Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-05 16:18:19 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Adding missing script file.

Browse source
This commit is contained in:
Robin Sommer 2016-05-30 10:58:19 -07:00
parent 57aef6d49f
commit a2423f7d43
3 changed files with 28 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

23
scripts/policy/protocols/conn/mac-logging.bro Normal file
View file

@ -0,0 +1,23 @@
##! This script adds MAC address information to the connection logs.
@load base/protocols/conn
module Conn;
redef record Info += {
## The Ethernet MAC source address for this connection, if applicable.
eth_src: string &log &optional;
## The Ethernet MAC destination address for this connection, if applicable.
eth_dst: string &log &optional;
};
event connection_state_remove(c: connection)
{
if ( c?$eth_src )
c$conn$eth_src = c$eth_src;
if ( c?$eth_dst )
c$conn$eth_dst = c$eth_dst;
}