zeek/scripts/policy/protocols
Christian Kreibich 30cb62362a Add VLAN-aware connection tuples.
Loading policy/protocols/conntuple/vlan adapts Zeek's flow hashing and the
script-layer conn_id record to show VLAN tags when present.

I'm using script-layer ints for the VLAN tag representation for consistency with
what we alrady do elsewhere, but it seems odd since they can never be negative.

I'm currently skipping protocols/conntuple/vlan in test-all-policy since it
otherwise affects the external testsuites -- could revisit if people feel it
should run on these.
2025-04-13 23:45:01 -07:00
..
conn DPD: failed services logging alignment 2025-02-06 18:56:30 +00:00
conntuple Add VLAN-aware connection tuples. 2025-04-13 23:45:01 -07:00
dhcp Add conn.log entries for connections with unhandled IP protocols 2024-11-13 11:25:40 -07:00
dns IPv6 support for detect-external-names and testcase 2025-02-04 17:34:43 +00:00
ftp Remove trailing whitespace from script files 2021-10-20 09:57:09 -07:00
http account for spaces encoding to plus signs in sqli regex detection 2024-10-29 07:48:36 -04:00
krb Rename all scripts to have ".zeek" file extension 2019-04-11 21:12:40 -05:00
modbus Remove trailing whitespace from script files 2021-10-20 09:57:09 -07:00
mysql Rename all scripts to have ".zeek" file extension 2019-04-11 21:12:40 -05:00
rdp Rename all scripts to have ".zeek" file extension 2019-04-11 21:12:40 -05:00
smb Remove trailing whitespace from script files 2021-10-20 09:57:09 -07:00
smtp scripts: Migrate table iteration to blank identifiers 2022-10-24 10:36:09 +02:00
ssh update uses of "when" in base scripts to include captures 2022-01-07 14:53:33 -08:00
ssl ssl/validate-certs: Move to Cluster::publish() 2024-12-12 17:54:42 +01:00