|
2025-06-03 17:33:36 +01:00 |
|
scripts.base.protocols.ftp.ftp-ipv4
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.base.protocols.ftp.ftp-ipv6
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.base.protocols.ftp.ftp-max-arg-length
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.base.protocols.ftp.ftp-max-command-length
|
Settle on analyzer.log for the dpd.log replacement
|
2025-06-03 17:33:36 +01:00 |
|
scripts.base.protocols.ftp.ftp-max-pending-commands
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
scripts.base.protocols.ftp.ftp-max-user-length
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.base.protocols.ftp.ftp-missing-reply-code
|
Settle on analyzer.log for the dpd.log replacement
|
2025-06-03 17:33:36 +01:00 |
|
scripts.base.protocols.ftp.ftp-missing-space-after-reply-code
|
Settle on analyzer.log for the dpd.log replacement
|
2025-06-03 17:33:36 +01:00 |
|
scripts.base.protocols.ftp.ftp-multiline-reply
|
ftp/main: Skip get_pending_command() for intermediate reply lines
|
2023-03-23 13:50:36 +01:00 |
|
scripts.base.protocols.ftp.ftp-password-pass-command
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
scripts.base.protocols.ftp.ftp-password-pass-command-hidden
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
scripts.base.protocols.ftp.ftp-samba-retr
|
ftp/main: Skip get_pending_command() for intermediate reply lines
|
2023-03-23 13:50:36 +01:00 |
|
scripts.base.protocols.ftp.gridftp
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.protocols.http.100-continue
|
|
|
|
scripts.base.protocols.http.101-switching-protocols
|
btest/http: Explain switching-protocols test change as comment
|
2024-01-22 18:54:38 +01:00 |
|
scripts.base.protocols.http.all-headers-event
|
|
|
|
scripts.base.protocols.http.bad-content-range
|
HTTP: Make Content-Range parsing more robust
|
2023-03-13 18:00:39 +01:00 |
|
scripts.base.protocols.http.build-url
|
|
|
|
scripts.base.protocols.http.concurrent-range-requests
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.base.protocols.http.content-range-gap
|
|
|
|
scripts.base.protocols.http.content-range-less-than-len
|
|
|
|
scripts.base.protocols.http.curl-http-09
|
http: Heuristic around rejecting malformed HTTP/0.9 traffic
|
2022-11-18 18:19:58 +01:00 |
|
scripts.base.protocols.http.deeply-nested-mime
|
MIME: Cap nested MIME analysis depth to 100
|
2024-01-17 10:18:13 -07:00 |
|
scripts.base.protocols.http.entity-gap
|
|
|
|
scripts.base.protocols.http.entity-gap2
|
|
|
|
scripts.base.protocols.http.fake-content-length
|
|
|
|
scripts.base.protocols.http.flip-content-line-orig
|
Optimize Conn::set_conn to minimize operations
|
2025-07-29 09:11:57 +01:00 |
|
scripts.base.protocols.http.flip-content-line-resp
|
HTTP: Implement FlipRoles()
|
2024-07-04 11:38:33 +02:00 |
|
scripts.base.protocols.http.http-09
|
Add weird for unknown HTTP/0.9 request method
|
2023-03-10 15:45:11 -07:00 |
|
scripts.base.protocols.http.http-09-content-length-confusion
|
http: Prevent request/response de-synchronization and unbounded state growth
|
2023-08-28 15:02:58 +02:00 |
|
scripts.base.protocols.http.http-11-request-then-cruft
|
Settle on analyzer.log for the dpd.log replacement
|
2025-06-03 17:33:36 +01:00 |
|
scripts.base.protocols.http.http-bad-request-with-version
|
|
|
|
scripts.base.protocols.http.http-basic-auth-colon
|
http: fix password capture when enabled
|
2024-08-28 21:44:39 +02:00 |
|
scripts.base.protocols.http.http-basic-auth-extra-space
|
Merge branch 'master' of https://github.com/progmboy/zeek
|
2023-06-27 18:21:34 +02:00 |
|
scripts.base.protocols.http.http-connect
|
Make conn.log service field ordered
|
2025-01-30 16:59:44 +00:00 |
|
scripts.base.protocols.http.http-connect-with-header
|
Make conn.log service field ordered
|
2025-01-30 16:59:44 +00:00 |
|
scripts.base.protocols.http.http-desynched
|
http: Prevent request/response de-synchronization and unbounded state growth
|
2023-08-28 15:02:58 +02:00 |
|
scripts.base.protocols.http.http-dpd-large-req
|
|
|
|
scripts.base.protocols.http.http-filename
|
|
|
|
scripts.base.protocols.http.http-lower-case
|
Ignore case when matching prefix in http analyzer
|
2025-04-25 10:33:11 -07:00 |
|
scripts.base.protocols.http.http-methods
|
Add weird for unknown HTTP/0.9 request method
|
2023-03-10 15:45:11 -07:00 |
|
scripts.base.protocols.http.http-no-crlf
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
scripts.base.protocols.http.http-pending-state-growth
|
http: Prevent request/response de-synchronization and unbounded state growth
|
2023-08-28 15:02:58 +02:00 |
|
scripts.base.protocols.http.http-pipelining
|
|
|
|
scripts.base.protocols.http.missing-http-entity
|
http: Prevent script errors when http$current_entity is not set
|
2022-09-26 10:18:24 +02:00 |
|
scripts.base.protocols.http.missing-zlib-header
|
|
|
|
scripts.base.protocols.http.multipart-body-length
|
|
|
|
scripts.base.protocols.http.multipart-extract
|
|
|
|
scripts.base.protocols.http.multipart-file-limit
|
|
|
|
scripts.base.protocols.http.no-uri
|
|
|
|
scripts.base.protocols.http.no-version
|
Special case HTTP 0.9 early on
|
2023-03-10 09:52:34 -07:00 |
|
scripts.base.protocols.http.percent-end-of-line
|
|
|
|
scripts.base.protocols.http.upgrade-to-tcp
|
btest/http: Demo StreamEvent analyzer with HTTP::upgrade_analyzers
|
2024-12-06 16:12:40 +01:00 |
|
scripts.base.protocols.http.version-mismatch
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.protocols.http.x-gzip
|
|
|
|
scripts.base.protocols.icmp.dnssl
|
|
|
|
scripts.base.protocols.imap.capabilities
|
|
|
|
scripts.base.protocols.imap.starttls
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.protocols.irc.basic
|
Add support for ircv3 tags
|
2025-07-28 14:06:33 -07:00 |
|
scripts.base.protocols.irc.events
|
Expand coverage of IRC analyzer with more commands
|
2025-07-28 14:13:55 -07:00 |
|
scripts.base.protocols.irc.longline
|
|
|
|
scripts.base.protocols.irc.names-weird
|
|
|
|
scripts.base.protocols.irc.starttls
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.protocols.krb.enc_part
|
Add a revised script for detecting HTTP SQL injection, deprecate original
|
2025-05-20 16:24:20 +02:00 |
|
scripts.base.protocols.krb.kinit
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.protocols.krb.krb-service-name
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.protocols.krb.pa_data
|
Expose PA_ENC_TIMESTAMP to script land
|
2022-12-02 15:43:19 +02:00 |
|
scripts.base.protocols.krb.smb2_krb
|
|
|
|
scripts.base.protocols.krb.smb2_krb_nokeytab
|
|
|
|
scripts.base.protocols.krb.smb_gssapi
|
|
|
|
scripts.base.protocols.krb.tgs
|
|
|
|
scripts.base.protocols.ldap.add
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
scripts.base.protocols.ldap.aduser1
|
ldap: Add Sicily Authentication constants
|
2025-04-15 20:10:56 +02:00 |
|
scripts.base.protocols.ldap.attributes
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
scripts.base.protocols.ldap.basic
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
scripts.base.protocols.ldap.diff_port
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
scripts.base.protocols.ldap.invalid_credentials
|
btest/ldap: Add regression test for #3919
|
2024-09-06 19:16:49 +02:00 |
|
scripts.base.protocols.ldap.ldap_substring_search
|
ldap: Fix substring filter parsing and rendering
|
2024-01-05 16:06:23 +01:00 |
|
scripts.base.protocols.ldap.log_policy
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
scripts.base.protocols.ldap.sasl-encrypted
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
scripts.base.protocols.ldap.sasl-ntlm
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
scripts.base.protocols.ldap.sasl-scram-sha-512
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
scripts.base.protocols.ldap.sasl-signed-clear
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
scripts.base.protocols.ldap.sasl-signed-clear-2
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
scripts.base.protocols.ldap.sasl-srp-who-am-i
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
scripts.base.protocols.ldap.search_filter_extended
|
ldap: Use scalar values in logs where appropriate
|
2024-01-03 11:57:31 +01:00 |
|
scripts.base.protocols.ldap.spnego-ntlmssp
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
scripts.base.protocols.ldap.starttls
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
scripts.base.protocols.ldap.who-am-i
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
scripts.base.protocols.modbus.coil_parsing_big
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.base.protocols.modbus.coil_parsing_small
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.base.protocols.modbus.events
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.base.protocols.modbus.exception_handling
|
Fix issues with Modbus message logging
|
2024-10-30 13:12:27 +01:00 |
|
scripts.base.protocols.modbus.modbus_and_non_modbus_on_port_502
|
Analyzer failure logging: tweaks and test fixes
|
2025-06-03 15:56:42 +01:00 |
|
scripts.base.protocols.modbus.policy
|
Fix issues with Modbus message logging
|
2024-10-30 13:12:27 +01:00 |
|
scripts.base.protocols.modbus.register_parsing
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.base.protocols.mount.basic
|
Move c$service_violation to deprecated-dpd-log.zeek
|
2025-07-30 07:58:36 +01:00 |
|
scripts.base.protocols.mqtt.mqtt
|
|
|
|
scripts.base.protocols.mqtt.mqtt-payload-cap
|
|
|
|
scripts.base.protocols.mqtt.mqtt-payload-cap-dynamic
|
|
|
|
scripts.base.protocols.mysql.auth
|
|
|
|
scripts.base.protocols.mysql.caching_sha2_password
|
mysql: Add mysql_auth_plugin, mysql_auth_more_data and mysql_auth_switch_request events
|
2024-07-25 11:53:41 +02:00 |
|
scripts.base.protocols.mysql.caching_sha2_password-after-auth-switch
|
mysql: Add mysql_auth_plugin, mysql_auth_more_data and mysql_auth_switch_request events
|
2024-07-25 11:53:41 +02:00 |
|
scripts.base.protocols.mysql.caching_sha2_password-auth-switch-to-test-sha256_password
|
mysql: Handle server connection phase separately from command phase
|
2024-08-13 22:06:25 +02:00 |
|
scripts.base.protocols.mysql.change-user-error
|
mysql: Implement and test COM_CHANGE_USER
|
2024-08-14 10:20:01 +02:00 |
|
scripts.base.protocols.mysql.change-user-success
|
mysql: Implement and test COM_CHANGE_USER
|
2024-08-14 10:20:01 +02:00 |
|
scripts.base.protocols.mysql.encrypted
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.protocols.mysql.encrypted-aws-rds
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.protocols.mysql.many-query-attr
|
mysql: Support non-string query attributes
|
2024-07-25 11:53:41 +02:00 |
|
scripts.base.protocols.mysql.plain-aws-rds
|
testing/mysql: Add traces recorded with a free-tier MySQL instance
|
2023-01-27 10:59:23 +01:00 |
|
scripts.base.protocols.mysql.query-attr
|
Add support for "auth switch" and "query attrs"
|
2024-07-25 11:53:40 +02:00 |
|
scripts.base.protocols.mysql.query-attr-non-string
|
mysql: Support non-string query attributes
|
2024-07-25 11:53:41 +02:00 |
|
scripts.base.protocols.mysql.selects_with_new_proto
|
|
|
|
scripts.base.protocols.mysql.show-engine-innodb-status
|
MySQL: Fix endianness, introduce mysql_eof() event
|
2023-01-27 10:59:23 +01:00 |
|
scripts.base.protocols.mysql.wireshark
|
MySQL: Fix endianness, introduce mysql_eof() event
|
2023-01-27 10:59:23 +01:00 |
|
scripts.base.protocols.ncp.event
|
|
|
|
scripts.base.protocols.ncp.frame_size_tuning
|
|
|
|
scripts.base.protocols.nfs.basic
|
Move c$service_violation to deprecated-dpd-log.zeek
|
2025-07-30 07:58:36 +01:00 |
|
scripts.base.protocols.ntp.misordered-ntp
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.protocols.ntp.ntp
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.protocols.ntp.ntp-digest
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.protocols.ntp.ntp2
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.protocols.ntp.ntp3
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.protocols.ntp.ntpmode67
|
|
|
|
scripts.base.protocols.pop3.bad-list-retr-crafted
|
Analyzer failure logging: tweaks and test fixes
|
2025-06-03 15:56:42 +01:00 |
|
scripts.base.protocols.pop3.basic
|
Move Conn::set_conn() from connection_state_remove to new_connection
|
2025-07-29 09:11:57 +01:00 |
|
scripts.base.protocols.pop3.redis
|
Analyzer failure logging: tweaks and test fixes
|
2025-06-03 15:56:42 +01:00 |
|
scripts.base.protocols.pop3.starttls
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.protocols.portmap.basic
|
|
|
|
scripts.base.protocols.postgresql.bad-backend-message
|
Analyzer failure logging: tweaks and test fixes
|
2025-06-03 15:56:42 +01:00 |
|
scripts.base.protocols.postgresql.bad-startup-message
|
postgresql: Initial parser implementation
|
2024-09-06 16:10:48 +02:00 |
|
scripts.base.protocols.postgresql.dump-events
|
Move c$service_violation to deprecated-dpd-log.zeek
|
2025-07-30 07:58:36 +01:00 |
|
scripts.base.protocols.postgresql.http-on-port-5432
|
Analyzer failure logging: tweaks and test fixes
|
2025-06-03 15:56:42 +01:00 |
|
scripts.base.protocols.postgresql.mysql-on-port-5432
|
Analyzer failure logging: tweaks and test fixes
|
2025-06-03 15:56:42 +01:00 |
|
scripts.base.protocols.postgresql.parameter-status
|
postgresql: Initial parser implementation
|
2024-09-06 16:10:48 +02:00 |
|
scripts.base.protocols.postgresql.psql-auth
|
postgresql: Initial parser implementation
|
2024-09-06 16:10:48 +02:00 |
|
scripts.base.protocols.postgresql.psql-aws-ssl-disable
|
postgresql: Initial parser implementation
|
2024-09-06 16:10:48 +02:00 |
|
scripts.base.protocols.postgresql.psql-aws-ssl-disable-15432
|
postgresql: Initial parser implementation
|
2024-09-06 16:10:48 +02:00 |
|
scripts.base.protocols.postgresql.psql-aws-ssl-require
|
Make conn.log service field ordered
|
2025-01-30 16:59:44 +00:00 |
|
scripts.base.protocols.postgresql.psql-aws-ssl-require-15432
|
Make conn.log service field ordered
|
2025-01-30 16:59:44 +00:00 |
|
scripts.base.protocols.postgresql.psql-create-insert-select
|
postgresql: Initial parser implementation
|
2024-09-06 16:10:48 +02:00 |
|
scripts.base.protocols.postgresql.psql-insert-fail-drop-fail
|
postgresql: Initial parser implementation
|
2024-09-06 16:10:48 +02:00 |
|
scripts.base.protocols.postgresql.psql-login-fail
|
postgresql: Initial parser implementation
|
2024-09-06 16:10:48 +02:00 |
|
scripts.base.protocols.postgresql.psql-login-no-sslrequest
|
postgresql: Initial parser implementation
|
2024-09-06 16:10:48 +02:00 |
|
scripts.base.protocols.postgresql.psql-select-now
|
postgresql: Initial parser implementation
|
2024-09-06 16:10:48 +02:00 |
|
scripts.base.protocols.postgresql.startup-parameter
|
postgresql: Initial parser implementation
|
2024-09-06 16:10:48 +02:00 |
|
scripts.base.protocols.quic.analyzer-confirmations
|
Merge remote-tracking branch 'origin/master' into topic/johanna/dpd-changes
|
2025-02-05 09:31:16 +00:00 |
|
scripts.base.protocols.quic.chromium
|
Merge remote-tracking branch 'origin/master' into topic/johanna/dpd-changes
|
2025-02-05 09:31:16 +00:00 |
|
scripts.base.protocols.quic.curl-http3
|
QUIC: Do not consume EncryptedLongPacketPayload
|
2025-05-05 14:34:11 +02:00 |
|
scripts.base.protocols.quic.decrypt-crash
|
Analyzer failure logging: tweaks and test fixes
|
2025-06-03 15:56:42 +01:00 |
|
scripts.base.protocols.quic.decrypt-fail-google-de-51833
|
QUIC: Use initial destination conn_id for decryption
|
2025-05-05 14:34:11 +02:00 |
|
scripts.base.protocols.quic.events
|
QUIC: Do not consume EncryptedLongPacketPayload
|
2025-05-05 14:34:11 +02:00 |
|
scripts.base.protocols.quic.firefox
|
Merge remote-tracking branch 'origin/master' into topic/johanna/dpd-changes
|
2025-02-05 09:31:16 +00:00 |
|
scripts.base.protocols.quic.fragmented-crypto
|
Merge remote-tracking branch 'origin/master' into topic/johanna/dpd-changes
|
2025-02-05 09:31:16 +00:00 |
|
scripts.base.protocols.quic.interop.quic-go_quic-go.handshake
|
Merge remote-tracking branch 'origin/master' into topic/johanna/dpd-changes
|
2025-02-05 09:31:16 +00:00 |
|
scripts.base.protocols.quic.interop.quic-go_quic-go.retry
|
Merge remote-tracking branch 'origin/master' into topic/johanna/dpd-changes
|
2025-02-05 09:31:16 +00:00 |
|
scripts.base.protocols.quic.interop.quic-go_quic-go.zerortt
|
QUIC: Do not consume EncryptedLongPacketPayload
|
2025-05-05 14:34:11 +02:00 |
|
scripts.base.protocols.quic.max-history-length
|
quic: Bump maximum history length, make configurable
|
2023-10-20 20:42:30 +02:00 |
|
scripts.base.protocols.quic.merlinc2
|
Merge remote-tracking branch 'origin/master' into topic/johanna/dpd-changes
|
2025-02-05 09:31:16 +00:00 |
|
scripts.base.protocols.quic.multiple-initial-fragmented-crypto
|
QUIC: Handle CRYPTO frames across multiple INITIAL packets
|
2025-05-05 14:34:11 +02:00 |
|
scripts.base.protocols.quic.multiple-initial-fragmented-crypto-only-initial
|
QUIC: Handle CRYPTO frames across multiple INITIAL packets
|
2025-05-05 14:34:11 +02:00 |
|
scripts.base.protocols.quic.quic-log
|
quic: Log client's source connection id, too.
|
2024-01-30 21:46:38 +01:00 |
|
scripts.base.protocols.quic.quicdoq
|
Merge remote-tracking branch 'origin/master' into topic/johanna/dpd-changes
|
2025-02-05 09:31:16 +00:00 |
|
scripts.base.protocols.quic.quicv2-echo-443
|
QUIC: Do not consume EncryptedLongPacketPayload
|
2025-05-05 14:34:11 +02:00 |
|
scripts.base.protocols.quic.quicv2-http3-443
|
Merge remote-tracking branch 'origin/master' into topic/johanna/dpd-changes
|
2025-02-05 09:31:16 +00:00 |
|
scripts.base.protocols.quic.run-pcap
|
Merge remote-tracking branch 'origin/master' into topic/johanna/dpd-changes
|
2025-02-05 09:31:16 +00:00 |
|
scripts.base.protocols.quic.vector-max-size-crash
|
Analyzer failure logging: tweaks and test fixes
|
2025-06-03 15:56:42 +01:00 |
|
scripts.base.protocols.radius.auth
|
|
|
|
scripts.base.protocols.radius.radius-multiple-attempts
|
|
|
|
scripts.base.protocols.rdp.rdp-client-cluster-data
|
|
|
|
scripts.base.protocols.rdp.rdp-client-security-data
|
|
|
|
scripts.base.protocols.rdp.rdp-invalid-length
|
Analyzer failure logging: tweaks and test fixes
|
2025-06-03 15:56:42 +01:00 |
|
scripts.base.protocols.rdp.rdp-native-encrypted-data
|
|
|
|
scripts.base.protocols.rdp.rdp-no-cookie-msthash
|
RDP: cookie is optional
|
2025-03-04 13:38:01 +00:00 |
|
scripts.base.protocols.rdp.rdp-proprietary-encryption
|
|
|
|
scripts.base.protocols.rdp.rdp-to-ssl
|
|
|
|
scripts.base.protocols.rdp.rdp-unknown-keyboard
|
Add test for new handling of unknown RDP keyboards
|
2023-01-23 13:01:48 -07:00 |
|
scripts.base.protocols.rdp.rdp-x509
|
|
|
|
scripts.base.protocols.rdp.rdpeudp-handshake-fail
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.base.protocols.rdp.rdpeudp-handshake-success
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.base.protocols.rdp.rdpeudp2-handshake-success
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.base.protocols.redis.almost-redis
|
spicy-redis: Separate error replies from success
|
2025-05-27 09:31:25 -04:00 |
|
scripts.base.protocols.redis.attributes
|
Handle more Redis RESP3 protocol pieces
|
2025-07-01 14:14:15 -04:00 |
|
scripts.base.protocols.redis.auth
|
spicy-redis: Separate error replies from success
|
2025-05-27 09:31:25 -04:00 |
|
scripts.base.protocols.redis.bulk
|
spicy-redis: Add synchronization and pipeline support
|
2025-05-27 09:28:12 -04:00 |
|
scripts.base.protocols.redis.client-reply-off
|
spicy-redis: Separate error replies from success
|
2025-05-27 09:31:25 -04:00 |
|
scripts.base.protocols.redis.client-reply-off-2conn
|
spicy-redis: Separate error replies from success
|
2025-05-27 09:31:25 -04:00 |
|
scripts.base.protocols.redis.client-skip-while-off
|
spicy-redis: Separate error replies from success
|
2025-05-27 09:31:25 -04:00 |
|
scripts.base.protocols.redis.django-cloud
|
spicy-redis: Separate error replies from success
|
2025-05-27 09:31:25 -04:00 |
|
scripts.base.protocols.redis.excessive-pipelining
|
spicy-redis: Separate error replies from success
|
2025-05-27 09:31:25 -04:00 |
|
scripts.base.protocols.redis.pipeline-with-quotes
|
spicy-redis: Separate error replies from success
|
2025-05-27 09:31:25 -04:00 |
|
scripts.base.protocols.redis.pipelined
|
spicy-redis: Separate error replies from success
|
2025-05-27 09:31:25 -04:00 |
|
scripts.base.protocols.redis.pipelined-with-commands
|
spicy-redis: Separate error replies from success
|
2025-05-27 09:31:25 -04:00 |
|
scripts.base.protocols.redis.pubsub
|
Handle more Redis RESP3 protocol pieces
|
2025-07-01 14:14:15 -04:00 |
|
scripts.base.protocols.redis.pubsub-resp3
|
Handle more Redis RESP3 protocol pieces
|
2025-07-01 14:14:15 -04:00 |
|
scripts.base.protocols.redis.set
|
spicy-redis: Add synchronization and pipeline support
|
2025-05-27 09:28:12 -04:00 |
|
scripts.base.protocols.redis.start-with-server
|
spicy-redis: Abort parsing if server data comes first
|
2025-05-27 09:28:12 -04:00 |
|
scripts.base.protocols.redis.stream
|
Add Redis analyzer array stringification
|
2025-07-01 10:23:57 -04:00 |
|
scripts.base.protocols.rfb.rfb-apple-remote-desktop
|
|
|
|
scripts.base.protocols.rfb.vnc-mac-to-linux
|
|
|
|
scripts.base.protocols.rfb.vnc-scanner
|
|
|
|
scripts.base.protocols.sip.junk
|
|
|
|
scripts.base.protocols.sip.wireshark
|
|
|
|
scripts.base.protocols.smb.compression-cap
|
|
|
|
scripts.base.protocols.smb.raw-ntlm
|
|
|
|
scripts.base.protocols.smb.smb1
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.protocols.smb.smb1-OSS-fuzz-54883
|
Analyzer failure logging: tweaks and test fixes
|
2025-06-03 15:56:42 +01:00 |
|
scripts.base.protocols.smb.smb1-transaction-dcerpc
|
|
|
|
scripts.base.protocols.smb.smb1-transaction-request
|
|
|
|
scripts.base.protocols.smb.smb1-transaction-response
|
|
|
|
scripts.base.protocols.smb.smb1-transaction-secondary-request
|
|
|
|
scripts.base.protocols.smb.smb1-transaction2-request
|
|
|
|
scripts.base.protocols.smb.smb1-transaction2-secondary-request
|
|
|
|
scripts.base.protocols.smb.smb2
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.protocols.smb.smb2-create-delete-on-close
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.protocols.smb.smb2-fscontrol
|
Update btest baselines to reflect the use of local address ranges.
|
2023-03-15 17:11:04 -07:00 |
|
scripts.base.protocols.smb.smb2-max-pending-messages
|
Allow SMB_TCP record to contain multiple protocol identifiers/headers
|
2024-04-22 15:55:25 -07:00 |
|
scripts.base.protocols.smb.smb2-multiple-pdus
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.protocols.smb.smb2-read-write
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.protocols.smb.smb2-write-response
|
|
|
|
scripts.base.protocols.smb.smb2-zero-byte-error-ioctl
|
Fix handling of zero-length SMB2 error responses
|
2024-07-24 12:44:46 -07:00 |
|
scripts.base.protocols.smb.smb3
|
|
|
|
scripts.base.protocols.smb.smb3-multichannel
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.protocols.smb.smb3-negotiate-context
|
|
|
|
scripts.base.protocols.smb.smb311
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.protocols.smtp.attachment
|
Update btest baselines to reflect the use of local address ranges.
|
2023-03-15 17:11:04 -07:00 |
|
scripts.base.protocols.smtp.attachment-msg
|
|
|
|
scripts.base.protocols.smtp.basic
|
|
|
|
scripts.base.protocols.smtp.bdat
|
smtp: Fix last_reply column in smtp.log for BDAT LAST
|
2025-06-06 10:40:49 +02:00 |
|
scripts.base.protocols.smtp.bdat-0-last
|
smtp: Fix last_reply column in smtp.log for BDAT LAST
|
2025-06-06 10:40:49 +02:00 |
|
scripts.base.protocols.smtp.bdat-chunk-size-overflow
|
btest/smtp/bdat: Move tests into proper directory
|
2024-01-23 21:49:50 +01:00 |
|
scripts.base.protocols.smtp.bdat-chunk-size-overflow2
|
btest/smtp/bdat: Move tests into proper directory
|
2024-01-23 21:49:50 +01:00 |
|
scripts.base.protocols.smtp.bdat-cmd-invalid
|
BDAT: Harden parse_bdat_arg()
|
2024-01-23 21:49:50 +01:00 |
|
scripts.base.protocols.smtp.bdat-multipart
|
smtp: Fix last_reply column in smtp.log for BDAT LAST
|
2025-06-06 10:40:49 +02:00 |
|
scripts.base.protocols.smtp.bdat-multipart-chunked
|
smtp: Fix last_reply column in smtp.log for BDAT LAST
|
2025-06-06 10:40:49 +02:00 |
|
scripts.base.protocols.smtp.bdat-negative-chunk-size
|
btest/smtp/bdat: Move tests into proper directory
|
2024-01-23 21:49:50 +01:00 |
|
scripts.base.protocols.smtp.bdat-pipeline-8bitmime
|
smtp: Fix last_reply column in smtp.log for BDAT LAST
|
2025-06-06 10:40:49 +02:00 |
|
scripts.base.protocols.smtp.mail-transactions-invalid
|
smtp: Validate mail transaction and disable SMTP analyzer if excessive
|
2023-03-27 18:41:47 +02:00 |
|
scripts.base.protocols.smtp.mail-transactions-invalid-disable-analyzer
|
smtp: Validate mail transaction and disable SMTP analyzer if excessive
|
2023-03-27 18:41:47 +02:00 |
|
scripts.base.protocols.smtp.mime-all-headers-event
|
|
|
|
scripts.base.protocols.smtp.one-side
|
|
|
|
scripts.base.protocols.smtp.rfc822-msg-file-analysis
|
btest: Add tests for full email extraction
|
2025-07-16 12:37:33 +02:00 |
|
scripts.base.protocols.smtp.rfc822-msg-file-analysis-binary
|
btest: Add tests for full email extraction
|
2025-07-16 12:37:33 +02:00 |
|
scripts.base.protocols.smtp.rfc822-msg-file-analysis-multi-mail
|
btest: Add tests for full email extraction
|
2025-07-16 12:37:33 +02:00 |
|
scripts.base.protocols.smtp.rfc822-msg-file-analysis-multi-session
|
btest: Add tests for full email extraction
|
2025-07-16 12:37:33 +02:00 |
|
scripts.base.protocols.smtp.starttls
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.protocols.snap.snap-arp
|
Remove non-standard way of forwarding out of the Ethernet analyzer
|
2023-04-25 12:29:55 -07:00 |
|
scripts.base.protocols.snap.snap-cdp
|
Make SNAP analyzer use both OUI and protocol for forwarding
|
2025-03-24 15:20:50 -07:00 |
|
scripts.base.protocols.snap.snap-tcp
|
Add test for TCP over 802.3/SNAP
|
2024-10-31 14:37:44 +00:00 |
|
scripts.base.protocols.snmp.snmp-addr
|
|
|
|
scripts.base.protocols.snmp.v1
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.base.protocols.snmp.v2
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.base.protocols.snmp.v3
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.base.protocols.socks.socks-auth
|
|
|
|
scripts.base.protocols.socks.socks-auth-2
|
|
|
|
scripts.base.protocols.socks.socks-auth-10080
|
socks/dpd: Fix socks5_server side signature
|
2023-06-05 13:54:47 +02:00 |
|
scripts.base.protocols.socks.trace1
|
|
|
|
scripts.base.protocols.socks.trace2
|
|
|
|
scripts.base.protocols.socks.trace3
|
|
|
|
scripts.base.protocols.ssh.basic
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
scripts.base.protocols.ssh.curve25519_kex
|
|
|
|
scripts.base.protocols.ssh.fingerprints
|
|
|
|
scripts.base.protocols.ssh.half-duplex-client
|
Analyzer failure logging: tweaks and test fixes
|
2025-06-03 15:56:42 +01:00 |
|
scripts.base.protocols.ssh.half-duplex-server
|
Settle on analyzer.log for the dpd.log replacement
|
2025-06-03 17:33:36 +01:00 |
|
scripts.base.protocols.ssh.http-port-22
|
Analyzer failure logging: tweaks and test fixes
|
2025-06-03 15:56:42 +01:00 |
|
scripts.base.protocols.ssh.one-auth-fail-only
|
|
|
|
scripts.base.protocols.ssh.pre-banner
|
SSH: make banner parsing more robust
|
2025-03-18 16:19:33 +00:00 |
|
scripts.base.protocols.ssh.set_version
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.base.protocols.ssh.ssh-reverse-connection
|
Added several events for detailed info on the SSH2 key init directions
|
2022-12-05 12:35:05 +01:00 |
|
scripts.base.protocols.ssh.ssh_dh_gex_direction
|
Added several events for detailed info on the SSH2 key init directions
|
2022-12-05 12:35:05 +01:00 |
|
scripts.base.protocols.ssh.ssh_segmented_encryption_transition
|
|
|
|
scripts.base.protocols.ssh.ssh_version_199
|
|
|
|
scripts.base.protocols.ssl.basic
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.protocols.ssl.certificate_request
|
SSL/TLS: Parse CertificateRequest message
|
2023-03-09 09:12:29 +01:00 |
|
scripts.base.protocols.ssl.common_name
|
|
|
|
scripts.base.protocols.ssl.comp_methods
|
|
|
|
scripts.base.protocols.ssl.cve-2015-3194
|
|
|
|
scripts.base.protocols.ssl.dhe
|
|
|
|
scripts.base.protocols.ssl.dpd
|
Fix parsing of version field in SSLv2 client hello
|
2024-08-22 13:14:24 +01:00 |
|
scripts.base.protocols.ssl.dtls
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.protocols.ssl.dtls-13
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.base.protocols.ssl.dtls-no-dtls
|
|
|
|
scripts.base.protocols.ssl.dtls-stun-dpd
|
Settle on analyzer.log for the dpd.log replacement
|
2025-06-03 17:33:36 +01:00 |
|
scripts.base.protocols.ssl.ecdhe
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.protocols.ssl.ecdsa
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.protocols.ssl.fragment
|
|
|
|
scripts.base.protocols.ssl.handshake-events
|
|
|
|
scripts.base.protocols.ssl.keyexchange
|
Make ssl_history work for SSLv2 handshakes/connections
|
2024-08-13 18:03:06 +01:00 |
|
scripts.base.protocols.ssl.max-history-length
|
ssl: Prevent unbounded ssl_history growth
|
2023-10-25 09:35:45 +02:00 |
|
scripts.base.protocols.ssl.ocsp-http-get
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.protocols.ssl.ocsp-request-only
|
|
|
|
scripts.base.protocols.ssl.ocsp-request-response
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.protocols.ssl.ocsp-response-only
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.protocols.ssl.ocsp-revoked
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.protocols.ssl.ocsp-stapling
|
|
|
|
scripts.base.protocols.ssl.prevent-disable-analyzer
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.base.protocols.ssl.session-ticket
|
Only pass session ticket data in ssl_session_ticket_handshake event
|
2025-06-24 16:33:14 +01:00 |
|
scripts.base.protocols.ssl.signed_certificate_timestamp
|
|
|
|
scripts.base.protocols.ssl.tls-1.2
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.protocols.ssl.tls-1.2-ciphers
|
|
|
|
scripts.base.protocols.ssl.tls-1.2-handshake-failure
|
|
|
|
scripts.base.protocols.ssl.tls-1.2-random
|
|
|
|
scripts.base.protocols.ssl.tls-extension-events
|
|
|
|
scripts.base.protocols.ssl.tls-protocol-violation
|
SSL: do not try to disable failed analyzer
|
2023-05-03 11:16:14 +01:00 |
|
scripts.base.protocols.ssl.tls1_1
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.protocols.ssl.tls13
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.base.protocols.ssl.tls13-encrypted-client-hello
|
SSL: Add new extension types and ECH test
|
2023-10-30 14:19:16 +00:00 |
|
scripts.base.protocols.ssl.tls13-experiment
|
|
|
|
scripts.base.protocols.ssl.tls13-version
|
|
|
|
scripts.base.protocols.ssl.tls13_encrypted_handshake_events
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.base.protocols.ssl.x509-invalid-extension
|
|
|
|
scripts.base.protocols.ssl.x509_extensions
|
|
|
|
scripts.base.protocols.syslog.missing-pri
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.protocols.syslog.trace
|
|
|
|
scripts.base.protocols.tcp.krb-tcp-tso
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.protocols.tcp.pending
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.base.protocols.tcp.timestamp
|
|
|
|
scripts.base.protocols.websocket.broker-websocket
|
Make conn.log service field ordered
|
2025-01-30 16:59:44 +00:00 |
|
scripts.base.protocols.websocket.coalesced-reply-ping
|
websocket: Address review feedback for BinPac code
|
2024-01-22 18:54:41 +01:00 |
|
scripts.base.protocols.websocket.events
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.base.protocols.websocket.fragmented-http-reply
|
websocket: Fix opcode for continuation frames
|
2024-01-24 22:57:24 +01:00 |
|
scripts.base.protocols.websocket.jupyter-websocket
|
Make conn.log service field ordered
|
2025-01-30 16:59:44 +00:00 |
|
scripts.base.protocols.websocket.key-accept-wrong
|
websocket: Verify Sec-WebSocket-Key/Accept headers and review feedback
|
2024-01-22 18:54:38 +01:00 |
|
scripts.base.protocols.websocket.wstunnel-http
|
Make conn.log service field ordered
|
2025-01-30 16:59:44 +00:00 |
|
scripts.base.protocols.websocket.wstunnel-https
|
Make conn.log service field ordered
|
2025-01-30 16:59:44 +00:00 |
|
scripts.base.protocols.websocket.wstunnel-ssh
|
Make conn.log service field ordered
|
2025-01-30 16:59:44 +00:00 |
|
scripts.base.protocols.websocket.wstunnel-ssh-configure
|
Make conn.log service field ordered
|
2025-01-30 16:59:44 +00:00 |
|
scripts.base.protocols.websocket.wstunnel-ssh-configure-break
|
websocket: Handle breaking from WebSocket::configure_analyzer()
|
2024-01-22 18:54:41 +01:00 |
|
scripts.base.protocols.websocket.wstunnel-ssh-configure-wrong
|
Make conn.log service field ordered
|
2025-01-30 16:59:44 +00:00 |
|
scripts.base.protocols.websocket.wstunnel-ssh-disabled
|
Merge remote-tracking branch 'origin/topic/awelzel/3424-http-upgrade-websocket-v1'
|
2024-01-23 18:17:50 +01:00 |
|
scripts.base.protocols.websocket.wstunnel-ssh-spicy
|
Make conn.log service field ordered
|
2025-01-30 16:59:44 +00:00 |
|
scripts.base.protocols.xmpp.client-dpd
|
|
|
|
scripts.base.protocols.xmpp.server-dialback-dpd
|
|
|
|
scripts.base.protocols.xmpp.starttls
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.base.utils.active-http
|
|
|
|
scripts.base.utils.addrs
|
Add is_valid_subnet BiF
|
2025-03-18 20:25:32 -07:00 |
|
scripts.base.utils.conn-ids
|
|
|
|
scripts.base.utils.decompose_uri
|
|
|
|
scripts.base.utils.dir
|
|
|
|
scripts.base.utils.directions-and-hosts
|
Update btest baselines to reflect the use of local address ranges.
|
2023-03-15 17:11:04 -07:00 |
|
scripts.base.utils.email
|
UPDATED: improving email address splitting for common comma case
|
2022-08-05 17:38:54 -04:00 |
|
scripts.base.utils.exec
|
|
|
|
scripts.base.utils.files
|
{http,smtp}/entities: Align header regexes with extract_filename_from_content_disposition()
|
2022-11-08 16:45:25 -07:00 |
|
scripts.base.utils.hash_hrw
|
Improvements in FNV1A hash functions
|
2024-10-22 16:07:12 +02:00 |
|
scripts.base.utils.json
|
Change all instruments to only handle doubles
|
2024-05-31 13:36:37 -07:00 |
|
scripts.base.utils.json-roundtrip
|
Add interval_as_double argument to control how intervals are converted to JSON
|
2024-12-03 09:26:08 -07:00 |
|
scripts.base.utils.numbers
|
|
|
|
scripts.base.utils.packages
|
utils: Introduce packages.zeek with can_load() helper
|
2024-02-22 11:41:50 +01:00 |
|
scripts.base.utils.paths
|
|
|
|
scripts.base.utils.pattern
|
|
|
|
scripts.base.utils.queue
|
|
|
|
scripts.base.utils.site
|
GH-2319: Add change handlers to Site
|
2022-08-05 16:17:50 +02:00 |
|
scripts.base.utils.site-defaults
|
Add btests for new Site::local_nets behavior
|
2023-03-15 17:11:08 -07:00 |
|
scripts.base.utils.site-defaults-2
|
Add btests for new Site::local_nets behavior
|
2023-03-15 17:11:08 -07:00 |
|
scripts.base.utils.site-defaults-3
|
Add btests for new Site::local_nets behavior
|
2023-03-15 17:11:08 -07:00 |
|
scripts.base.utils.site-defaults-4
|
Add btests for new Site::local_nets behavior
|
2023-03-15 17:11:08 -07:00 |
|
scripts.base.utils.site-defaults-5
|
Add btests for new Site::local_nets behavior
|
2023-03-15 17:11:08 -07:00 |
|
scripts.base.utils.site-defaults-6
|
Add btests for new Site::local_nets behavior
|
2023-03-15 17:11:08 -07:00 |
|
scripts.base.utils.site-defaults-7
|
Add btests for new Site::local_nets behavior
|
2023-03-15 17:11:08 -07:00 |
|
scripts.base.utils.site-defaults-8
|
Add btests for new Site::local_nets behavior
|
2023-03-15 17:11:08 -07:00 |
|
scripts.base.utils.site-defaults-9
|
Add btests for new Site::local_nets behavior
|
2023-03-15 17:11:08 -07:00 |
|
scripts.base.utils.strings
|
strings: Implement join_string_set() as bif
|
2022-09-20 23:07:26 +02:00 |
|
scripts.base.utils.thresholds
|
|
|
|
scripts.base.utils.urls
|
|
|
|
scripts.check-test-all-policy
|
Update btest baselines to reflect the use of local address ranges.
|
2023-03-15 17:11:04 -07:00 |
|
scripts.policy.frameworks.analyzer.deprecated-dpd-log
|
Add tests for the deprecated-dpd-log.zeek policy script
|
2025-07-30 07:58:36 +01:00 |
|
scripts.policy.frameworks.analyzer.logging-debug
|
Analyzer failure logging: tweaks and test fixes
|
2025-06-03 15:56:42 +01:00 |
|
scripts.policy.frameworks.analyzer.packet-segment-logging
|
Settle on analyzer.log for the dpd.log replacement
|
2025-06-03 17:33:36 +01:00 |
|
scripts.policy.frameworks.cluster.cluster_started
|
btest/policy: Use generic cluster-layout.zeek
|
2025-05-20 20:30:01 +02:00 |
|
scripts.policy.frameworks.cluster.cluster_started_logger
|
btest/policy: Use generic cluster-layout.zeek
|
2025-05-20 20:30:01 +02:00 |
|
scripts.policy.frameworks.cluster.cluster_started_restart_manager
|
Add cluster_started restart tests.
|
2023-04-21 19:04:52 +02:00 |
|
scripts.policy.frameworks.cluster.cluster_started_restart_worker
|
Add cluster_started restart tests.
|
2023-04-21 19:04:52 +02:00 |
|
scripts.policy.frameworks.conn_key.vlan_fivetuple
|
Add a VLAN-aware flow tuple implementation.
|
2025-06-25 13:19:26 +02:00 |
|
scripts.policy.frameworks.conn_key.vlan_fivetuple-2
|
ip/vlan_fivetuple: Populate nested conn_id_context, not conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.policy.frameworks.conn_key.vlan_fivetuple-3
|
Add a VLAN-aware flow tuple implementation.
|
2025-06-25 13:19:26 +02:00 |
|
scripts.policy.frameworks.conn_key.vlan_fivetuple-4
|
ip/vlan_fivetuple: Populate nested conn_id_context, not conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.policy.frameworks.conn_key.vlan_fivetuple-5
|
ip/vlan_fivetuple: Populate nested conn_id_context, not conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.policy.frameworks.conn_key.vlan_fivetuple-6
|
ip/vlan_fivetuple: Populate nested conn_id_context, not conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.policy.frameworks.conn_key.vlan_fivetuple_conn_id_ctx_usage
|
ip/vlan_fivetuple: Populate nested conn_id_context, not conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.policy.frameworks.conn_key.vlan_fivetuple_conn_id_ctx_usage-2
|
ip/vlan_fivetuple: Populate nested conn_id_context, not conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.policy.frameworks.conn_key.vlan_fivetuple_lookup_connection
|
ip/vlan_fivetuple: Populate nested conn_id_context, not conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.policy.frameworks.dpd.packet-segment-logging
|
Introduce generic analyzer_confirmation_info and analyzer_violation_info
|
2022-09-27 17:49:51 +02:00 |
|
scripts.policy.frameworks.intel.removal
|
|
|
|
scripts.policy.frameworks.intel.seen.certs
|
|
|
|
scripts.policy.frameworks.intel.seen.filename-in-http-get-response
|
intel/seen/file-names: Use file_over_new_connection()
|
2023-01-10 10:10:28 +01:00 |
|
scripts.policy.frameworks.intel.seen.filename-in-http-post
|
intel/seen/file-names: Use file_over_new_connection()
|
2023-01-10 10:10:28 +01:00 |
|
scripts.policy.frameworks.intel.seen.manage-event-groups.basic-smtp
|
intel/seen/manage-event-groups: Policy script for toggling intel event groups
|
2025-06-02 09:51:14 +02:00 |
|
scripts.policy.frameworks.intel.seen.smb
|
performance speed-up for SMB base scripts
|
2024-04-25 09:15:12 -07:00 |
|
scripts.policy.frameworks.intel.seen.smtp
|
|
|
|
scripts.policy.frameworks.intel.seen.smtp-cluster
|
btest/policy: Use generic cluster-layout.zeek
|
2025-05-20 20:30:01 +02:00 |
|
scripts.policy.frameworks.intel.whitelisting
|
|
|
|
scripts.policy.frameworks.management.controller.agent-checkin
|
Management framework: expand notify_agent_hello event arguments
|
2022-06-03 02:12:19 -07:00 |
|
scripts.policy.frameworks.netcontrol.catch-and-release
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.policy.frameworks.netcontrol.catch-and-release-2
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.policy.frameworks.netcontrol.catch-and-release-forgotten
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.policy.frameworks.netcontrol.catch-and-release-two-plugins
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.policy.frameworks.netcontrol.catch-and-release-two-plugins-2
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.policy.frameworks.notice.community-id
|
policy/community-id: Populate conn$community_id in new_connection()
|
2024-11-08 18:19:55 +01:00 |
|
scripts.policy.frameworks.notice.extend-email.hostnames
|
Merge remote-tracking branch 'origin/topic/jazoff/gh-3268t '
|
2023-09-04 14:01:23 +02:00 |
|
scripts.policy.frameworks.software.version-changes
|
|
|
|
scripts.policy.frameworks.software.vulnerable
|
|
|
|
scripts.policy.frameworks.telemetry.log
|
misc/stats: Add zeek_net_timestamp_seconds
|
2024-10-22 18:49:17 +02:00 |
|
scripts.policy.frameworks.telemetry.log-prefixes
|
Remove prefix column from telemetry.log
|
2024-06-04 14:14:58 -07:00 |
|
scripts.policy.frameworks.telemetry.prometheus
|
telemetry: Rename endpoint label to node label
|
2025-06-25 09:33:01 +02:00 |
|
scripts.policy.misc.capture-loss
|
GH-163: Use ID name (including module name) to create EventExpr when possible
|
2022-08-17 13:15:01 -07:00 |
|
scripts.policy.misc.dump-events
|
Move c$service_violation to deprecated-dpd-log.zeek
|
2025-07-30 07:58:36 +01:00 |
|
scripts.policy.misc.stats
|
|
|
|
scripts.policy.misc.weird-stats
|
|
|
|
scripts.policy.misc.weird-stats-cluster
|
btest/policy: Use generic cluster-layout.zeek
|
2025-05-20 20:30:01 +02:00 |
|
scripts.policy.protocols.conn.community-id-logging
|
policy: Import zeek-community-id scripts into protocols/conn frameworks/notice
|
2023-04-24 09:43:19 +02:00 |
|
scripts.policy.protocols.conn.community-id-logging-flipped
|
policy/community-id: Populate conn$community_id in new_connection()
|
2024-11-08 18:19:55 +01:00 |
|
scripts.policy.protocols.conn.ip-proto-name-logging
|
Add btests for ip_proto policy files
|
2024-11-15 16:49:10 -07:00 |
|
scripts.policy.protocols.conn.known-hosts
|
|
|
|
scripts.policy.protocols.conn.known-services
|
Modify known-services policy script to add storage framework support
|
2025-07-10 08:55:01 -07:00 |
|
scripts.policy.protocols.conn.known-services-multi
|
|
|
|
scripts.policy.protocols.conn.mac-logging
|
Move Conn::set_conn() from connection_state_remove to new_connection
|
2025-07-29 09:11:57 +01:00 |
|
scripts.policy.protocols.conn.pppoe-session-id-logging
|
PPPoE: add session id logging
|
2025-07-23 13:43:45 +01:00 |
|
scripts.policy.protocols.conn.speculative-service
|
Update btests for new local-only subnets
|
2025-01-09 22:16:42 -07:00 |
|
scripts.policy.protocols.conn.vlan-logging
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
scripts.policy.protocols.dns.detect-external-names-mdns-broadcast
|
IPv6 support for detect-external-names and testcase
|
2025-02-04 17:34:43 +00:00 |
|
scripts.policy.protocols.dns.detect-external-names-mdns-broadcast-2
|
IPv6 support for detect-external-names and testcase
|
2025-02-04 17:34:43 +00:00 |
|
scripts.policy.protocols.dns.original_case
|
dns: Remove AD and CD flags from log
|
2023-03-16 10:09:27 +01:00 |
|
scripts.policy.protocols.ftp.ftp
|
ftp/main: Skip get_pending_command() for intermediate reply lines
|
2023-03-23 13:50:36 +01:00 |
|
scripts.policy.protocols.http.flash-version
|
|
|
|
scripts.policy.protocols.http.header-names
|
|
|
|
scripts.policy.protocols.http.sql-injection-plus-dvwa
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.policy.protocols.http.sql-injection-plus-dvwa2
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
scripts.policy.protocols.http.test-sql-injection-regex
|
|
|
|
scripts.policy.protocols.krb.ticket-logging
|
|
|
|
scripts.policy.protocols.ssh.detect-bruteforcing
|
|
|
|
scripts.policy.protocols.ssl.certificate-request-info
|
SSL/TLS: Parse CertificateRequest message
|
2023-03-09 09:12:29 +01:00 |
|
scripts.policy.protocols.ssl.decryption
|
|
|
|
scripts.policy.protocols.ssl.expiring-certs
|
|
|
|
scripts.policy.protocols.ssl.heartbleed
|
SSL Analyzer: track connection direction by messages
|
2022-06-24 18:35:44 +01:00 |
|
scripts.policy.protocols.ssl.known-certs
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.policy.protocols.ssl.log-certs-base64
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.policy.protocols.ssl.log-hostcerts-only
|
Default canonifier change to only remove first timestamp in line
|
2025-06-18 15:41:48 +01:00 |
|
scripts.policy.protocols.ssl.ssl-log-ext
|
Fix parsing of version field in SSLv2 client hello
|
2024-08-22 13:14:24 +01:00 |
|
scripts.policy.protocols.ssl.validate-certs
|
|
|
|
scripts.policy.protocols.ssl.validate-certs-no-cache
|
|
|
|
scripts.policy.protocols.ssl.validate-ocsp
|
|
|
|
scripts.policy.protocols.ssl.validate-sct
|
|
|
|
scripts.policy.protocols.ssl.weak-keys
|
GH-2229: Fix some typos in weak-keys.zeek
|
2022-06-30 15:12:10 -07:00 |
|
signatures.bad-eval-condition
|
rule-parse: Remove [event_name] syntax, deprecate msg as identifier
|
2023-12-14 10:16:35 +01:00 |
|
signatures.custom-event
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
signatures.custom-event-errors
|
signatures: Add data_end_offset to signature_match() and custom events
|
2024-10-30 13:29:58 +01:00 |
|
signatures.dpd
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
signatures.dst-ip-cidr-v4
|
|
|
|
signatures.dst-ip-header-condition-v4
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
signatures.dst-ip-header-condition-v4-masks
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
signatures.dst-ip-header-condition-v6
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
signatures.dst-ip-header-condition-v6-masks
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
signatures.dst-port-header-condition
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
signatures.eval-condition
|
Rename protocol_id field to ip_proto and similar renaming for name field
|
2024-11-13 12:02:00 -07:00 |
|
signatures.eval-condition-no-return-value
|
|
|
|
signatures.header-header-condition
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
signatures.http-body-match
|
Test how the signature framework matches HTTP body
|
2023-11-03 15:28:15 +01:00 |
|
signatures.id-lookup
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
signatures.ip-proto-header-condition
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
signatures.load-sigs
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
signatures.signature-cond-used
|
Add is_used attribute to an ID if used in a signature eval statement
|
2022-08-31 14:58:23 -07:00 |
|
signatures.signature-cond-used-twice
|
Attr: Duplicated &is_used is allowed
|
2022-12-02 17:15:05 +01:00 |
|
signatures.src-ip-header-condition-v4
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
signatures.src-ip-header-condition-v4-masks
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
signatures.src-ip-header-condition-v6
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
signatures.src-ip-header-condition-v6-masks
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
signatures.src-port-header-condition
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
signatures.tcp-end-of-match
|
Order rule traversal in RuleMatcher::Match() operations by Rule index
|
2024-11-18 09:45:09 -08:00 |
|
signatures.tcp-end-of-match-2
|
signatures: Add data_end_offset to signature_match() and custom events
|
2024-10-30 13:29:58 +01:00 |
|
signatures.tcp-syn-with-payload
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
signatures.udp-end-of-match
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
signatures.udp-packetwise-insensitive
|
|
|
|
signatures.udp-packetwise-match
|
|
|
|
signatures.udp-payload-size
|
|
|
|
signatures.udp-state
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
spicy.analyzer-id
|
Add spicy runtime-support current_analyzer_id(), use it to set id in events
|
2024-12-18 15:44:09 -07:00 |
|
spicy.analyzer-tag
|
Integrate the Spicy plugin into Zeek proper.
|
2023-05-16 10:17:45 +02:00 |
|
spicy.conn-id
|
Integrate the Spicy plugin into Zeek proper.
|
2023-05-16 10:17:45 +02:00 |
|
spicy.context
|
Integrate the Spicy plugin into Zeek proper.
|
2023-05-16 10:17:45 +02:00 |
|
spicy.decline_input
|
Analyzer failure logging: tweaks and test fixes
|
2025-06-03 15:56:42 +01:00 |
|
spicy.decline_input-2
|
Analyzer failure logging: tweaks and test fixes
|
2025-06-03 15:56:42 +01:00 |
|
spicy.dns
|
Integrate the Spicy plugin into Zeek proper.
|
2023-05-16 10:17:45 +02:00 |
|
spicy.double-event
|
Integrate the Spicy plugin into Zeek proper.
|
2023-05-16 10:17:45 +02:00 |
|
spicy.double-types
|
Integrate the Spicy plugin into Zeek proper.
|
2023-05-16 10:17:45 +02:00 |
|
spicy.event-args
|
Bump Spicy to current main.
|
2024-01-29 09:59:46 +01:00 |
|
spicy.event-args-fail
|
Integrate the Spicy plugin into Zeek proper.
|
2023-05-16 10:17:45 +02:00 |
|
spicy.event-args-fail-2
|
Port Spicy integration to new AST API.
|
2024-03-04 15:48:39 +01:00 |
|
spicy.event-args-fail-3
|
Port Spicy integration to new AST API.
|
2024-03-04 15:48:39 +01:00 |
|
spicy.event-args-fail-4
|
Integrate the Spicy plugin into Zeek proper.
|
2023-05-16 10:17:45 +02:00 |
|
spicy.event-args-fail-5
|
Integrate the Spicy plugin into Zeek proper.
|
2023-05-16 10:17:45 +02:00 |
|
spicy.event-args-fail-6
|
Integrate the Spicy plugin into Zeek proper.
|
2023-05-16 10:17:45 +02:00 |
|
spicy.event-args-mismatch
|
Spicy: Rework code for converting Spicy values to Zeek values.
|
2025-04-02 17:45:19 +02:00 |
|
spicy.event-cond
|
Integrate the Spicy plugin into Zeek proper.
|
2023-05-16 10:17:45 +02:00 |
|
spicy.event-unit-type-fail
|
Spicy: Improve error messages reporting malformed unit names in EVT files.
|
2024-11-08 13:44:09 +01:00 |
|
spicy.event-unit-type-fail-2
|
Spicy: Improve error messages reporting malformed unit names in EVT files.
|
2024-11-08 13:44:09 +01:00 |
|
spicy.event-unit-type-fail-3
|
Spicy: Improve error messages reporting malformed unit names in EVT files.
|
2024-11-08 13:44:09 +01:00 |
|
spicy.event-user-type
|
Integrate the Spicy plugin into Zeek proper.
|
2023-05-16 10:17:45 +02:00 |
|
spicy.export-bitfield
|
Type/RecordType: Make table returned by GetRecordFieldsVal() ordered
|
2025-07-22 16:58:40 +02:00 |
|
spicy.export-enum
|
Integrate the Spicy plugin into Zeek proper.
|
2023-05-16 10:17:45 +02:00 |
|
spicy.export-protocol-enum
|
Spicy: Map Spicy's Protocol enum to Zeek's transport_proto.
|
2024-04-29 08:38:53 +02:00 |
|
spicy.export-switch
|
[Spicy] Support switch fields when exporting Spicy types to Zeek.
|
2023-07-06 08:40:54 +02:00 |
|
spicy.export-type-ambigious-fail
|
[Spicy] Extend functionality of export in EVT files.
|
2023-08-21 10:26:25 +02:00 |
|
spicy.export-type-e2e
|
Fix disappearing unit fields in Spicy type export.
|
2023-05-26 11:37:23 +02:00 |
|
spicy.export-type-fail
|
Port Spicy integration to new AST API.
|
2024-03-04 15:48:39 +01:00 |
|
spicy.export-type-with-fields
|
Type/RecordType: Make table returned by GetRecordFieldsVal() ordered
|
2025-07-22 16:58:40 +02:00 |
|
spicy.export-type-with-fields-fail
|
Port Spicy integration to new AST API.
|
2024-03-04 15:48:39 +01:00 |
|
spicy.export-types
|
Type/RecordType: Make table returned by GetRecordFieldsVal() ordered
|
2025-07-22 16:58:40 +02:00 |
|
spicy.file-analysis-data-in
|
Spicy: Query Zeek scriptland for file handles.
|
2024-05-06 09:20:38 +02:00 |
|
spicy.file-analysis-data-in-concurrent
|
Integrate the Spicy plugin into Zeek proper.
|
2023-05-16 10:17:45 +02:00 |
|
spicy.file-analyzer
|
Integrate the Spicy plugin into Zeek proper.
|
2023-05-16 10:17:45 +02:00 |
|
spicy.file-analyzer-nested
|
Move the options from policy/tuning/defaults to actual Zeek defaults, deprecate that package
|
2024-05-06 11:13:04 -07:00 |
|
spicy.file-analyzer-property
|
Integrate the Spicy plugin into Zeek proper.
|
2023-05-16 10:17:45 +02:00 |
|
spicy.file-data-in-at-offset
|
Spicy: Query Zeek scriptland for file handles.
|
2024-05-06 09:20:38 +02:00 |
|
spicy.file-replaces
|
Integrate the Spicy plugin into Zeek proper.
|
2023-05-16 10:17:45 +02:00 |
|
spicy.gap-recovery
|
Integrate the Spicy plugin into Zeek proper.
|
2023-05-16 10:17:45 +02:00 |
|
spicy.get-values
|
Spicy: Provide runtime API to access Zeek-side globals.
|
2024-06-20 12:02:54 +02:00 |
|
spicy.hook-priority
|
Test .evt file &priority
|
2024-10-14 08:51:58 -04:00 |
|
spicy.import-from
|
Integrate the Spicy plugin into Zeek proper.
|
2023-05-16 10:17:45 +02:00 |
|
spicy.list-conversion
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
spicy.module-path
|
Do not automatically load Spicy modules in dot paths.
|
2023-09-26 11:56:52 +02:00 |
|
spicy.multiple-enum
|
Integrate the Spicy plugin into Zeek proper.
|
2023-05-16 10:17:45 +02:00 |
|
spicy.network-time
|
Integrate the Spicy plugin into Zeek proper.
|
2023-05-16 10:17:45 +02:00 |
|
spicy.optional
|
Integrate the Spicy plugin into Zeek proper.
|
2023-05-16 10:17:45 +02:00 |
|
spicy.packet-analyzer
|
Integrate the Spicy plugin into Zeek proper.
|
2023-05-16 10:17:45 +02:00 |
|
spicy.packet-analyzer-on-ip
|
Integrate the Spicy plugin into Zeek proper.
|
2023-05-16 10:17:45 +02:00 |
|
spicy.packet-analyzer-replaces
|
Fix packet analyzer replacement.
|
2024-05-06 09:45:11 +02:00 |
|
spicy.packet-analyzer-violation
|
Integrate the Spicy plugin into Zeek proper.
|
2023-05-16 10:17:45 +02:00 |
|
spicy.parse-error
|
Settle on analyzer.log for the dpd.log replacement
|
2025-06-03 17:33:36 +01:00 |
|
spicy.port
|
Spicy: Register well-known ports through an event handler.
|
2024-08-22 10:24:55 +02:00 |
|
spicy.port-fail
|
Spicy: Register well-known ports through an event handler.
|
2024-08-22 10:24:55 +02:00 |
|
spicy.port-fail-2
|
Integrate the Spicy plugin into Zeek proper.
|
2023-05-16 10:17:45 +02:00 |
|
spicy.port-fail-3
|
Integrate the Spicy plugin into Zeek proper.
|
2023-05-16 10:17:45 +02:00 |
|
spicy.port-fail-4
|
Integrate the Spicy plugin into Zeek proper.
|
2023-05-16 10:17:45 +02:00 |
|
spicy.port-fail-5
|
Integrate the Spicy plugin into Zeek proper.
|
2023-05-16 10:17:45 +02:00 |
|
spicy.port-range-one-port
|
Make ports for LDAP analyzers fully configurable
|
2023-10-10 18:28:13 +02:00 |
|
spicy.preprocessor
|
Integrate the Spicy plugin into Zeek proper.
|
2023-05-16 10:17:45 +02:00 |
|
spicy.preprocessor-fail
|
Integrate the Spicy plugin into Zeek proper.
|
2023-05-16 10:17:45 +02:00 |
|
spicy.preprocessor-fail-2
|
Integrate the Spicy plugin into Zeek proper.
|
2023-05-16 10:17:45 +02:00 |
|
spicy.preprocessor-fail-3
|
Integrate the Spicy plugin into Zeek proper.
|
2023-05-16 10:17:45 +02:00 |
|
spicy.preprocessor-fail-4
|
Integrate the Spicy plugin into Zeek proper.
|
2023-05-16 10:17:45 +02:00 |
|
spicy.preprocessor-fail-5
|
Integrate the Spicy plugin into Zeek proper.
|
2023-05-16 10:17:45 +02:00 |
|
spicy.preprocessor-fail-6
|
Integrate the Spicy plugin into Zeek proper.
|
2023-05-16 10:17:45 +02:00 |
|
spicy.preprocessor-fail-7
|
Integrate the Spicy plugin into Zeek proper.
|
2023-05-16 10:17:45 +02:00 |
|
spicy.preprocessor-spicy
|
Spicy: Port over to Spicy's new tuple representation.
|
2025-04-02 14:14:26 +02:00 |
|
spicy.profiling
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
spicy.protocol-analyzer-data-in
|
Integrate the Spicy plugin into Zeek proper.
|
2023-05-16 10:17:45 +02:00 |
|
spicy.protocol-analyzer-data-in-from-tcp-to-udp
|
Spicy: Support UDP in Spicy's protocol_* runtime functions.
|
2024-05-07 18:19:46 +02:00 |
|
spicy.protocol-analyzer-data-in-udp
|
Spicy: Support UDP in Spicy's protocol_* runtime functions.
|
2024-05-07 18:19:46 +02:00 |
|
spicy.protocol-analyzer-explicit-forwarding
|
Integrate the Spicy plugin into Zeek proper.
|
2023-05-16 10:17:45 +02:00 |
|
spicy.protocol-analyzer-tcp-over-udp
|
Integrate the Spicy plugin into Zeek proper.
|
2023-05-16 10:17:45 +02:00 |
|
spicy.replaces
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
spicy.replaces-conflicts
|
btest/spicy: Make replaces-conflicts trigger replaces code path
|
2024-08-06 11:52:52 +02:00 |
|
spicy.replaces-conflicts-2
|
Spicy: Disallow repeating replacements of the same analyzer.
|
2024-06-14 13:10:47 +02:00 |
|
spicy.replaces-conflicts-3
|
Spicy: Disallow repeating replacements of the same analyzer.
|
2024-06-14 13:10:47 +02:00 |
|
spicy.replaces-mismatch
|
Integrate the Spicy plugin into Zeek proper.
|
2023-05-16 10:17:45 +02:00 |
|
spicy.resource-usage
|
Integrate the Spicy plugin into Zeek proper.
|
2023-05-16 10:17:45 +02:00 |
|
spicy.reuse-parser-across-hltos
|
Integrate the Spicy plugin into Zeek proper.
|
2023-05-16 10:17:45 +02:00 |
|
spicy.skip-input-file
|
Spicy: Provide zeek::skip_input() to disable deliver to current analyzer.
|
2023-11-09 10:43:49 +01:00 |
|
spicy.skip-input-protocol
|
Spicy: Provide zeek::skip_input() to disable deliver to current analyzer.
|
2023-11-09 10:43:49 +01:00 |
|
spicy.spicy-dump
|
|
|
|
spicy.spicyz
|
Provide infrastructure to migrate legacy analyzers to Spicy.
|
2023-02-01 11:33:48 +01:00 |
|
spicy.ssh-banner
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
spicy.tcp-eod-behavior
|
Analyzer failure logging: tweaks and test fixes
|
2025-06-03 15:56:42 +01:00 |
|
spicy.tcp-eod-behavior-child
|
[Spicy] Let zeek::protocol_handle_close() send a TCP EOF.
|
2025-07-09 17:28:19 +02:00 |
|
spicy.tcp-eod-behavior-on-destroy
|
Bump Spicy to pull in fix.
|
2025-05-28 15:50:47 +02:00 |
|
spicy.terminate-session
|
Integrate the Spicy plugin into Zeek proper.
|
2023-05-16 10:17:45 +02:00 |
|
spicy.toggle-protocol-analyzer
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
spicy.tuple-arg
|
Spicy: Port over to Spicy's new tuple representation.
|
2025-04-02 14:14:26 +02:00 |
|
spicy.tuple-enum
|
Integrate the Spicy plugin into Zeek proper.
|
2023-05-16 10:17:45 +02:00 |
|
spicy.tuple-optional
|
Integrate the Spicy plugin into Zeek proper.
|
2023-05-16 10:17:45 +02:00 |
|
spicy.type-converter
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
spicy.udp
|
btest: Update tests and baselines after adding ctx to conn_id
|
2025-07-03 18:19:46 +02:00 |
|
spicy.zeekygen
|
spicy/manager: Ensure Zeekygen knows identifier for registered types
|
2023-10-11 13:31:20 +02:00 |
|
spicy.zeekygen-enum-zeek-side
|
spicy/manager: Ensure Zeekygen knows identifier for registered types
|
2023-10-11 13:31:20 +02:00 |
|
supervisor.config-bare-mode
|
|
|
|
supervisor.config-cluster
|
|
|
|
supervisor.config-cluster-leftover-log-archival
|
|
|
|
supervisor.config-cluster-log-archival
|
|
|
|
supervisor.config-cluster-multi-logger
|
cluster/supervisor: Multi-logger awareness
|
2023-05-05 12:27:25 +02:00 |
|
supervisor.config-cluster-pcap
|
Add pcap_file option to supervised nodes.
|
2023-03-21 16:18:02 +01:00 |
|
supervisor.config-directory
|
|
|
|
supervisor.config-env
|
|
|
|
supervisor.config-output-redirect
|
|
|
|
supervisor.config-scripts
|
Remove Supervisor::NodeConfig (6.1 deprecation)
|
2023-06-14 10:07:22 -07:00 |
|
supervisor.create
|
|
|
|
supervisor.create-interface-pcap-file-error
|
Add pcap_file option to supervised nodes.
|
2023-03-21 16:18:02 +01:00 |
|
supervisor.destroy
|
|
|
|
supervisor.large-cluster
|
Remove deprecated Cluster::Node::interface field
|
2024-08-07 11:58:22 -07:00 |
|
supervisor.node_status
|
Add Supervisor::node_status notification event
|
2022-05-30 21:36:35 -07:00 |
|
supervisor.output-redirect
|
|
|
|
supervisor.output-redirect-hook
|
|
|
|
supervisor.restart
|
|
|
|
supervisor.revive-leaf
|
|
|
|
supervisor.revive-stem
|
|
|
|
supervisor.status
|
|
|
|
telemetry.counter
|
Change all instruments to only handle doubles
|
2024-05-31 13:36:37 -07:00 |
|
telemetry.gauge
|
Change all instruments to only handle doubles
|
2024-05-31 13:36:37 -07:00 |
|
telemetry.histogram
|
Change all instruments to only handle doubles
|
2024-05-31 13:36:37 -07:00 |
|
save-load-seeds.zeek
|
cluster/zeromq: Fix node_topic() and nodeid_topic()
|
2025-03-24 18:36:26 +01:00 |
