From c5ef85497df000ab323b5329401764a72e01c76f Mon Sep 17 00:00:00 2001
From: Vlad Grigorescu <grigorescu@gmail.com>
Date: Sun, 19 Apr 2015 23:08:47 -0400
Subject: [PATCH] Register SIP analyzer to well known port.

---
 scripts/base/protocols/sip/main.bro | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/scripts/base/protocols/sip/main.bro b/scripts/base/protocols/sip/main.bro
index c9fa937c10..f2ff4a7f97 100644
--- a/scripts/base/protocols/sip/main.bro
+++ b/scripts/base/protocols/sip/main.bro
@@ -85,9 +85,13 @@ redef record connection += {
 	sip_state:  State &optional;
 };
 
+const ports = {	5060/udp };
+redef likely_server_ports += { ports };
+
 event bro_init() &priority=5
 	{
 	Log::create_stream(SIP::LOG, [$columns=Info, $ev=log_sip]);
+	Analyzer::register_for_ports(Analyzer::ANALYZER_SIP, ports);
 	}
 
 function new_sip_session(c: connection): Info