Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 06:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Add DNS TKEY event

Browse source
This commit is contained in:
Evan Typanski 2024-08-13 15:27:25 -04:00
parent ec1088c3ef
commit 170276807b
9 changed files with 161 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

15
scripts/base/init-bare.zeek
View file

@ -4083,6 +4083,21 @@ type dns_edns_cookie: record {
server_cookie: string &default=""; ##< Cookie from the server (0 bytes if missing, or 8 to 32 bytes).
};
## A DNS TKEY record.
##
## .. zeek:see:: dns_TKEY
type dns_tkey: record {
query: string; ##< Query.
qtype: count; ##< Query type.
alg_name: string; ##< Algorithm name.
inception: time; ##< Requested or provided start of validity interval for keying material.
expiration: time; ##< Requested or provided end of validity interval for keying material.
mode: count; ##< Key agreement or purpose of the message.
rr_error: count; ##< Error code.
key_data: string; ##< Key exchange data field.
is_query: count; ##< The RR is a query/Response.
};
## An additional DNS TSIG record.
##
## .. zeek:see:: dns_TSIG_addl