diff --git a/scripts/base/protocols/ldap/main.zeek b/scripts/base/protocols/ldap/main.zeek index 800ffd04bd..69b1e0809a 100644 --- a/scripts/base/protocols/ldap/main.zeek +++ b/scripts/base/protocols/ldap/main.zeek @@ -258,7 +258,7 @@ event LDAP::message(c: connection, } ############################################################################# -event LDAP::searchreq(c: connection, +event LDAP::search_request(c: connection, message_id: int, base_object: string, scope: LDAP::SearchScope, @@ -296,7 +296,7 @@ event LDAP::searchreq(c: connection, } ############################################################################# -event LDAP::searchres(c: connection, +event LDAP::search_result(c: connection, message_id: int, object_name: string) { @@ -306,7 +306,7 @@ event LDAP::searchres(c: connection, } ############################################################################# -event LDAP::bindreq(c: connection, +event LDAP::bind_request(c: connection, message_id: int, version: int, name: string, diff --git a/scripts/base/protocols/ldap/spicy-events.zeek b/scripts/base/protocols/ldap/spicy-events.zeek index b0b1bd8cc2..3a8c2217ee 100644 --- a/scripts/base/protocols/ldap/spicy-events.zeek +++ b/scripts/base/protocols/ldap/spicy-events.zeek @@ -43,7 +43,7 @@ global LDAP::message: event( ## auth_type: The auth type field in the BindRequest. ## ## auth_info: Additional information related to the used auth type. -global LDAP::bindreq: event( +global LDAP::bind_request: event( c: connection, message_id: int, version: int, @@ -73,7 +73,7 @@ global LDAP::bindreq: event( ## filter: The string representation of the filter field in the SearchRequest. ## ## attributes: Additional attributes of the SearchRequest. -global LDAP::searchreq: event ( +global LDAP::search_request: event ( c: connection, message_id: int, base_object: string, @@ -93,7 +93,7 @@ global LDAP::searchreq: event ( ## message_id: The messageID element. ## ## object_name: The object name in the SearchResultEntry. -global LDAP::searchres: event ( +global LDAP::search_result: event ( c: connection, message_id: int, object_name: string diff --git a/src/analyzer/protocol/ldap/ldap.evt b/src/analyzer/protocol/ldap/ldap.evt index 35c0ac1032..108504c50c 100644 --- a/src/analyzer/protocol/ldap/ldap.evt +++ b/src/analyzer/protocol/ldap/ldap.evt @@ -20,24 +20,24 @@ on LDAP::Message -> event LDAP::message($conn, self.obj, self.arg); -on LDAP::BindRequest -> event LDAP::bindreq($conn, - message.messageID, - self.version, - self.name, - self.authType, - message.arg); +on LDAP::BindRequest -> event LDAP::bind_request($conn, + message.messageID, + self.version, + self.name, + self.authType, + message.arg); -on LDAP::SearchRequest -> event LDAP::searchreq($conn, - message.messageID, - self.baseObject, - self.scope, - self.deref, - self.sizeLimit, - self.timeLimit, - self.typesOnly, - self.filter, - self.attributes); +on LDAP::SearchRequest -> event LDAP::search_request($conn, + message.messageID, + self.baseObject, + self.scope, + self.deref, + self.sizeLimit, + self.timeLimit, + self.typesOnly, + self.filter, + self.attributes); -on LDAP::SearchResultEntry -> event LDAP::searchres($conn, - message.messageID, - self.objectName); +on LDAP::SearchResultEntry -> event LDAP::search_result($conn, + message.messageID, + self.objectName);