Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-12 19:48:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

IMAP: documentation and test updates

Browse source
This commit is contained in:
Johanna Amann 2016-04-26 11:15:41 -07:00
parent 3669b6aa9c
commit 25f8993b57
7 changed files with 37 additions and 25 deletions
Download patch file Download diff file Expand all files Collapse all files

1
src/analyzer/protocol/imap/IMAP.cc
View file

@ -77,7 +77,6 @@ void IMAP_Analyzer::StartTLS()
// StartTLS was called. This means we saw a client starttls followed
// by a server proceed. From here on, everything should be a binary
// TLS datastream.
tls_active = true;
Analyzer* ssl = analyzer_mgr->InstantiateAnalyzer("SSL", Conn());

6
src/analyzer/protocol/imap/Plugin.cc
View file

@ -1,8 +1,5 @@
// See the file in the main distribution directory for copyright.
#include "plugin/Plugin.h"
#include "IMAP.h"
namespace plugin {
@ -14,10 +11,9 @@ public:
{
AddComponent(new ::analyzer::Component("IMAP", ::analyzer::imap::IMAP_Analyzer::Instantiate));
plugin::Configuration config;
config.name = "Bro::IMAP";
config.description = "IMAP analyzer StartTLS only";
config.description = "IMAP analyzer (StartTLS only)";
return config;
}
} plugin;

9
src/analyzer/protocol/imap/events.bif
View file

@ -1,14 +1,13 @@
## Generated for an SSL/TLS client's initial *hello* message. SSL/TLS sessions
## start with an unencrypted handshake, and Bro extracts as much information out
## of that as it can. This event provides access to the initial information
## sent by the client.
## Generated when a server sends a capability list to the client,
## after being queried using the CAPABILITY command.
##
## c: The connection.
##
## capabilities: The list of IMAP capabilities as sent by the server.
event imap_capabilities%(c: connection, capabilities: string_vec%);
## Generated when a IMAP connection goes encrypted
## Generated when a IMAP connection goes encrypted after a successful
## StartTLS exchange between the client and the server.
##
## c: The connection.
event imap_starttls%(c: connection%);