| .. |
|
af_packet.plugin
|
|
|
|
bifs.addr_count_conversion
|
|
|
|
bifs.addr_to_ptr_name
|
|
|
|
bifs.addr_version
|
|
|
|
bifs.all_set
|
|
|
|
bifs.analyzer_name
|
|
|
|
bifs.any_set
|
|
|
|
bifs.backtrace
|
|
|
|
bifs.bare_mode
|
|
|
|
bifs.bloomfilter
|
|
|
|
bifs.bloomfilter-seed
|
|
|
|
bifs.bytestring_to_count
|
|
|
|
bifs.bytestring_to_double
|
|
|
|
bifs.bytestring_to_float
|
|
|
|
bifs.bytestring_to_hexstr
|
|
|
|
bifs.cat
|
|
|
|
bifs.cat_sep_errors
|
|
|
|
bifs.cat_sep_errors-2
|
|
|
|
bifs.cat_sep_errors-3
|
|
|
|
bifs.cat_sep_errors-4
|
|
|
|
bifs.cat_sep_errors-5
|
|
|
|
bifs.check_subnet
|
|
|
|
bifs.clear_table
|
|
|
|
bifs.clear_table_expire_func
|
|
|
|
bifs.community_id.run-pcaps
|
|
|
|
bifs.community_id.v1
|
|
|
|
bifs.compress_path
|
|
|
|
bifs.convert_for_pattern
|
|
|
|
bifs.count_to_addr
|
|
|
|
bifs.create_file
|
|
|
|
bifs.decode_base64
|
|
|
|
bifs.decode_base64_conn
|
|
|
|
bifs.decode_base64_errors
|
|
|
|
bifs.directory_operations
|
|
|
|
bifs.disable_analyzer
|
|
|
|
bifs.disable_analyzer-early
|
|
|
|
bifs.disable_analyzer-for-conn
|
Add btests for the lookup_connection_analyzer_id() BiF.
|
2024-05-30 16:38:09 -07:00 |
|
bifs.disable_analyzer-for-conn-2
|
Add btests for the lookup_connection_analyzer_id() BiF.
|
2024-05-30 16:38:09 -07:00 |
|
bifs.disable_analyzer-for-conn-3
|
Add btests for the lookup_connection_analyzer_id() BiF.
|
2024-05-30 16:38:09 -07:00 |
|
bifs.disable_analyzer-hook
|
|
|
|
bifs.disable_analyzer-hook-module
|
|
|
|
bifs.disable_analyzer-invalid-aid
|
More precise error reporting for the disable_analyzer() BiF
|
2024-05-30 16:38:22 -07:00 |
|
bifs.disable_analyzer-tcp-packet-children
|
|
|
|
bifs.do_find_str
|
|
|
|
bifs.dump_current_packet
|
|
|
|
bifs.edit
|
|
|
|
bifs.enable_raw_output
|
|
|
|
bifs.encode_base64
|
|
|
|
bifs.entropy_test
|
|
|
|
bifs.enum_names
|
|
|
|
bifs.enum_to_int
|
|
|
|
bifs.escape_string
|
|
|
|
bifs.event-handler-stats
|
|
|
|
bifs.exit
|
|
|
|
bifs.file_mode
|
|
|
|
bifs.filter_subnet_table
|
|
|
|
bifs.find_all
|
|
|
|
bifs.find_all_ordered
|
|
|
|
bifs.find_entropy
|
|
|
|
bifs.find_in_zeekpath
|
zeek.bif: Add find_in_zeekpath() helper
|
2024-02-22 11:33:03 +01:00 |
|
bifs.find_last
|
|
|
|
bifs.fmt
|
|
|
|
bifs.fmt_ftp_port
|
|
|
|
bifs.footprint
|
refine Val "footprint" to equate long strings with multiple objects
|
2024-04-29 12:39:36 -07:00 |
|
bifs.from_json
|
Support table deserialization in from_json()
|
2024-07-02 14:46:16 -07:00 |
|
bifs.from_json-2
|
added a space when rendering some expressions so they're more readable
|
2024-05-29 12:40:05 -07:00 |
|
bifs.from_json-3
|
added a space when rendering some expressions so they're more readable
|
2024-05-29 12:40:05 -07:00 |
|
bifs.from_json-4
|
added a space when rendering some expressions so they're more readable
|
2024-05-29 12:40:05 -07:00 |
|
bifs.from_json-5
|
Support table deserialization in from_json()
|
2024-07-02 14:46:16 -07:00 |
|
bifs.from_json-6
|
Support map-based definition of ports in from_json()
|
2024-07-02 14:46:16 -07:00 |
|
bifs.from_json-7
|
added a space when rendering some expressions so they're more readable
|
2024-05-29 12:40:05 -07:00 |
|
bifs.from_json-8
|
added a space when rendering some expressions so they're more readable
|
2024-05-29 12:40:05 -07:00 |
|
bifs.from_json-9
|
added a space when rendering some expressions so they're more readable
|
2024-05-29 12:40:05 -07:00 |
|
bifs.from_json-10
|
|
|
|
bifs.from_json-11
|
added a space when rendering some expressions so they're more readable
|
2024-05-29 12:40:05 -07:00 |
|
bifs.from_json-12
|
|
|
|
bifs.from_json-13
|
added a space when rendering some expressions so they're more readable
|
2024-05-29 12:40:05 -07:00 |
|
bifs.from_json-14
|
|
|
|
bifs.get_current_packet_header
|
|
|
|
bifs.get_dns_stats
|
|
|
|
bifs.get_port_transport_proto
|
|
|
|
bifs.getsetenv
|
|
|
|
bifs.global_ids
|
global_ids: Align script_id$type_name field with type_name()
|
2024-02-23 17:26:56 +01:00 |
|
bifs.global_ids-modules
|
|
|
|
bifs.haversine_distance
|
|
|
|
bifs.hexdump
|
|
|
|
bifs.hexstr_to_bytestring
|
|
|
|
bifs.hll_cardinality
|
|
|
|
bifs.hll_cluster
|
|
|
|
bifs.hll_large_estimate
|
|
|
|
bifs.identify_data
|
|
|
|
bifs.install_src_addr_filter
|
|
|
|
bifs.is_ascii
|
|
|
|
bifs.is_local_interface
|
|
|
|
bifs.is_port
|
|
|
|
bifs.join_string
|
|
|
|
bifs.levenshtein_distance
|
|
|
|
bifs.lookup_ID
|
|
|
|
bifs.lowerupper
|
|
|
|
bifs.lstrip
|
|
|
|
bifs.mask_addr
|
|
|
|
bifs.matching_subnets
|
|
|
|
bifs.math
|
|
|
|
bifs.md5
|
|
|
|
bifs.net_stats_trace
|
|
|
|
bifs.netbios-functions
|
|
|
|
bifs.order
|
|
|
|
bifs.packet_sources
|
|
|
|
bifs.parse_ftp
|
|
|
|
bifs.piped_exec
|
|
|
|
bifs.print_raw
|
|
|
|
bifs.ptr_name_to_addr
|
|
|
|
bifs.rand
|
|
|
|
bifs.raw_bytes_to_v4_addr
|
|
|
|
bifs.raw_bytes_to_v6_addr
|
|
|
|
bifs.reading_traces
|
|
|
|
bifs.record_type_to_vector
|
|
|
|
bifs.records_fields
|
|
|
|
bifs.remask_addr
|
|
|
|
bifs.resize
|
|
|
|
bifs.reverse
|
|
|
|
bifs.rotate_file
|
|
|
|
bifs.rotate_file_by_name
|
|
|
|
bifs.routing0_data_to_addrs
|
|
|
|
bifs.rstrip
|
|
|
|
bifs.safe_shell_quote
|
|
|
|
bifs.same_object
|
|
|
|
bifs.sha1
|
|
|
|
bifs.sha256
|
|
|
|
bifs.sort
|
|
|
|
bifs.split_string
|
strings.bif/do_split_string: Pass bol and eol to MatchPrefix()
|
2023-11-16 08:36:08 +01:00 |
|
bifs.strcmp
|
|
|
|
bifs.strftime
|
|
|
|
bifs.string_fill
|
|
|
|
bifs.string_to_pattern
|
|
|
|
bifs.string_utils
|
Convert remove_prefix/suffix BIFs to use std::string_view
|
2024-01-23 10:38:56 -07:00 |
|
bifs.string_utils_errors
|
|
|
|
bifs.strip
|
|
|
|
bifs.strptime
|
|
|
|
bifs.strstr
|
|
|
|
bifs.sub
|
strings.bif/sub,gsub: Respect anchors in pattern
|
2023-11-17 14:37:25 +01:00 |
|
bifs.subnet_to_addr
|
|
|
|
bifs.subnet_version
|
|
|
|
bifs.subst_string
|
|
|
|
bifs.system
|
|
|
|
bifs.system_env
|
|
|
|
bifs.table_keys
|
|
|
|
bifs.table_values
|
|
|
|
bifs.to_addr
|
|
|
|
bifs.to_count
|
|
|
|
bifs.to_double
|
|
|
|
bifs.to_double_from_string
|
|
|
|
bifs.to_int
|
|
|
|
bifs.to_interval
|
|
|
|
bifs.to_port
|
|
|
|
bifs.to_subnet
|
|
|
|
bifs.to_time
|
|
|
|
bifs.topk
|
|
|
|
bifs.type_aliases
|
|
|
|
bifs.type_name
|
Var/Func: Render function parameters using comma, not semicolon
|
2023-10-04 17:42:30 +02:00 |
|
bifs.unique_id
|
|
|
|
bifs.unique_id-rnd
|
|
|
|
bifs.uuid_to_string
|
|
|
|
bifs.x509_check_hostname
|
|
|
|
bifs.x509_parse_dn
|
|
|
|
bifs.x509_verify
|
Merge remote-tracking branch 'origin/topic/awelzel/4035-btest-openssl-sha1-certs'
|
2025-05-19 11:18:20 -07:00 |
|
bifs.zeek_args
|
|
|
|
broker.connect-on-retry
|
|
|
|
broker.disconnect
|
|
|
|
broker.error
|
|
|
|
broker.event-group-interaction
|
|
|
|
broker.opaque
|
|
|
|
broker.python-bindings
|
|
|
|
broker.remote_event
|
base/frameworks/spicy: Do not load base/misc/version
|
2023-10-24 13:15:21 +02:00 |
|
broker.remote_event_any
|
base/frameworks/spicy: Do not load base/misc/version
|
2023-10-24 13:15:21 +02:00 |
|
broker.remote_event_auto
|
|
|
|
broker.remote_event_auto_ts
|
|
|
|
broker.remote_event_index_types
|
|
|
|
broker.remote_event_ssl_auth
|
base/frameworks/spicy: Do not load base/misc/version
|
2023-10-24 13:15:21 +02:00 |
|
broker.remote_event_ts
|
|
|
|
broker.remote_event_ts_compat
|
|
|
|
broker.remote_event_vector_any
|
|
|
|
broker.remote_id
|
|
|
|
broker.remote_log
|
|
|
|
broker.remote_log_batch
|
|
|
|
broker.remote_log_late_join
|
|
|
|
broker.remote_log_types
|
|
|
|
broker.ssl-mismatch
|
|
|
|
broker.ssl_auth_failure
|
|
|
|
broker.store.brokerstore-attr-clone
|
|
|
|
broker.store.brokerstore-attr-expire
|
|
|
|
broker.store.brokerstore-attr-persistence
|
|
|
|
broker.store.brokerstore-attr-persistence-clone
|
|
|
|
broker.store.brokerstore-attr-simple
|
|
|
|
broker.store.brokerstore-backend-delete-composite-key
|
Add btest for brokerstore delete with complex index.
|
2023-09-28 18:31:34 +02:00 |
|
broker.store.brokerstore-backend-invalid
|
|
|
|
broker.store.brokerstore-backend-simple
|
|
|
|
broker.store.brokerstore-backend-simple-incompatible
|
|
|
|
broker.store.brokerstore-backend-simple-reverse
|
|
|
|
broker.store.brokerstore-backend-sqlite
|
|
|
|
broker.store.brokerstore-backend-sqlite-corrupt-delete
|
|
|
|
broker.store.brokerstore-backend-sqlite-corrupt-fail
|
|
|
|
broker.store.brokerstore-backend-sqlite-incompatible
|
|
|
|
broker.store.brokerstore-backend-sqlite-integrity-check
|
|
|
|
broker.store.brokerstore-backend-sqlite-wal-mode
|
|
|
|
broker.store.clone
|
|
|
|
broker.store.create-failure
|
|
|
|
broker.store.handle-copy
|
|
|
|
broker.store.invalid-handle
|
added a space when rendering some expressions so they're more readable
|
2024-05-29 12:40:05 -07:00 |
|
broker.store.local
|
|
|
|
broker.store.ops
|
|
|
|
broker.store.record
|
|
|
|
broker.store.set
|
|
|
|
broker.store.sqlite
|
|
|
|
broker.store.table
|
|
|
|
broker.store.type-conversion
|
|
|
|
broker.store.vector
|
|
|
|
broker.unpeer
|
|
|
|
broker.web-socket-events
|
|
|
|
broker.web-socket-events-metadata
|
|
|
|
core.analyzer-confirmation-violation-info
|
|
|
|
core.analyzer-confirmation-violation-info-ftp
|
|
|
|
core.bits_per_uid
|
|
|
|
core.check-unused-event-handlers
|
Merge remote-tracking branch 'origin/topic/robin/gh-3881-spicy-ports'
|
2024-08-30 13:26:16 -07:00 |
|
core.checksums
|
|
|
|
core.checksums-cli
|
|
|
|
core.checksums_ignore_nets
|
|
|
|
core.checksums_ignore_nets_runtime_update
|
|
|
|
core.cisco-fabric-path
|
|
|
|
core.command-line-option-redefs
|
|
|
|
core.conn-size-threshold
|
|
|
|
core.conn-stats
|
|
|
|
core.conn-uid
|
|
|
|
core.connection_flip_roles
|
|
|
|
core.connection_flipped
|
|
|
|
core.connection_status_update
|
|
|
|
core.disable-mobile-ipv6
|
|
|
|
core.discarder
|
|
|
|
core.div-by-zero
|
|
|
|
core.dns-init
|
|
|
|
core.embedded-null
|
|
|
|
core.erspan
|
|
|
|
core.erspanI
|
|
|
|
core.erspanII
|
|
|
|
core.erspanIII
|
|
|
|
core.ether-addrs
|
|
|
|
core.event-arg-reuse
|
|
|
|
core.event-groups.basic
|
|
|
|
core.event-groups.errors
|
|
|
|
core.event-groups.errors-2
|
|
|
|
core.event-groups.errors-3
|
|
|
|
core.event-groups.errors-4
|
|
|
|
core.event-groups.existence
|
|
|
|
core.event-groups.hooks-basic
|
|
|
|
core.event-groups.hooks-module
|
|
|
|
core.event-groups.module
|
|
|
|
core.event-groups.multi-group
|
|
|
|
core.event-groups.runtime
|
|
|
|
core.expire-all-timers
|
|
|
|
core.expired-conn-weird
|
|
|
|
core.expr-exception
|
Merge remote-tracking branch 'origin/topic/vern/zam-exception-leaks'
|
2024-12-12 13:05:13 -07:00 |
|
core.fake_dns
|
|
|
|
core.file-analyzer-violation
|
threading/Manager: Warn if threads are added after termination
|
2024-07-02 12:34:28 +02:00 |
|
core.global_opaque_val
|
|
|
|
core.history-flip
|
|
|
|
core.icmp.icmp-context
|
|
|
|
core.icmp.icmp-events
|
|
|
|
core.icmp.icmp6-context
|
|
|
|
core.icmp.icmp6-events
|
|
|
|
core.icmp.icmp6-nd-options
|
|
|
|
core.icmp.icmp_sent
|
|
|
|
core.init-error
|
|
|
|
core.ip-broken-header
|
|
|
|
core.ipv6-atomic-frag
|
|
|
|
core.ipv6-flow-labels
|
|
|
|
core.ipv6-frag
|
|
|
|
core.ipv6_esp
|
|
|
|
core.ipv6_ext_headers
|
|
|
|
core.ipv6_zero_len_ah
|
|
|
|
core.linuxsll2
|
|
|
|
core.load-duplicates-links
|
|
|
|
core.load-explicit-bro-suffix-fallback
|
|
|
|
core.load-file-extension
|
|
|
|
core.load-pkg
|
|
|
|
core.load-prefixes
|
|
|
|
core.load-relative
|
|
|
|
core.load-stdin
|
|
|
|
core.load-unload
|
|
|
|
core.max-analyzer-violations
|
Merge remote-tracking branch 'origin/topic/awelzel/3936-pop3-and-redis'
|
2024-09-23 11:12:54 -07:00 |
|
core.mmdb.explicit-open
|
Add btest to verify behavior of re-opened MMDBs opened directly via BIFs
|
2024-01-10 20:44:40 -08:00 |
|
core.mmdb.lookup
|
Add btest for succeeding/failing IPv4/IPv6 lookups
|
2024-01-25 23:54:20 -08:00 |
|
core.mmdb.reopen
|
btest/core/mmdb: Basic lookup_autonomous_system / lookup_location tests
|
2023-10-24 13:15:18 +02:00 |
|
core.mmdb.temporary-error
|
Fix mmdb.temporary-error testcase when MMDBs are installed on system
|
2024-01-10 20:28:41 -08:00 |
|
core.mobile-ipv6-dst-opts
|
|
|
|
core.mobile-ipv6-home-addr
|
|
|
|
core.mobile-ipv6-routing
|
|
|
|
core.mobility-checksums
|
|
|
|
core.mobility_msg
|
|
|
|
core.mpls-in-vlan
|
|
|
|
core.network-time
|
|
|
|
core.network-time-init
|
|
|
|
core.network_time.broker
|
|
|
|
core.network_time.no-update
|
|
|
|
core.network_time.set-network-time
|
|
|
|
core.network_time.set-network-time-expiration
|
|
|
|
core.nflog
|
|
|
|
core.nop
|
|
|
|
core.option-errors
|
|
|
|
core.option-errors-2
|
|
|
|
core.option-errors-3
|
|
|
|
core.option-priorities
|
|
|
|
core.option-redef
|
|
|
|
core.option-runtime-errors
|
added a space when rendering some expressions so they're more readable
|
2024-05-29 12:40:05 -07:00 |
|
core.option-runtime-errors-2
|
added a space when rendering some expressions so they're more readable
|
2024-05-29 12:40:05 -07:00 |
|
core.option-runtime-errors-3
|
added a space when rendering some expressions so they're more readable
|
2024-05-29 12:40:05 -07:00 |
|
core.option-runtime-errors-4
|
added a space when rendering some expressions so they're more readable
|
2024-05-29 12:40:05 -07:00 |
|
core.option-runtime-errors-5
|
added a space when rendering some expressions so they're more readable
|
2024-05-29 12:40:05 -07:00 |
|
core.option-runtime-errors-6
|
added a space when rendering some expressions so they're more readable
|
2024-05-29 12:40:05 -07:00 |
|
core.option-runtime-errors-7
|
added a space when rendering some expressions so they're more readable
|
2024-05-29 12:40:05 -07:00 |
|
core.option-runtime-errors-8
|
added a space when rendering some expressions so they're more readable
|
2024-05-29 12:40:05 -07:00 |
|
core.option-runtime-errors-9
|
added a space when rendering some expressions so they're more readable
|
2024-05-29 12:40:05 -07:00 |
|
core.option-runtime-errors-10
|
added a space when rendering some expressions so they're more readable
|
2024-05-29 12:40:05 -07:00 |
|
core.option-runtime-errors-11
|
added a space when rendering some expressions so they're more readable
|
2024-05-29 12:40:05 -07:00 |
|
core.option-runtime-errors-12
|
added a space when rendering some expressions so they're more readable
|
2024-05-29 12:40:05 -07:00 |
|
core.option-runtime-errors-13
|
added a space when rendering some expressions so they're more readable
|
2024-05-29 12:40:05 -07:00 |
|
core.option-zeek-done
|
|
|
|
core.packet-analyzer-override
|
|
|
|
core.parse-only-signature-file-issues
|
rule-parse: Remove [event_name] syntax, deprecate msg as identifier
|
2023-12-14 10:16:35 +01:00 |
|
core.parse-only-usage-issues
|
|
|
|
core.pbb
|
|
|
|
core.pcap.dumper
|
|
|
|
core.pcap.dynamic-filter
|
|
|
|
core.pcap.filter-warning
|
Update core.pcap.filter-warning baseline
|
2024-04-18 12:27:46 +00:00 |
|
core.pcap.input-error
|
iosource/pcap: Support configurable buffer size
|
2023-10-10 15:08:51 +02:00 |
|
core.pcap.pseudo-realtime
|
|
|
|
core.pcap.read-trace-with-filter
|
|
|
|
core.pcap.wrong-format
|
iosource/pcap: Support configurable buffer size
|
2023-10-10 15:08:51 +02:00 |
|
core.pcap_file_done
|
|
|
|
core.ppp
|
PPP: Add PPP analyzer to handle LINKTYPE_PPP (0x9)
|
2023-08-23 16:41:19 +02:00 |
|
core.pppoe
|
|
|
|
core.pppoe-over-qinq
|
|
|
|
core.print-bpf-filters
|
Add registration for GRE-over-UDP
|
2023-10-16 11:42:24 -07:00 |
|
core.print-interval
|
|
|
|
core.proc-status-file
|
|
|
|
core.protocol-registration-error
|
|
|
|
core.q-in-q
|
|
|
|
core.radiotap
|
|
|
|
core.raw-truncation
|
|
|
|
core.raw_packet
|
|
|
|
core.reassembly
|
|
|
|
core.record-field-defer
|
testing/btest: Un-deferred record initalization tests
|
2023-09-12 12:12:46 +02:00 |
|
core.record-field-defer-2
|
testing/btest: Un-deferred record initalization tests
|
2023-09-12 12:12:46 +02:00 |
|
core.record-field-defer-3
|
testing/btest: Un-deferred record initalization tests
|
2023-09-12 12:12:46 +02:00 |
|
core.record-field-defer-4
|
testing/btest: Un-deferred record initalization tests
|
2023-09-12 12:12:46 +02:00 |
|
core.record-field-defer-parse-time
|
testing/btest: Un-deferred record initalization tests
|
2023-09-12 12:12:46 +02:00 |
|
core.record-field-defer-parse-time-nested
|
testing/btest: Un-deferred record initalization tests
|
2023-09-12 12:12:46 +02:00 |
|
core.record-field-defer-table
|
testing/btest: Un-deferred record initalization tests
|
2023-09-12 12:12:46 +02:00 |
|
core.record-field-defer-table-2
|
testing/btest: Un-deferred record initalization tests
|
2023-09-12 12:12:46 +02:00 |
|
core.record-field-defer-table-3
|
testing/btest: Un-deferred record initalization tests
|
2023-09-12 12:12:46 +02:00 |
|
core.record-field-redef
|
|
|
|
core.record-field-redef-errors
|
|
|
|
core.record-field-redef-errors-2
|
|
|
|
core.record-field-redef-errors-3
|
|
|
|
core.record-field-redef-errors-4
|
|
|
|
core.record-field-redef-errors-5
|
|
|
|
core.record-field-redef-errors-6
|
|
|
|
core.record-field-redef-errors-7
|
|
|
|
core.record-field-redef-errors-8
|
|
|
|
core.record-field-redef-errors-9
|
|
|
|
core.record-field-redef-errors-10
|
|
|
|
core.record-field-redef-errors-11
|
|
|
|
core.record-field-redef-errors-12
|
|
|
|
core.recursive-event
|
|
|
|
core.reporter
|
|
|
|
core.reporter-error-in-handler
|
|
|
|
core.reporter-fmt-strings
|
|
|
|
core.reporter-parse-error
|
|
|
|
core.reporter-paths
|
Btest for normalized reporter path reporting
|
2023-10-03 22:16:00 -07:00 |
|
core.reporter-runtime-error
|
|
|
|
core.reporter-type-mismatch
|
|
|
|
core.reporter-weird-sampling
|
|
|
|
core.reporter-weird-sampling-disable
|
|
|
|
core.reporter-weird-sampling-global
|
|
|
|
core.script-args
|
|
|
|
core.seed
|
|
|
|
core.seed-errors
|
|
|
|
core.skip_analyzer
|
|
|
|
core.suspend_processing.broker
|
|
|
|
core.suspend_processing.config
|
|
|
|
core.suspend_processing.event-from-zeek-init
|
|
|
|
core.suspend_processing.event-order
|
|
|
|
core.suspend_processing.raw-input
|
|
|
|
core.suspend_processing.scheduled-event-from-zeek-init
|
|
|
|
core.suspend_processing.suspension-stack
|
|
|
|
core.tcp-padding
|
|
|
|
core.tcp.fin-retransmit
|
|
|
|
core.tcp.flip-without-syn
|
|
|
|
core.tcp.large-file-reassembly
|
|
|
|
core.tcp.miss-end-data
|
|
|
|
core.tcp.missing-syn
|
|
|
|
core.tcp.options
|
|
|
|
core.tcp.quantum-insert
|
|
|
|
core.tcp.reassembly-known-ports
|
|
|
|
core.tcp.rst-after-syn
|
|
|
|
core.tcp.rxmit-history
|
|
|
|
core.tcp.tcp-dups
|
|
|
|
core.tcp.truncated-header
|
|
|
|
core.truncation
|
|
|
|
core.tunnels.analyzer-confirmation
|
|
|
|
core.tunnels.ayiya
|
|
|
|
core.tunnels.geneve
|
|
|
|
core.tunnels.geneve-47101
|
|
|
|
core.tunnels.geneve-many-options
|
|
|
|
core.tunnels.geneve-truncated
|
|
|
|
core.tunnels.geneve-vxlan-truncated
|
|
|
|
core.tunnels.gre
|
|
|
|
core.tunnels.gre-aruba
|
|
|
|
core.tunnels.gre-aruba-amsdu
|
|
|
|
core.tunnels.gre-erspan3-dot1q
|
|
|
|
core.tunnels.gre-in-gre
|
|
|
|
core.tunnels.gre-in-gre-min-depth
|
Remove setting non-existent session history for IPTunnel
|
2024-01-23 12:39:58 -07:00 |
|
core.tunnels.gre-over-udp
|
gre-over-udp: Update testing pcap with both endpoints
|
2023-10-17 12:30:14 +02:00 |
|
core.tunnels.gre-pptp
|
|
|
|
core.tunnels.gtp.different_dl_and_ul
|
|
|
|
core.tunnels.gtp.ext_header
|
|
|
|
core.tunnels.gtp.false_gtp
|
|
|
|
core.tunnels.gtp.inner_ipv6
|
|
|
|
core.tunnels.gtp.inner_teredo
|
|
|
|
core.tunnels.gtp.non_recursive
|
|
|
|
core.tunnels.gtp.not_user_plane_data
|
|
|
|
core.tunnels.gtp.opt_header
|
|
|
|
core.tunnels.gtp.outer_ip_frag
|
|
|
|
core.tunnels.gtp.pdp_ctx_messages
|
|
|
|
core.tunnels.gtp.unknown_or_too_short
|
|
|
|
core.tunnels.ip-in-ip
|
|
|
|
core.tunnels.ip-in-ip-version
|
|
|
|
core.tunnels.ip-tunnel-uid
|
|
|
|
core.tunnels.max-depth
|
init-bare: Default Tunnel::max_depth to 4
|
2024-01-11 10:22:36 +01:00 |
|
core.tunnels.max-depth-exceeded
|
tunnels: Add 'X' to history when reaching Tunnel::max_depth
|
2024-01-11 10:22:44 +01:00 |
|
core.tunnels.teredo
|
|
|
|
core.tunnels.teredo-known-services
|
|
|
|
core.tunnels.teredo-udp-in-udp
|
|
|
|
core.tunnels.teredo_bubble_with_payload
|
|
|
|
core.tunnels.vxlan
|
|
|
|
core.tunnels.vxlan-unknown-internal-packet
|
|
|
|
core.udp-broadcast-no-flip
|
IPBasedAnalyzer: Don't flip connections when destination is broadcast
|
2023-08-28 12:15:55 +02:00 |
|
core.udp-content-ports
|
|
|
|
core.udp-contents-delivery-ports-use-resp
|
|
|
|
core.udp-padding
|
|
|
|
core.unknown-protocol-event
|
|
|
|
core.vlan-mpls
|
|
|
|
core.vntag
|
|
|
|
core.vntag-in-vlan
|
Update core/vntag-in-vlan baseline to remove ip_proto field for 7.0
|
2025-03-18 17:03:05 -07:00 |
|
core.when-interpreter-exceptions
|
|
|
|
core.wlanmon
|
|
|
|
core.x509-generalizedtime
|
|
|
|
coverage.bare-load-baseline
|
Merge remote-tracking branch 'origin/topic/awelzel/3936-pop3-and-redis'
|
2024-09-23 11:12:54 -07:00 |
|
coverage.bare-mode-errors
|
Move the options from policy/tuning/defaults to actual Zeek defaults, deprecate that package
|
2024-05-06 11:13:04 -07:00 |
|
coverage.basic-no-errors
|
|
|
|
coverage.coverage-blacklist
|
|
|
|
coverage.default-load-baseline
|
Merge remote-tracking branch 'origin/topic/awelzel/3936-pop3-and-redis'
|
2024-09-23 11:12:54 -07:00 |
|
coverage.find-bro-logs
|
WebSocket: Introduce new analyzer and log
|
2024-01-22 18:54:38 +01:00 |
|
coverage.global-ids-to-json
|
OpaqueVal: Register TelemetryVals, too
|
2023-11-28 09:21:31 +01:00 |
|
coverage.init-default
|
Remove the Supervisor's internal ClusterEndpoint struct.
|
2024-07-02 14:52:17 -07:00 |
|
coverage.record-fields
|
Merge remote-tracking branch 'origin/topic/awelzel/4522-bdat-last-reply-fix'
|
2025-07-14 13:57:07 -07:00 |
|
coverage.test-all-policy-cluster
|
Move the options from policy/tuning/defaults to actual Zeek defaults, deprecate that package
|
2024-05-06 11:13:04 -07:00 |
|
coverage.zeek-profiler-file
|
|
|
|
doc.zeekygen.all_scripts
|
|
|
|
doc.zeekygen.command_line
|
|
|
|
doc.zeekygen.comment_retrieval_bifs
|
|
|
|
doc.zeekygen.declaring_script
|
|
|
|
doc.zeekygen.declaring_script_enum
|
|
|
|
doc.zeekygen.declaring_script_errors
|
|
|
|
doc.zeekygen.enums
|
|
|
|
doc.zeekygen.example
|
|
|
|
doc.zeekygen.func-params
|
|
|
|
doc.zeekygen.identifier
|
zeekygen/example: Squelch unused function warning
|
2023-10-11 14:28:33 +02:00 |
|
doc.zeekygen.identifier_without_script
|
Add btest for Zeekygen docs extraction on identifiers defined by the Zeek core.
|
2024-05-03 12:22:42 -07:00 |
|
doc.zeekygen.package
|
|
|
|
doc.zeekygen.package_index
|
|
|
|
doc.zeekygen.records
|
|
|
|
doc.zeekygen.script_index
|
|
|
|
doc.zeekygen.script_summary
|
|
|
|
doc.zeekygen.type-aliases
|
|
|
|
doc.zeekygen.vectors
|
|
|
|
javascript.hello
|
|
|
|
javascript.http-request
|
|
|
|
javascript.http-uri-sha256
|
|
|
|
javascript.intel
|
|
|
|
javascript.log-delay
|
testing/btest: Log::delay() from JavaScript
|
2023-11-29 12:52:19 +01:00 |
|
javascript.suspend-continue
|
|
|
|
language.addr
|
|
|
|
language.alternate-event-hook-prototypes
|
Var/Func: Render function parameters using comma, not semicolon
|
2023-10-04 17:42:30 +02:00 |
|
language.alternate-event-hook-prototypes-invalid-arg
|
Var/Func: Render function parameters using comma, not semicolon
|
2023-10-04 17:42:30 +02:00 |
|
language.alternate-prototypes-arg-matching
|
|
|
|
language.alternate-prototypes-default-args
|
Var/Func: Render function parameters using comma, not semicolon
|
2023-10-04 17:42:30 +02:00 |
|
language.alternate-prototypes-deprecated-args
|
Var/Func: Render function parameters using comma, not semicolon
|
2023-10-04 17:42:30 +02:00 |
|
language.any
|
|
|
|
language.any-script-func-variadic-errors
|
|
|
|
language.any-script-func-variadic-errors-2
|
|
|
|
language.any-when
|
|
|
|
language.assert
|
|
|
|
language.assert-2
|
|
|
|
language.assert-3
|
|
|
|
language.assert-4
|
|
|
|
language.assert-5
|
|
|
|
language.assert-6
|
|
|
|
language.assert-7
|
|
|
|
language.assert-8
|
|
|
|
language.assert-error
|
|
|
|
language.assert-error-2
|
|
|
|
language.assert-error-3
|
|
|
|
language.assert-error-4
|
|
|
|
language.assert-hook
|
|
|
|
language.assert-hook-2
|
|
|
|
language.assert-hook-3
|
|
|
|
language.assert-hook-4
|
|
|
|
language.assert-hook-5
|
|
|
|
language.assert-hook-6
|
|
|
|
language.assert-hook-7
|
|
|
|
language.assert-hook-8
|
Stmt: Fix assert evaluating cond twice
|
2024-03-04 15:30:09 +01:00 |
|
language.assert-misc
|
|
|
|
language.assert-top-level
|
|
|
|
language.at-deprecated
|
|
|
|
language.at-dir
|
|
|
|
language.at-filename
|
|
|
|
language.at-if
|
|
|
|
language.at-if-else-if-no-way
|
|
|
|
language.at-if-event
|
|
|
|
language.at-if-invalid
|
|
|
|
language.at-if-lambda
|
Var/Func: Render function parameters using comma, not semicolon
|
2023-10-04 17:42:30 +02:00 |
|
language.at-if-lambda-2
|
Var/Func: Render function parameters using comma, not semicolon
|
2023-10-04 17:42:30 +02:00 |
|
language.at-if-lambda-3
|
Var/Func: Render function parameters using comma, not semicolon
|
2023-10-04 17:42:30 +02:00 |
|
language.at-if-lambda-4
|
Var/Func: Render function parameters using comma, not semicolon
|
2023-10-04 17:42:30 +02:00 |
|
language.at-if-record
|
parse: Support @if conditionals in record definitions
|
2024-01-08 15:21:48 +01:00 |
|
language.at-if-record-2
|
parse: Support @if conditionals in record definitions
|
2024-01-08 15:21:48 +01:00 |
|
language.at-if-record-3
|
parse: Support @if conditionals in record definitions
|
2024-01-08 15:21:48 +01:00 |
|
language.at-if-record-4
|
parse: Support @if conditionals in record definitions
|
2024-01-08 15:21:48 +01:00 |
|
language.at-if-record-5
|
parse: Support @if conditionals in record definitions
|
2024-01-08 15:21:48 +01:00 |
|
language.at-if-record-6
|
parse: Support @if conditionals in record definitions
|
2024-01-08 15:21:48 +01:00 |
|
language.at-if-record-7
|
parse: Support @if conditionals in record definitions
|
2024-01-08 15:21:48 +01:00 |
|
language.at-if-reject
|
|
|
|
language.at-if-reject-2
|
|
|
|
language.at-if-reject-3
|
|
|
|
language.at-if-reject-4
|
|
|
|
language.at-if-reject-5
|
|
|
|
language.at-ifdef
|
|
|
|
language.at-ifndef
|
|
|
|
language.at-load
|
|
|
|
language.attr-default-coercion
|
|
|
|
language.attr-default-global-set-error
|
improved error cascade for invalid attributes
|
2024-06-04 10:36:36 -07:00 |
|
language.blank-expr-errors
|
|
|
|
language.blank-expr-errors-2
|
|
|
|
language.blank-expr-errors-3
|
|
|
|
language.blank-expr-errors-4
|
|
|
|
language.blank-expr-errors-5
|
|
|
|
language.blank-for
|
|
|
|
language.blank-local
|
|
|
|
language.blank-local-2
|
|
|
|
language.blank-local-3
|
|
|
|
language.blank-local-4
|
|
|
|
language.blank-option-error
|
|
|
|
language.bool
|
|
|
|
language.closure-binding
|
|
|
|
language.closure-binding-errors
|
disambiguate lambdas by adding scoping and consideration of captures
|
2023-08-16 16:58:05 -07:00 |
|
language.closure-sending
|
|
|
|
language.closure-sending-naming
|
|
|
|
language.closure-sending2
|
|
|
|
language.common-mistakes
|
|
|
|
language.common-mistakes2
|
|
|
|
language.complex-delete
|
|
|
|
language.conditional-expression
|
|
|
|
language.const
|
|
|
|
language.container-ctor-scope
|
|
|
|
language.container-option-init
|
|
|
|
language.copy
|
|
|
|
language.copy-all-opaques
|
|
|
|
language.copy-all-types
|
|
|
|
language.copy-cycle
|
|
|
|
language.count
|
|
|
|
language.count-underflow
|
|
|
|
language.crlf-parsing
|
|
|
|
language.cross-product-init
|
|
|
|
language.dangling-at
|
|
|
|
language.default-params
|
|
|
|
language.delete-containers
|
Allow delete statement for tables, sets and vectors
|
2024-02-21 18:00:00 +01:00 |
|
language.delete-field
|
|
|
|
language.delete-field-set
|
|
|
|
language.delete-table-set
|
Allow delete statement for tables, sets and vectors
|
2024-02-21 18:00:00 +01:00 |
|
language.deprecate-global
|
|
|
|
language.deprecated
|
|
|
|
language.double
|
|
|
|
language.duplicate-attributes
|
|
|
|
language.enum
|
|
|
|
language.enum-desc
|
|
|
|
language.enum-multiple-decls
|
|
|
|
language.enum-name-conflict
|
|
|
|
language.enum-nonexisting
|
|
|
|
language.enum-scope
|
|
|
|
language.eof-parse-errors
|
|
|
|
language.event
|
|
|
|
language.event-invoke-mismatch-error
|
|
|
|
language.event-local-var
|
|
|
|
language.event-shadowing
|
|
|
|
language.event-ts
|
|
|
|
language.event-ts-scheduled
|
|
|
|
language.expire-expr-error
|
|
|
|
language.expire-func-type-check
|
Var/Func: Render function parameters using comma, not semicolon
|
2023-10-04 17:42:30 +02:00 |
|
language.expire-func-undef
|
|
|
|
language.expire-redef
|
|
|
|
language.expire-type-error
|
|
|
|
language.expire_func
|
|
|
|
language.expire_func-copy
|
|
|
|
language.expire_func_mod
|
|
|
|
language.expire_multiple
|
|
|
|
language.expire_multiple-2
|
|
|
|
language.expire_multiple-3
|
|
|
|
language.expire_subnet
|
|
|
|
language.file
|
|
|
|
language.for
|
|
|
|
language.for-var-check
|
|
|
|
language.func-assignment
|
|
|
|
language.func-equality
|
|
|
|
language.function
|
|
|
|
language.function-already-defined
|
|
|
|
language.function-closures
|
|
|
|
language.function-invoke-mismatch-error
|
|
|
|
language.function-sending
|
|
|
|
language.global-colon-colon
|
|
|
|
language.global-colon-colon-errors
|
|
|
|
language.global-colon-colon-errors-2
|
|
|
|
language.global-colon-colon-errors-3
|
|
|
|
language.global-colon-colon-errors-4
|
|
|
|
language.global-colon-colon-errors-5
|
|
|
|
language.global-colon-colon-errors-6
|
|
|
|
language.global-colon-colon-redef
|
|
|
|
language.global-init-calls-bif
|
|
|
|
language.global-init-calls-bif-using-builtin-type
|
|
|
|
language.global-type-clash
|
|
|
|
language.global-unset-addto
|
|
|
|
language.hook
|
|
|
|
language.hook_calls
|
|
|
|
language.identifier-not-defined-error
|
|
|
|
language.if
|
|
|
|
language.ignore-deprecations
|
|
|
|
language.ignore-deprecations-2
|
|
|
|
language.ignore-deprecations-3
|
|
|
|
language.ignore-deprecations-4
|
|
|
|
language.incr-vec-expr-error
|
|
|
|
language.index-assignment-invalid
|
|
|
|
language.ineffective-default-args
|
|
|
|
language.init-in-anon-function
|
|
|
|
language.init-integration
|
Add a services.json endpoint for Prometheus service discovery
|
2024-05-31 13:30:31 -07:00 |
|
language.init-mismatch
|
|
|
|
language.inlined-nested-loop
|
|
|
|
language.int
|
|
|
|
language.int-min-max
|
|
|
|
language.int-negation-range
|
|
|
|
language.interval
|
|
|
|
language.invalid-hostnames
|
|
|
|
language.invalid-hostnames-2
|
|
|
|
language.invalid_index
|
|
|
|
language.ipv6-literals
|
|
|
|
language.key-value-for
|
|
|
|
language.lambda-escaping
|
|
|
|
language.lambda-nested-copy
|
|
|
|
language.lambda-record-field
|
|
|
|
language.lambda-zeek-init
|
|
|
|
language.mismatched-container-ctor-types
|
|
|
|
language.module
|
|
|
|
language.more-closure-tests
|
|
|
|
language.named-record-ctors
|
|
|
|
language.named-set-ctors
|
|
|
|
language.named-table-ctors
|
|
|
|
language.named-vector-ctors
|
|
|
|
language.next-break-context-errors
|
|
|
|
language.next-break-context-errors-2
|
|
|
|
language.next-break-context-errors-3
|
|
|
|
language.next-break-context-errors-4
|
|
|
|
language.next-break-context-errors-5
|
|
|
|
language.next-break-context-errors-6
|
|
|
|
language.next-break-context-errors-7
|
|
|
|
language.next-break-context-errors-8
|
|
|
|
language.next-break-context-errors-9
|
|
|
|
language.next-test
|
|
|
|
language.no-module
|
|
|
|
language.null-statement
|
|
|
|
language.on_change
|
|
|
|
language.on_change-copy
|
|
|
|
language.on_change-recurse
|
|
|
|
language.on_change_expire
|
|
|
|
language.orphan-endif
|
|
|
|
language.outer_param_binding
|
|
|
|
language.paraglob
|
|
|
|
language.paraglob-serialization
|
|
|
|
language.pattern
|
|
|
|
language.pattern-sets
|
Expr/Val: Add support for in set[pattern]
|
2023-11-21 10:34:17 +01:00 |
|
language.pattern-tables
|
Expr: Implement string in table[pattern] of X
|
2023-11-21 10:34:17 +01:00 |
|
language.pattern-tables-stats
|
Expr/Val: Add support for in set[pattern]
|
2023-11-21 10:34:17 +01:00 |
|
language.pattern-tables-when
|
Expr: Implement string in table[pattern] of X
|
2023-11-21 10:34:17 +01:00 |
|
language.patterns-stored-in-containers
|
|
|
|
language.port
|
|
|
|
language.pragma
|
|
|
|
language.pragma-2
|
|
|
|
language.pragma-3
|
|
|
|
language.pragma-4
|
|
|
|
language.pragma-5
|
|
|
|
language.pragma-6
|
|
|
|
language.pragma-7
|
|
|
|
language.pragma-8
|
|
|
|
language.pragma-9
|
|
|
|
language.pragma-10
|
|
|
|
language.pragma-11
|
|
|
|
language.pragma-12
|
|
|
|
language.precedence
|
|
|
|
language.raw_output_attr
|
|
|
|
language.raw_output_attr-2
|
|
|
|
language.rec-comp-init
|
|
|
|
language.rec-nested-opt
|
|
|
|
language.rec-of-tbl
|
|
|
|
language.rec-table-default
|
|
|
|
language.record-bad-ctor
|
|
|
|
language.record-bad-ctor2
|
|
|
|
language.record-bad-ctor3
|
|
|
|
language.record-bad-ctor4
|
|
|
|
language.record-chain-assign
|
script optimization for record operations sourced (in part) from other records
|
2024-06-24 09:38:37 +02:00 |
|
language.record-coerce-clash
|
|
|
|
language.record-coerce-error
|
|
|
|
language.record-coerce-orphan
|
|
|
|
language.record-default-coercion
|
|
|
|
language.record-default-set-mismatch
|
|
|
|
language.record-duplicate-fields
|
|
|
|
language.record-empty-vector
|
|
|
|
language.record-extension
|
|
|
|
language.record-function-recursion
|
|
|
|
language.record-global-init-exception
|
|
|
|
language.record-index-complex-fields
|
|
|
|
language.record-option-init
|
|
|
|
language.record-recursive-coercion
|
|
|
|
language.record-recursive-table
|
|
|
|
language.record-recursive-table-2
|
|
|
|
language.record-redef-after-init
|
|
|
|
language.record-ref-assign
|
|
|
|
language.record-type-checking
|
|
|
|
language.redeclaration-redefinition-errors
|
Var: Fix null-pointer deref on redefinition of lambdas
|
2023-10-04 15:18:24 +02:00 |
|
language.redeclaration-redefinition-errors-2
|
Var: Fix null-pointer deref on redefinition of lambdas
|
2023-10-04 15:18:24 +02:00 |
|
language.redeclaration-redefinition-errors-3
|
Var: Fix null-pointer deref on redefinition of lambdas
|
2023-10-04 15:18:24 +02:00 |
|
language.redeclaration-redefinition-errors-4
|
Var: Fix null-pointer deref on redefinition of lambdas
|
2023-10-04 15:18:24 +02:00 |
|
language.redeclaration-redefinition-errors-5
|
Var: Fix null-pointer deref on redefinition of lambdas
|
2023-10-04 15:18:24 +02:00 |
|
language.redeclaration-redefinition-errors-6
|
Var: Fix null-pointer deref on redefinition of lambdas
|
2023-10-04 15:18:24 +02:00 |
|
language.redeclaration-redefinition-errors-7
|
Var/Func: Render function parameters using comma, not semicolon
|
2023-10-04 17:42:30 +02:00 |
|
language.redeclaration-redefinition-errors-8
|
Var/Func: Render function parameters using comma, not semicolon
|
2023-10-04 17:42:30 +02:00 |
|
language.redeclaration-redefinition-errors-9
|
Var/Func: Render function parameters using comma, not semicolon
|
2023-10-04 17:42:30 +02:00 |
|
language.redeclaration-redefinition-errors-10
|
Var/Func: Render function parameters using comma, not semicolon
|
2023-10-04 17:42:30 +02:00 |
|
language.redeclaration-redefinition-errors-11
|
Var/Func: Render function parameters using comma, not semicolon
|
2023-10-04 17:42:30 +02:00 |
|
language.redef-global-function
|
|
|
|
language.redef-missing-type
|
|
|
|
language.redef-missing-type-2
|
|
|
|
language.redef-missing-type-3
|
|
|
|
language.redef-missing-type-4
|
|
|
|
language.redef-missing-type-5
|
|
|
|
language.redef-missing-type-6
|
|
|
|
language.redef-same-prefixtable-idx
|
|
|
|
language.redef-vector
|
|
|
|
language.returnwhen
|
|
|
|
language.set
|
Support JSON roundtripping via to_json()/from_json() for patterns
|
2024-07-02 14:46:16 -07:00 |
|
language.set-iteration
|
|
|
|
language.set-opt-record-index
|
|
|
|
language.set-type-checking
|
|
|
|
language.set-vector-index
|
|
|
|
language.short-circuit
|
|
|
|
language.sizeof
|
|
|
|
language.sizeof-any
|
|
|
|
language.smith-waterman-test
|
|
|
|
language.spurious-table-expires
|
fix for needing to always flush optimization information for identifiers
|
2024-01-15 15:03:56 +01:00 |
|
language.string
|
|
|
|
language.string-indexing
|
|
|
|
language.strings
|
|
|
|
language.subnet
|
|
|
|
language.subnet-errors
|
|
|
|
language.switch-error-mixed
|
|
|
|
language.switch-incomplete
|
|
|
|
language.switch-statement
|
|
|
|
language.switch-type-cast-fallthrough-error
|
|
|
|
language.switch-types
|
|
|
|
language.switch-types-error-duplicate
|
|
|
|
language.switch-types-error-unsupported
|
|
|
|
language.switch-types-vars
|
|
|
|
language.table
|
Support table deserialization in from_json()
|
2024-07-02 14:46:16 -07:00 |
|
language.table-aggr-init-type-check
|
|
|
|
language.table-default-insert
|
Add &default_insert attribute for tables
|
2023-08-04 12:30:36 +02:00 |
|
language.table-default-insert-copy
|
Add &default_insert attribute for tables
|
2023-08-04 12:30:36 +02:00 |
|
language.table-default-insert-errors
|
Add &default_insert attribute for tables
|
2023-08-04 12:30:36 +02:00 |
|
language.table-default-insert-errors-2
|
Add &default_insert attribute for tables
|
2023-08-04 12:30:36 +02:00 |
|
language.table-default-insert-errors-3
|
Add &default_insert attribute for tables
|
2023-08-04 12:30:36 +02:00 |
|
language.table-default-insert-errors-4
|
Add &default_insert attribute for tables
|
2023-08-04 12:30:36 +02:00 |
|
language.table-default-insert-errors-5
|
Add &default_insert attribute for tables
|
2023-08-04 12:30:36 +02:00 |
|
language.table-default-insert-errors-6
|
Add &default_insert attribute for tables
|
2023-08-04 12:30:36 +02:00 |
|
language.table-default-insert-errors-7
|
Add &default_insert attribute for tables
|
2023-08-04 12:30:36 +02:00 |
|
language.table-default-record
|
|
|
|
language.table-index-unsupported-types
|
|
|
|
language.table-init
|
|
|
|
language.table-init-attrs
|
|
|
|
language.table-init-container-ctors
|
|
|
|
language.table-init-record-idx
|
|
|
|
language.table-init-record-idx-2
|
|
|
|
language.table-init-record-idx-3
|
|
|
|
language.table-init-record-idx-4
|
|
|
|
language.table-iterate-record-key-default
|
CompositeHash: Skip record initialization when recovering vals
|
2023-09-08 13:02:34 +02:00 |
|
language.table-iterate-record-key-default-2
|
ID/Stmt: Introduce INIT_SKIP and use in ForStmt
|
2023-09-08 13:05:44 +02:00 |
|
language.table-iterate-record-key-default-3
|
ID/Stmt: Introduce INIT_SKIP and use in ForStmt
|
2023-09-08 13:05:44 +02:00 |
|
language.table-iteration
|
|
|
|
language.table-list-assign-type-check
|
|
|
|
language.table-nested-set-ordering
|
|
|
|
language.table-optional-subrecord-index
|
|
|
|
language.table-pattern-index
|
|
|
|
language.table-record-idx-redef
|
|
|
|
language.table-redef
|
|
|
|
language.table-redef-default
|
|
|
|
language.table-set-iterator-invalidation
|
|
|
|
language.table-type-checking
|
|
|
|
language.ternary-type-check
|
|
|
|
language.time
|
|
|
|
language.timeout
|
|
|
|
language.trailing-comma
|
|
|
|
language.trailing-comma-2
|
|
|
|
language.trailing-comma-error
|
|
|
|
language.trailing-comma-error-2
|
|
|
|
language.trailing-comma-error-3
|
|
|
|
language.trailing-comma-error-4
|
|
|
|
language.trailing-comma-error-5
|
|
|
|
language.trailing-comma-error-6
|
|
|
|
language.trailing-comma-error-7
|
|
|
|
language.trailing-comma-error-8
|
|
|
|
language.trailing-comma-error-9
|
|
|
|
language.trailing-comma-error-10
|
|
|
|
language.trailing-comma-error-11
|
|
|
|
language.trailing-comma-error-12
|
|
|
|
language.type-alias-error
|
|
|
|
language.type-cast-any
|
|
|
|
language.type-cast-error-dynamic
|
BTest updates for latest ZAM maintenance
|
2023-11-10 09:57:35 +01:00 |
|
language.type-cast-error-static
|
|
|
|
language.type-cast-same
|
|
|
|
language.type-check-any
|
|
|
|
language.type-check-func-call
|
|
|
|
language.type-check-operator-in
|
|
|
|
language.type-check-vector
|
|
|
|
language.type-coerce-numerics
|
|
|
|
language.type-type-error
|
|
|
|
language.undeclared-alternate-event-hook-prototype
|
Var/Func: Render function parameters using comma, not semicolon
|
2023-10-04 17:42:30 +02:00 |
|
language.undefined-delete-field
|
|
|
|
language.uninitialized-local
|
|
|
|
language.uninitialized-local2
|
|
|
|
language.unterminated-pattern
|
|
|
|
language.unused-assignment
|
|
|
|
language.usage-analyzer
|
|
|
|
language.usage-analyzer-record-attributes
|
|
|
|
language.usage-analyzer-table-attributes
|
|
|
|
language.vector
|
fixed bug where appending an empty vector to a vector-of-vector's had no effect
|
2024-03-08 19:09:43 +01:00 |
|
language.vector-any-append
|
minor BTest reordering to diminish differences with script optimization
|
2023-09-01 12:17:06 -07:00 |
|
language.vector-coerce-expr
|
|
|
|
language.vector-coerce-expr2
|
|
|
|
language.vector-for-value
|
|
|
|
language.vector-hole-loop
|
|
|
|
language.vector-in-operator
|
|
|
|
language.vector-iterate-record-default
|
CompositeHash: Skip record initialization when recovering vals
|
2023-09-08 13:02:34 +02:00 |
|
language.vector-iterate-record-default-2
|
ID/Stmt: Introduce INIT_SKIP and use in ForStmt
|
2023-09-08 13:05:44 +02:00 |
|
language.vector-list-init-records
|
|
|
|
language.vector-neg-index
|
|
|
|
language.vector-of-enum
|
|
|
|
language.vector-of-enum-mismatch
|
|
|
|
language.vector-of-interval-arithmetic
|
|
|
|
language.vector-set-conversions
|
Fix conversion with record types
|
2023-08-10 13:42:23 -07:00 |
|
language.vector-set-conversions-errors
|
Add conversion between set and vector using 'as' keyword
|
2023-08-09 14:41:54 -07:00 |
|
language.vector-slice-assign
|
|
|
|
language.vector-type-checking
|
|
|
|
language.vector-unspecified
|
|
|
|
language.void-errors
|
Expr: Handle TYPE_VOID in SizeExpr and AssignExpr::Typecheck()
|
2024-03-07 11:24:28 +01:00 |
|
language.void-errors-2
|
Expr: Handle TYPE_VOID in SizeExpr and AssignExpr::Typecheck()
|
2024-03-07 11:24:28 +01:00 |
|
language.void-errors-3
|
Expr: Handle TYPE_VOID in SizeExpr and AssignExpr::Typecheck()
|
2024-03-07 11:24:28 +01:00 |
|
language.void-errors-4
|
Expr: Handle TYPE_VOID in SizeExpr and AssignExpr::Typecheck()
|
2024-03-07 11:24:28 +01:00 |
|
language.void-errors-5
|
added a space when rendering some expressions so they're more readable
|
2024-05-29 12:40:05 -07:00 |
|
language.void-errors-6
|
Expr: Handle TYPE_VOID in SizeExpr and AssignExpr::Typecheck()
|
2024-03-07 11:24:28 +01:00 |
|
language.void-errors-7
|
added a space when rendering some expressions so they're more readable
|
2024-05-29 12:40:05 -07:00 |
|
language.when
|
|
|
|
language.when-aggregates
|
|
|
|
language.when-capture-errors
|
|
|
|
language.when-local-function-capture-error
|
Check for valid identifier in WhenStmt::Describe
|
2024-04-10 16:20:36 -07:00 |
|
language.when-on-globals
|
|
|
|
language.when-order-of-eval
|
|
|
|
language.when-scope
|
|
|
|
language.when-unitialized-rhs
|
|
|
|
language.while
|
|
|
|
language.wrong-delete-field
|
"add" and "delete" are now expressions rather than statements
|
2024-05-29 12:40:06 -07:00 |
|
language.wrong-record-extension
|
|
|
|
language.zeek_init
|
|
|
|
language.zeek_script_loaded
|
|
|
|
opt.basic
|
btest/opt: Update basic baseline
|
2023-11-08 15:54:55 +01:00 |
|
opt.coalescence
|
BTest baseline changes for tweak to how ZAM bodies print
|
2024-03-19 10:59:49 -07:00 |
|
opt.confluence-test
|
BTests to catch regressions for recent ZAM fixes
|
2024-01-15 15:03:56 +01:00 |
|
opt.no-coalescence
|
BTest baseline changes for tweak to how ZAM bodies print
|
2024-03-19 10:59:49 -07:00 |
|
opt.opt-files
|
BTest baseline changes for tweak to how ZAM bodies print
|
2024-03-19 10:59:49 -07:00 |
|
opt.opt-files2
|
BTest baseline changes for tweak to how ZAM bodies print
|
2024-03-19 10:59:49 -07:00 |
|
opt.opt-files3
|
BTest baseline changes for tweak to how ZAM bodies print
|
2024-03-19 10:59:49 -07:00 |
|
opt.opt-func
|
BTest baseline changes for tweak to how ZAM bodies print
|
2024-03-19 10:59:49 -07:00 |
|
opt.opt-func2
|
BTest baseline changes for tweak to how ZAM bodies print
|
2024-03-19 10:59:49 -07:00 |
|
opt.opt-func3
|
BTest baseline changes for tweak to how ZAM bodies print
|
2024-03-19 10:59:49 -07:00 |
|
opt.opt-no-files
|
script optimization for record operations sourced (in part) from other records
|
2024-06-24 09:38:37 +02:00 |
|
opt.opt-no-func
|
script optimization for record operations sourced (in part) from other records
|
2024-06-24 09:38:37 +02:00 |
|
opt.opt-no-func2
|
script optimization for record operations sourced (in part) from other records
|
2024-06-24 09:38:37 +02:00 |
|
opt.pure-inlining
|
btest/opt: Update pure-inlining baseline
|
2023-11-08 16:23:22 +01:00 |
|
opt.regress-aggr-change-in-loop
|
Merge remote-tracking branch 'origin/topic/vern/zam-aggr-change-in-loop'
|
2025-05-19 09:16:10 -07:00 |
|
opt.regress-any
|
import of GH-4022 BTest additions
|
2024-11-14 10:19:07 -07:00 |
|
opt.regress-any-leak
|
import of GH-4022 BTest additions
|
2024-11-14 10:19:07 -07:00 |
|
opt.regress-constant-prop
|
Merge remote-tracking branch 'origin/topic/vern/ZAM-const-prop-fix'
|
2025-07-14 14:16:09 -07:00 |
|
opt.regress-field-assign-in-op
|
Merge remote-tracking branch 'origin/topic/vern/ZAM-field-assign-in-op'
|
2025-03-18 16:13:01 -07:00 |
|
opt.regress-vector-mismatch
|
import of GH-4022 BTest additions
|
2024-11-14 10:19:07 -07:00 |
|
opt.table-choose
|
BTests to catch regressions for recent ZAM fixes
|
2024-01-15 15:03:56 +01:00 |
|
opt.vector-any-concretize1
|
BTests to catch regressions for recent ZAM fixes
|
2024-01-15 15:03:56 +01:00 |
|
opt.vector-any-concretize2
|
BTests to catch regressions for recent ZAM fixes
|
2024-01-15 15:03:56 +01:00 |
|
plugins.bifs-and-scripts
|
|
|
|
plugins.bifs-and-scripts-install
|
|
|
|
plugins.bifs-and-scripts-install-delete-source
|
|
|
|
plugins.binpac-flowbuffer-frame-length
|
|
|
|
plugins.conflict-plugin
|
|
|
|
plugins.debug-streams
|
|
|
|
plugins.doctest-disabled
|
|
|
|
plugins.doctest-supported
|
|
|
|
plugins.doctest-unsupported
|
|
|
|
plugins.duplicate-pktsrc
|
|
|
|
plugins.enum-bif-plugin
|
Merge remote-tracking branch 'origin/topic/awelzel/2311-load-plugin-bare-mode'
|
2025-03-18 16:16:39 -07:00 |
|
plugins.file
|
|
|
|
plugins.func-hook
|
|
|
|
plugins.hooks
|
Merge remote-tracking branch 'origin/topic/timw/vntag-in-vlan'
|
2025-03-18 16:18:13 -07:00 |
|
plugins.init-plugin
|
|
|
|
plugins.iosource-plugin
|
|
|
|
plugins.legacy-func-hook
|
|
|
|
plugins.logging-hooks
|
|
|
|
plugins.packet-protocol
|
|
|
|
plugins.pktdumper
|
|
|
|
plugins.pktsrc
|
|
|
|
plugins.plugin-load-dependency
|
|
|
|
plugins.plugin-load-file-extended
|
|
|
|
plugins.plugin-nopatchversion
|
|
|
|
plugins.plugin-withpatchversion
|
|
|
|
plugins.protocol
|
Add a method to register an event handler to a std::function via C++
|
2024-03-18 16:36:25 -07:00 |
|
plugins.reader
|
|
|
|
plugins.reporter-hook
|
|
|
|
plugins.unprocessed-packet-hook
|
|
|
|
plugins.writer
|
|
|
|
scripts.base.files.data_event.basic
|
|
|
|
scripts.base.files.entropy.basic
|
|
|
|
scripts.base.files.extract.limit
|
|
|
|
scripts.base.files.extract.limit-large-hole
|
Add extract_limit_includes_missing option for file extraction
|
2023-09-14 12:11:42 -07:00 |
|
scripts.base.files.mime.iso-9660
|
signatures: Fix ISO 9960 signature
|
2024-02-22 12:37:40 +01:00 |
|
scripts.base.files.mime.vnd.ms-cab-compressed-multi-conn
|
test-all-policy: Do not load iso-9660.zeek
|
2024-02-26 17:58:26 +01:00 |
|
scripts.base.files.pe.basic
|
|
|
|
scripts.base.files.x509.1999
|
|
|
|
scripts.base.files.x509.caching-hook
|
|
|
|
scripts.base.files.x509.disable-certificate-events-known-certs
|
TLS: Update cipher consts and keyexchange parsing
|
2023-11-27 16:22:24 +00:00 |
|
scripts.base.files.x509.disable-certificate-events-known-certs-2
|
TLS: Update cipher consts and keyexchange parsing
|
2023-11-27 16:22:24 +00:00 |
|
scripts.base.files.x509.disable-certificate-events-known-certs-3
|
TLS: Update cipher consts and keyexchange parsing
|
2023-11-27 16:22:24 +00:00 |
|
scripts.base.files.x509.event-caching
|
|
|
|
scripts.base.files.x509.files
|
WebSocket: Introduce new analyzer and log
|
2024-01-22 18:54:38 +01:00 |
|
scripts.base.files.x509.log-caching
|
|
|
|
scripts.base.files.x509.log-caching-cluster
|
|
|
|
scripts.base.files.x509.log-caching-disabled-cluster
|
|
|
|
scripts.base.files.x509.signed_certificate_timestamp
|
|
|
|
scripts.base.files.x509.signed_certificate_timestamp_ocsp
|
|
|
|
scripts.base.files.x509.tbs_sig_alg
|
|
|
|
scripts.base.files.x509.x509_check_cert_hostname
|
|
|
|
scripts.base.frameworks.analyzer.disabled-packet-analyzers
|
|
|
|
scripts.base.frameworks.analyzer.logging
|
Extend btest for logging of disabled analyzers
|
2024-07-09 20:15:46 +02:00 |
|
scripts.base.frameworks.analyzer.request-analyzer
|
|
|
|
scripts.base.frameworks.analyzer.schedule-analyzer
|
|
|
|
scripts.base.frameworks.analyzer.tags
|
|
|
|
scripts.base.frameworks.analyzer.toggle-packet-analyzers
|
|
|
|
scripts.base.frameworks.cluster.custom_pool_exclusivity
|
|
|
|
scripts.base.frameworks.cluster.custom_pool_limits
|
|
|
|
scripts.base.frameworks.cluster.forwarding
|
|
|
|
scripts.base.frameworks.cluster.leftover-log-rotation-multi-logger
|
|
|
|
scripts.base.frameworks.cluster.log_distribution
|
|
|
|
scripts.base.frameworks.cluster.publish-hrw-type-check
|
|
|
|
scripts.base.frameworks.cluster.start-it-up
|
|
|
|
scripts.base.frameworks.cluster.start-it-up-logger
|
|
|
|
scripts.base.frameworks.cluster.topic_distribution
|
|
|
|
scripts.base.frameworks.cluster.topic_distribution_bifs
|
|
|
|
scripts.base.frameworks.config.basic
|
|
|
|
scripts.base.frameworks.config.basic_cluster
|
|
|
|
scripts.base.frameworks.config.cluster_resend
|
|
|
|
scripts.base.frameworks.config.container-options
|
|
|
|
scripts.base.frameworks.config.missing-enum-value
|
|
|
|
scripts.base.frameworks.config.read_config
|
|
|
|
scripts.base.frameworks.config.read_config_cluster
|
|
|
|
scripts.base.frameworks.config.several-files
|
|
|
|
scripts.base.frameworks.config.updates
|
|
|
|
scripts.base.frameworks.config.weird
|
|
|
|
scripts.base.frameworks.control.configuration_update
|
|
|
|
scripts.base.frameworks.control.id_value
|
|
|
|
scripts.base.frameworks.dpd.max_violations
|
|
|
|
scripts.base.frameworks.file-analysis.actions.data_event
|
|
|
|
scripts.base.frameworks.file-analysis.bifs.enable-disable
|
|
|
|
scripts.base.frameworks.file-analysis.bifs.file_exists_lookup_file
|
|
|
|
scripts.base.frameworks.file-analysis.bifs.register_mime_type
|
|
|
|
scripts.base.frameworks.file-analysis.bifs.remove_action
|
|
|
|
scripts.base.frameworks.file-analysis.bifs.set_timeout_interval
|
|
|
|
scripts.base.frameworks.file-analysis.bifs.stop
|
|
|
|
scripts.base.frameworks.file-analysis.big-bof-buffer
|
|
|
|
scripts.base.frameworks.file-analysis.byteranges
|
|
|
|
scripts.base.frameworks.file-analysis.ftp
|
|
|
|
scripts.base.frameworks.file-analysis.http.get
|
|
|
|
scripts.base.frameworks.file-analysis.http.multipart
|
|
|
|
scripts.base.frameworks.file-analysis.http.partial-content
|
|
|
|
scripts.base.frameworks.file-analysis.http.pipeline
|
|
|
|
scripts.base.frameworks.file-analysis.http.post
|
|
|
|
scripts.base.frameworks.file-analysis.input.basic
|
|
|
|
scripts.base.frameworks.file-analysis.irc
|
|
|
|
scripts.base.frameworks.file-analysis.log-files-event-flattening
|
|
|
|
scripts.base.frameworks.file-analysis.logging
|
|
|
|
scripts.base.frameworks.file-analysis.logging-input-analysis
|
|
|
|
scripts.base.frameworks.file-analysis.smtp
|
|
|
|
scripts.base.frameworks.input.bad_patterns
|
|
|
|
scripts.base.frameworks.input.basic
|
|
|
|
scripts.base.frameworks.input.bignumber
|
|
|
|
scripts.base.frameworks.input.binary
|
|
|
|
scripts.base.frameworks.input.config.basic
|
|
|
|
scripts.base.frameworks.input.config.enum-set
|
|
|
|
scripts.base.frameworks.input.config.errors
|
|
|
|
scripts.base.frameworks.input.config.spaces
|
|
|
|
scripts.base.frameworks.input.default
|
|
|
|
scripts.base.frameworks.input.empty-values-hashing
|
|
|
|
scripts.base.frameworks.input.emptyvals
|
|
|
|
scripts.base.frameworks.input.errors
|
|
|
|
scripts.base.frameworks.input.event
|
|
|
|
scripts.base.frameworks.input.from_json
|
|
|
|
scripts.base.frameworks.input.invalid-lines
|
|
|
|
scripts.base.frameworks.input.invalidnumbers
|
|
|
|
scripts.base.frameworks.input.invalidset
|
|
|
|
scripts.base.frameworks.input.invalidtable
|
|
|
|
scripts.base.frameworks.input.invalidtext
|
|
|
|
scripts.base.frameworks.input.missing-enum
|
|
|
|
scripts.base.frameworks.input.missing-file
|
|
|
|
scripts.base.frameworks.input.missing-file-initially
|
|
|
|
scripts.base.frameworks.input.missing-table-value
|
|
|
|
scripts.base.frameworks.input.onecolumn-norecord
|
|
|
|
scripts.base.frameworks.input.onecolumn-record
|
|
|
|
scripts.base.frameworks.input.optional
|
|
|
|
scripts.base.frameworks.input.path-prefix.absolute-prefix
|
|
|
|
scripts.base.frameworks.input.path-prefix.absolute-prefix-2
|
|
|
|
scripts.base.frameworks.input.path-prefix.absolute-prefix-3
|
|
|
|
scripts.base.frameworks.input.path-prefix.absolute-source
|
|
|
|
scripts.base.frameworks.input.path-prefix.absolute-source-2
|
|
|
|
scripts.base.frameworks.input.path-prefix.absolute-source-3
|
|
|
|
scripts.base.frameworks.input.path-prefix.no-paths
|
|
|
|
scripts.base.frameworks.input.path-prefix.no-paths-2
|
|
|
|
scripts.base.frameworks.input.path-prefix.no-paths-3
|
|
|
|
scripts.base.frameworks.input.path-prefix.relative-prefix
|
|
|
|
scripts.base.frameworks.input.path-prefix.relative-prefix-2
|
|
|
|
scripts.base.frameworks.input.path-prefix.relative-prefix-3
|
|
|
|
scripts.base.frameworks.input.patterns
|
|
|
|
scripts.base.frameworks.input.port
|
|
|
|
scripts.base.frameworks.input.port-embedded
|
|
|
|
scripts.base.frameworks.input.predicate
|
|
|
|
scripts.base.frameworks.input.predicate-stream
|
|
|
|
scripts.base.frameworks.input.predicatemodify
|
|
|
|
scripts.base.frameworks.input.predicatemodifyandreread
|
|
|
|
scripts.base.frameworks.input.predicaterefusesecondsamerecord
|
|
|
|
scripts.base.frameworks.input.raw.basic
|
|
|
|
scripts.base.frameworks.input.raw.execute
|
|
|
|
scripts.base.frameworks.input.raw.executestdin
|
|
|
|
scripts.base.frameworks.input.raw.executestream
|
|
|
|
scripts.base.frameworks.input.raw.executestream-leftover
|
Merge branch 'topic/awelzel/3957-raw-reader-spinning'
|
2024-11-14 11:30:55 -07:00 |
|
scripts.base.frameworks.input.raw.executestream-no-last-separator
|
Merge branch 'topic/awelzel/3957-raw-reader-spinning'
|
2024-11-14 11:30:55 -07:00 |
|
scripts.base.frameworks.input.raw.executestream-slow
|
Merge branch 'topic/awelzel/3957-raw-reader-spinning'
|
2024-11-14 11:30:55 -07:00 |
|
scripts.base.frameworks.input.raw.executestream-slow-long
|
Merge branch 'topic/awelzel/3957-raw-reader-spinning'
|
2024-11-14 11:30:55 -07:00 |
|
scripts.base.frameworks.input.raw.long
|
|
|
|
scripts.base.frameworks.input.raw.offset
|
|
|
|
scripts.base.frameworks.input.raw.rereadraw
|
|
|
|
scripts.base.frameworks.input.raw.rereadraw2
|
|
|
|
scripts.base.frameworks.input.raw.stderr
|
|
|
|
scripts.base.frameworks.input.raw.streamraw
|
|
|
|
scripts.base.frameworks.input.raw.streamtail
|
|
|
|
scripts.base.frameworks.input.raw.streamtail2
|
|
|
|
scripts.base.frameworks.input.repeat
|
|
|
|
scripts.base.frameworks.input.reread
|
|
|
|
scripts.base.frameworks.input.set
|
|
|
|
scripts.base.frameworks.input.set-event-reread
|
|
|
|
scripts.base.frameworks.input.set-event-stream
|
|
|
|
scripts.base.frameworks.input.setseparator
|
|
|
|
scripts.base.frameworks.input.setspecialcases
|
|
|
|
scripts.base.frameworks.input.sqlite.basic
|
|
|
|
scripts.base.frameworks.input.sqlite.error
|
|
|
|
scripts.base.frameworks.input.sqlite.port
|
|
|
|
scripts.base.frameworks.input.sqlite.types
|
|
|
|
scripts.base.frameworks.input.stream
|
|
|
|
scripts.base.frameworks.input.subrecord
|
|
|
|
scripts.base.frameworks.input.subrecord-event
|
|
|
|
scripts.base.frameworks.input.tableevent
|
|
|
|
scripts.base.frameworks.input.twotables
|
|
|
|
scripts.base.frameworks.input.unsupported_types
|
|
|
|
scripts.base.frameworks.input.windows
|
|
|
|
scripts.base.frameworks.intel.cluster-transparency
|
|
|
|
scripts.base.frameworks.intel.cluster-transparency-with-proxy
|
|
|
|
scripts.base.frameworks.intel.expire-item
|
|
|
|
scripts.base.frameworks.intel.filter-item
|
|
|
|
scripts.base.frameworks.intel.input-and-match
|
|
|
|
scripts.base.frameworks.intel.match-subnet
|
|
|
|
scripts.base.frameworks.intel.path-prefix.input-intel-absolute-prefixes
|
|
|
|
scripts.base.frameworks.intel.path-prefix.input-intel-relative-prefixes
|
|
|
|
scripts.base.frameworks.intel.path-prefix.input-prefix
|
|
|
|
scripts.base.frameworks.intel.path-prefix.no-paths
|
|
|
|
scripts.base.frameworks.intel.read-file-dist-cluster
|
|
|
|
scripts.base.frameworks.intel.remove-item-cluster
|
|
|
|
scripts.base.frameworks.intel.remove-non-existing
|
Intel: Introduce Intel::seen_policy() hook
|
2024-01-25 12:22:47 +01:00 |
|
scripts.base.frameworks.intel.seen-policy
|
Intel: Introduce Intel::seen_policy() hook
|
2024-01-25 12:22:47 +01:00 |
|
scripts.base.frameworks.intel.updated-match
|
|
|
|
scripts.base.frameworks.logging.adapt-filter
|
|
|
|
scripts.base.frameworks.logging.ascii-binary
|
|
|
|
scripts.base.frameworks.logging.ascii-double
|
|
|
|
scripts.base.frameworks.logging.ascii-empty
|
|
|
|
scripts.base.frameworks.logging.ascii-escape
|
|
|
|
scripts.base.frameworks.logging.ascii-escape-binary
|
|
|
|
scripts.base.frameworks.logging.ascii-escape-empty-str
|
|
|
|
scripts.base.frameworks.logging.ascii-escape-notset-str
|
|
|
|
scripts.base.frameworks.logging.ascii-escape-odd-url
|
|
|
|
scripts.base.frameworks.logging.ascii-escape-set-separator
|
|
|
|
scripts.base.frameworks.logging.ascii-gz
|
|
|
|
scripts.base.frameworks.logging.ascii-json
|
|
|
|
scripts.base.frameworks.logging.ascii-json-iso-timestamps
|
|
|
|
scripts.base.frameworks.logging.ascii-json-optional
|
|
|
|
scripts.base.frameworks.logging.ascii-json-utf8
|
|
|
|
scripts.base.frameworks.logging.ascii-line-like-comment
|
|
|
|
scripts.base.frameworks.logging.ascii-logdir
|
|
|
|
scripts.base.frameworks.logging.ascii-options
|
|
|
|
scripts.base.frameworks.logging.ascii-timestamps
|
|
|
|
scripts.base.frameworks.logging.ascii-tsv
|
|
|
|
scripts.base.frameworks.logging.ascii-utf8-enabled
|
|
|
|
scripts.base.frameworks.logging.ascii-utf8-enabled-control-characters
|
|
|
|
scripts.base.frameworks.logging.ascii-utf8-enabled-set-separator-escape
|
|
|
|
scripts.base.frameworks.logging.attr
|
|
|
|
scripts.base.frameworks.logging.attr-extend
|
|
|
|
scripts.base.frameworks.logging.delay.basic
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.basic-2
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.basic-3
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.basic-4
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.basic-5
|
logging/Manager: Implement DelayTokenType as an actual opaque
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.coerce
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.delay-cb
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.delay-cb-2
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.delay-cb-3
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.delay-cb-4
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.delay-cb-5
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.delay-cb-6
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.delay-cb-redelay
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.delay-cb-redelay-2
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.errors
|
logging: Better error messages for invalid Log::delay() calls
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.errors-2
|
logging: Better error messages for invalid Log::delay() calls
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.errors-3
|
logging: Better error messages for invalid Log::delay() calls
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.errors-4
|
logging/Manager: Implement DelayTokenType as an actual opaque
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.errors-5
|
logging/Manager: Implement DelayTokenType as an actual opaque
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.errors-6
|
logging: Better error messages for invalid Log::delay() calls
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.example
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.multi-write
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.nested-write
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.nested-write-2
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.queue-setter
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.queue-setter-2
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.queue-size
|
logging: Implement get_delay_queue_size()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.queue-test
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.queue-test-2
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.queue-test-3
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.queue-test-4
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.queue-test-5
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.queue-test-6
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.queue-test-7
|
logging: Introduce Log::delay() and Log::delay_finish()
|
2023-11-29 11:53:11 +01:00 |
|
scripts.base.frameworks.logging.delay.static-errors
|
added a space when rendering some expressions so they're more readable
|
2024-05-29 12:40:05 -07:00 |
|
scripts.base.frameworks.logging.delay.static-errors-2
|
added a space when rendering some expressions so they're more readable
|
2024-05-29 12:40:05 -07:00 |
|
scripts.base.frameworks.logging.delay.static-errors-3
|
added a space when rendering some expressions so they're more readable
|
2024-05-29 12:40:05 -07:00 |
|
scripts.base.frameworks.logging.delay.static-errors-4
|
added a space when rendering some expressions so they're more readable
|
2024-05-29 12:40:05 -07:00 |
|
scripts.base.frameworks.logging.empty-event
|
|
|
|
scripts.base.frameworks.logging.enable-stream
|
|
|
|
scripts.base.frameworks.logging.event-groups-integration
|
|
|
|
scripts.base.frameworks.logging.events
|
|
|
|
scripts.base.frameworks.logging.exclude
|
|
|
|
scripts.base.frameworks.logging.field-extension
|
|
|
|
scripts.base.frameworks.logging.field-extension-cluster
|
|
|
|
scripts.base.frameworks.logging.field-extension-cluster-error
|
|
|
|
scripts.base.frameworks.logging.field-extension-complex
|
|
|
|
scripts.base.frameworks.logging.field-extension-include-exclude
|
|
|
|
scripts.base.frameworks.logging.field-extension-invalid
|
base/frameworks/spicy: Do not load base/misc/version
|
2023-10-24 13:15:21 +02:00 |
|
scripts.base.frameworks.logging.field-extension-optional
|
|
|
|
scripts.base.frameworks.logging.field-extension-table
|
|
|
|
scripts.base.frameworks.logging.field-name-map
|
|
|
|
scripts.base.frameworks.logging.field-name-map2
|
|
|
|
scripts.base.frameworks.logging.file
|
|
|
|
scripts.base.frameworks.logging.hooks
|
|
|
|
scripts.base.frameworks.logging.hooks-2
|
|
|
|
scripts.base.frameworks.logging.hooks-3
|
|
|
|
scripts.base.frameworks.logging.hooks-4
|
|
|
|
scripts.base.frameworks.logging.hooks-5
|
|
|
|
scripts.base.frameworks.logging.hooks-6
|
|
|
|
scripts.base.frameworks.logging.hooks-7
|
|
|
|
scripts.base.frameworks.logging.hooks-8
|
|
|
|
scripts.base.frameworks.logging.hooks-9
|
|
|
|
scripts.base.frameworks.logging.hooks-10
|
|
|
|
scripts.base.frameworks.logging.hooks-11
|
|
|
|
scripts.base.frameworks.logging.include
|
|
|
|
scripts.base.frameworks.logging.none-debug
|
|
|
|
scripts.base.frameworks.logging.path-func
|
|
|
|
scripts.base.frameworks.logging.path-func-column-demote
|
|
|
|
scripts.base.frameworks.logging.pred
|
|
|
|
scripts.base.frameworks.logging.print-log
|
|
|
|
scripts.base.frameworks.logging.print-log-stdout
|
|
|
|
scripts.base.frameworks.logging.remove
|
|
|
|
scripts.base.frameworks.logging.rotate
|
|
|
|
scripts.base.frameworks.logging.rotate-ascii-logdir-leftover-log-rotation
|
|
|
|
scripts.base.frameworks.logging.rotate-custom
|
|
|
|
scripts.base.frameworks.logging.rotate-custom-fmt-func
|
|
|
|
scripts.base.frameworks.logging.rotate-custom-fmt-func-bad
|
|
|
|
scripts.base.frameworks.logging.rotate-default-logdir
|
|
|
|
scripts.base.frameworks.logging.rotate-default-logdir-leftover-log-rotation-shadow-files
|
|
|
|
scripts.base.frameworks.logging.rotate-default-logdir-leftover-log-rotation-stale-shadow-files
|
|
|
|
scripts.base.frameworks.logging.rotate-leftover-log-rotation-shadow-files
|
|
|
|
scripts.base.frameworks.logging.rotate-leftover-log-rotation-shadow-files-postprocessor-errors
|
Merge remote-tracking branch 'origin/topic/awelzel/4562-post-proc-lookup-failure'
|
2025-07-14 14:13:37 -07:00 |
|
scripts.base.frameworks.logging.rotate-pp-env
|
|
|
|
scripts.base.frameworks.logging.scope_sep
|
|
|
|
scripts.base.frameworks.logging.scope_sep_and_field_name_map
|
|
|
|
scripts.base.frameworks.logging.sqlite.default-logdir
|
|
|
|
scripts.base.frameworks.logging.sqlite.error
|
|
|
|
scripts.base.frameworks.logging.sqlite.set
|
|
|
|
scripts.base.frameworks.logging.sqlite.simultaneous-writes
|
|
|
|
scripts.base.frameworks.logging.sqlite.types
|
|
|
|
scripts.base.frameworks.logging.sqlite.wikipedia
|
|
|
|
scripts.base.frameworks.logging.stdout
|
|
|
|
scripts.base.frameworks.logging.telemetry
|
Move telmetry label names out of opts records, into main metric records
|
2024-06-04 14:14:58 -07:00 |
|
scripts.base.frameworks.logging.test-logging
|
|
|
|
scripts.base.frameworks.logging.types
|
|
|
|
scripts.base.frameworks.logging.unset-record
|
|
|
|
scripts.base.frameworks.logging.vec
|
|
|
|
scripts.base.frameworks.logging.writer-path-conflict
|
|
|
|
scripts.base.frameworks.netcontrol.acld
|
|
|
|
scripts.base.frameworks.netcontrol.acld-hook
|
|
|
|
scripts.base.frameworks.netcontrol.basic
|
|
|
|
scripts.base.frameworks.netcontrol.basic-cluster
|
|
|
|
scripts.base.frameworks.netcontrol.broker
|
|
|
|
scripts.base.frameworks.netcontrol.delete-internal-state
|
|
|
|
scripts.base.frameworks.netcontrol.duplicate
|
|
|
|
scripts.base.frameworks.netcontrol.find-rules
|
|
|
|
scripts.base.frameworks.netcontrol.hook
|
|
|
|
scripts.base.frameworks.netcontrol.multiple
|
|
|
|
scripts.base.frameworks.netcontrol.openflow
|
|
|
|
scripts.base.frameworks.netcontrol.packetfilter
|
|
|
|
scripts.base.frameworks.netcontrol.quarantine-openflow
|
|
|
|
scripts.base.frameworks.netcontrol.rule-added-hook
|
Netcontrol: add rule_added_policy
|
2024-02-05 18:52:27 +00:00 |
|
scripts.base.frameworks.netcontrol.rule-added-hook-2
|
Netcontrol: add rule_added_policy
|
2024-02-05 18:52:27 +00:00 |
|
scripts.base.frameworks.netcontrol.timeout
|
|
|
|
scripts.base.frameworks.notice.action-email
|
|
|
|
scripts.base.frameworks.notice.action-email-admin
|
|
|
|
scripts.base.frameworks.notice.action-email-custom-address
|
|
|
|
scripts.base.frameworks.notice.action-email-multiple
|
|
|
|
scripts.base.frameworks.notice.action-page
|
|
|
|
scripts.base.frameworks.notice.action-page-with-hostnames
|
|
|
|
scripts.base.frameworks.notice.cluster
|
|
|
|
scripts.base.frameworks.notice.file-info-multiple-conns
|
|
|
|
scripts.base.frameworks.notice.file-info-no-conns
|
|
|
|
scripts.base.frameworks.notice.mail-alarms
|
|
|
|
scripts.base.frameworks.notice.suppression
|
|
|
|
scripts.base.frameworks.notice.suppression-cluster
|
|
|
|
scripts.base.frameworks.openflow.broker-basic
|
|
|
|
scripts.base.frameworks.openflow.log-basic
|
|
|
|
scripts.base.frameworks.openflow.log-cluster
|
|
|
|
scripts.base.frameworks.openflow.ryu-basic
|
|
|
|
scripts.base.frameworks.reporter.disable-stderr
|
|
|
|
scripts.base.frameworks.reporter.stderr
|
|
|
|
scripts.base.frameworks.software.version-parsing
|
|
|
|
scripts.base.frameworks.sumstats.basic
|
|
|
|
scripts.base.frameworks.sumstats.basic-cluster
|
|
|
|
scripts.base.frameworks.sumstats.cluster-intermediate-update
|
|
|
|
scripts.base.frameworks.sumstats.last-cluster
|
|
|
|
scripts.base.frameworks.sumstats.manual-epoch
|
|
|
|
scripts.base.frameworks.sumstats.manual-epoch-cluster
|
|
|
|
scripts.base.frameworks.sumstats.on-demand
|
|
|
|
scripts.base.frameworks.sumstats.on-demand-cluster
|
|
|
|
scripts.base.frameworks.sumstats.sample
|
|
|
|
scripts.base.frameworks.sumstats.sample-cluster
|
|
|
|
scripts.base.frameworks.sumstats.thresholding
|
|
|
|
scripts.base.frameworks.sumstats.topk
|
|
|
|
scripts.base.frameworks.sumstats.topk-cluster
|
|
|
|
scripts.base.frameworks.telemetry.basic
|
Change all instruments to only handle doubles
|
2024-05-31 13:36:37 -07:00 |
|
scripts.base.frameworks.telemetry.conn-duration-histogram
|
Change all instruments to only handle doubles
|
2024-05-31 13:36:37 -07:00 |
|
scripts.base.frameworks.telemetry.event-handler-invocations
|
Change all instruments to only handle doubles
|
2024-05-31 13:36:37 -07:00 |
|
scripts.base.frameworks.telemetry.internal-metrics
|
Update the scripts.base.frameworks.telemetry.internal-metrics test
|
2024-07-11 12:13:05 -07:00 |
|
scripts.base.misc.find-filtered-trace
|
|
|
|
scripts.base.misc.installation
|
|
|
|
scripts.base.misc.version
|
Parse and store localversion string
|
2024-04-17 14:17:22 -07:00 |
|
scripts.base.misc.version-2
|
|
|
|
scripts.base.protocols.arp.bad
|
|
|
|
scripts.base.protocols.arp.basic
|
|
|
|
scripts.base.protocols.arp.linuxsll
|
|
|
|
scripts.base.protocols.arp.radiotap
|
|
|
|
scripts.base.protocols.arp.wlanmon
|
|
|
|
scripts.base.protocols.bittorrent.tracker
|
|
|
|
scripts.base.protocols.conn.conn_state-RST-behavior
|
|
|
|
scripts.base.protocols.conn.contents-default-extract
|
|
|
|
scripts.base.protocols.conn.new_connection_contents
|
|
|
|
scripts.base.protocols.conn.polling
|
|
|
|
scripts.base.protocols.conn.removal-hooks
|
|
|
|
scripts.base.protocols.conn.threshold
|
|
|
|
scripts.base.protocols.conn.threshold-delete
|
|
|
|
scripts.base.protocols.dce-rpc.context
|
|
|
|
scripts.base.protocols.dce-rpc.dce-rpc-backing-discard
|
|
|
|
scripts.base.protocols.dce-rpc.dce-rpc-backing-size
|
|
|
|
scripts.base.protocols.dce-rpc.dce_rpc_netlogon
|
|
|
|
scripts.base.protocols.dce-rpc.dce_rpc_ntlm
|
|
|
|
scripts.base.protocols.dce-rpc.mapi
|
|
|
|
scripts.base.protocols.dce-rpc.ntlm-empty-av-pair-seq
|
|
|
|
scripts.base.protocols.dce-rpc.ntlm-unterminated-av-pair-seq
|
|
|
|
scripts.base.protocols.dce-rpc.request-response-stub-events
|
|
|
|
scripts.base.protocols.dhcp.dhcp-ack-msg-types
|
|
|
|
scripts.base.protocols.dhcp.dhcp-all-msg-types
|
dhcp: Handle is_orig=T for connections from server to 255.255.255.255
|
2023-08-28 12:15:55 +02:00 |
|
scripts.base.protocols.dhcp.dhcp-discover-msg-types
|
|
|
|
scripts.base.protocols.dhcp.dhcp-prevent-large-msgtypes
|
|
|
|
scripts.base.protocols.dhcp.dhcp-prevent-large-uids
|
|
|
|
scripts.base.protocols.dhcp.dhcp-sub-opts
|
|
|
|
scripts.base.protocols.dhcp.dhcp-time-nameserver-events
|
|
|
|
scripts.base.protocols.dhcp.hw-type0
|
|
|
|
scripts.base.protocols.dhcp.inform
|
|
|
|
scripts.base.protocols.dnp3.dnp3_del_measure
|
|
|
|
scripts.base.protocols.dnp3.dnp3_en_spon
|
|
|
|
scripts.base.protocols.dnp3.dnp3_file_del
|
|
|
|
scripts.base.protocols.dnp3.dnp3_file_read
|
|
|
|
scripts.base.protocols.dnp3.dnp3_file_write
|
|
|
|
scripts.base.protocols.dnp3.dnp3_link_only
|
|
|
|
scripts.base.protocols.dnp3.dnp3_read
|
|
|
|
scripts.base.protocols.dnp3.dnp3_rec_time
|
|
|
|
scripts.base.protocols.dnp3.dnp3_select_operate
|
|
|
|
scripts.base.protocols.dnp3.dnp3_udp_en_spon
|
|
|
|
scripts.base.protocols.dnp3.dnp3_udp_read
|
|
|
|
scripts.base.protocols.dnp3.dnp3_udp_select_operate
|
|
|
|
scripts.base.protocols.dnp3.dnp3_udp_write
|
|
|
|
scripts.base.protocols.dnp3.dnp3_write
|
|
|
|
scripts.base.protocols.dnp3.events
|
|
|
|
scripts.base.protocols.dns.ad-cd
|
|
|
|
scripts.base.protocols.dns.binds
|
|
|
|
scripts.base.protocols.dns.caa
|
|
|
|
scripts.base.protocols.dns.dns-edns-cookie
|
|
|
|
scripts.base.protocols.dns.dns-edns-ecs
|
|
|
|
scripts.base.protocols.dns.dns-edns-tcp-keepalive
|
|
|
|
scripts.base.protocols.dns.dns-key
|
|
|
|
scripts.base.protocols.dns.dnskey
|
|
|
|
scripts.base.protocols.dns.dnssec
|
DNS: Add Ed25519 and Ed448 enum values to parser
|
2023-11-17 19:56:47 +01:00 |
|
scripts.base.protocols.dns.ds
|
|
|
|
scripts.base.protocols.dns.duplicate-reponses
|
|
|
|
scripts.base.protocols.dns.flip
|
|
|
|
scripts.base.protocols.dns.hinfo
|
|
|
|
scripts.base.protocols.dns.https
|
|
|
|
scripts.base.protocols.dns.huge-ttl
|
|
|
|
scripts.base.protocols.dns.loc
|
|
|
|
scripts.base.protocols.dns.multiple-txt-strings
|
|
|
|
scripts.base.protocols.dns.nsec
|
|
|
|
scripts.base.protocols.dns.nsec3
|
|
|
|
scripts.base.protocols.dns.nsec3param
|
|
|
|
scripts.base.protocols.dns.rrsig
|
|
|
|
scripts.base.protocols.dns.spf
|
|
|
|
scripts.base.protocols.dns.sshfp
|
|
|
|
scripts.base.protocols.dns.svcb
|
|
|
|
scripts.base.protocols.dns.tsig
|
|
|
|
scripts.base.protocols.dns.wks
|
|
|
|
scripts.base.protocols.dns.zero-responses
|
|
|
|
scripts.base.protocols.finger.events
|
|
|
|
scripts.base.protocols.ftp.bad-adat-encoding
|
|
|
|
scripts.base.protocols.ftp.cwd-navigation
|
|
|
|
scripts.base.protocols.ftp.ftp-get-file-size
|
ftp: Reset fuid after logging
|
2024-02-21 12:41:32 +01:00 |
|
scripts.base.protocols.ftp.ftp-invalid-reply-code
|
|
|
|
scripts.base.protocols.ftp.ftp-ipv4
|
ftp: Reset fuid after logging
|
2024-02-21 12:41:32 +01:00 |
|
scripts.base.protocols.ftp.ftp-ipv6
|
ftp: Reset fuid after logging
|
2024-02-21 12:41:32 +01:00 |
|
scripts.base.protocols.ftp.ftp-max-arg-length
|
ftp: Reset fuid after logging
|
2024-02-21 12:41:32 +01:00 |
|
scripts.base.protocols.ftp.ftp-max-command-length
|
|
|
|
scripts.base.protocols.ftp.ftp-max-pending-commands
|
|
|
|
scripts.base.protocols.ftp.ftp-max-user-length
|
ftp: Reset fuid after logging
|
2024-02-21 12:41:32 +01:00 |
|
scripts.base.protocols.ftp.ftp-missing-reply-code
|
|
|
|
scripts.base.protocols.ftp.ftp-missing-space-after-reply-code
|
|
|
|
scripts.base.protocols.ftp.ftp-multiline-reply
|
|
|
|
scripts.base.protocols.ftp.ftp-samba-retr
|
|
|
|
scripts.base.protocols.ftp.gridftp
|
|
|
|
scripts.base.protocols.http.100-continue
|
|
|
|
scripts.base.protocols.http.101-switching-protocols
|
btest/http: Explain switching-protocols test change as comment
|
2024-01-22 18:54:38 +01:00 |
|
scripts.base.protocols.http.all-headers-event
|
|
|
|
scripts.base.protocols.http.bad-content-range
|
|
|
|
scripts.base.protocols.http.build-url
|
|
|
|
scripts.base.protocols.http.concurrent-range-requests
|
|
|
|
scripts.base.protocols.http.content-range-gap
|
|
|
|
scripts.base.protocols.http.content-range-less-than-len
|
|
|
|
scripts.base.protocols.http.curl-http-09
|
|
|
|
scripts.base.protocols.http.deeply-nested-mime
|
MIME: Cap nested MIME analysis depth to 100
|
2024-01-17 10:18:13 -07:00 |
|
scripts.base.protocols.http.entity-gap
|
|
|
|
scripts.base.protocols.http.entity-gap2
|
|
|
|
scripts.base.protocols.http.fake-content-length
|
|
|
|
scripts.base.protocols.http.flip-content-line-orig
|
HTTP: Implement FlipRoles()
|
2024-07-04 11:38:33 +02:00 |
|
scripts.base.protocols.http.flip-content-line-resp
|
HTTP: Implement FlipRoles()
|
2024-07-04 11:38:33 +02:00 |
|
scripts.base.protocols.http.http-09
|
|
|
|
scripts.base.protocols.http.http-09-content-length-confusion
|
http: Prevent request/response de-synchronization and unbounded state growth
|
2023-08-28 15:02:58 +02:00 |
|
scripts.base.protocols.http.http-11-request-then-cruft
|
|
|
|
scripts.base.protocols.http.http-bad-request-with-version
|
|
|
|
scripts.base.protocols.http.http-basic-auth-colon
|
Merge branch 'fix-http-password-capture' of https://github.com/p-l-/zeek
|
2024-08-30 11:34:24 -07:00 |
|
scripts.base.protocols.http.http-basic-auth-extra-space
|
|
|
|
scripts.base.protocols.http.http-connect
|
|
|
|
scripts.base.protocols.http.http-connect-with-header
|
|
|
|
scripts.base.protocols.http.http-desynched
|
http: Prevent request/response de-synchronization and unbounded state growth
|
2023-08-28 15:02:58 +02:00 |
|
scripts.base.protocols.http.http-dpd-large-req
|
|
|
|
scripts.base.protocols.http.http-filename
|
|
|
|
scripts.base.protocols.http.http-methods
|
|
|
|
scripts.base.protocols.http.http-no-crlf
|
|
|
|
scripts.base.protocols.http.http-pending-state-growth
|
http: Prevent request/response de-synchronization and unbounded state growth
|
2023-08-28 15:02:58 +02:00 |
|
scripts.base.protocols.http.http-pipelining
|
|
|
|
scripts.base.protocols.http.missing-http-entity
|
|
|
|
scripts.base.protocols.http.missing-zlib-header
|
|
|
|
scripts.base.protocols.http.multipart-body-length
|
|
|
|
scripts.base.protocols.http.multipart-extract
|
|
|
|
scripts.base.protocols.http.multipart-file-limit
|
|
|
|
scripts.base.protocols.http.no-uri
|
|
|
|
scripts.base.protocols.http.no-version
|
|
|
|
scripts.base.protocols.http.percent-end-of-line
|
|
|
|
scripts.base.protocols.http.version-mismatch
|
|
|
|
scripts.base.protocols.http.x-gzip
|
|
|
|
scripts.base.protocols.icmp.dnssl
|
|
|
|
scripts.base.protocols.imap.capabilities
|
|
|
|
scripts.base.protocols.imap.starttls
|
|
|
|
scripts.base.protocols.irc.basic
|
|
|
|
scripts.base.protocols.irc.events
|
|
|
|
scripts.base.protocols.irc.longline
|
|
|
|
scripts.base.protocols.irc.names-weird
|
|
|
|
scripts.base.protocols.irc.starttls
|
|
|
|
scripts.base.protocols.krb.kinit
|
|
|
|
scripts.base.protocols.krb.krb-service-name
|
|
|
|
scripts.base.protocols.krb.pa_data
|
|
|
|
scripts.base.protocols.krb.smb2_krb
|
|
|
|
scripts.base.protocols.krb.smb2_krb_nokeytab
|
|
|
|
scripts.base.protocols.krb.smb_gssapi
|
|
|
|
scripts.base.protocols.krb.tgs
|
|
|
|
scripts.base.protocols.ldap.add
|
Merge remote-tracking branch 'origin/topic/awelzel/spicy-ldap-krb-wrap-tokens'
|
2024-08-30 11:46:47 -07:00 |
|
scripts.base.protocols.ldap.aduser1
|
Merge remote-tracking branch 'origin/topic/awelzel/4275-ldap-gss-spnego-auth-miss'
|
2025-05-06 09:46:49 +02:00 |
|
scripts.base.protocols.ldap.attributes
|
ldap: Use scalar values in logs where appropriate
|
2024-01-03 11:57:31 +01:00 |
|
scripts.base.protocols.ldap.basic
|
ldap: Use scalar values in logs where appropriate
|
2024-01-03 11:57:31 +01:00 |
|
scripts.base.protocols.ldap.diff_port
|
ldap: Use scalar values in logs where appropriate
|
2024-01-03 11:57:31 +01:00 |
|
scripts.base.protocols.ldap.invalid_credentials
|
Merge remote-tracking branch 'origin/topic/awelzel/3919-ldap-logs-missing'
|
2024-09-23 09:24:52 -07:00 |
|
scripts.base.protocols.ldap.ldap_substring_search
|
ldap: Fix substring filter parsing and rendering
|
2024-01-05 16:06:23 +01:00 |
|
scripts.base.protocols.ldap.log_policy
|
Integrate spicy-ldap test suite
|
2023-10-10 09:21:57 +02:00 |
|
scripts.base.protocols.ldap.sasl-encrypted
|
ldap: Use scalar values in logs where appropriate
|
2024-01-03 11:57:31 +01:00 |
|
scripts.base.protocols.ldap.sasl-ntlm
|
Merge remote-tracking branch 'origin/topic/awelzel/ldap-extended-request-response-starttls'
|
2024-08-30 11:47:08 -07:00 |
|
scripts.base.protocols.ldap.sasl-scram-sha-512
|
Merge remote-tracking branch 'origin/topic/awelzel/ldap-extended-request-response-starttls'
|
2024-08-30 11:47:08 -07:00 |
|
scripts.base.protocols.ldap.sasl-signed-clear
|
Merge remote-tracking branch 'origin/topic/awelzel/spicy-ldap-krb-wrap-tokens'
|
2024-08-30 11:46:47 -07:00 |
|
scripts.base.protocols.ldap.sasl-signed-clear-2
|
Merge remote-tracking branch 'origin/topic/awelzel/spicy-ldap-krb-wrap-tokens'
|
2024-08-30 11:46:47 -07:00 |
|
scripts.base.protocols.ldap.sasl-srp-who-am-i
|
Merge remote-tracking branch 'origin/topic/awelzel/ldap-extended-request-response-starttls'
|
2024-08-30 11:47:08 -07:00 |
|
scripts.base.protocols.ldap.search_filter_extended
|
ldap: Use scalar values in logs where appropriate
|
2024-01-03 11:57:31 +01:00 |
|
scripts.base.protocols.ldap.spnego-ntlmssp
|
Merge remote-tracking branch 'origin/topic/awelzel/3853-ldap-spnego-ntlmssp'
|
2024-09-23 09:23:19 -07:00 |
|
scripts.base.protocols.ldap.starttls
|
Merge remote-tracking branch 'origin/topic/awelzel/ldap-extended-request-response-starttls'
|
2024-08-30 11:47:08 -07:00 |
|
scripts.base.protocols.ldap.who-am-i
|
Merge remote-tracking branch 'origin/topic/awelzel/ldap-extended-request-response-starttls'
|
2024-08-30 11:47:08 -07:00 |
|
scripts.base.protocols.modbus.coil_parsing_big
|
Pass parsed file record information with ReadFile/WriteFile events
|
2023-08-07 13:44:38 -07:00 |
|
scripts.base.protocols.modbus.coil_parsing_small
|
Pass parsed file record information with ReadFile/WriteFile events
|
2023-08-07 13:44:38 -07:00 |
|
scripts.base.protocols.modbus.events
|
Pass parsed file record information with ReadFile/WriteFile events
|
2023-08-07 13:44:38 -07:00 |
|
scripts.base.protocols.modbus.exception_handling
|
Merge branch 'modbus-fixes' of https://github.com/zambo99/zeek
|
2024-11-14 11:32:17 -07:00 |
|
scripts.base.protocols.modbus.modbus_and_non_modbus_on_port_502
|
Merge branch 'modbus-fixes' of https://github.com/zambo99/zeek
|
2024-11-14 11:32:17 -07:00 |
|
scripts.base.protocols.modbus.policy
|
Modbus: Add support for Encapsulation Interface Transport (FC=2B) requests and responses
|
2023-08-07 13:44:37 -07:00 |
|
scripts.base.protocols.modbus.register_parsing
|
Add length field from header to ModbusHeaders record type
|
2023-08-07 13:44:37 -07:00 |
|
scripts.base.protocols.mount.basic
|
|
|
|
scripts.base.protocols.mqtt.mqtt
|
|
|
|
scripts.base.protocols.mqtt.mqtt-payload-cap
|
|
|
|
scripts.base.protocols.mqtt.mqtt-payload-cap-dynamic
|
|
|
|
scripts.base.protocols.mysql.auth
|
|
|
|
scripts.base.protocols.mysql.encrypted
|
|
|
|
scripts.base.protocols.mysql.encrypted-aws-rds
|
|
|
|
scripts.base.protocols.mysql.plain-aws-rds
|
|
|
|
scripts.base.protocols.mysql.selects_with_new_proto
|
|
|
|
scripts.base.protocols.mysql.show-engine-innodb-status
|
|
|
|
scripts.base.protocols.mysql.wireshark
|
|
|
|
scripts.base.protocols.ncp.event
|
|
|
|
scripts.base.protocols.ncp.frame_size_tuning
|
|
|
|
scripts.base.protocols.nfs.basic
|
|
|
|
scripts.base.protocols.ntp.misordered-ntp
|
|
|
|
scripts.base.protocols.ntp.ntp
|
|
|
|
scripts.base.protocols.ntp.ntp-digest
|
|
|
|
scripts.base.protocols.ntp.ntp2
|
|
|
|
scripts.base.protocols.ntp.ntp3
|
|
|
|
scripts.base.protocols.ntp.ntpmode67
|
|
|
|
scripts.base.protocols.pop3.bad-list-retr-crafted
|
Merge remote-tracking branch 'security/topic/awelzel/215-pop3-mail-null-deref'
|
2024-10-04 10:46:40 -07:00 |
|
scripts.base.protocols.pop3.basic
|
Merge remote-tracking branch 'origin/topic/awelzel/3936-pop3-and-redis'
|
2024-09-23 11:12:54 -07:00 |
|
scripts.base.protocols.pop3.redis
|
Merge remote-tracking branch 'security/topic/awelzel/215-pop3-mail-null-deref'
|
2024-10-04 10:46:40 -07:00 |
|
scripts.base.protocols.pop3.starttls
|
|
|
|
scripts.base.protocols.portmap.basic
|
|
|
|
scripts.base.protocols.quic.analyzer-confirmations
|
Merge remote-tracking branch 'origin/topic/awelzel/4198-4201-quic-maintenance'
|
2025-03-18 16:15:34 -07:00 |
|
scripts.base.protocols.quic.chromium
|
Merge remote-tracking branch 'origin/topic/awelzel/4198-4201-quic-maintenance'
|
2025-03-18 16:15:34 -07:00 |
|
scripts.base.protocols.quic.curl-http3
|
Merge remote-tracking branch 'origin/topic/awelzel/4405-quic-fragmented-crypto'
|
2025-05-05 12:56:53 -07:00 |
|
scripts.base.protocols.quic.decrypt-crash
|
QUIC/decrypt_crypto: Actually check if decryption was successful
|
2024-12-13 13:10:45 -07:00 |
|
scripts.base.protocols.quic.decrypt-fail-google-de-51833
|
Update quic baselines due to service ordering
|
2025-05-06 10:09:16 -07:00 |
|
scripts.base.protocols.quic.events
|
Merge remote-tracking branch 'origin/topic/awelzel/4405-quic-fragmented-crypto'
|
2025-05-05 12:56:53 -07:00 |
|
scripts.base.protocols.quic.firefox
|
Merge remote-tracking branch 'origin/topic/awelzel/4198-4201-quic-maintenance'
|
2025-03-18 16:15:34 -07:00 |
|
scripts.base.protocols.quic.fragmented-crypto
|
Merge remote-tracking branch 'origin/topic/awelzel/4198-4201-quic-maintenance'
|
2025-03-18 16:15:34 -07:00 |
|
scripts.base.protocols.quic.interop.quic-go_quic-go.handshake
|
Merge remote-tracking branch 'origin/topic/awelzel/4198-4201-quic-maintenance'
|
2025-03-18 16:15:34 -07:00 |
|
scripts.base.protocols.quic.interop.quic-go_quic-go.retry
|
Merge remote-tracking branch 'origin/topic/awelzel/4198-4201-quic-maintenance'
|
2025-03-18 16:15:34 -07:00 |
|
scripts.base.protocols.quic.interop.quic-go_quic-go.zerortt
|
Merge remote-tracking branch 'origin/topic/awelzel/4405-quic-fragmented-crypto'
|
2025-05-05 12:56:53 -07:00 |
|
scripts.base.protocols.quic.max-history-length
|
quic: Bump maximum history length, make configurable
|
2023-10-20 20:42:30 +02:00 |
|
scripts.base.protocols.quic.merlinc2
|
Merge remote-tracking branch 'origin/topic/awelzel/4198-4201-quic-maintenance'
|
2025-03-18 16:15:34 -07:00 |
|
scripts.base.protocols.quic.multiple-initial-fragmented-crypto
|
Update quic baselines due to service ordering
|
2025-05-06 10:09:16 -07:00 |
|
scripts.base.protocols.quic.multiple-initial-fragmented-crypto-only-initial
|
Update quic baselines due to service ordering
|
2025-05-06 10:09:16 -07:00 |
|
scripts.base.protocols.quic.quic-log
|
quic: Log client's source connection id, too.
|
2024-01-30 21:46:38 +01:00 |
|
scripts.base.protocols.quic.quicdoq
|
Merge remote-tracking branch 'origin/topic/awelzel/4198-4201-quic-maintenance'
|
2025-03-18 16:15:34 -07:00 |
|
scripts.base.protocols.quic.quicv2-echo-443
|
Merge remote-tracking branch 'origin/topic/awelzel/4405-quic-fragmented-crypto'
|
2025-05-05 12:56:53 -07:00 |
|
scripts.base.protocols.quic.quicv2-http3-443
|
Merge remote-tracking branch 'origin/topic/awelzel/4198-4201-quic-maintenance'
|
2025-03-18 16:15:34 -07:00 |
|
scripts.base.protocols.quic.run-pcap
|
Merge remote-tracking branch 'origin/topic/awelzel/4198-4201-quic-maintenance'
|
2025-03-18 16:15:34 -07:00 |
|
scripts.base.protocols.quic.vector-max-size-crash
|
quic: Log client's source connection id, too.
|
2024-01-30 21:46:38 +01:00 |
|
scripts.base.protocols.radius.auth
|
|
|
|
scripts.base.protocols.radius.radius-multiple-attempts
|
|
|
|
scripts.base.protocols.rdp.rdp-client-cluster-data
|
|
|
|
scripts.base.protocols.rdp.rdp-client-security-data
|
|
|
|
scripts.base.protocols.rdp.rdp-invalid-length
|
|
|
|
scripts.base.protocols.rdp.rdp-native-encrypted-data
|
|
|
|
scripts.base.protocols.rdp.rdp-proprietary-encryption
|
|
|
|
scripts.base.protocols.rdp.rdp-to-ssl
|
|
|
|
scripts.base.protocols.rdp.rdp-unknown-keyboard
|
|
|
|
scripts.base.protocols.rdp.rdp-x509
|
|
|
|
scripts.base.protocols.rdp.rdpeudp-handshake-fail
|
|
|
|
scripts.base.protocols.rdp.rdpeudp-handshake-success
|
|
|
|
scripts.base.protocols.rdp.rdpeudp2-handshake-success
|
|
|
|
scripts.base.protocols.rfb.rfb-apple-remote-desktop
|
|
|
|
scripts.base.protocols.rfb.vnc-mac-to-linux
|
|
|
|
scripts.base.protocols.rfb.vnc-scanner
|
|
|
|
scripts.base.protocols.sip.junk
|
|
|
|
scripts.base.protocols.sip.wireshark
|
|
|
|
scripts.base.protocols.smb.compression-cap
|
|
|
|
scripts.base.protocols.smb.raw-ntlm
|
|
|
|
scripts.base.protocols.smb.smb1
|
|
|
|
scripts.base.protocols.smb.smb1-OSS-fuzz-54883
|
Allow SMB_TCP record to contain multiple protocol identifiers/headers
|
2024-04-22 15:55:25 -07:00 |
|
scripts.base.protocols.smb.smb1-transaction-dcerpc
|
|
|
|
scripts.base.protocols.smb.smb1-transaction-request
|
|
|
|
scripts.base.protocols.smb.smb1-transaction-response
|
|
|
|
scripts.base.protocols.smb.smb1-transaction-secondary-request
|
|
|
|
scripts.base.protocols.smb.smb1-transaction2-request
|
|
|
|
scripts.base.protocols.smb.smb1-transaction2-secondary-request
|
|
|
|
scripts.base.protocols.smb.smb2
|
performance speed-up for SMB base scripts
|
2024-04-25 09:15:12 -07:00 |
|
scripts.base.protocols.smb.smb2-create-delete-on-close
|
|
|
|
scripts.base.protocols.smb.smb2-fscontrol
|
|
|
|
scripts.base.protocols.smb.smb2-max-pending-messages
|
Allow SMB_TCP record to contain multiple protocol identifiers/headers
|
2024-04-22 15:55:25 -07:00 |
|
scripts.base.protocols.smb.smb2-multiple-pdus
|
Allow SMB_TCP record to contain multiple protocol identifiers/headers
|
2024-04-22 15:55:25 -07:00 |
|
scripts.base.protocols.smb.smb2-read-write
|
performance speed-up for SMB base scripts
|
2024-04-25 09:15:12 -07:00 |
|
scripts.base.protocols.smb.smb2-write-response
|
|
|
|
scripts.base.protocols.smb.smb2-zero-byte-error-ioctl
|
Merge remote-tracking branch 'origin/topic/timw/smb2-ioctl-errors'
|
2024-07-24 13:29:09 -07:00 |
|
scripts.base.protocols.smb.smb3
|
|
|
|
scripts.base.protocols.smb.smb3-multichannel
|
Fix for suppressing SMB logging of previously-logged files
|
2024-05-18 14:13:52 -07:00 |
|
scripts.base.protocols.smb.smb3-negotiate-context
|
|
|
|
scripts.base.protocols.smb.smb311
|
|
|
|
scripts.base.protocols.smtp.attachment
|
|
|
|
scripts.base.protocols.smtp.attachment-msg
|
|
|
|
scripts.base.protocols.smtp.basic
|
|
|
|
scripts.base.protocols.smtp.bdat
|
Merge remote-tracking branch 'origin/topic/awelzel/4522-bdat-last-reply-fix'
|
2025-07-14 13:57:07 -07:00 |
|
scripts.base.protocols.smtp.bdat-0-last
|
Merge remote-tracking branch 'origin/topic/awelzel/4522-bdat-last-reply-fix'
|
2025-07-14 13:57:07 -07:00 |
|
scripts.base.protocols.smtp.bdat-chunk-size-overflow
|
btest/smtp/bdat: Move tests into proper directory
|
2024-01-23 21:49:50 +01:00 |
|
scripts.base.protocols.smtp.bdat-chunk-size-overflow2
|
btest/smtp/bdat: Move tests into proper directory
|
2024-01-23 21:49:50 +01:00 |
|
scripts.base.protocols.smtp.bdat-cmd-invalid
|
BDAT: Harden parse_bdat_arg()
|
2024-01-23 21:49:50 +01:00 |
|
scripts.base.protocols.smtp.bdat-multipart
|
Merge remote-tracking branch 'origin/topic/awelzel/4522-bdat-last-reply-fix'
|
2025-07-14 13:57:07 -07:00 |
|
scripts.base.protocols.smtp.bdat-multipart-chunked
|
Merge remote-tracking branch 'origin/topic/awelzel/4522-bdat-last-reply-fix'
|
2025-07-14 13:57:07 -07:00 |
|
scripts.base.protocols.smtp.bdat-negative-chunk-size
|
btest/smtp/bdat: Move tests into proper directory
|
2024-01-23 21:49:50 +01:00 |
|
scripts.base.protocols.smtp.bdat-pipeline-8bitmime
|
Merge remote-tracking branch 'origin/topic/awelzel/4522-bdat-last-reply-fix'
|
2025-07-14 13:57:07 -07:00 |
|
scripts.base.protocols.smtp.mail-transactions-invalid
|
|
|
|
scripts.base.protocols.smtp.mail-transactions-invalid-disable-analyzer
|
|
|
|
scripts.base.protocols.smtp.mime-all-headers-event
|
|
|
|
scripts.base.protocols.smtp.one-side
|
|
|
|
scripts.base.protocols.smtp.starttls
|
|
|
|
scripts.base.protocols.snap.snap-arp
|
|
|
|
scripts.base.protocols.snmp.snmp-addr
|
|
|
|
scripts.base.protocols.snmp.v1
|
|
|
|
scripts.base.protocols.snmp.v2
|
|
|
|
scripts.base.protocols.snmp.v3
|
|
|
|
scripts.base.protocols.socks.socks-auth
|
|
|
|
scripts.base.protocols.socks.socks-auth-2
|
|
|
|
scripts.base.protocols.socks.socks-auth-10080
|
|
|
|
scripts.base.protocols.socks.trace1
|
|
|
|
scripts.base.protocols.socks.trace2
|
|
|
|
scripts.base.protocols.socks.trace3
|
|
|
|
scripts.base.protocols.ssh.basic
|
|
|
|
scripts.base.protocols.ssh.curve25519_kex
|
|
|
|
scripts.base.protocols.ssh.fingerprints
|
|
|
|
scripts.base.protocols.ssh.half-duplex-client
|
ssh: Revert half-duplex robustness
|
2024-06-19 16:04:51 +02:00 |
|
scripts.base.protocols.ssh.half-duplex-server
|
ssh: Revert half-duplex robustness
|
2024-06-19 16:04:51 +02:00 |
|
scripts.base.protocols.ssh.one-auth-fail-only
|
|
|
|
scripts.base.protocols.ssh.set_version
|
|
|
|
scripts.base.protocols.ssh.ssh-reverse-connection
|
|
|
|
scripts.base.protocols.ssh.ssh_dh_gex_direction
|
|
|
|
scripts.base.protocols.ssh.ssh_segmented_encryption_transition
|
|
|
|
scripts.base.protocols.ssh.ssh_version_199
|
|
|
|
scripts.base.protocols.ssl.basic
|
|
|
|
scripts.base.protocols.ssl.certificate_request
|
|
|
|
scripts.base.protocols.ssl.common_name
|
|
|
|
scripts.base.protocols.ssl.comp_methods
|
|
|
|
scripts.base.protocols.ssl.cve-2015-3194
|
|
|
|
scripts.base.protocols.ssl.dhe
|
|
|
|
scripts.base.protocols.ssl.dpd
|
|
|
|
scripts.base.protocols.ssl.dtls
|
|
|
|
scripts.base.protocols.ssl.dtls-13
|
|
|
|
scripts.base.protocols.ssl.dtls-no-dtls
|
|
|
|
scripts.base.protocols.ssl.dtls-stun-dpd
|
|
|
|
scripts.base.protocols.ssl.ecdhe
|
|
|
|
scripts.base.protocols.ssl.ecdsa
|
|
|
|
scripts.base.protocols.ssl.fragment
|
|
|
|
scripts.base.protocols.ssl.handshake-events
|
|
|
|
scripts.base.protocols.ssl.keyexchange
|
|
|
|
scripts.base.protocols.ssl.max-history-length
|
ssl: Prevent unbounded ssl_history growth
|
2023-10-25 09:35:45 +02:00 |
|
scripts.base.protocols.ssl.ocsp-http-get
|
|
|
|
scripts.base.protocols.ssl.ocsp-request-only
|
|
|
|
scripts.base.protocols.ssl.ocsp-request-response
|
|
|
|
scripts.base.protocols.ssl.ocsp-response-only
|
|
|
|
scripts.base.protocols.ssl.ocsp-revoked
|
OCSP: Open-code unknown revoke reason strings
|
2023-11-27 20:53:00 +01:00 |
|
scripts.base.protocols.ssl.ocsp-stapling
|
|
|
|
scripts.base.protocols.ssl.prevent-disable-analyzer
|
|
|
|
scripts.base.protocols.ssl.signed_certificate_timestamp
|
|
|
|
scripts.base.protocols.ssl.tls-1.2
|
|
|
|
scripts.base.protocols.ssl.tls-1.2-ciphers
|
|
|
|
scripts.base.protocols.ssl.tls-1.2-handshake-failure
|
|
|
|
scripts.base.protocols.ssl.tls-1.2-random
|
|
|
|
scripts.base.protocols.ssl.tls-extension-events
|
|
|
|
scripts.base.protocols.ssl.tls-protocol-violation
|
|
|
|
scripts.base.protocols.ssl.tls1_1
|
|
|
|
scripts.base.protocols.ssl.tls13
|
Update TLS consts, mainly new named curves.
|
2024-05-23 14:50:36 +01:00 |
|
scripts.base.protocols.ssl.tls13-encrypted-client-hello
|
SSL: Add new extension types and ECH test
|
2023-10-30 14:19:16 +00:00 |
|
scripts.base.protocols.ssl.tls13-experiment
|
|
|
|
scripts.base.protocols.ssl.tls13-version
|
|
|
|
scripts.base.protocols.ssl.tls13_encrypted_handshake_events
|
|
|
|
scripts.base.protocols.ssl.x509-invalid-extension
|
|
|
|
scripts.base.protocols.ssl.x509_extensions
|
|
|
|
scripts.base.protocols.syslog.missing-pri
|
|
|
|
scripts.base.protocols.syslog.trace
|
|
|
|
scripts.base.protocols.tcp.krb-tcp-tso
|
|
|
|
scripts.base.protocols.tcp.pending
|
|
|
|
scripts.base.protocols.tcp.timestamp
|
|
|
|
scripts.base.protocols.websocket.broker-websocket
|
WebSocket: Introduce new analyzer and log
|
2024-01-22 18:54:38 +01:00 |
|
scripts.base.protocols.websocket.coalesced-reply-ping
|
websocket: Address review feedback for BinPac code
|
2024-01-22 18:54:41 +01:00 |
|
scripts.base.protocols.websocket.events
|
websocket: Address review feedback for BinPac code
|
2024-01-22 18:54:41 +01:00 |
|
scripts.base.protocols.websocket.fragmented-http-reply
|
websocket: Fix opcode for continuation frames
|
2024-01-24 22:57:24 +01:00 |
|
scripts.base.protocols.websocket.jupyter-websocket
|
WebSocket: Introduce new analyzer and log
|
2024-01-22 18:54:38 +01:00 |
|
scripts.base.protocols.websocket.key-accept-wrong
|
websocket: Verify Sec-WebSocket-Key/Accept headers and review feedback
|
2024-01-22 18:54:38 +01:00 |
|
scripts.base.protocols.websocket.wstunnel-http
|
WebSocket: Introduce new analyzer and log
|
2024-01-22 18:54:38 +01:00 |
|
scripts.base.protocols.websocket.wstunnel-https
|
WebSocket: Introduce new analyzer and log
|
2024-01-22 18:54:38 +01:00 |
|
scripts.base.protocols.websocket.wstunnel-ssh
|
WebSocket: Introduce new analyzer and log
|
2024-01-22 18:54:38 +01:00 |
|
scripts.base.protocols.websocket.wstunnel-ssh-configure
|
WebSocket: Introduce new analyzer and log
|
2024-01-22 18:54:38 +01:00 |
|
scripts.base.protocols.websocket.wstunnel-ssh-configure-break
|
websocket: Handle breaking from WebSocket::configure_analyzer()
|
2024-01-22 18:54:41 +01:00 |
|
scripts.base.protocols.websocket.wstunnel-ssh-configure-wrong
|
WebSocket: Introduce new analyzer and log
|
2024-01-22 18:54:38 +01:00 |
|
scripts.base.protocols.websocket.wstunnel-ssh-disabled
|
Merge remote-tracking branch 'origin/topic/awelzel/3424-http-upgrade-websocket-v1'
|
2024-01-23 18:17:50 +01:00 |
|
scripts.base.protocols.websocket.wstunnel-ssh-spicy
|
websocket: Add Spicy parser version, too.
|
2024-02-06 17:29:55 +01:00 |
|
scripts.base.protocols.xmpp.client-dpd
|
|
|
|
scripts.base.protocols.xmpp.server-dialback-dpd
|
|
|
|
scripts.base.protocols.xmpp.starttls
|
|
|
|
scripts.base.utils.active-http
|
|
|
|
scripts.base.utils.addrs
|
|
|
|
scripts.base.utils.conn-ids
|
|
|
|
scripts.base.utils.decompose_uri
|
|
|
|
scripts.base.utils.dir
|
|
|
|
scripts.base.utils.directions-and-hosts
|
|
|
|
scripts.base.utils.email
|
|
|
|
scripts.base.utils.exec
|
|
|
|
scripts.base.utils.files
|
|
|
|
scripts.base.utils.hash_hrw
|
|
|
|
scripts.base.utils.json
|
Change all instruments to only handle doubles
|
2024-05-31 13:36:37 -07:00 |
|
scripts.base.utils.numbers
|
|
|
|
scripts.base.utils.packages
|
utils: Introduce packages.zeek with can_load() helper
|
2024-02-22 11:41:50 +01:00 |
|
scripts.base.utils.paths
|
|
|
|
scripts.base.utils.pattern
|
|
|
|
scripts.base.utils.queue
|
|
|
|
scripts.base.utils.site
|
|
|
|
scripts.base.utils.site-defaults
|
|
|
|
scripts.base.utils.site-defaults-2
|
|
|
|
scripts.base.utils.site-defaults-3
|
|
|
|
scripts.base.utils.site-defaults-4
|
|
|
|
scripts.base.utils.site-defaults-5
|
|
|
|
scripts.base.utils.site-defaults-6
|
|
|
|
scripts.base.utils.site-defaults-7
|
|
|
|
scripts.base.utils.site-defaults-8
|
|
|
|
scripts.base.utils.site-defaults-9
|
|
|
|
scripts.base.utils.strings
|
|
|
|
scripts.base.utils.thresholds
|
|
|
|
scripts.base.utils.urls
|
|
|
|
scripts.check-test-all-policy
|
|
|
|
scripts.policy.frameworks.cluster.cluster_started
|
|
|
|
scripts.policy.frameworks.cluster.cluster_started_logger
|
|
|
|
scripts.policy.frameworks.cluster.cluster_started_restart_manager
|
|
|
|
scripts.policy.frameworks.cluster.cluster_started_restart_worker
|
|
|
|
scripts.policy.frameworks.dpd.packet-segment-logging
|
|
|
|
scripts.policy.frameworks.intel.removal
|
|
|
|
scripts.policy.frameworks.intel.seen.certs
|
|
|
|
scripts.policy.frameworks.intel.seen.filename-in-http-get-response
|
|
|
|
scripts.policy.frameworks.intel.seen.filename-in-http-post
|
|
|
|
scripts.policy.frameworks.intel.seen.smb
|
performance speed-up for SMB base scripts
|
2024-04-25 09:15:12 -07:00 |
|
scripts.policy.frameworks.intel.seen.smtp
|
|
|
|
scripts.policy.frameworks.intel.seen.smtp-cluster
|
|
|
|
scripts.policy.frameworks.intel.whitelisting
|
|
|
|
scripts.policy.frameworks.management.controller.agent-checkin
|
|
|
|
scripts.policy.frameworks.netcontrol.catch-and-release
|
Netcontrol: more logging in catch-and-release
|
2024-02-05 14:38:21 +00:00 |
|
scripts.policy.frameworks.netcontrol.catch-and-release-2
|
Netcontrol: more logging in catch-and-release
|
2024-02-05 14:38:21 +00:00 |
|
scripts.policy.frameworks.netcontrol.catch-and-release-forgotten
|
Netcontrol: add rule_added_policy
|
2024-02-05 18:52:27 +00:00 |
|
scripts.policy.frameworks.netcontrol.catch-and-release-two-plugins
|
Netcontrol: more logging in catch-and-release
|
2024-02-05 14:38:21 +00:00 |
|
scripts.policy.frameworks.netcontrol.catch-and-release-two-plugins-2
|
Netcontrol: add rule_added_policy
|
2024-02-05 18:52:27 +00:00 |
|
scripts.policy.frameworks.notice.community-id
|
Merge remote-tracking branch 'origin/topic/awelzel/community-id-new-connection'
|
2024-11-14 12:15:27 -07:00 |
|
scripts.policy.frameworks.notice.extend-email.hostnames
|
Merge remote-tracking branch 'origin/topic/jazoff/gh-3268t '
|
2023-09-04 14:01:23 +02:00 |
|
scripts.policy.frameworks.software.version-changes
|
|
|
|
scripts.policy.frameworks.software.vulnerable
|
|
|
|
scripts.policy.frameworks.telemetry.log
|
Remove prefix column from telemetry.log
|
2024-06-04 14:14:58 -07:00 |
|
scripts.policy.frameworks.telemetry.log-prefixes
|
Remove prefix column from telemetry.log
|
2024-06-04 14:14:58 -07:00 |
|
scripts.policy.frameworks.telemetry.prometheus
|
Fix the scripts.policy.frameworks.telemetry.prometheus btest to use the service discovery endpoint
|
2024-05-31 13:30:31 -07:00 |
|
scripts.policy.misc.capture-loss
|
|
|
|
scripts.policy.misc.dump-events
|
Merge remote-tracking branch 'origin/topic/awelzel/4522-bdat-last-reply-fix'
|
2025-07-14 13:57:07 -07:00 |
|
scripts.policy.misc.stats
|
|
|
|
scripts.policy.misc.weird-stats
|
|
|
|
scripts.policy.misc.weird-stats-cluster
|
|
|
|
scripts.policy.protocols.conn.community-id-logging
|
|
|
|
scripts.policy.protocols.conn.community-id-logging-flipped
|
Merge remote-tracking branch 'origin/topic/awelzel/community-id-new-connection'
|
2024-11-14 12:15:27 -07:00 |
|
scripts.policy.protocols.conn.known-hosts
|
|
|
|
scripts.policy.protocols.conn.known-services
|
|
|
|
scripts.policy.protocols.conn.known-services-multi
|
|
|
|
scripts.policy.protocols.conn.mac-logging
|
|
|
|
scripts.policy.protocols.conn.speculative-service
|
|
|
|
scripts.policy.protocols.conn.vlan-logging
|
|
|
|
scripts.policy.protocols.dns.original_case
|
|
|
|
scripts.policy.protocols.ftp.ftp
|
|
|
|
scripts.policy.protocols.http.flash-version
|
|
|
|
scripts.policy.protocols.http.header-names
|
|
|
|
scripts.policy.protocols.http.sql-injection-plus-dvwa
|
Merge branch 'sqli-spaces-encode-to-plus' of https://github.com/cooper-grill/zeek
|
2024-11-19 09:33:22 -07:00 |
|
scripts.policy.protocols.http.test-sql-injection-regex
|
|
|
|
scripts.policy.protocols.krb.ticket-logging
|
|
|
|
scripts.policy.protocols.ssh.detect-bruteforcing
|
|
|
|
scripts.policy.protocols.ssl.certificate-request-info
|
|
|
|
scripts.policy.protocols.ssl.decryption
|
|
|
|
scripts.policy.protocols.ssl.expiring-certs
|
|
|
|
scripts.policy.protocols.ssl.heartbleed
|
|
|
|
scripts.policy.protocols.ssl.known-certs
|
|
|
|
scripts.policy.protocols.ssl.log-certs-base64
|
|
|
|
scripts.policy.protocols.ssl.log-hostcerts-only
|
|
|
|
scripts.policy.protocols.ssl.ssl-log-ext
|
Fix ssl-log-ext omitting data in some cases
|
2024-01-11 17:12:33 +00:00 |
|
scripts.policy.protocols.ssl.validate-certs
|
|
|
|
scripts.policy.protocols.ssl.validate-certs-no-cache
|
|
|
|
scripts.policy.protocols.ssl.validate-ocsp
|
|
|
|
scripts.policy.protocols.ssl.validate-sct
|
|
|
|
scripts.policy.protocols.ssl.weak-keys
|
|
|
|
signatures.bad-eval-condition
|
rule-parse: Remove [event_name] syntax, deprecate msg as identifier
|
2023-12-14 10:16:35 +01:00 |
|
signatures.custom-event
|
rule-parse: Remove [event_name] syntax, deprecate msg as identifier
|
2023-12-14 10:16:35 +01:00 |
|
signatures.custom-event-errors
|
rule-parse: Remove [event_name] syntax, deprecate msg as identifier
|
2023-12-14 10:16:35 +01:00 |
|
signatures.dpd
|
Add registration for GRE-over-UDP
|
2023-10-16 11:42:24 -07:00 |
|
signatures.dst-ip-cidr-v4
|
|
|
|
signatures.dst-ip-header-condition-v4
|
|
|
|
signatures.dst-ip-header-condition-v4-masks
|
|
|
|
signatures.dst-ip-header-condition-v6
|
|
|
|
signatures.dst-ip-header-condition-v6-masks
|
|
|
|
signatures.dst-port-header-condition
|
|
|
|
signatures.eval-condition
|
|
|
|
signatures.eval-condition-no-return-value
|
|
|
|
signatures.header-header-condition
|
|
|
|
signatures.http-body-match
|
Test how the signature framework matches HTTP body
|
2023-11-03 15:28:15 +01:00 |
|
signatures.id-lookup
|
|
|
|
signatures.ip-proto-header-condition
|
|
|
|
signatures.load-sigs
|
|
|
|
signatures.signature-cond-used
|
|
|
|
signatures.signature-cond-used-twice
|
|
|
|
signatures.src-ip-header-condition-v4
|
|
|
|
signatures.src-ip-header-condition-v4-masks
|
|
|
|
signatures.src-ip-header-condition-v6
|
|
|
|
signatures.src-ip-header-condition-v6-masks
|
|
|
|
signatures.src-port-header-condition
|
|
|
|
signatures.tcp-syn-with-payload
|
|
|
|
signatures.udp-packetwise-insensitive
|
|
|
|
signatures.udp-packetwise-match
|
|
|
|
signatures.udp-payload-size
|
|
|
|
signatures.udp-state
|
rule-parse: Remove [event_name] syntax, deprecate msg as identifier
|
2023-12-14 10:16:35 +01:00 |
|
spicy.analyzer-tag
|
|
|
|
spicy.conn-id
|
|
|
|
spicy.context
|
|
|
|
spicy.decline_input
|
Propagate failure reason in spicy::decline_input/zeek::reject_protocol.
|
2023-09-06 10:32:11 +02:00 |
|
spicy.decline_input-2
|
Propagate failure reason in spicy::decline_input/zeek::reject_protocol.
|
2023-09-06 10:32:11 +02:00 |
|
spicy.dns
|
|
|
|
spicy.double-event
|
|
|
|
spicy.double-types
|
|
|
|
spicy.event-args
|
Bump Spicy to current main.
|
2024-01-29 09:59:46 +01:00 |
|
spicy.event-args-fail
|
|
|
|
spicy.event-args-fail-2
|
Port Spicy integration to new AST API.
|
2024-03-04 15:48:39 +01:00 |
|
spicy.event-args-fail-3
|
Port Spicy integration to new AST API.
|
2024-03-04 15:48:39 +01:00 |
|
spicy.event-args-fail-4
|
|
|
|
spicy.event-args-fail-5
|
|
|
|
spicy.event-args-fail-6
|
|
|
|
spicy.event-args-mismatch
|
btest/spicy: Remove most port usages
|
2024-03-15 17:36:11 +01:00 |
|
spicy.event-cond
|
|
|
|
spicy.event-user-type
|
|
|
|
spicy.export-bitfield
|
Spicy: Fix support for exporting bitfields.
|
2023-09-21 09:55:12 +02:00 |
|
spicy.export-enum
|
|
|
|
spicy.export-protocol-enum
|
Spicy: Map Spicy's Protocol enum to Zeek's transport_proto.
|
2024-04-29 08:38:53 +02:00 |
|
spicy.export-switch
|
|
|
|
spicy.export-type-ambigious-fail
|
[Spicy] Extend functionality of export in EVT files.
|
2023-08-21 10:26:25 +02:00 |
|
spicy.export-type-e2e
|
|
|
|
spicy.export-type-fail
|
Port Spicy integration to new AST API.
|
2024-03-04 15:48:39 +01:00 |
|
spicy.export-type-with-fields
|
[Spicy] Extend functionality of export in EVT files.
|
2023-08-21 10:26:25 +02:00 |
|
spicy.export-type-with-fields-fail
|
Port Spicy integration to new AST API.
|
2024-03-04 15:48:39 +01:00 |
|
spicy.export-types
|
|
|
|
spicy.file-analysis-data-in
|
Spicy: Query Zeek scriptland for file handles.
|
2024-05-06 09:20:38 +02:00 |
|
spicy.file-analysis-data-in-concurrent
|
|
|
|
spicy.file-analyzer
|
|
|
|
spicy.file-analyzer-nested
|
Move the options from policy/tuning/defaults to actual Zeek defaults, deprecate that package
|
2024-05-06 11:13:04 -07:00 |
|
spicy.file-analyzer-property
|
|
|
|
spicy.file-data-in-at-offset
|
Spicy: Query Zeek scriptland for file handles.
|
2024-05-06 09:20:38 +02:00 |
|
spicy.file-replaces
|
|
|
|
spicy.gap-recovery
|
|
|
|
spicy.get-values
|
Spicy: Provide runtime API to access Zeek-side globals.
|
2024-06-20 12:02:54 +02:00 |
|
spicy.hook-priority
|
Fix typo in hook name
|
2024-04-25 13:43:09 +02:00 |
|
spicy.import-from
|
|
|
|
spicy.list-conversion
|
|
|
|
spicy.module-path
|
Do not automatically load Spicy modules in dot paths.
|
2023-09-26 11:56:52 +02:00 |
|
spicy.multiple-enum
|
|
|
|
spicy.network-time
|
|
|
|
spicy.optional
|
|
|
|
spicy.packet-analyzer
|
|
|
|
spicy.packet-analyzer-on-ip
|
|
|
|
spicy.packet-analyzer-replaces
|
Fix packet analyzer replacement.
|
2024-05-06 09:45:11 +02:00 |
|
spicy.packet-analyzer-violation
|
|
|
|
spicy.parse-error
|
Bump Spicy to current main.
|
2024-01-29 09:59:46 +01:00 |
|
spicy.port
|
Merge remote-tracking branch 'origin/topic/robin/gh-3881-spicy-ports'
|
2024-08-30 13:26:16 -07:00 |
|
spicy.port-fail
|
Merge remote-tracking branch 'origin/topic/robin/gh-3881-spicy-ports'
|
2024-08-30 13:26:16 -07:00 |
|
spicy.port-fail-2
|
|
|
|
spicy.port-fail-3
|
|
|
|
spicy.port-fail-4
|
|
|
|
spicy.port-fail-5
|
|
|
|
spicy.port-range-one-port
|
Make ports for LDAP analyzers fully configurable
|
2023-10-10 18:28:13 +02:00 |
|
spicy.preprocessor
|
|
|
|
spicy.preprocessor-fail
|
|
|
|
spicy.preprocessor-fail-2
|
|
|
|
spicy.preprocessor-fail-3
|
|
|
|
spicy.preprocessor-fail-4
|
|
|
|
spicy.preprocessor-fail-5
|
|
|
|
spicy.preprocessor-fail-6
|
|
|
|
spicy.preprocessor-fail-7
|
|
|
|
spicy.preprocessor-spicy
|
|
|
|
spicy.profiling
|
Bump Spicy.
|
2024-03-07 09:08:44 +01:00 |
|
spicy.protocol-analyzer-data-in
|
|
|
|
spicy.protocol-analyzer-data-in-from-tcp-to-udp
|
Spicy: Support UDP in Spicy's protocol_* runtime functions.
|
2024-05-07 18:19:46 +02:00 |
|
spicy.protocol-analyzer-data-in-udp
|
Spicy: Support UDP in Spicy's protocol_* runtime functions.
|
2024-05-07 18:19:46 +02:00 |
|
spicy.protocol-analyzer-explicit-forwarding
|
|
|
|
spicy.protocol-analyzer-tcp-over-udp
|
|
|
|
spicy.replaces
|
Spicy: Fix service reporting for replaced analyzers.
|
2024-05-08 14:01:46 +02:00 |
|
spicy.replaces-conflicts
|
Spicy: Disallow repeating replacements of the same analyzer.
|
2024-06-14 13:10:47 +02:00 |
|
spicy.replaces-conflicts-2
|
Spicy: Disallow repeating replacements of the same analyzer.
|
2024-06-14 13:10:47 +02:00 |
|
spicy.replaces-conflicts-3
|
Spicy: Disallow repeating replacements of the same analyzer.
|
2024-06-14 13:10:47 +02:00 |
|
spicy.replaces-mismatch
|
|
|
|
spicy.resource-usage
|
|
|
|
spicy.reuse-parser-across-hltos
|
|
|
|
spicy.skip-input-file
|
Spicy: Provide zeek::skip_input() to disable deliver to current analyzer.
|
2023-11-09 10:43:49 +01:00 |
|
spicy.skip-input-protocol
|
Spicy: Provide zeek::skip_input() to disable deliver to current analyzer.
|
2023-11-09 10:43:49 +01:00 |
|
spicy.spicy-dump
|
|
|
|
spicy.spicyz
|
|
|
|
spicy.ssh-banner
|
Bump Spicy to current main.
|
2024-01-29 09:59:46 +01:00 |
|
spicy.terminate-session
|
|
|
|
spicy.toggle-protocol-analyzer
|
|
|
|
spicy.tuple-arg
|
Port Spicy integration to new AST API.
|
2024-03-04 15:48:39 +01:00 |
|
spicy.tuple-enum
|
|
|
|
spicy.tuple-optional
|
|
|
|
spicy.type-converter
|
|
|
|
spicy.udp
|
|
|
|
spicy.zeekygen
|
spicy/manager: Ensure Zeekygen knows identifier for registered types
|
2023-10-11 13:31:20 +02:00 |
|
spicy.zeekygen-enum-zeek-side
|
spicy/manager: Ensure Zeekygen knows identifier for registered types
|
2023-10-11 13:31:20 +02:00 |
|
supervisor.config-bare-mode
|
|
|
|
supervisor.config-cluster
|
|
|
|
supervisor.config-cluster-leftover-log-archival
|
|
|
|
supervisor.config-cluster-log-archival
|
|
|
|
supervisor.config-cluster-multi-logger
|
|
|
|
supervisor.config-cluster-pcap
|
|
|
|
supervisor.config-directory
|
|
|
|
supervisor.config-env
|
|
|
|
supervisor.config-output-redirect
|
|
|
|
supervisor.config-scripts
|
|
|
|
supervisor.create
|
|
|
|
supervisor.create-interface-pcap-file-error
|
|
|
|
supervisor.destroy
|
|
|
|
supervisor.large-cluster
|
Add a services.json endpoint for Prometheus service discovery
|
2024-05-31 13:30:31 -07:00 |
|
supervisor.node_status
|
|
|
|
supervisor.output-redirect
|
|
|
|
supervisor.output-redirect-hook
|
|
|
|
supervisor.restart
|
|
|
|
supervisor.revive-leaf
|
|
|
|
supervisor.revive-stem
|
|
|
|
supervisor.status
|
|
|
|
telemetry.counter
|
Change all instruments to only handle doubles
|
2024-05-31 13:36:37 -07:00 |
|
telemetry.gauge
|
Change all instruments to only handle doubles
|
2024-05-31 13:36:37 -07:00 |
|
telemetry.histogram
|
Change all instruments to only handle doubles
|
2024-05-31 13:36:37 -07:00 |
