zeek/scripts/base/frameworks
Robin Sommer 0040111955
Integrate the Spicy plugin into Zeek proper.
This reflects the `spicy-plugin` code as of `d8c296b81cc2a11`.

In addition to moving the code into Zeek's source tree, this comes
with a couple small functional changes:

- `spicyz` no longer tries to infer if it's running from the build
  directory. Instead `ZEEK_SPICY_LIBRARY` can be set to a custom
  location. `zeek-set-path.sh` does that now.

- ZEEK_CONFIG can be set to change what `spicyz -z` print out. This is
  primarily for backwards compatibility.

Some further notes on specifics:

- We raise the minimum Spicy version to 1.8 (i.e., current `main`
  branch).

- Renamed the `compiler/` subdirectory to `spicyz` to avoid
  include-path conflicts with the Spicy headers.

- In `cmake/`, the corresponding PR brings a new/extended version of
  `FindZeek`, which Spicy analyzer packages need. We also now install
  some of the files that the Spicy plugin used to bring for testing,
  so that existing packages keep working.

- For now, this all remains backwards compatible with the current
  `zkg` analyzer templates so that they work with both external and
  integrated Spicy support. Later, once we don't need to support any
  external Spicy plugin versions anymore, we can clean up the
  templates as well.

- All the plugin's tests have moved into the standard test suite. They
  are skipped if configure with `--disable-spicy`.

This holds off on adapting the new code further to Zeek's coding
conventions, so that it remains easier to maintain it in parallel to
the (now legacy) external plugin. We'll make a pass over the
formatting for (presumable) Zeek 6.1.
2023-05-16 10:17:45 +02:00
..
analyzer Fix a docstring typo 2023-01-10 18:49:19 -08:00
broker broker/store: Extend SQLiteOptions around data safety and performance 2023-01-30 10:25:37 +01:00
cluster Merge remote-tracking branch 'origin/topic/awelzel/zeek-archiver-multiple-loggers' 2023-05-09 15:20:53 +02:00
config Add broadcast_topics set. 2023-04-21 19:04:52 +02:00
control annotate base scripts with &is_used as needed 2022-05-26 17:39:17 -07:00
dpd analyzer/dpd: Address review comments 2022-09-06 14:32:10 +02:00
files files/main: No empty file_ids 2023-02-06 18:08:05 +01:00
input More bro-to-zeek renaming in scripts and other files 2019-05-16 02:36:41 -05:00
intel scripts: Migrate table iteration to blank identifiers 2022-10-24 10:36:09 +02:00
logging logging: Support rotation_postprocessor_command_env 2023-04-17 13:10:14 +00:00
netcontrol Spelling fixes: scripts 2022-11-02 17:36:39 -04:00
notice scripts/smb2-main: Reset script-level state upon smb2_discarded_messages_state() 2023-05-03 11:22:01 +02:00
openflow Spelling fixes: scripts 2022-11-02 17:36:39 -04:00
packet-filter Merge remote-tracking branch 'origin/topic/awelzel/blank-identifer' 2022-10-25 12:36:23 +02:00
reporter Support for log filter policy hooks 2020-09-30 12:32:45 -07:00
signatures deprecation messages for unused base script functions 2022-05-27 14:36:30 -07:00
software deprecation messages for unused base script functions 2022-05-27 14:36:30 -07:00
spicy Integrate the Spicy plugin into Zeek proper. 2023-05-16 10:17:45 +02:00
sumstats Generalize Cluster::worker_count. 2023-04-21 19:04:39 +02:00
supervisor Add pcap_file option to supervised nodes. 2023-03-21 16:18:02 +01:00
telemetry telemetry: In a cluster, open port 9911 for Prometheus by default 2022-08-26 09:42:12 +02:00
tunnels Add GTPv1 packet analyzer, disable old analyzer 2021-11-23 19:36:50 -07:00