zeek/testing/btest/bifs
Arne Welzel 785bb2ee13 conn_key/fivetuple: Handle one-way ICMP conns in DoConnKeyFromVal()
When a conn_id represents a ICMP "connection", we need to determine the
is_one_way flag for InitTuple() in order to skip any flipping of address
and ports for one-way ICMP connections.

Fixes #4645
2025-07-24 09:48:33 +02:00
..
community_id btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00
addr_count_conversion.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
addr_to_ptr_name.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
addr_version.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
all_set.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
analyzer_name.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
any_set.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
backtrace.zeek Add backtrace() and print_backtrace() 2020-07-03 14:09:31 -07:00
bare_mode.zeek Add bare_mode bif. 2022-05-16 09:07:11 +02:00
bloomfilter-seed.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
bloomfilter.zeek Add intersect operation for bloom filters 2022-01-20 13:34:07 +00:00
bytestring_to_count.zeek Support other byte lengths in bytestring_to_count 2022-08-17 15:45:30 -07:00
bytestring_to_double.zeek GH-696: Add bytestring_to_float BIF 2022-07-13 10:44:24 -07:00
bytestring_to_float.zeek GH-696: Add bytestring_to_float BIF 2022-07-13 10:44:24 -07:00
bytestring_to_hexstr.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
cat.zeek cat_sep: Make fully vararg and do explicit runtime type checks 2022-10-27 13:06:06 +02:00
cat_sep_errors.zeek testing/btest/*zeek: Comment all @TEST lines 2025-04-17 16:30:23 +02:00
check_subnet.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
clear_table.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
clear_table_expire_func.zeek Fix using clear_table() within an &expire_func 2021-04-26 22:49:44 -07:00
compress_path.zeek GH-1041: Move compress_path to a bif that uses normalize_path 2020-07-06 11:43:44 -07:00
convert_for_pattern.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
count_to_addr.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
create_file.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
current_analyzer.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
current_time.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
decode_base64.zeek Spelling testing 2022-11-16 20:05:03 -05:00
decode_base64_conn.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
decode_base64_errors.zeek btest/decode_base_errors: Avoid binary output in baseline 2023-02-02 18:49:00 +01:00
directory_operations.zeek Downgrade internal errors to reporter warnings in file/directory BiFs 2025-02-05 17:49:37 -08:00
disable_analyzer-early.zeek Remove analyzer_confirmation/analyzer_violation events (6.1 deprecation) 2023-06-14 10:07:22 -07:00
disable_analyzer-for-conn.zeek DPD: change handling of pre-confirmation violations, remove max_violations 2025-01-30 16:59:44 +00:00
disable_analyzer-hook-module.zeek analyzer: Move disabling_analyzer() hook into Analyzer module 2023-01-23 12:22:05 +01:00
disable_analyzer-hook.zeek analyzer: Move disabling_analyzer() hook into Analyzer module 2023-01-23 12:22:05 +01:00
disable_analyzer-invalid-aid.zeek More precise error reporting for the disable_analyzer() BiF 2024-05-30 16:38:22 -07:00
disable_analyzer-tcp-packet-children.zeek GH-532: improve disable_analyzer BIF 2019-08-09 20:03:26 -07:00
disable_analyzer.zeek Remove analyzer_confirmation/analyzer_violation events (6.1 deprecation) 2023-06-14 10:07:22 -07:00
do_find_str.zeek Merge branch 'topic/AbdelSaTd/case-insensitive-find' 2021-11-10 11:33:47 +00:00
dump_current_packet.zeek GH-693: use pcap_dump_open_append where supported 2021-11-02 17:09:39 -07:00
edit.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
enable_raw_output.test Additional use of btest-diff --binary 2020-12-06 20:19:52 -08:00
encode_base64.zeek Spelling testing 2022-11-16 20:05:03 -05:00
entropy_test.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
enum_names.zeek enum_names: Support naming types with a string 2022-10-21 20:09:48 +02:00
enum_to_int.zeek Add test to ensure enum_to_int's return values are ordered 2022-04-11 13:10:36 -04:00
escape_string.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
event-handler-stats.zeek Minor renaming changes to event handler stats bif, plus a test 2022-11-14 09:13:31 -07:00
exit.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
file_mode.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
filter_subnet_table.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
find_all.zeek Add max_size argument for find_all/find_all_ordered BIFs 2023-02-21 12:27:54 -07:00
find_all_ordered.zeek Add max_size argument for find_all/find_all_ordered BIFs 2023-02-21 12:27:54 -07:00
find_entropy.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
find_first.zeek Add find_first string function 2025-04-30 00:15:34 +08:00
find_in_zeekpath.zeek testing/btest/*zeek: Comment all @TEST lines 2025-04-17 16:30:23 +02:00
find_last.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
fmt.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
fmt_ftp_port.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
fnv1a_hash.zeek Merge branch 'improvement/fnv1a_hashing_algorithm_improvements' of https://github.com/martinvanhensbergen/zeek 2024-10-30 11:46:26 +00:00
footprint.zeek refine Val "footprint" to equate long strings with multiple objects 2024-04-29 12:39:36 -07:00
from_json.zeek testing/btest/*zeek: Comment all @TEST lines 2025-04-17 16:30:23 +02:00
get_current_packet_header.zeek General btest cleanup 2020-08-11 11:26:22 -07:00
get_dns_stats.test get_dns_stats: Expose total cache size and cached text entries 2023-03-10 09:22:45 +01:00
get_matcher_stats.zeek testing/btest/*zeek: Comment all @TEST lines 2025-04-17 16:30:23 +02:00
get_plugin_components.zeek Renamed 2025-06-25 21:10:08 +05:30
get_port_transport_proto.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
gethostname.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
getpid.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
getsetenv.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
global_ids-modules.zeek Merge remote-tracking branch 'origin/topic/awelzel/global-ids-with-modules' 2023-07-05 15:33:30 +02:00
global_ids.zeek global_ids: Align script_id$type_name field with type_name() 2024-02-23 17:26:56 +01:00
haversine_distance.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
hexdump.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
hexstr_to_bytestring.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
hll_cardinality.zeek General btest cleanup 2020-08-11 11:26:22 -07:00
hll_cluster.zeek btest remaining: Use generic cluster-layout.zeek 2025-05-20 20:30:01 +02:00
hll_large_estimate.zeek Rename all BRO-prefixed environment variables 2019-05-22 00:12:31 -05:00
icmp_connection_exists.zeek conn_key/fivetuple: Handle one-way ICMP conns in DoConnKeyFromVal() 2025-07-24 09:48:33 +02:00
identify_data.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
install_src_addr_filter.test General btest cleanup 2020-08-11 11:26:22 -07:00
is_ascii.zeek Expand testcases around is_num(), is_alpha(), is_alnum(), is_ascii() BiFs 2022-02-28 13:09:32 -08:00
is_event_handled.zeek Address review comments and small updates for DNS warnings 2025-01-14 09:33:48 +00:00
is_local_interface.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
is_port.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
join_string.zeek strings: Implement join_string_set() as bif 2022-09-20 23:07:26 +02:00
levenshtein_distance.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
lookup_connection.zeek session/Manager: Emit explicit errors for FindConnection() with proto=65535 2025-01-17 17:57:49 +01:00
lookup_ID.zeek Fix lookup_ID() BIF to return enum values 2020-11-06 15:37:54 -08:00
lowerupper.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
lstrip.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
mask_addr.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
matching_subnets.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
math.zeek zeek.bif: Add log2() and ceil() 2023-05-09 18:57:57 +02:00
md5.test GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
net_stats_trace.test General btest cleanup 2020-08-11 11:26:22 -07:00
netbios-functions.zeek netbios_decode: use unsigned char for result 2023-02-02 15:48:58 +01:00
order.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
packet_sources.zeek Only allow a single trace file (-r) or interface (-i) option on the command-line 2020-01-31 09:34:54 -07:00
parse_ftp.zeek bifs/parse_eftp: Prevent reporter warnings/errors on invalid input 2023-01-16 15:20:02 +01:00
piped_exec.zeek tweak btest so it's recognized as a candidate for C++ compilation testing 2022-09-16 16:49:55 -07:00
print_raw.zeek Add new BIF: print_raw() 2019-10-02 15:21:24 -07:00
ptr_name_to_addr.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
rand.zeek GH-1076: Fix bro_srandom() to replace 0 seeds with 1 2020-07-22 14:01:33 -07:00
raw_bytes_to_v4_addr.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
raw_bytes_to_v6_addr.zeek Add tests for raw_bytes_to_v6_addr 2022-03-08 17:50:26 -05:00
reading_traces.zeek General btest cleanup 2020-08-11 11:26:22 -07:00
record_type_to_vector.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
records_fields.zeek record_fields: Include information about optionality of fields 2023-04-27 21:18:35 +02:00
remask_addr.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
resize.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
reverse.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
rotate_file.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
rotate_file_by_name.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
routing0_data_to_addrs.test GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
rstrip.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
safe_shell_quote.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
same_object.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
sha1.test GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
sha256.test GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
sleep.zeek Add sleep() BiF. 2024-12-07 00:36:45 -08:00
sort.zeek test suite updates for expanded sort() BiF semantics (bools, doubles) 2021-02-25 17:13:50 -08:00
split_string.zeek strings.bif/do_split_string: Pass bol and eol to MatchPrefix() 2023-11-16 08:36:08 +01:00
strcmp.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
strftime.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
string_fill.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
string_to_pattern.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
string_utils.zeek Convert remove_prefix/suffix BIFs to use std::string_view 2024-01-23 10:38:56 -07:00
string_utils_errors.zeek minor BTest generalizations & simplifications 2023-07-13 13:10:14 -07:00
strip.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
strptime.zeek Separate stdout from stderr in btest baselines 2021-03-30 16:23:23 -07:00
strstr.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
sub.zeek strings.bif/sub,gsub: Respect anchors in pattern 2023-11-17 14:37:25 +01:00
sub_bytes.zeek BTest updates for ZAM regularization changes 2024-08-16 11:18:58 +02:00
subnet_to_addr.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
subnet_version.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
subst_string.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
system.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
system_env.zeek Rename all BRO-prefixed environment variables 2019-05-22 00:12:31 -05:00
table_keys.zeek Add more test cases 2022-08-11 13:35:27 +08:00
table_values.zeek update test suite to avoid GH-2385 problems, including incorrect typing 2022-12-04 17:56:30 -08:00
to_addr.zeek Improve error messages from to_addr and to_subnet BIFs 2019-08-01 10:49:03 -07:00
to_count.zeek Merge remote-tracking branch 'markoverholser/master' 2025-02-24 11:38:11 -07:00
to_double.zeek Add count_to_double and int_to_double bif functions 2020-12-01 16:35:49 -05:00
to_double_from_string.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
to_int.zeek Merge remote-tracking branch 'markoverholser/master' 2025-02-24 11:38:11 -07:00
to_interval.zeek GH-985: Fix descriptions of double_to_interval() return values 2020-06-02 16:47:11 -07:00
to_port.zeek bifs/to_port: Avoid ASAN errors when calling to_port("") 2022-08-31 17:15:50 +02:00
to_subnet.zeek Improve error messages from to_addr and to_subnet BIFs 2019-08-01 10:49:03 -07:00
to_time.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
topk.zeek updates to test suite tests for compatibility with upcoming ZAM functionality 2021-06-01 09:25:30 -07:00
type_aliases.zeek Add type_aliases() BIF for introspecting type-names of types/values 2020-11-06 17:18:44 -08:00
type_name.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
unique_id-pools.zeek testing/btest/*zeek: Comment all @TEST lines 2025-04-17 16:30:23 +02:00
unique_id-rnd.zeek Rename all BRO-prefixed environment variables 2019-05-22 00:12:31 -05:00
unique_id.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
uuid_to_string.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
x509_check_hostname.zeek Add ability to check if hostname is valid for a specific cert 2021-06-29 15:00:48 +01:00
x509_parse_dn.zeek SSL/TLS: Parse CertificateRequest message 2023-03-09 09:12:29 +01:00
x509_verify.zeek btest/x509_verify: Drop OpenSSL 1.0 hack 2025-02-04 09:44:03 +01:00
zeek_args.zeek GH-700: add zeek_args() BIF 2019-11-28 10:24:48 -08:00
zeek_version.zeek Deprecate functions with "bro" in them. 2019-06-05 16:18:57 -07:00