Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-07 09:08:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Implement protocol confirmation

Browse source 
Do not set the service field in the bro script but
use the protocol confirmation paradigm.

Protocol is considered confirmed if both a
succesful client and server banner have been
parsed.
This commit is contained in:
Martin van Hensbergen 2016-04-11 11:28:22 +02:00
parent 849875e8be
commit 04dd65cbaf
2 changed files with 3 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

1
scripts/base/protocols/rfb/main.bro
View file

@ -106,7 +106,6 @@ event rfb_server_version(c: connection, major_version: string, minor_version: st
set_session(c);
c$rfb_state$server_major_version = major_version;
c$rfb_state$server_minor_version = minor_version;
add c$service["rfb"];
}
event rfb_authentication_type(c: connection, authtype: count)