Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 14:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

move openflow to use subnets instead of addr for matches.

Browse source
This commit is contained in:
Johanna Amann 2015-04-14 15:00:49 -07:00
parent 0e7ebffacf
commit c42fbdab12
5 changed files with 13 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

4
scripts/base/frameworks/openflow/main.bro
View file

@ -140,9 +140,9 @@ function match_conn(id: conn_id, reverse: bool &default=F): ofp_match
return ofp_match(
$dl_type=dl_type,
$nw_proto=proto,
$nw_src=orig_h,
$nw_src=addr_to_subnet(orig_h),
$tp_src=orig_p,
$nw_dst=resp_h,
$nw_dst=addr_to_subnet(resp_h),
$tp_dst=resp_p
);
}

4
scripts/base/frameworks/openflow/types.bro
View file

@ -42,9 +42,9 @@ export {
# At the moment, we store both v4 and v6 in the same fields.
# This is not how OpenFlow does it, we might want to change that...
# IP source address.
nw_src: addr &optional;
nw_src: subnet &optional;
# IP destination address.
nw_dst: addr &optional;
nw_dst: subnet &optional;
# TCP/UDP source port.
tp_src: port &optional;
# TCP/UDP destination port.