Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-09 18:18:19 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

extend and refact script-side of NTP analyzer

Browse source
This commit is contained in:
Palumbo Mauro 2019-06-03 17:50:32 +02:00
parent 411908a102
commit ce07b10aa8
3 changed files with 180 additions and 105 deletions
Download patch file Download diff file Expand all files Collapse all files

14
scripts/base/protocols/ntp/dpd.sig
View file

@ -1,14 +1,12 @@
# Generated by binpac_quickstart
signature dpd_ntp {
ip-proto == udp
# ## TODO: Define the payload. When Bro sees this regex, on
ip-proto == udp
# ## TODO: Define the payload. When Bro sees this regex, on
# ## any port, it will enable your analyzer on that
# ## connection.
# ## payload /^NTP/
enable "ntp"
}
enable "ntp"
}