Issues: zeek/zeek
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Author
Label
Projects
Milestones
Assignee
Sort
Issues list
zeekctl netstats gets stuck sometimes if zeek worker crashed
#3509
opened Dec 15, 2023 by
6U-U9
updated Jan 8, 2024
Document required lifecycle management of spicy-plugin handles created with
file_begin
and protocol_begin
Area: Documentation
Area: Spicy
#3522
opened Jan 5, 2023 by
bbannier
updated Jan 2, 2024
Provide access to Zeek script-land configuration options from spicy-plugin
Area: Spicy
#3521
opened Apr 18, 2023 by
0xxon
updated Jan 2, 2024
Poor diagnostics if function use does not match signature
Area: Scripting
Type: Enhancement
#3516
opened Dec 19, 2023 by
bbannier
updated Dec 19, 2023
Record fields with A cup of tea and an evening (or two) with Zeek.
Implementation: Core
Implementation requires modification of the Zeek core
Type: Bug 🐛
Unexpected behavior or output.
&default
constructors and expiration attributes may not trigger their timers, causing state leaks
Area: Scripting
Complexity: Modest
#3513
opened Dec 16, 2023 by
ckreibich
updated Dec 18, 2023
Don't Implementation requires modification of the Zeek core
Type: Enhancement
FatalError
on pcap read errors
Area: Packet Capture
Implementation: Core
#3497
opened Dec 8, 2023 by
ckreibich
updated Dec 16, 2023
Add A cup of tea and an evening (or two) with Zeek.
Implementation: Package
Something that could be implemented as a separate package, possibly with a plugin
Type: Enhancement
min
and max
functions for container types
Area: Scripting
Complexity: Modest
#3479
opened Nov 29, 2023 by
ynadji
updated Dec 5, 2023
Spicy-level enum docstrings should be visible in zeekygen-generated docs
Area: Documentation
Complexity: Modest
A cup of tea and an evening (or two) with Zeek.
Implementation: Core
Implementation requires modification of the Zeek core
Type: Enhancement
#3446
opened Nov 8, 2023 by
ckreibich
updated Nov 8, 2023
Registering Spicy analyzer with ports in EVT not equivalent to using Zeek Unexpected behavior or output.
Analyzer::register_for_ports
Area: Spicy
Type: Bug 🐛
#3318
opened Sep 21, 2023 by
bbannier
updated Nov 8, 2023
Spicy: Support forwarding data to signature framework
Area: Protocol Analysis
Area: Spicy
#3437
opened Nov 7, 2023 by
awelzel
updated Nov 7, 2023
PacketFilter::enable_auto_protocol_capture_filters
does not work for Spicy analyzers
Area: Packet Capture
Area: Spicy
#3432
opened Nov 6, 2023 by
0xxon
updated Nov 6, 2023
Allow plugins to convey exta state in A cup of tea and an evening (or two) with Zeek.
Implementation: Core
Implementation requires modification of the Zeek core
Type: Enhancement
zeek::Packet
Area: Packet Capture
Area: Plugins
Complexity: Modest
#3431
opened Nov 4, 2023 by
ckreibich
updated Nov 4, 2023
Skewed round-robin logging with even number of loggers
Area: Logging
Complexity: Modest
A cup of tea and an evening (or two) with Zeek.
#3407
opened Oct 25, 2023 by
awelzel
updated Oct 25, 2023
Consider adding convenience workaround so sanitizer builds of Zeek can be run on macOS
Type: Enhancement
#3347
opened Oct 1, 2023 by
bbannier
updated Oct 11, 2023
Allow creating an analyzer which can consume both TCP and UDP traffic
#3359
opened Jul 5, 2021 by
bbannier
updated Oct 10, 2023
Replace UTF code
Area: Event Engine
Complexity: Modest
A cup of tea and an evening (or two) with Zeek.
good first issue
A good place to get started working with Zeek.
Type: Project
A self-contained project — for example an intern project, a tech evaluation, or prototyping
#1756
opened Aug 31, 2021 by
rsmmr
updated Oct 4, 2023
Dump all analyzed traffic to pcap files
Area: Packet Capture
Type: Enhancement
#1486
opened Apr 1, 2021 by
Olerdrive
updated Sep 28, 2023
Packages miss backwards-compatibility link of testing-related files
Area: Packages
Priority: High
#3266
opened Sep 1, 2023 by
bbannier
updated Sep 25, 2023
Push container images for RC releases
Area: Build/Platform
Area: CI/Testing
Area: Release/Distribution
Type: Enhancement
#3287
opened Sep 11, 2023 by
awelzel
updated Sep 12, 2023
warning: Dictionary::Remove() possibly caused iterator invalidation
with some file analyzer constellations
Implementation: Core
Zeek dictionaries do not shrink
Complexity: Substantial
For the stout of heart.
Implementation: Core
Implementation requires modification of the Zeek core
#3262
opened Aug 31, 2023 by
0xxon
updated Sep 8, 2023
Missing semicolon before load produces unhelpful error
Implementation: Core
Implementation requires modification of the Zeek core
Priority: Low
#3265
opened Sep 1, 2023 by
awelzel
updated Sep 1, 2023
Cirrus CI timeouts due to hanging tests
Area: CI/Testing
#2987
opened Apr 27, 2023 by
awelzel
updated Aug 23, 2023
ProTip!
Add no:assignee to see everything that’s not assigned.