Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 14:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Documentation: connection_SYN_packet

Browse source 
Slightly clarify documentation related to the connection_SYN_packet
event.
This commit is contained in:
Johanna Amann 2025-07-10 12:39:13 +01:00 • committed by Tim Wojtulewicz
parent a843521e78
commit 2fc75009f4
2 changed files with 3 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
scripts/base/init-bare.zeek
View file

@ -1043,7 +1043,7 @@ type SYN_packet: record {
win_size: count; ##< The window size from the TCP header. win_size: count; ##< The window size from the TCP header.
win_scale: int; ##< The window scale option if present, or -1 if not. win_scale: int; ##< The window scale option if present, or -1 if not.
MSS: count; ##< The maximum segment size if present, or 0 if not. MSS: count; ##< The maximum segment size if present, or 0 if not.
SACK_OK: bool; ##< True if the *SACK* option is present. SACK_OK: bool; ##< True if the *SACK* option (Selective ACKnowledgement) is present.
TSval: count &optional; ##< The TCP TS value if present. TSval: count &optional; ##< The TCP TS value if present.
TSecr: count &optional; ##< The TCP TS echo reply if present. TSecr: count &optional; ##< The TCP TS echo reply if present.
}; };

3
src/analyzer/protocol/tcp/events.bif
View file

@ -155,7 +155,8 @@ event connection_reset%(c: connection%);
event connection_pending%(c: connection%); event connection_pending%(c: connection%);
## Generated for a SYN packet. Zeek raises this event for every SYN packet seen ## Generated for a SYN packet. Zeek raises this event for every SYN packet seen
## by its TCP analyzer. ## by its TCP analyzer. This includes packets that have other flags set - like
## in the case of SYN-ACK packets.
## ##
## c: The connection. ## c: The connection.
## ##