Hi Everyone,
We are considering removing the Stepping Stone analyzer from Zeek.
Currently the analyser is deactivated by default (this has been the case since at least release 2.0). It also is basically undocumented, does not work in cluster setups, potentially has a few bugs - and is integrated into the codebase in a bit of an oddball way.
We are interested to hear if anyone is actively using the Stepping Stone analyser - and what you are using it for. If you are using it - could you either answer here or to me directly.
Thank you,
Johanna