zeek/zeek issues and pull requests

#100 - Add gzip log writing to the ascii writer.

Pull Request - State: closed - Opened by 0xxon over 7 years ago

#99 - Add variables to disable notice.log spam

Pull Request - State: closed - Opened by mhofstra over 7 years ago - 1 comment

#98 - Add more parsing to smb2 create request/response.

Pull Request - State: closed - Opened by jwallior over 7 years ago - 3 comments

#97 - Multiple NFS changes

Pull Request - State: closed - Opened by jwallior over 7 years ago - 2 comments

#96 - initial commit of LDAP analyzer

Pull Request - State: closed - Opened by ghost over 7 years ago - 5 comments

#95 - print version string to stdout on --version

Pull Request - State: closed - Opened by petiepooo over 7 years ago

#94 - Add script to log ICMP Echo traffic

Pull Request - State: closed - Opened by jrolli over 7 years ago - 1 comment

#93 - Topic/jgras/bit 1790

Pull Request - State: closed - Opened by J-Gras over 7 years ago - 2 comments

#92 - Kerberos ticket tracking

Pull Request - State: closed - Opened by jrolli over 7 years ago - 14 comments

#91 - Enable "mac-logging" to flip with connections

Pull Request - State: closed - Opened by jrolli over 7 years ago - 1 comment

#90 - Update krb-types.pac

Pull Request - State: closed - Opened by jamesecorrenti almost 8 years ago

#89 - Fixed bug in Connection::InactivityTimer

Pull Request - State: closed - Opened by dnaq almost 8 years ago - 6 comments

#88 - Update smb1-com-open-andx.pac

Pull Request - State: closed - Opened by balintm almost 8 years ago - 3 comments

#87 - fix handling of embedded quotes in json logs

Pull Request - State: closed - Opened by brianwaskiewicz almost 8 years ago - 3 comments

#86 - Improve Intel::remove error handling.

Pull Request - State: closed - Opened by J-Gras about 8 years ago - 1 comment

#85 - Update init-bare.bro

Pull Request - State: closed - Opened by moshekaplan about 8 years ago

#84 - Replace 'array' with 'vector' in String docs

Pull Request - State: closed - Opened by moshekaplan about 8 years ago - 1 comment

#83 - Clarified string documentation

Pull Request - State: closed - Opened by moshekaplan about 8 years ago

#82 - Update events.bif

Pull Request - State: closed - Opened by moshekaplan about 8 years ago

#81 - Added String slicing (subscript) examples

Pull Request - State: closed - Opened by moshekaplan about 8 years ago

#80 - Update POP3.cc

Pull Request - State: closed - Opened by bryonglodencissp about 8 years ago - 1 comment

#79 - Update SMTP.cc

Pull Request - State: closed - Opened by bryonglodencissp about 8 years ago - 1 comment

#78 - Fix .lnk magic numbers

Pull Request - State: closed - Opened by TheDr1ver about 8 years ago - 2 comments

#77 - Intelligence framework update

Pull Request - State: closed - Opened by J-Gras about 8 years ago

#76 - Topic/ll h/goose merge

Pull Request - State: closed - Opened by ll-h over 8 years ago - 9 comments

#75 - Fixed &default values ignored by input framework.

Pull Request - State: closed - Opened by J-Gras over 8 years ago

#74 - Improved handling of 802.11 headers.

Pull Request - State: closed - Opened by J-Gras over 8 years ago - 2 comments

#73 - Fixed table expiration evaluation.

Pull Request - State: closed - Opened by J-Gras over 8 years ago

#72 - Moved link-layer addresses into endpoints.

Pull Request - State: closed - Opened by J-Gras over 8 years ago

#71 - Added interpreter error for local event variables.

Pull Request - State: closed - Opened by J-Gras over 8 years ago

#70 - Add ipv6 detection to conn.log

Pull Request - State: closed - Opened by utkonos over 8 years ago - 1 comment

#69 - Correcting wrong output for unknown data link type

Pull Request - State: closed - Opened by vitalyrepin over 8 years ago

#68 - Add a Gitter chat badge to README.rst

Pull Request - State: closed - Opened by gitter-badger over 8 years ago

#67 - Add DNS "CAA" RR type and event.

Pull Request - State: closed - Opened by marktayl over 8 years ago

#66 - DNS TTL responses are to be unsigned.

Pull Request - State: closed - Opened by marktayl over 8 years ago

#65 - Added get_current_packet_header() bif

Pull Request - State: closed - Opened by J-Gras over 8 years ago

#64 - Add disable_all_analyzers for connection shunting options

Pull Request - State: closed - Opened by aeppert over 8 years ago - 8 comments

#63 - Wrong regex literal in scripting doc

Pull Request - State: closed - Opened by WilliamTom over 8 years ago

#62 - Add a means of disabling the SMB files log

Pull Request - State: closed - Opened by aeppert over 8 years ago - 8 comments

#61 - Add uid to smb_ntlm_authenticate

Pull Request - State: closed - Opened by aeppert over 8 years ago

#60 - Add uid to AuthInfo

Pull Request - State: closed - Opened by aeppert over 8 years ago

#59 - Topic/johanna/filter subnet table

Pull Request - State: closed - Opened by J-Gras over 8 years ago

#58 - (BIT-1545) Add "disable_analyzer_after_detection" en lieu of "skip_pr…

Pull Request - State: closed - Opened by aeppert over 8 years ago - 1 comment

#57 - Better multi-space separator handling, and update "WHO" to handle no-parameters case.

Pull Request - State: closed - Opened by marktayl over 8 years ago - 2 comments

#56 - Allow IRC commands to not have parameters.

Pull Request - State: closed - Opened by marktayl over 8 years ago - 3 comments

#55 - http-evasion

Pull Request - State: closed - Opened by wglodek over 8 years ago - 2 comments

#54 - Removed duplicate parameter for IRC "QUIT" event handler.

Pull Request - State: closed - Opened by marktayl over 8 years ago

#53 - Correct irc_privmsg_message handling.

Pull Request - State: closed - Opened by marktayl over 8 years ago

#52 - Fixed matching mail address intel

Pull Request - State: closed - Opened by J-Gras over 8 years ago - 2 comments

#51 - Add version to HTTP::Info

Pull Request - State: closed - Opened by aeppert over 8 years ago - 1 comment

#50 - NOTIFY is a valid SIP message per RFC3265

Pull Request - State: closed - Opened by aeppert over 8 years ago

#49 - update ParseRequest to handle missing uri

Pull Request - State: closed - Opened by wglodek over 8 years ago - 2 comments

#48 - Update windows-version-detection.bro

Pull Request - State: closed - Opened by aeppert almost 9 years ago - 1 comment

#47 - Fix a problem with the JSON Serialization code

Pull Request - State: closed - Opened by aeppert almost 9 years ago

#46 - HTTP Content-Disposition header updates filename field in HTTP::Info

Pull Request - State: closed - Opened by albertzaharovits almost 9 years ago - 9 comments

#45 - hash-all-files.bro depends on base/files/hash

Pull Request - State: closed - Opened by RichieB2B about 9 years ago

#44 - Fixed parsing of V_ASN1_GENERALIZEDTIME timestamps in x509 certificates

Pull Request - State: closed - Opened by yunzheng about 9 years ago - 5 comments

#43 - Update to SIP protocol

Pull Request - State: closed - Opened by balintm about 9 years ago

#42 - Improved logging of Base64 errors

Pull Request - State: closed - Opened by J-Gras about 9 years ago - 3 comments

#41 - Made README and NEWS markdown files, added relative links

Pull Request - State: closed - Opened by danseely about 9 years ago - 3 comments

#40 - Enable linux fanout mode with Bro

Pull Request - State: closed - Opened by knielander about 9 years ago - 11 comments

#39 - Teredo dpd signature extended

Pull Request - State: closed - Opened by balintm about 9 years ago - 3 comments

#38 - Topic/mb/teredo

Pull Request - State: closed - Opened by balintm about 9 years ago - 1 comment

#37 - [BIT-1429] The SMTP logs should include CC: addresses as well as To: addresses

Pull Request - State: closed - Opened by albertzaharovits about 9 years ago - 2 comments

#36 - Add hook 'HookAddToAnalyzerTree' to support TCPRS plugin

Pull Request - State: closed - Opened by jswaro about 9 years ago - 2 comments

#35 - Updated detection of Flash and AdobeAIR.

Pull Request - State: closed - Opened by J-Gras about 9 years ago - 5 comments

#34 - Allow for logging VLAN information with Connections

Pull Request - State: closed - Opened by aaronmbr about 9 years ago

#33 - Initial commit of the TCPRS analyzer

Pull Request - State: closed - Opened by jswaro about 9 years ago - 6 comments

#32 - VLAN logging support

Pull Request - State: closed - Opened by aaronmbr over 9 years ago - 1 comment

#31 - Fix BIT-1314: Detect "quantum insert" type of attacks

Pull Request - State: closed - Opened by yunzheng over 9 years ago - 1 comment

#30 - Use a common Packet format and preserve layer 2 information

Pull Request - State: closed - Opened by jsbarber over 9 years ago - 9 comments

#29 - Add PROXY-AUTHORIZATION header to http.log

Pull Request - State: closed - Opened by jshlbrd over 9 years ago - 1 comment

#28 - Seems to fix a case where an entry in the table may be null on insert.

Pull Request - State: closed - Opened by aeppert over 9 years ago - 2 comments

#27 - Add defensive check for localtime_r() call

Pull Request - State: closed - Opened by petiepooo over 9 years ago

#26 - Add ssl data to rdp log

Pull Request - State: closed - Opened by jshlbrd over 9 years ago - 1 comment

#25 - Topic/jshlbrd/rdp

Pull Request - State: closed - Opened by eunsilhan over 9 years ago - 2 comments

#24 - add bytes_recvd to Stats and stats.bro for reporting

Pull Request - State: closed - Opened by msmiley over 9 years ago

#23 - add local_resp to Conn Info

Pull Request - State: closed - Opened by msmiley over 9 years ago - 1 comment

#22 - add local_resp (to complement local_orig) to Conn Info

Pull Request - State: closed - Opened by msmiley over 9 years ago

#21 - undefined var in debug code

Pull Request - State: closed - Opened by msmiley over 9 years ago

#20 - undefined var in debug code

Pull Request - State: closed - Opened by msmiley over 9 years ago

#19 - Update windows-version-detection.bro

Pull Request - State: closed - Opened by mpurzynski almost 10 years ago - 1 comment

#18 - BIFScanner: Make filename->symbol transformation more robust

Pull Request - State: closed - Opened by hillu almost 10 years ago

#17 - URI Parsing Function

Pull Request - State: closed - Opened by anthonykasza almost 10 years ago

#16 - Wrong port in scripting documentation

Pull Request - State: closed - Opened by vice almost 10 years ago

#15 - Rename README to README.md

Pull Request - State: closed - Opened by charles-toller about 10 years ago - 1 comment

#14 - Minor corrections in doc/scripting readme

Pull Request - State: closed - Opened by cmavr8 about 10 years ago

#13 - Better documentation for sub_bytes

Pull Request - State: closed - Opened by jimmyjones2 about 10 years ago

#12 - SMB & NTLM analyzers.

Pull Request - State: closed - Opened by zeebr about 10 years ago - 1 comment

#11 - Flip roles if [Syn,Ack] is seen as a first packet in TCP communication.

Pull Request - State: closed - Opened by balintm about 10 years ago - 4 comments

#10 - Log urls sent over SMTP.

Pull Request - State: closed - Opened by hosom about 10 years ago - 1 comment

#9 - New Logging Writers based on librabbitmq

Pull Request - State: closed - Opened by Mraoul over 10 years ago - 1 comment

#8 - New Logging Writers based on librabbitmq

Pull Request - State: closed - Opened by Mraoul over 10 years ago - 4 comments

#7 - Do not repeat hex-code of decoded quoted-printable.

Pull Request - State: closed - Opened by mareq over 10 years ago

#6 - Intel::ADDR indicators in http host field

Pull Request - State: closed - Opened by jshlbrd over 10 years ago

#5 - BloomFilter.cc fix to Clear()

Pull Request - State: closed - Opened by colonelxc over 10 years ago - 4 comments

#4 - Protocol identification heuristics.

Pull Request - State: closed - Opened by mareq over 10 years ago - 3 comments

#3 - new function in util: get_hexdump(unsigned char*, int)

Pull Request - State: closed - Opened by ghost about 11 years ago - 4 comments

#2 - String N-Gram Function

Pull Request - State: closed - Opened by anthonykasza about 11 years ago - 4 comments

#1 - levenshtein distance

Pull Request - State: closed - Opened by anthonykasza about 11 years ago - 3 comments

GitHub / zeek/zeek issues and pull requests