Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 14:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Fixed a bug in the known-hosts script.

Browse source
This commit is contained in:
Seth Hall 2011-10-07 04:48:51 -04:00
parent 1dd3ba7f7d
commit a3e91c5b33
1 changed files with 4 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

5
scripts/policy/protocols/conn/known-hosts.bro
View file

@ -43,7 +43,10 @@ event connection_established(c: connection) &priority=5
for ( host in set(id$orig_h, id$resp_h) ) for ( host in set(id$orig_h, id$resp_h) )
{ {
if ( host !in known_hosts && addr_matches_host(host, host_tracking) ) if ( host !in known_hosts &&
c$orig$state == TCP_ESTABLISHED &&
c$resp$state == TCP_ESTABLISHED &&
addr_matches_host(host, host_tracking) )
{ {
add known_hosts[host]; add known_hosts[host];
Log::write(Known::HOSTS_LOG, [$ts=network_time(), $host=host]); Log::write(Known::HOSTS_LOG, [$ts=network_time(), $host=host]);