# Copyright (c) 2022 by the Zeek Project. See LICENSE for details.

%doc-id= Zeek::Finger;
%doc-description = "Finger analyzer";

protocol analyzer Finger over TCP:
    parse originator with Finger::Request,
    parse responder with Finger::Reply;

import Finger;

on Finger::Request -> event finger_request($conn, self.whois, self.user, self.host);
on Finger::ReplyLine if ( |self.data| != 0 ) -> event finger_reply($conn, self.data);
