Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 14:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Enable modbus logging for requests

Browse source
This commit is contained in:
Michael Torres 2022-07-16 16:04:39 +00:00
parent 1d2c12e980
commit 7c24b53b4f
1 changed files with 2 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

5
scripts/base/protocols/modbus/main.zeek
View file

@ -53,9 +53,8 @@ event modbus_message(c: connection, headers: ModbusHeaders, is_orig: bool) &prio
event modbus_message(c: connection, headers: ModbusHeaders, is_orig: bool) &priority=-5 event modbus_message(c: connection, headers: ModbusHeaders, is_orig: bool) &priority=-5
{ {
# Only log upon replies. # Don't log now if this is an exception (log in the exception event handler)
# Also, don't log now if this is an exception (log in the exception event handler) if ( headers$function_code <= 0x81 || headers$function_code >= 0x98 )
if ( ! is_orig && ( headers$function_code <= 0x81 || headers$function_code >= 0x98 ) )
Log::write(LOG, c$modbus); Log::write(LOG, c$modbus);
} }