1
0
mirror of https://git.FreeBSD.org/ports.git synced 2024-12-28 05:29:48 +00:00
freebsd-ports/security/zeek/distinfo
Craig Leres 5f73d750c2 security/zeek: Update to 7.0.0
https://github.com/zeek/zeek/releases/tag/v7.0.0

This is the latest major version number Long-Term Support (LTS)
release of Zeek.

 - The Telemetry framework has had a major rework, and includes a
   number of breaking changes. The biggest change is a move towards
   a Prometheus-first model.

 - All of the metrics-related script-level options, type, and methods
   have been
   moved to the Telemetry framework.

 - The following options have been removed:

       Broker::metrics_export_interval
       Broker::metrics_export_topic
       Broker::metrics_import_topics
       Broker::metrics_export_prefixes

 - The unit field has been removed from the telemetry log.

 - All of the BROKER_METRICS_* environment variables have been
   removed.

 - The instruments that previously supported count in scripts and
   int64_t in C++ were removed in favor of only providing double
   versions.

 - The is_sum argument has been removed from the constructors/creation
   methods for all of the instruments.

 - Zeekctl now sets FileExtract::prefix to spool/extract_files/<node>
   to avoid deletion of extracted files when stopping worker nodes.

 - Support delete on tables, sets and vectors to clear their contents.

 - A new helper function can_load() backed by a new bif find_in_zeekpath()
   was added to determine if a non-relative @load directive might
   work.

 - Zeek packagers can now include a "local" addition into Zeek's
   version string.

 - SMB2 packets containing multiple PDUs now correctly parse all
   of the headers, instead of just the first one and ignoring the
   rest.

 - The new built-in function lookup_connection_analyzer_id() retrieves
   the numeric identifier of an analyzer associated with a connection.

 - The from_json() function now supports ingesting JSON representations
   of tables as produced by the to_json() function.

 - The analyzer.log now optionally supports logging of disabled
   analyzers through the new option Analyzer::logging::include_disabling.

 - The ftp.log fuid field is now cleared after handling a command
   with a fuid associated with it.

 - The type_name field populated by global_ids() now aligns with
   the value returned by type_name() for each identifier. E.g,
   Site::local_nets has a type_name of set[subnet] rather than table.

 - The ISO 9660 file signature has been moved into the policy
   directory.

 - The val_footprint() BiF now factors in the size of strings when
   reporting footprints, roughly equating a string's size with the
   number of elements comparable to that length.

 - The tuning/defaults policy has been deprecated and will be removed
   in v7.1.

 - If a Spicy protocol analyzers feeds data into file analysis, it
   now needs to call Zeek's Files::register_protocol() and provide
   a callback for computing file handles.

 - The Supervisor's API now returns NodeConfig records with a cluster
   table whose ClusterEndpoints have a port value of 0/unknown,
   rather than 0/tcp, to indicate that the node in question has no
   listening port.

 - The --disable-archiver configure flag no longer does anything
   and will be removed in 7.1. zeek-archiver has moved into the
   zeek-aux repository.

Reported by:	Tim Wojtulewicz
2024-08-01 14:04:36 -07:00

4 lines
153 B
Plaintext

TIMESTAMP = 1722545605
SHA256 (zeek-7.0.0.tar.gz) = 186393329b7f53f8087730eb97449e0e868b0dbad5deaea3864d7a7c7d30f8fb
SIZE (zeek-7.0.0.tar.gz) = 95688958