zeek/scripts/base
Seth Hall bec965b66f Large update for the SumStats framework.
- On-demand access to sumstats results through "return from"
   functions named SumStats::request and Sumstats::request_key.
   Both functions are tested in standalone and clustered modes.

 - $name field has returned to SumStats which simplifies cluster
   code and makes the on-demand access stuff possible.

 - Clustered results can only be collected for 1 minute from their
   time of creation now instead of time of last read.

 - Thresholds use doubles instead of counts everywhere now.

 - Calculation dependency resolution occurs at start up time now
   instead of doing it at observation time which provide a minor
   cpu performance improvement.  A new plugin registration mechanism
   was created to support this change.

 - AppStats now has a minimal doc string and is broken into hook-based
   plugins.

 - AppStats and traceroute detection added to local.bro
2013-05-21 15:52:59 -04:00
..
frameworks Large update for the SumStats framework. 2013-05-21 15:52:59 -04:00
misc Merge remote-tracking branch 'origin/fastpath' 2012-12-14 14:34:51 -08:00
protocols Layout tweaks for the sumstats code, and preliminary updates for NEWS. 2013-04-28 15:35:21 -07:00
utils Layout tweaks for the sumstats code, and preliminary updates for NEWS. 2013-04-28 15:35:21 -07:00
init-bare.bro Add parsing for GTPv1 extension headers and control messages. 2013-02-07 14:59:02 -06:00
init-default.bro SumStats tests pass. 2013-04-15 15:28:11 -04:00