Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-04 23:58:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Pass parsed file record information with ReadFile/WriteFile events

Browse source
This commit is contained in:
Tim Wojtulewicz 2023-07-25 13:02:50 -07:00
parent 18fd384469
commit 1dc9235cee
11 changed files with 129 additions and 93 deletions
Download patch file Download diff file Expand all files Collapse all files

28
scripts/base/init-bare.zeek
View file

@ -4441,6 +4441,34 @@ type ModbusHeaders: record {
len: count;
};
type ModbusFileRecordRequest: record {
ref_type: count;
file_num: count;
record_num: count;
record_len: count;
};
type ModbusFileRecordRequests: vector of ModbusFileRecordRequest;
type ModbusFileRecordResponse: record {
file_len: count;
ref_type: count;
record_data: string;
};
type ModbusFileRecordResponses: vector of ModbusFileRecordResponse;
type ModbusFileReference: record {
ref_type: count;
file_num: count;
record_num: count;
record_len: count;
record_data: string;
};
type ModbusFileReferences: vector of ModbusFileReference;
module SSL;
export {
type SignatureAndHashAlgorithm: record {

1
scripts/base/protocols/modbus/main.zeek
View file

@ -79,4 +79,3 @@ event modbus_exception(c: connection, headers: ModbusHeaders, code: count) &prio
Log::write(LOG, c$modbus);
delete c$modbus$exception;
}