diff --git a/CHANGES b/CHANGES index 337c45a3ab..38a8c32bf1 100644 --- a/CHANGES +++ b/CHANGES @@ -1,4 +1,10 @@ +2.5-beta-73 | 2016-10-13 14:03:04 -0700 + + * Added missing README files for documentation. (Daniel Thayer) + + * List new log files in the log-files.rst document. (Daniel Thayer) + 2.5-beta-67 | 2016-10-10 08:28:38 -0700 * Fixes for DCE_RPC analyzer. (Seth Hall) diff --git a/VERSION b/VERSION index ed2dc7ac5b..e15f4e9912 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -2.5-beta-67 +2.5-beta-73 diff --git a/doc/script-reference/log-files.rst b/doc/script-reference/log-files.rst index 5889b22c16..795b33f6b8 100644 --- a/doc/script-reference/log-files.rst +++ b/doc/script-reference/log-files.rst @@ -14,6 +14,8 @@ Network Protocols +============================+=======================================+=================================+ | conn.log | TCP/UDP/ICMP connections | :bro:type:`Conn::Info` | +----------------------------+---------------------------------------+---------------------------------+ +| dce_rpc.log | Distributed Computing Environment/RPC | :bro:type:`DCE_RPC::Info` | ++----------------------------+---------------------------------------+---------------------------------+ | dhcp.log | DHCP leases | :bro:type:`DHCP::Info` | +----------------------------+---------------------------------------+---------------------------------+ | dnp3.log | DNP3 requests and replies | :bro:type:`DNP3::Info` | @@ -35,6 +37,8 @@ Network Protocols +----------------------------+---------------------------------------+---------------------------------+ | mysql.log | MySQL | :bro:type:`MySQL::Info` | +----------------------------+---------------------------------------+---------------------------------+ +| ntlm.log | NT LAN Manager (NTLM) | :bro:type:`NTLM::Info` | ++----------------------------+---------------------------------------+---------------------------------+ | radius.log | RADIUS authentication attempts | :bro:type:`RADIUS::Info` | +----------------------------+---------------------------------------+---------------------------------+ | rdp.log | RDP | :bro:type:`RDP::Info` | @@ -43,6 +47,12 @@ Network Protocols +----------------------------+---------------------------------------+---------------------------------+ | sip.log | SIP | :bro:type:`SIP::Info` | +----------------------------+---------------------------------------+---------------------------------+ +| smb_cmd.log | SMB commands | :bro:type:`SMB::CmdInfo` | ++----------------------------+---------------------------------------+---------------------------------+ +| smb_files.log | SMB files | :bro:type:`SMB::FileInfo` | ++----------------------------+---------------------------------------+---------------------------------+ +| smb_mapping.log | SMB trees | :bro:type:`SMB::TreeInfo` | ++----------------------------+---------------------------------------+---------------------------------+ | smtp.log | SMTP transactions | :bro:type:`SMTP::Info` | +----------------------------+---------------------------------------+---------------------------------+ | snmp.log | SNMP messages | :bro:type:`SNMP::Info` | diff --git a/scripts/base/files/extract/README b/scripts/base/files/extract/README index 1a2116a9e0..3d1b645ce2 100644 --- a/scripts/base/files/extract/README +++ b/scripts/base/files/extract/README @@ -1 +1 @@ -Support for extracing files with the file analysis framework. +Support for extracting files with the file analysis framework. diff --git a/scripts/base/protocols/dce-rpc/README b/scripts/base/protocols/dce-rpc/README new file mode 100644 index 0000000000..82bfa8ad5a --- /dev/null +++ b/scripts/base/protocols/dce-rpc/README @@ -0,0 +1,2 @@ +Support for DCE/RPC (Distributed Computing Environment/Remote Procedure +Calls) protocol analysis. diff --git a/scripts/base/protocols/ntlm/README b/scripts/base/protocols/ntlm/README new file mode 100644 index 0000000000..0d4dc559f5 --- /dev/null +++ b/scripts/base/protocols/ntlm/README @@ -0,0 +1 @@ +Support for NT LAN Manager (NTLM) protocol analysis. diff --git a/scripts/base/protocols/smb/README b/scripts/base/protocols/smb/README new file mode 100644 index 0000000000..6e41fd1a28 --- /dev/null +++ b/scripts/base/protocols/smb/README @@ -0,0 +1 @@ +Definitions of constants used by the SMB protocol. diff --git a/scripts/base/protocols/tunnels/README b/scripts/base/protocols/tunnels/README new file mode 100644 index 0000000000..a32132fa5f --- /dev/null +++ b/scripts/base/protocols/tunnels/README @@ -0,0 +1,2 @@ +Provides DPD signatures for tunneling protocols that otherwise +wouldn't be detected at all. diff --git a/scripts/policy/protocols/smb/README b/scripts/policy/protocols/smb/README new file mode 100644 index 0000000000..d10322faad --- /dev/null +++ b/scripts/policy/protocols/smb/README @@ -0,0 +1 @@ +Support for SMB protocol analysis.