Arne Welzel
Arne Welzel
It would be good to move some classes within `zeek::packet_analysis` into a detail namespace. As it is, we can not do breaking changes to many/any classes in this subtree. More...
This has been observed on multi-logger systems with an even number of loggers and an even number of filters attached to log streams quite a while ago with @jlucovsky. @J-Gras...
All the tuning/defaults package does is: ``` redef FileExtract::default_limit = 104857600; redef frag_timeout = 5 min; ``` ...and produce the warning about empty `Site::local_nets`. The latter has become mood after...
For distributors, appending an additional version string to Zeek's version can be useful to track any custom patches applied or other build/tree specific information. Currently, to include additional information into...
There's something off with this :-) The tunnel_parent `ClEkJM2Vm5giqnMf4h` is used for *both* inner connections. If you look at the pcap, however, the inner DNS connection is tunneled within the...
Plainly creating a ticket from this discussions on zeek-docs: We don't push `-rc1` - I sometimes wished we did though. Worth it? _Originally posted by @awelzel in https://github.com/zeek/zeek-docs/pull/200#discussion_r1262178127_
Mostly for usability / debug-ability - A user added `redef io_poll_interval_live = 100` to its `local.zeek`, missing the `;` at the end. That was [during a troubleshooting session.](https://zeekorg.slack.com/archives/CSZBXF6TH/p1693503317744799?thread_ts=1693418155.340879&cid=CSZBXF6TH). Minimal reproducer:...
Tim opened a PR to add verbose logging of completed tests: https://github.com/zeek/zeek/pull/2816 I'm unable to find any bread-crumbs about follow-ups, but observed two timeouts today. One with [arm_debian11](https://cirrus-ci.com/task/4651603739803648) and one...
I've seen this a few times and believe it triggered on a FreeBSD VM as well running the core tests while trying to reproduce #3013. https://cirrus-ci.com/task/5929409929019392?logs=test#L831 Hmm, there had been...
Being confused how things fit together during #3179, using a lambda *with captures* for &default on a table without a table constructor expression goes up in flames on the first...