Skip to content

Commit

Permalink
README/ci/evt: Fixes after merging into Zeek
Browse files Browse the repository at this point in the history
I had done the doc-id/doc-description change directly on main, but
it wasn't complete and there's a bit more to do.
  • Loading branch information
awelzel committed Oct 11, 2023
1 parent d02452a commit caf9967
Show file tree
Hide file tree
Showing 4 changed files with 7 additions and 2 deletions.
1 change: 0 additions & 1 deletion .github/workflows/ci.yml
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,6 @@ jobs:
image:
- zeek-6.0
- zeek-5.2
- zeek-dev
steps:
- uses: actions/checkout@v2
- run: docker build -t ${{ matrix.image }}-quic -f docker/${{ matrix.image }}.Dockerfile .
1 change: 0 additions & 1 deletion .github/workflows/nightly.yml
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,6 @@ jobs:
image:
- zeek-6.0
- zeek-5.2
- zeek-dev
steps:
- uses: actions/checkout@v2
- run: docker build -t ${{ matrix.image }}-quic -f docker/${{ matrix.image }}.Dockerfile .
5 changes: 5 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,10 @@
# Spicy analyzer for the QUIC protocol

> **Note**
>
> Zeek 6.1 and later versions include the QUIC analyzer.
> You no longer need this package when using those Zeek versions.
A QUIC protocol analyzer for Zeek, based on Spicy. This analyzer tries to be
compatible with [QUIC IETF version 1](https://datatracker.ietf.org/doc/html/rfc9000)
Current focus is on extraction of ClientHello and ServerHello messages from
Expand Down
2 changes: 2 additions & 0 deletions analyzer/QUIC.evt
Original file line number Diff line number Diff line change
@@ -1,8 +1,10 @@
# Copyright (c) 2023, NCC Group / Fox-IT. See COPYING for details.
# Copyright (c) 2023 by the Zeek Project. See COPYING for details.

@if ZEEK_VERSION >= 60100
%doc-id = Zeek::QUIC;
%doc-description = "QUIC analyzer";
@endif

protocol analyzer QUIC over UDP:
parse originator with QUIC::RequestFrame,
Expand Down

0 comments on commit caf9967

Please sign in to comment.