Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-14 20:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Adding client_security_data to the analyzer.

Browse source
This commit is contained in:
jatkinosn 2019-06-06 09:49:24 -04:00
parent d3927d9266
commit b6746bc9e0
4 changed files with 35 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

7
src/analyzer/protocol/rdp/rdp-protocol.pac
View file

@ -52,7 +52,7 @@ type Data_Block = record {
header: Data_Header;
block: case header.type of {
0xc001 -> client_core: Client_Core_Data;
#0xc002 -> client_security: Client_Security_Data;
0xc002 -> client_security: Client_Security_Data;
0xc003 -> client_network: Client_Network_Data;
#0xc004 -> client_cluster: Client_Cluster_Data;
#0xc005 -> client_monitor: Client_Monitor_Data;
@ -220,6 +220,11 @@ type Client_Core_Data = record {
SUPPORT_HEARTBEAT_PDU: bool = early_capability_flags & 0x0400;
} &byteorder=littleendian;
type Client_Security_Data = record {
encryption_methods: uint16;
ext_encryption_methods: uint16;
} &byteorder=littleendian;
type Client_Network_Data = record {
channel_count: uint32;
channel_def_array: Client_Channel_Def[channel_count];