zeek/testing
Arne Welzel be061bfe04 IPBasedAnalyzer: Ensure a connection's ConnVal is updated
One idea for the issue that a connection record's endpoint fields may be stale
when events are raised before the ConnSize analyzer saw the packet and no
analyzer calls GetVal() for the connection afterwards.

While this looks a bit ad hoc, I'm leaning towards a follow-up, extending
GetVal(skip_update_connval=false) API and then updating BinPAC/Spicy to
generate code that passes ``false``. That could avoid a number of unnecessary
UpateConnVal() invocations when calling GetVal() multiple times for the
same connection and instead just do it once when the packet has been
processed.

Closes #4214
2025-08-22 14:15:34 +02:00
..
benchmark/broker
btest IPBasedAnalyzer: Ensure a connection's ConnVal is updated 2025-08-22 14:15:34 +02:00
builtin-plugins CI: Add external plugins to builtin plugins task 2025-03-31 14:19:18 +02:00
coverage Swap pre-commit yapf for ruff/ruff-format, fix findings 2024-12-11 11:08:37 -07:00
external Merge branch 'master' of https://github.com/blightzero/zeek 2025-08-18 13:14:34 +02:00
scripts Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
.gitignore
CMakeLists.txt
Makefile
README

This directory contains suites for testing for Zeek's correct
operation:

    btest/
        An ever-growing set of small unit tests testing Zeek's
        functionality.

    external/
        A framework for downloading additional test sets that run more
        complex Zeek configuration on larger traces files. Due to their
        size, these are not included directly. See the README for more
        information. 

    scripts/
        Helpers scripts used by some tests.