Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-03 15:18:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Add ciphertext to ticket data structures

Browse source
This commit is contained in:
John E. Rollinson 2017-01-29 09:39:12 +09:00
parent 572c9b49fd
commit 832f6d34b4
2 changed files with 3 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
scripts/base/init-bare.bro
View file

@ -3955,6 +3955,8 @@ export {
service_name : string; service_name : string;
## Cipher the ticket was encrypted with ## Cipher the ticket was encrypted with
cipher : count; cipher : count;
## Cipher text of the ticket
ciphertext : string &optional;
}; };
type KRB::Ticket_Vector: vector of KRB::Ticket; type KRB::Ticket_Vector: vector of KRB::Ticket;

1
src/analyzer/protocol/krb/krb-types.pac
View file

@ -95,6 +95,7 @@ RecordVal* proc_ticket(const KRB_Ticket* ticket)
rv->Assign(1, bytestring_to_val(ticket->realm()->data()->content())); rv->Assign(1, bytestring_to_val(ticket->realm()->data()->content()));
rv->Assign(2, GetStringFromPrincipalName(ticket->sname())); rv->Assign(2, GetStringFromPrincipalName(ticket->sname()));
rv->Assign(3, asn1_integer_to_val(ticket->enc_part()->data()->etype()->data(), TYPE_COUNT)); rv->Assign(3, asn1_integer_to_val(ticket->enc_part()->data()->etype()->data(), TYPE_COUNT));
rv->Assign(4, bytestring_to_val(ticket->enc_part()->data()->ciphertext()));
return rv; return rv;
} }