Seth Grover

Feature Request: Subnet Grouping for Connections View

3

For large networks with many hosts, the connections view can get cluttered. It would be useful to be able to specify a CIDR mask, something like "Src IP/24", "Dst IP/16",...

Segmentation fault (core dumped) with DPD anchoring at the end of payload

4

I have attached [zeek-dpdcrash.tar.gz](https://github.com/zeek/zeek/files/8119913/zeek-dpdcrash.tar.gz) that contains a zkg package directory (based off of [bbannier/package-template-spicy](https://github.com/bbannier/package-template-spicy)). The core of the issue seems to be: ``` signature dpd_crash_message { ip-proto == tcp payload...

This is an enhancement request. Today [intelligence indicators](https://docs.zeek.org/en/master/scripts/base/frameworks/intel/main.zeek.html#type-Intel::Item) work by exact matching only. As @JustinAzoff said in slack, "that could probably be revisited these days though; building regexes at runtime...

fix segfault in ngx_http_auth_ldap_ssl_handshake_handler and add "chain" option for ssl_check_cert

1

This pull request addresses two things relating to `ngx_http_auth_ldap_ssl_handshake_handler`: 1. Fixes kvspb/nginx-auth-ldap#236 by not assuming `conn->sockaddr` is non-NULL. Instead, it tries to get it from `conn->sockaddr`, `c->conn.sockaddr`, and finally `c->server->parsed_url.sockaddr.sockaddr`,...

ldap server still sees lots of searches even with caching enabled?

2

I realize this is less likely an issue an more likely something with my config, but hopefully someone can set me straight. Everything is working correctly as far aw connectivity,...

segmentation fault in ngx_http_auth_ldap_ssl_handshake_handler with ssl_check_cert and ssl_ca_dir

6

My config file looks like this: ``` ldap_server ad_server { url "ldaps://192.168.0.73:636/DC=local,DC=lan?uid?sub?(objectClass=posixAccount)"; ssl_check_cert on; ssl_ca_dir /var/run/ca-trust; binddn "xxxxxxxxxx"; binddn_passwd "xxxxxxxxxx"; require valid_user; } ``` When I remove the `ssl_` stuff,...

does not work with Zeek v5.0

1

Zeek v5.0.0 was recently released. Here are the errors/warnings I get when using this package with that release: ``` > zeek -NN local 2>&1 | grep -i bzar warning in...

Fixes for Zeek v5.0.0

1

This PR addresses issue #15 The issues fixed are some differences (deprecations removed, I believe) in syntax of some redefined sets/tables, and fixing some warnings about local variables `used inside...

[Bootstrap now supports color modes, starting with dark mode!](https://getbootstrap.com/docs/5.3/customize/color-modes/) Could this be incorporated into startbootstrap-landing-page?

rename bro-pkg.meta to zkg.meta

1

As of v6.1.0 packages no longer install with `zkg` without `zkg.meta`. This PR renames `bro-pkg.meta` to `zkg.meta` without any changes to content.