diff --git a/scripts/base/protocols/ldap/main.zeek b/scripts/base/protocols/ldap/main.zeek index 0c2319fe9a..66b2ffb8d5 100644 --- a/scripts/base/protocols/ldap/main.zeek +++ b/scripts/base/protocols/ldap/main.zeek @@ -296,9 +296,9 @@ event LDAP::search_request(c: connection, } ############################################################################# -event LDAP::search_result(c: connection, - message_id: int, - object_name: string) { +event LDAP::search_result_entry(c: connection, + message_id: int, + object_name: string) { set_session(c, message_id, LDAP::ProtocolOpcode_SEARCH_RESULT_ENTRY); diff --git a/scripts/base/protocols/ldap/spicy-events.zeek b/scripts/base/protocols/ldap/spicy-events.zeek index 3a8c2217ee..fa670f3456 100644 --- a/scripts/base/protocols/ldap/spicy-events.zeek +++ b/scripts/base/protocols/ldap/spicy-events.zeek @@ -93,7 +93,7 @@ global LDAP::search_request: event ( ## message_id: The messageID element. ## ## object_name: The object name in the SearchResultEntry. -global LDAP::search_result: event ( +global LDAP::search_result_entry: event ( c: connection, message_id: int, object_name: string diff --git a/src/analyzer/protocol/ldap/ldap.evt b/src/analyzer/protocol/ldap/ldap.evt index 108504c50c..369a21d331 100644 --- a/src/analyzer/protocol/ldap/ldap.evt +++ b/src/analyzer/protocol/ldap/ldap.evt @@ -38,6 +38,6 @@ on LDAP::SearchRequest -> event LDAP::search_request($conn, self.filter, self.attributes); -on LDAP::SearchResultEntry -> event LDAP::search_result($conn, - message.messageID, - self.objectName); +on LDAP::SearchResultEntry -> event LDAP::search_result_entry($conn, + message.messageID, + self.objectName);