Seth Hall
896f252a31
Updates for the SOCKS analyzer.
...
- Now supports SOCKSv5 in the analyzer and the DPD sigs.
- Reworked the core events.
- Tests.
- A SOCKS log!
2012-06-20 13:58:25 -04:00
Robin Sommer
c7c3ff7af9
Adding a SOCKS test case.
...
However, I'm not sure the output is right.
2012-06-15 16:01:59 -07:00
Jon Siwek
b8e1604ab5
Make tunnels always identifiable by UID, tunnel.log now gets populated.
...
conn.log now sets a field indicating all the parent tunnel UIDs over
which a connection operated and cross reference the UIDs found in
the tunnel.log.
Also some renaming of tunnel related types at the scripting layer.
2012-04-26 12:29:59 -05:00
Seth Hall
e2da969415
Return of Robin's old SOCKS analyzer/decapsulator and tunnel code checkpoint.
...
- More discussion is needed to figure out how to integrate the SOCKS analyzer best.
- Tunnels framework now logs for the SOCKS analyzer.
2012-04-21 23:50:09 -04:00
