zeek/scripts
Arne Welzel e4ab7b2d70 files/main: No empty file_ids
When an analyzer calls DataIn(), there's a costly callback construct
going through the event queue. If an analyzer does not have a
get_file_handle() handler installed, the produced file_id would
end up empty and ignored. Consequently, the get_file_handle() callback
was invoked for every new DataIn() invocations.

This is surprising and costly. Log a warning when this happens and
instead set a generically generated file handle value instead to
prevent the repeated get_file_handle() invocations.
2023-02-06 18:08:05 +01:00
..
base files/main: No empty file_ids 2023-02-06 18:08:05 +01:00
policy intel/seen/file-names: Use file_over_new_connection() 2023-01-10 10:10:28 +01:00
site Deprecate misc/scan.zeek 2022-08-23 09:10:53 +02:00
zeekygen mqtt: Move from policy/ into base/ 2022-11-30 10:14:20 +01:00
CMakeLists.txt Add base/misc/installation.zeek, with Zeek installation directories 2022-05-23 14:16:59 -07:00
test-all-policy.zeek mqtt: Move from policy/ into base/ 2022-11-30 10:14:20 +01:00