zeek/src
Christian Kreibich 4372cdfe2a Expand Broker APIs to allow tracking directionality of peering establishment
This provides ways to figure out for a given peer, or a given address/port pair,
whether the local node originally established the peering.

(cherry picked from commit b430d5235c)
2025-04-29 17:00:30 -07:00
..
3rdparty@96caa6a590 Merge remote-tracking branch 'origin/topic/christian/ci-updates' 2024-06-18 10:53:09 +02:00
analyzer Merge remote-tracking branch 'origin/topic/awelzel/4198-4201-quic-maintenance' 2025-03-18 16:15:34 -07:00
broker Expand Broker APIs to allow tracking directionality of peering establishment 2025-04-29 17:00:30 -07:00
file_analysis Merge remote-tracking branch 'origin/topic/robin/gh-3573-replaces-cleanup' 2024-05-07 09:45:25 +02:00
fuzzers fuzzers: Add WebSocket fuzzer 2024-01-22 18:54:38 +01:00
include Creating a symlink src/include/zeek -> src/ 2022-11-09 18:16:13 +02:00
input Merge branch 'topic/awelzel/3957-raw-reader-spinning' 2024-11-14 11:30:55 -07:00
iosource iosource/Manager: Reap dry sources while computing timeout 2024-07-02 11:32:05 +02:00
logging Remove is_sum arguments from counters and gauges 2024-05-31 13:36:37 -07:00
packet_analysis Merge remote-tracking branch 'origin/topic/timw/3417-packet-analysis-detail' 2024-05-08 09:55:16 -07:00
plugin Add component API to transparently remap one component to another one. 2024-05-06 09:45:11 +02:00
probabilistic Integrate review feedback 2024-01-06 13:48:14 +01:00
script_opt Telemetry framework: move BIFs to the primary-bif stage 2025-04-08 14:50:45 -07:00
session Remove is_sum arguments from counters and gauges 2024-05-31 13:36:37 -07:00
spicy Merge remote-tracking branch 'origin/topic/etyp/cookie-nullptr-spicy-dpd' 2024-11-14 11:59:05 -07:00
supervisor Remove the Supervisor's internal ClusterEndpoint struct. 2024-07-02 14:52:17 -07:00
telemetry Telemetry framework: move BIFs to the primary-bif stage 2025-04-08 14:50:45 -07:00
threading threading/Manager: Warn if threads are added after termination 2024-07-02 12:34:28 +02:00
zeekygen Avoid segfault when generating Zeekygen docs on Zeek-internal identifiers. 2024-05-03 12:23:49 -07:00
Anon.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Anon.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Attr.cc improved error cascade for invalid attributes 2024-06-04 10:36:36 -07:00
Attr.h improved error cascade for invalid attributes 2024-06-04 10:36:36 -07:00
Base64.cc Bump pre-commit hooks 2023-10-30 09:41:12 +01:00
Base64.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
binpac-lib.pac Code modernization: Convert from deprecated C standard library headers 2022-06-27 09:47:31 -07:00
binpac.pac
binpac_zeek-lib.pac Spelling src 2022-11-09 12:08:15 -05:00
binpac_zeek.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
CCL.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
CCL.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
CMakeLists.txt Telemetry framework: move BIFs to the primary-bif stage 2025-04-08 14:50:45 -07:00
communityid.bif Avoid OpenSSL header dependencies 2023-11-03 15:54:46 +01:00
CompHash.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
CompHash.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Conn.cc Conn/net_utils/fmt_mac: Avoid snprintf(), memcpy() and allocation 2024-02-13 19:37:15 +01:00
Conn.h Merge remote-tracking branch 'origin/topic/awelzel/no-child-analyzer-on-finished-connections' 2024-08-30 11:33:35 -07:00
const.bif Remove deprecations tagged for v6.1 2023-06-14 10:07:22 -07:00
DbgBreakpoint.cc Bump pre-commit hooks 2023-10-30 09:41:12 +01:00
DbgBreakpoint.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
DbgDisplay.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
DbgHelp.cc updated Bro->Zeek in comments in the source tree 2022-01-24 14:26:20 -08:00
DbgWatch.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
DbgWatch.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Debug.cc Fix unsafe and inefficient uses of copy_string 2023-11-03 15:25:38 +01:00
Debug.h Bump pre-commit hooks 2023-10-30 09:41:12 +01:00
DebugCmdInfoConstants.in Merge remote-tracking branch 'microsoft/master' 2022-11-11 15:23:21 -07:00
DebugCmds.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
DebugCmds.h Add missing include for int32_t in DebugCmds.h 2024-02-05 14:38:16 -07:00
DebugLogger.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
DebugLogger.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Desc.cc fix ZAM "cat" of doubles/times to include trailing ".0" per normal BiF behavior 2024-03-28 16:43:06 -07:00
Desc.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
DFA.cc Fix up minor warnings in touched files 2024-11-14 11:53:29 -07:00
DFA.h Fix up minor warnings in touched files 2024-11-14 11:53:29 -07:00
Dict.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Dict.h Dict: Invalidate iterators during Clear() 2024-01-09 09:12:21 +01:00
digest.cc Avoid OpenSSL header dependencies 2023-11-03 15:54:46 +01:00
digest.h digest/digest_print: Use bytetohex() instead of snprintf() 2024-02-13 19:32:16 +01:00
Discard.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Discard.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
DNS_Mapping.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
DNS_Mapping.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
DNS_Mgr.cc Use <poll.h> instead of <sys/poll.h> 2024-01-08 13:26:57 -07:00
DNS_Mgr.h Change function return types to more concise types where possible 2023-11-28 13:40:28 -07:00
EquivClass.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
EquivClass.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
event.bif Fix a zeek_init -> zeek_done confusion in a docstring [skip ci] 2024-01-18 16:14:33 -08:00
Event.cc segment_profiling: Remove SegmentProfiler and load_sample event 2024-01-03 11:55:54 +01:00
Event.h EventMgr: Remove queue_flare, use GetNextTimeout() instead 2023-12-04 20:03:31 +01:00
EventHandler.cc Remove is_sum arguments from counters and gauges 2024-05-31 13:36:37 -07:00
EventHandler.h Change all instruments to only handle doubles 2024-05-31 13:36:37 -07:00
EventLauncher.cc Minor fixes for build problems after reformatting 2021-09-16 15:36:09 -07:00
EventLauncher.h Minor fixes for build problems after reformatting 2021-09-16 15:36:09 -07:00
EventRegistry.cc Merge remote-tracking branch 'origin/topic/vern/zam-EH-coalesce' 2023-11-17 18:05:32 +01:00
EventRegistry.h Add a method to register an event handler to a std::function via C++ 2024-03-18 16:36:25 -07:00
EventTrace.cc Avoid creating a few temporary values to avoid copy operations 2023-11-28 13:40:28 -07:00
EventTrace.h Add some uses of std::move in constructors and simple functions for pass-by-value arguments 2023-11-28 13:40:28 -07:00
Expr.cc script optimization for record operations sourced (in part) from other records 2024-06-24 09:38:37 +02:00
Expr.h fixes for script optimization of coerce-to-any expressions 2024-11-14 10:19:07 -07:00
File.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
File.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Flare.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Flare.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Frag.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Frag.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Frame.cc Add facade types to avoid using raw Broker types 2023-12-04 15:23:28 +01:00
Frame.h Add facade types to avoid using raw Broker types 2023-12-04 15:23:28 +01:00
Func.cc Telemetry framework: move BIFs to the primary-bif stage 2025-04-08 14:50:45 -07:00
Func.h Remove variant from StdFunctionStmt 2024-03-19 09:07:45 -07:00
Hash.cc Avoid OpenSSL header dependencies 2023-11-03 15:54:46 +01:00
Hash.h Make BIFs just return ValPtr directly instead of BifReturnVal 2024-01-22 10:35:34 -07:00
ID.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
ID.h allow explicitly marking an identifier as equivalent to special '_' identifier 2023-11-10 09:56:59 +01:00
input.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
IntrusivePtr.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
IntSet.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
IntSet.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
IP.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
IP.h Bump pre-commit hooks 2023-10-30 09:41:12 +01:00
IPAddr.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
IPAddr.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
List.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
List.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
main.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
make_dbg_constants.py Format Python scripts with yapf. 2021-11-24 23:13:24 +01:00
mmdb.bif Modernize various C++/Zeek-isms in the MMDB code. 2024-01-11 17:13:41 -08:00
MMDB.cc Fix MMDB::Lookup() to check result status correctly 2024-01-25 23:54:22 -08:00
MMDB.h Modernize various C++/Zeek-isms in the MMDB code. 2024-01-11 17:13:41 -08:00
module_util.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
module_util.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
net_util.cc Conn/net_utils/fmt_mac: Avoid snprintf(), memcpy() and allocation 2024-02-13 19:37:15 +01:00
net_util.h Conn/net_utils/fmt_mac: Avoid snprintf(), memcpy() and allocation 2024-02-13 19:37:15 +01:00
NetVar.cc Telemetry framework: move BIFs to the primary-bif stage 2025-04-08 14:50:45 -07:00
NetVar.h Telemetry framework: move BIFs to the primary-bif stage 2025-04-08 14:50:45 -07:00
NFA.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
NFA.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Notifier.cc fix for Trigger's whose termination leads to deleting other Trigger's 2023-12-12 09:45:19 +01:00
Notifier.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Obj.cc fix for setting object locations to avoid use-after-free situation 2024-11-14 10:19:07 -07:00
Obj.h Obj: Implement with_location_of() as template 2024-02-06 11:03:06 +01:00
OpaqueVal.cc Move telemetry opaques out of OpaqueVal.h 2024-05-31 13:30:31 -07:00
OpaqueVal.h Move telemetry opaques out of OpaqueVal.h 2024-05-31 13:30:31 -07:00
option.bif option.bif: Short-circuit option changes when terminating 2022-07-29 18:22:03 +02:00
Options.cc framework for --enable-ZAM-profiling configuration 2024-03-19 10:59:49 -07:00
Options.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Overflow.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Overflow.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
PacketFilter.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
PacketFilter.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
parse.y "add" and "delete" are now expressions rather than statements 2024-05-29 12:40:06 -07:00
Pipe.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Pipe.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
PolicyFile.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
PolicyFile.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
PrefixTable.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
PrefixTable.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
PriorityQueue.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
PriorityQueue.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
RandTest.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
RandTest.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
re-parse.y RE/Specific_RE_Matcher: Make Compile() return false for syntax errors 2024-02-28 17:07:51 +01:00
re-scan.l RE/Specific_RE_Matcher: Make Compile() return false for syntax errors 2024-02-28 17:07:51 +01:00
RE.cc RE/Specific_RE_Matcher: Make Compile() return false for syntax errors 2024-02-28 17:07:51 +01:00
RE.h RE: Remove RE_DisjunctiveMatcher and re-use MatchAll() 2023-11-21 10:34:16 +01:00
Reassem.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Reassem.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
reporter.bif Update reporter.bif to describe special case of errors in init 2024-06-04 11:56:06 +02:00
Reporter.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Reporter.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
rule-parse.y rule-parse: Remove [event_name] syntax, deprecate msg as identifier 2023-12-14 10:16:35 +01:00
rule-scan.l rule-scan: Copy yytext strings 2023-12-05 15:26:40 +01:00
Rule.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Rule.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
RuleAction.cc rule-parse: Remove [event_name] syntax, deprecate msg as identifier 2023-12-14 10:16:35 +01:00
RuleAction.h rule-parse: Remove [event_name] syntax, deprecate msg as identifier 2023-12-14 10:16:35 +01:00
RuleCondition.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
RuleCondition.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
RuleMatcher.cc Constify classes in RuleMatcher, fixes c++20 build failure 2024-05-01 16:59:54 -07:00
RuleMatcher.h Constify classes in RuleMatcher, fixes c++20 build failure 2024-05-01 16:59:54 -07:00
RunState.cc segment_profiling: Remove SegmentProfiler and load_sample event 2024-01-03 11:55:54 +01:00
RunState.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
scan.l Merge remote-tracking branch 'origin/topic/awelzel/2311-load-plugin-bare-mode' 2025-03-18 16:16:39 -07:00
ScannedFile.cc Merge remote-tracking branch 'origin/topic/awelzel/2311-load-plugin-bare-mode' 2025-03-18 16:16:39 -07:00
ScannedFile.h Merge remote-tracking branch 'origin/topic/awelzel/2311-load-plugin-bare-mode' 2025-03-18 16:16:39 -07:00
Scope.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Scope.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
ScriptCoverageManager.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
ScriptCoverageManager.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
ScriptProfile.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
ScriptProfile.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
ScriptValidation.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
ScriptValidation.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
SerializationFormat.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
SerializationFormat.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
SmithWaterman.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
SmithWaterman.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Span.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
stats.bif Use std::move in return values from bif methods to avoid copies 2024-01-10 12:32:15 -07:00
Stats.cc segment_profiling: Remove SegmentProfiler and load_sample event 2024-01-03 11:55:54 +01:00
Stats.h segment_profiling: Remove SegmentProfiler and load_sample event 2024-01-03 11:55:54 +01:00
Stmt.cc fixes for script optimization of coerce-to-any expressions 2024-11-14 10:19:07 -07:00
Stmt.h removing now-vestigial "add" and "delete" statements 2024-05-29 12:40:06 -07:00
StmtBase.h fixes & enhancements to location information associated w/ AST nodes & ZAM optimization 2024-02-06 11:03:02 +01:00
StmtEnums.h removing now-vestigial "add" and "delete" statements 2024-05-29 12:40:06 -07:00
strings.bif Change to use ToStdStringView() in a few other BIFs 2024-01-23 10:38:56 -07:00
Tag.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Tag.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Timer.cc Merge remote-tracking branch 'origin/topic/awelzel/prom-callbacks-2' 2024-09-23 10:00:58 -07:00
Timer.h Timer: Add LOG_DELAY_EXPIRE timer type 2023-11-29 11:53:11 +01:00
Traverse.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Traverse.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
TraverseTypes.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Trigger.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Trigger.h fix for Trigger's whose termination leads to deleting other Trigger's 2023-12-12 09:45:19 +01:00
TunnelEncapsulation.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
TunnelEncapsulation.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
Type.cc bug fix for dealing with illegal types of initializers 2024-05-29 12:40:06 -07:00
Type.h Change all instruments to only handle doubles 2024-05-31 13:36:37 -07:00
types.bif Pass parsed file record information with ReadFile/WriteFile events 2023-08-07 13:44:38 -07:00
UID.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
UID.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
util.cc fix ZAM "cat" of doubles/times to include trailing ".0" per normal BiF behavior 2024-03-28 16:43:06 -07:00
util.h fix ZAM "cat" of doubles/times to include trailing ".0" per normal BiF behavior 2024-03-28 16:43:06 -07:00
Val.cc porting of GH-4022 2024-11-12 15:41:20 -08:00
Val.h Document the field_escape_pattern in the to_json() BiF 2024-07-02 14:46:16 -07:00
Var.cc framework for --enable-ZAM-profiling configuration 2024-03-19 10:59:49 -07:00
Var.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
version.c.in Support for configurable localversion 2024-04-17 14:16:47 -07:00
WeirdState.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
WeirdState.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
zeek-affinity.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
zeek-affinity.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
zeek-bif.h Make BIFs just return ValPtr directly instead of BifReturnVal 2024-01-22 10:35:34 -07:00
zeek-setup.cc Merge remote-tracking branch 'origin/topic/timw/telemetry-threading' 2024-08-30 11:29:17 -07:00
zeek-setup.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
zeek.bif Merge remote-tracking branch 'origin/topic/bbannier/doc-have-spicy' 2024-12-12 12:43:43 -07:00
zeek.pac Add GTPv1 packet analyzer, disable old analyzer 2021-11-23 19:36:50 -07:00
ZeekArgs.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
ZeekArgs.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
ZeekConfig.cmake.in Revert "Merge remote-tracking branch 'origin/topic/neverlord/gh-3247'" 2023-08-29 12:13:40 -07:00
ZeekList.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
ZeekPluginBootstrap.cmake.in ZeekPluginBootstrap: Encode Zeek's CMAKE_BUILD_TYPE 2023-06-15 10:46:06 +02:00
ZeekPluginConfig.cmake.in Fix install directory for plugins 2023-04-22 16:12:22 +02:00
ZeekString.cc Fix unsafe and inefficient uses of copy_string 2023-11-03 15:25:38 +01:00
ZeekString.h Fix unsafe and inefficient uses of copy_string 2023-11-03 15:25:38 +01:00
ZVal.cc Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00
ZVal.h Reformat Zeek in Spicy style 2023-10-30 09:40:55 +01:00