Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 06:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1
No description
7274 commits 387 branches 195 tags 255 MiB
Find a file
Johanna Amann eab80c8834 HTTP: Recognize and skip upgrade/websocket connections. 
This adds a slight patch to the HTTP analyzer, which recognizez when a connection is
upgraded to a different protocol (using a 101 reply with a few specific headers being
set).

In this case, the analyzer stops further processing of the connection (which will
result in DPD errors) and raises a new event:

event http_connection_upgrade(c: connection, protocol: string);

Protocol contains the name of the protocol that is being upgraded to, as specified in
one of the header values.
2017-08-04 07:04:28 -07:00
aux Updating submodule(s). 2017-07-28 10:09:39 -07:00
cmake@79f2b2e944 Updating submodule(s). 2017-05-26 08:29:12 -05:00
doc Remove another reference to now removed bro-plugins. 2017-07-11 09:56:33 -07:00
man Remove -z/--analysis option. 2016-08-04 17:44:38 -07:00
scripts Addresses BIT-1831 2017-08-01 16:24:44 -04:00
src HTTP: Recognize and skip upgrade/websocket connections. 2017-08-04 07:04:28 -07:00
testing HTTP: Recognize and skip upgrade/websocket connections. 2017-08-04 07:04:28 -07:00
.gitignore Ignore tmp dir. 2011-10-25 19:59:25 -07:00
.gitmodules Add netcontrol-connectors to aux 2016-08-10 10:16:10 -07:00
bro-config.h.in Extend plugin infrastructure to catch Bro version mismatches at link 2017-07-07 15:58:05 -07:00
bro-config.in Add 'bro-config' script. 2016-08-15 14:45:29 -05:00
bro-path-dev.in Flesh out Broxygen doc-gathering skeleton. 2013-10-22 14:45:47 -05:00
CHANGES Small fix to revert to double-% handling in HTTP back to old behaviour. 2017-07-28 12:22:54 -07:00
CMakeLists.txt Adding plugin API number into versioned function name, and removing 2017-07-21 13:25:56 -07:00
configure Fix configure warning when compiling with --enable-broker 2016-08-10 10:21:55 -07:00
COPYING Update documentation license 2016-10-06 11:35:31 -07:00
INSTALL Make INSTALL a symlink to doc/install/install.rst 2015-03-13 15:45:20 -05:00
Makefile Remove unused "bindist" make target 2016-11-11 15:41:25 -06:00
NEWS Removing aux/plugins. 2017-07-07 13:48:15 -07:00
README Updating README with download/git information. 2013-10-25 15:06:13 -07:00
README.rst Add README.rst -> README symlink. Addresses BIT-1413 2015-09-10 15:22:13 -05:00
VERSION Small fix to revert to double-% handling in HTTP back to old behaviour. 2017-07-28 12:22:54 -07:00

README 

============================
Bro Network Security Monitor
============================

Bro is a powerful framework for network analysis and security
monitoring. Please see the INSTALL file for installation instructions
and pointers for getting started. NEWS contains release notes for the
current version, and CHANGES has the complete history of changes.
Please see COPYING for licensing information.

You can download source and binary releases on:

    http://www.bro.org/download

To get the current development version, clone our master git
repository:

    git clone --recursive git://git.bro.org/bro

For more documentation, research publications, and community contact
information, please see Bro's home page:

    http://www.bro.org


On behalf of the Bro Development Team,

Vern Paxson & Robin Sommer,
International Computer Science Institute &
Lawrence Berkeley National Laboratory
vern@icir.org / robin@icir.org