Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-10 10:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Add "udp_content_ports" option

Browse source 
Any port in that set found as either source or destination port
of a UDP packet will cause the "udp_contents" event to be raised.
This commit is contained in:
Jon Siwek 2020-04-07 13:02:29 -07:00
parent 2da84020cf
commit c1b3c9593b
7 changed files with 60 additions and 24 deletions
Download patch file Download diff file Expand all files Collapse all files

3
src/NetVar.cc
View file

@ -75,6 +75,7 @@ bool tcp_content_deliver_all_resp;
TableVal* udp_content_delivery_ports_orig;
TableVal* udp_content_delivery_ports_resp;
TableVal* udp_content_ports;
bool udp_content_deliver_all_orig;
bool udp_content_deliver_all_resp;
bool udp_content_delivery_ports_use_resp;
@ -320,6 +321,8 @@ void init_net_var()
internal_val("udp_content_delivery_ports_orig")->AsTableVal();
udp_content_delivery_ports_resp =
internal_val("udp_content_delivery_ports_resp")->AsTableVal();
udp_content_ports =
internal_val("udp_content_ports")->AsTableVal();
udp_content_deliver_all_orig =
bool(internal_val("udp_content_deliver_all_orig")->AsBool());
udp_content_deliver_all_resp =