-
Notifications
You must be signed in to change notification settings - Fork 1.2k
Issues: zeek/zeek
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Author
Label
Projects
Milestones
Assignee
Sort
Issues list
Add A cup of tea and an evening (or two) with Zeek.
Implementation: Package
Something that could be implemented as a separate package, possibly with a plugin
Type: Enhancement
min
and max
functions for container types
Area: Scripting
Complexity: Modest
#3479
opened Nov 29, 2023 by
ynadji
Logs not generated from pcap on Windows (cooked/SLL problem?)
Area: Protocol Analysis
Area: Windows
Type: Bug 🐛
Unexpected behavior or output.
#3609
opened Feb 13, 2024 by
philrz
No recovery for persistent/pipelined HTTP requests after packet loss
#3607
opened Feb 8, 2024 by
apekoolp
Add Implementation requires modification of the Zeek core
Implementation: Scripts
Implementation requires Zeek scripting
Type: Enhancement
Broker::peer_websocket()
Area: Broker
Implementation: Core
#3597
opened Feb 2, 2024 by
ckreibich
mkdir() BiF generates errors on failure rather than warnings
Area: Scripting
good first issue
A good place to get started working with Zeek.
Implementation: Core
Implementation requires modification of the Zeek core
Type: Bug 🐛
Unexpected behavior or output.
#3595
opened Jan 31, 2024 by
vpax
Apparent memory leak on Windows
Area: Windows
Type: Bug 🐛
Unexpected behavior or output.
#3590
opened Jan 31, 2024 by
philrz
fuzzers: Disable other protocol analyzers
Area: Fuzzing
Issues related to the fuzzer setup.
#3572
opened Jan 22, 2024 by
awelzel
Dict: Assertion `iter->next == Capacity()' failed.
Implementation: Core
Implementation requires modification of the Zeek core
Type: Bug 🐛
Unexpected behavior or output.
#3538
opened Jan 8, 2024 by
awelzel
Segmentation fault during Windows pcap processing (maybe caused by detect-MHR)
Area: Windows
Type: Bug 🐛
Unexpected behavior or output.
#3534
opened Jan 8, 2024 by
philrz
Record fields with A cup of tea and an evening (or two) with Zeek.
Implementation: Core
Implementation requires modification of the Zeek core
Type: Bug 🐛
Unexpected behavior or output.
&default
constructors and expiration attributes may not trigger their timers, causing state leaks
Area: Scripting
Complexity: Modest
#3513
opened Dec 16, 2023 by
ckreibich
Don't Implementation requires modification of the Zeek core
Type: Enhancement
FatalError
on pcap read errors
Area: Packet Capture
Implementation: Core
#3497
opened Dec 8, 2023 by
ckreibich
When a TCP connection is established and the server retransmits a SYN-ACK (with a different TCP sequence number), it results in a significant discrepancy between the conn's resp_bytes statistics and the actual data received
Area: Protocol Analysis
Implementation: Core
Implementation requires modification of the Zeek core
#3313
opened Sep 20, 2023 by
luguifang
Spicy-level enum docstrings should be visible in zeekygen-generated docs
Area: Documentation
Complexity: Modest
A cup of tea and an evening (or two) with Zeek.
Implementation: Core
Implementation requires modification of the Zeek core
Type: Enhancement
#3446
opened Nov 8, 2023 by
ckreibich
TLS parser rewrite in Spicy
Area: Performance
Area: Protocol Analysis
Complexity: Substantial
For the stout of heart.
Type: Project
A self-contained project — for example an intern project, a tech evaluation, or prototyping
#3438
opened Nov 7, 2023 by
ckreibich
Spicy: Support forwarding data to signature framework
Area: Protocol Analysis
Area: Spicy
#3437
opened Nov 7, 2023 by
awelzel
HTTP rule matching: Multipart data fed twice to matcher and state reset
Area: Performance
Area: Signatures
Complexity: Substantial
For the stout of heart.
Type: Bug 🐛
Unexpected behavior or output.
#3436
opened Nov 7, 2023 by
awelzel
PacketFilter::enable_auto_protocol_capture_filters
does not work for Spicy analyzers
Area: Packet Capture
Area: Spicy
#3432
opened Nov 6, 2023 by
0xxon
Allow plugins to convey exta state in A cup of tea and an evening (or two) with Zeek.
Implementation: Core
Implementation requires modification of the Zeek core
Type: Enhancement
zeek::Packet
Area: Packet Capture
Area: Plugins
Complexity: Modest
#3431
opened Nov 4, 2023 by
ckreibich
Make Zeekygen warnings easier to filter
Area: Zeekygen
Implementation: Core
Implementation requires modification of the Zeek core
Type: Enhancement
#3430
opened Nov 4, 2023 by
ckreibich
Skewed round-robin logging with even number of loggers
Area: Logging
Complexity: Modest
A cup of tea and an evening (or two) with Zeek.
#3407
opened Oct 25, 2023 by
awelzel
GRE-over-UDP tunnel connection association
Area: Protocol Analysis
Type: Bug 🐛
Unexpected behavior or output.
#3378
opened Oct 16, 2023 by
awelzel
Consider adding convenience workaround so sanitizer builds of Zeek can be run on macOS
Type: Enhancement
#3347
opened Oct 1, 2023 by
bbannier
Registering Spicy analyzer with ports in EVT not equivalent to using Zeek Unexpected behavior or output.
Analyzer::register_for_ports
Area: Spicy
Type: Bug 🐛
#3318
opened Sep 21, 2023 by
bbannier
ProTip!
Type g i on any issue or pull request to go back to the issue listing page.