Arne Welzel

> So the underlying issue here is that a table makes it difficult to include that markup into _another_ table: Sphinx doesn't support nested tables apparently. It's a not a...

> So I tried the definition list idea, but it doesn't look very nice either I think honestly: >> The docs use zeekygen comments to auto-gen the script reference, but...

@stachdude - did you have a chance to collect the flamegraph by any chance? > The only thing that comes to my mind that might be helpful is that we...

> When that code locates an existing writer, and that writer is incompatible with the new filter's effective columns, the filter addition should fail. Thankfully it already indicates success, so...

Probably somehow related, when enabling file-extraction, the extracted file is 200KB in size, but the 3 range requests would only have ~30KB of non-consecutive data. ``` $ zcat concurrent-range-requests.pcap.gz |...

> I bet the file has a hole in it of null bytes, since zeek said: I've been reading the Extract analyzer and File code a bit, and the stuffed...

> A string representation of expr would be nice too, but I suspect that gets lost in the intermediate representation. The proposal in the description assumes it's available (1): >...

Hmm - Spicy is pusing into `zeek/spicy` and `zeek/spicy-dev` rather than zeekurity. Should we align the Zeek actions with this even if it's inconsistent/non-transparent when switching between the registries? https://github.com/zeek/spicy/blob/765924e34f1ecf939d240d9c52f928f4656ea489/.github/workflows/docker.yml#L82-L85...

I'm closing this. It has been merged via #2273

cc @Neverlord