Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-14 12:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Start detecting Microsoft Sharepoint servers.

Browse source
This commit is contained in:
Seth Hall 2011-07-06 09:18:22 -04:00
parent c8f5a1eeaa
commit 46d0cf517b
1 changed files with 5 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

5
policy/protocols/http/software.bro
View file

@ -49,5 +49,10 @@ event http_header(c: connection, is_orig: bool, name: string, value: string) &pr
Software::found(c$id, Software::parse(value, c$id$resp_h, WEB_SERVER));
else if ( name == "X-POWERED-BY" )
Software::found(c$id, Software::parse(value, c$id$resp_h, WEB_APPSERVER));
else if ( name == "MICROSOFTSHAREPOINTTEAMSERVICES" )
{
value = cat("SharePoint/", value);
Software::found(c$id, Software::parse(value, c$id$resp_h, WEB_APPSERVER));
}
}
}