Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-16 13:38:19 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Support for additional DNS RR Type: LOC[29], SSHFP[44], NSEC3PARAM[51], custom BIND9 signaling[65534]

Browse source
This commit is contained in:
Tim Wojtulewicz 2020-11-11 12:45:46 -07:00
parent ee31673154
commit a6a4b976ec
18 changed files with 490 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

9
testing/btest/scripts/base/protocols/dns/loc.zeek Normal file
View file

@ -0,0 +1,9 @@
# @TEST-EXEC: zeek -b -C -r $TRACES/dns/loc-29-trunc.pcap %INPUT > output
# @TEST-EXEC: btest-diff dns.log
# @TEST-EXEC: btest-diff output
@load base/protocols/dns
event dns_LOC(c: connection, msg: dns_msg, ans: dns_answer, loc: dns_loc_rr)
{
print "LOC", loc;
}

9
testing/btest/scripts/base/protocols/dns/sshfp.zeek Normal file
View file

@ -0,0 +1,9 @@
# @TEST-EXEC: zeek -b -C -r $TRACES/dns/sshfp-trunc.pcap %INPUT > output
# @TEST-EXEC: btest-diff dns.log
# @TEST-EXEC: btest-diff output
@load base/protocols/dns
event dns_SSHFP(c: connection, msg: dns_msg, ans: dns_answer, algo: count, fptype: count, fingerprint: string)
{
print "SSHFP", algo, fptype, bytestring_to_hexstr(fingerprint);
}