zeek/scripts/base
Christian Kreibich 90ecf7ff0d Add backpressure disconnect notification to cluster.log and via telemetry
This adds a Broker-specific script to the cluster framework, loaded only when
Zeek is running in cluster mode. It adds logging in cluster.log as well as
telemetry via a metrics counter for Broker-observed backpressure disconnects.

The new zeek_broker_backpressure_disconnects counter, labeled by the neighboring
peer that the reporting node has determined to be unresponsive, counts the
number of unpeerings for this reason.

Here the node "worker" has observed node "proxy" falling behind once:

# HELP zeek_broker_backpressure_disconnects_total Number of Broker peering drops due to a neighbor falling too far behind in message I/O
# TYPE zeek_broker_backpressure_disconnects_total counter
zeek_broker_backpressure_disconnects_total{endpoint="worker",peer="proxy"} 1

Includes small btest baseline update to reflect @load of a new script.

(cherry picked from commit ead6134501)
2025-04-08 15:09:44 -07:00
..
files Copy timestamp from file object 2024-05-17 15:03:06 +02:00
frameworks Add backpressure disconnect notification to cluster.log and via telemetry 2025-04-08 15:09:44 -07:00
misc Remove unneeded @loads from base/misc/version.zeek 2025-04-08 15:09:44 -07:00
packet-protocols Merge remote-tracking branch 'origin/topic/timw/vntag-in-vlan' 2025-03-18 16:18:13 -07:00
protocols Update mozilla-ca-list.zeek and ct-list.zeek to NSS 3.109 2025-03-18 17:59:01 -07:00
utils Clarify membership in the Site::private_address_space prefix list. [skip ci] 2024-05-04 11:21:26 -07:00
init-bare.zeek Telemetry framework: move BIFs to the primary-bif stage 2025-04-08 14:50:45 -07:00
init-default.zeek utils: Introduce packages.zeek with can_load() helper 2024-02-22 11:41:50 +01:00
init-frameworks-and-bifs.zeek Minor comment tweaks for init-frameworks-and-bifs.zeek 2025-04-08 14:50:28 -07:00
init-supervisor.zeek Establish a separate init script when using the supervisor 2021-07-08 13:12:53 -07:00