Peter Cullen

Manager runs out of memory distributing large input file to proxies

9

1. Intel is supposed to be distributed through the proxies. There is some code in the intel framework for this: ``` # On the manager, the new_item event indicates a...

With Zeek 6, private subnets are added to Site::local_nets by default. The failing test requires that not to be the case, so for Zeek 6 only, set Site::private_address_space_is_local to F.

Change the package settings to Zeek option types for easier run-time configuration changes.

With Zeek 6.0 and higher, the exploit btest fails to produce a notice for "big_endian". The notice.log only contains: ``` - - - - - CVE_2022_26809::ExploitAttempt 192.168.56.104 attempting exploit on...

Add IPv6 support for ZeroMQ backend

1

While testing the ZeroMQ broker backend with Zeek 7.2.1, I observed the following error while trying to use IPv6: `logger: error in , line 1: ZeroMQ: Failed to bind to...