mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 14:48:21 +00:00
Removing Off_Port_Protocol_Found notice.
- Other very small cleanup.
This commit is contained in:
parent
b1c891f857
commit
6478b4acaf
1 changed files with 0 additions and 18 deletions
|
@ -8,7 +8,6 @@ module ProtocolDetector;
|
||||||
|
|
||||||
export {
|
export {
|
||||||
redef enum Notice::Type += {
|
redef enum Notice::Type += {
|
||||||
Off_Port_Protocol_Found, # raised for each connection found
|
|
||||||
Protocol_Found,
|
Protocol_Found,
|
||||||
Server_Found,
|
Server_Found,
|
||||||
};
|
};
|
||||||
|
@ -155,13 +154,10 @@ function report_protocols(c: connection)
|
||||||
{
|
{
|
||||||
if ( [a, c$id$resp_h, c$id$resp_p] in valids )
|
if ( [a, c$id$resp_h, c$id$resp_p] in valids )
|
||||||
do_notice(c, a, valids[a, c$id$resp_h, c$id$resp_p]);
|
do_notice(c, a, valids[a, c$id$resp_h, c$id$resp_p]);
|
||||||
|
|
||||||
else if ( [a, 0.0.0.0, c$id$resp_p] in valids )
|
else if ( [a, 0.0.0.0, c$id$resp_p] in valids )
|
||||||
do_notice(c, a, valids[a, 0.0.0.0, c$id$resp_p]);
|
do_notice(c, a, valids[a, 0.0.0.0, c$id$resp_p]);
|
||||||
else
|
else
|
||||||
do_notice(c, a, NONE);
|
do_notice(c, a, NONE);
|
||||||
|
|
||||||
append_addl(c, analyzer_name(a));
|
|
||||||
}
|
}
|
||||||
|
|
||||||
delete conns[c$id];
|
delete conns[c$id];
|
||||||
|
@ -218,20 +214,6 @@ event protocol_confirmation(c: connection, atype: count, aid: count)
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
# event connection_analyzer_disabled(c: connection, analyzer: count)
|
|
||||||
# {
|
|
||||||
# if ( c$id !in conns )
|
|
||||||
# return;
|
|
||||||
#
|
|
||||||
# delete conns[c$id][analyzer];
|
|
||||||
# }
|
|
||||||
|
|
||||||
function append_proto_addl(c: connection)
|
|
||||||
{
|
|
||||||
for ( a in conns[c$id] )
|
|
||||||
append_addl(c, fmt_protocol(get_protocol(c, a)));
|
|
||||||
}
|
|
||||||
|
|
||||||
function found_protocol(c: connection, analyzer: count, protocol: string)
|
function found_protocol(c: connection, analyzer: count, protocol: string)
|
||||||
{
|
{
|
||||||
# Don't report anything running on a well-known port.
|
# Don't report anything running on a well-known port.
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue