zeek/scripts/base/frameworks
Johanna Amann af77a7a83b Analyzer failure logging: tweaks and test fixes
The main part of this commit are changes in tests. A lot of the tests
that previously relied on analyzer.log or dpd.log now use the new
analyzer-failed.log.

I verified all the changes and, as far as I can tell, everything
behaves as it should. This includes the external test baselines.

This change also enables logging of file and packet analyzer to
analyzer_failed.log and fixes some small behavior issues.

The analyzer_failed event is no longer raised when the removal of an
analyzer is vetoed.

If an analyzer is no longer active when an analyzer violation is raised,
currently the analyzer_failed event is raised. This can, e.g., happen
when an analyzer error happens at the very end of the connection. This
makes the behavior more similar to what happened in the past, and also
intuitively seems to make sense.

A bug introduced in the failed service logging was fixed.
2025-06-03 15:56:42 +01:00
..
analyzer Analyzer failure logging: tweaks and test fixes 2025-06-03 15:56:42 +01:00
broker Lower listen/connect retry intervals in Broker and the cluster framework to 1sec 2025-04-25 10:22:35 -07:00
cluster cluster/websocket: Deprecate $listen_host, introduce $listen_addr 2025-05-30 11:02:41 +02:00
config config: Move to Cluster::publish() 2024-12-12 17:54:42 +01:00
control annotate base scripts with &is_used as needed 2022-05-26 17:39:17 -07:00
files Move python signatures to a separate file 2024-12-09 11:08:30 -07:00
input Fix errors from rst linting on the generated docs 2025-01-24 11:41:36 -07:00
intel intel: Add indicator_inserted and indicator_removed hooks 2025-06-02 09:50:48 +02:00
logging Fix errors from rst linting on the generated docs 2025-01-24 11:41:36 -07:00
netcontrol netcontrol: Move to Cluster::publish() 2024-12-12 17:54:42 +01:00
notice Fix errors from rst linting on the generated docs 2025-01-24 11:41:36 -07:00
openflow openflow: Move to Cluster::publish() 2024-12-12 17:54:42 +01:00
packet-filter Add PacketFilter::remove_exclude function 2024-04-17 21:25:35 +00:00
reporter Support for log filter policy hooks 2020-09-30 12:32:45 -07:00
signatures allow signature actions to be dynamically updated 2023-07-13 17:25:32 -07:00
software frameworks/software: Fix stale value used for stripping 2023-11-17 14:37:28 +01:00
spicy Fix errors from rst linting on the generated docs 2025-01-24 11:41:36 -07:00
storage Add STORAGE_ prefixes for backends and serializers 2025-04-14 10:11:13 -07:00
sumstats sumstats: Move to Cluster::publish() 2024-12-12 17:54:42 +01:00
supervisor Fix errors from rst linting on the generated docs 2025-01-24 11:41:36 -07:00
telemetry Fix errors from rst linting on the generated docs 2025-01-24 11:41:36 -07:00
tunnels Add GTPv1 packet analyzer, disable old analyzer 2021-11-23 19:36:50 -07:00