zeek/scripts/policy/protocols
Christian Kreibich ccb1eab575 Add VLAN-aware connection tuples.
Loading policy/protocols/conntuple/vlan adapts Zeek's flow hashing and the
script-layer conn_id record to show VLAN tags when present.

I'm using script-layer ints for the VLAN tag representation for consistency with
what we alrady do elsewhere, but it seems odd since they can never be negative.

I'm currently skipping protocols/conntuple/vlan in test-all-policy since it
otherwise affects the external testsuites -- could revisit if people feel it
should run on these.
2025-06-04 14:31:17 -07:00
..
conn Fix policy/protocols/conn/failed-service-logging.zeek 2025-05-06 13:37:12 +01:00
conntuple Add VLAN-aware connection tuples. 2025-06-04 14:31:17 -07:00
dhcp Add conn.log entries for connections with unhandled IP protocols 2024-11-13 11:25:40 -07:00
dns IPv6 support for detect-external-names and testcase 2025-02-04 17:34:43 +00:00
ftp Remove trailing whitespace from script files 2021-10-20 09:57:09 -07:00
http http/detect-sql-injection: Fix zeekygen comment 2025-05-21 11:49:48 +02:00
krb Rename all scripts to have ".zeek" file extension 2019-04-11 21:12:40 -05:00
modbus Remove trailing whitespace from script files 2021-10-20 09:57:09 -07:00
mysql Rename all scripts to have ".zeek" file extension 2019-04-11 21:12:40 -05:00
rdp Rename all scripts to have ".zeek" file extension 2019-04-11 21:12:40 -05:00
smb Remove trailing whitespace from script files 2021-10-20 09:57:09 -07:00
smtp scripts: Migrate table iteration to blank identifiers 2022-10-24 10:36:09 +02:00
ssh update uses of "when" in base scripts to include captures 2022-01-07 14:53:33 -08:00
ssl ssl/validate-certs: Move to Cluster::publish() 2024-12-12 17:54:42 +01:00