mirror of
https://github.com/zeek/zeek.git
synced 2025-10-08 09:38:19 +00:00
Updates to the DPD framework.
- Removed the ProtocolViolation notice. I'd like to hear if someone actually used that notice for something. - Folded the dyn-disable functionality into the dpd/base script. - Other small cleanup.
This commit is contained in:
parent
e3f6909b93
commit
b4b990cfb5
5 changed files with 55 additions and 57 deletions
|
@ -10,6 +10,8 @@ module DPD;
|
|||
|
||||
export {
|
||||
redef record Info += {
|
||||
## A chunk of the payload the most likely resulted in the protocol
|
||||
## violation.
|
||||
packet_segment: string &optional &log;
|
||||
};
|
||||
|
||||
|
@ -21,5 +23,7 @@ export {
|
|||
event protocol_violation(c: connection, atype: count, aid: count,
|
||||
reason: string) &priority=4
|
||||
{
|
||||
if ( ! c?$dpd ) return;
|
||||
|
||||
c$dpd$packet_segment=fmt("%s", sub_bytes(get_current_packet()$data, 0, packet_segment_size));
|
||||
}
|
Loading…
Add table
Add a link
Reference in a new issue