Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-08 01:28:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Fixing well-known port.

Browse source 
This fixes the remaining test.
This commit is contained in:
Robin Sommer 2013-08-11 15:59:32 -07:00
parent 0e7f51f78c
commit 36c2433075
3 changed files with 77 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

8
scripts/base/protocols/dnp3/dpd.sig
View file

@ -1,14 +1,8 @@
signature dpd_dnp3_client {
ip-proto == tcp
# dnp3 packets always starts with 0x05 0x64 .
payload /\x05\0x64/
tcp-state originator
}
# DNP3 packets always starts with 0x05 0x64 .
signature dpd_dnp3_server {
ip-proto == tcp
# dnp3 packets always starts with 0x05 0x64 .
payload /\x05\x64/
tcp-state responder
enable "dnp3"

2
scripts/base/protocols/dnp3/main.bro
View file

@ -31,7 +31,7 @@ redef record connection += {
dnp3: Info &optional;
};
const ports = { 502/tcp };
const ports = { 20000/tcp };
redef likely_server_ports += { ports };
event bro_init() &priority=5