8 commits

Author	SHA1	Message	Date
Seth Hall	c32b179ac5	Small modbus documentation update and tiny refactoring.	2012-10-31 23:57:38 -04:00
Seth Hall	a2f336cc72	Final touches to modbus analyzer for now. ... - There are still some broken events in the modbus analyzer because I don't have traffic to test with (coil and record related events primarily). - There are a few example scripts in policy/protocols/modbus	2012-10-31 23:34:43 -04:00
Seth Hall	009efbcb27	Major revisions to Modbus analyzer support (not quite done yet). ... - Renamed many data structures to align with most recent standard. - Reworked modbus events to make them more canonically "Bro". - Converted the Modbus analyzer to a simpler style for easier maintenance. - Modbus coil related events still don't work (I haven't finished the function for converting the data structures). - Modbus file record events remain incomplete.	2012-09-17 09:19:52 -04:00
Robin Sommer	cbb31cedc3	Merge remote-tracking branch 'origin/topic/dina/modbus' into topic/robin/modbus-merge ... * origin/topic/dina/modbus: put some make-up on Modbus analyser Modbus analyser, added support: FC=20,21 Modbus analyzer,added support: FC=1,2,15,24 Modbus analyzer, current support: FC=3,4,5,6,7,16,22,23 I cleaned up the code a bit, mainly layout style. I did not include the *.bro scripts for now, but a test script ../testing/btest/scripts/base/protocols/modbus/events.bro that prints out the value for each event. Merged the Modbus traces from the ics repository into a single trace as input for the test. They currently trigger 20 of the 34 events. Addresses #870.	2012-08-29 17:58:41 -07:00
dina	fb0d93de1e	put some make-up on Modbus analyser	2012-08-24 10:21:04 +02:00
dina	c58c6791c5	Modbus analyser, added support: FC=20,21	2012-08-22 16:47:34 +02:00
dina	e8f4c7bc3d	Modbus analyzer,added support: FC=1,2,15,24	2012-08-21 15:39:52 +02:00
dina	5c756dcebf	Modbus analyzer, current support: FC=3,4,5,6,7,16,22,23	2012-08-20 13:30:22 +02:00