Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 06:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Add conn.log entries for connections with unhandled IP protocols

Browse source
This commit is contained in:
Tim Wojtulewicz 2024-09-10 15:13:11 +02:00
parent a96515a2e8
commit 35ec9733c0
422 changed files with 97715 additions and 97282 deletions
Download patch file Download diff file Expand all files Collapse all files

5
scripts/base/protocols/conn/main.zeek
View file

@ -158,6 +158,9 @@ export {
## *uid* values for any encapsulating parent connections
## used over the lifetime of this inner connection.
tunnel_parents: set[string] &log &optional;
## The numeric identifier for the transport protocol for this
## connection.
protocol_id: count &log &optional;
};
## Event that can be handled to access the :zeek:type:`Conn::Info`
@ -281,6 +284,8 @@ function set_conn(c: connection, eoc: bool)
if ( c$history != "" )
c$conn$history=c$history;
}
c$conn$protocol_id = c$id$proto;
}
event content_gap(c: connection, is_orig: bool, seq: count, length: count) &priority=5