zeek/scripts/base/frameworks
Seth Hall bec965b66f Large update for the SumStats framework.
- On-demand access to sumstats results through "return from"
   functions named SumStats::request and Sumstats::request_key.
   Both functions are tested in standalone and clustered modes.

 - $name field has returned to SumStats which simplifies cluster
   code and makes the on-demand access stuff possible.

 - Clustered results can only be collected for 1 minute from their
   time of creation now instead of time of last read.

 - Thresholds use doubles instead of counts everywhere now.

 - Calculation dependency resolution occurs at start up time now
   instead of doing it at observation time which provide a minor
   cpu performance improvement.  A new plugin registration mechanism
   was created to support this change.

 - AppStats now has a minimal doc string and is broken into hook-based
   plugins.

 - AppStats and traceroute detection added to local.bro
2013-05-21 15:52:59 -04:00
..
cluster s/bro-ids.org/bro.org/g 2013-03-07 19:33:04 -08:00
communication Merge remote-tracking branch 'vlad/info_record_fixes' 2012-07-13 16:20:49 -07:00
control Enable Bro to communicate with peers over non-global IPv6 addresses. 2012-05-17 12:59:20 -05:00
dpd Fixed some problems with the SOCKS analyzer and tests. 2012-06-20 22:57:46 -04:00
input Merge remote-tracking branch 'origin/topic/bernhard/input-logging-commmon-functions' 2013-01-23 16:51:54 -08:00
intel Fix some warnings from sphinx when building docs. 2012-11-15 16:40:18 -06:00
logging Merge remote-tracking branch 'origin/master' into topic/bernhard/input-logging-commmon-functions 2012-12-13 11:22:58 -08:00
notice Merge remote-tracking branch 'origin/topic/seth/notice-framework-updates' 2013-03-06 16:45:30 -08:00
packet-filter Checkpoint after pass. 2012-02-15 13:07:08 -08:00
reporter Change reporter messages to more reliably print to stderr. 2013-01-18 12:46:00 -06:00
signatures remove the byte_len and length bifs 2013-03-06 13:45:42 -08:00
software Update software version parsing and comparison to account for a third numeric subversion. 2013-02-06 13:59:05 -05:00
sumstats Large update for the SumStats framework. 2013-05-21 15:52:59 -04:00
tunnels Add parsing for GTPv1 extension headers and control messages. 2013-02-07 14:59:02 -06:00