zeek/scripts/base
Valerio G 18499fd7d9 Extend DHCP protocol analyzer with new options.
Add the folowing option types:
- 55 Parameters Request List;
- 58 Renewal time;
- 59 Rebinding time;
- 61 Client Identifier;
- 82 Relay Agent Information.

Extend the following events with new parameters, specifically:
- dhcp_discover exports client identifier and parameters request list;
- dhcp_request exports client_identifier and parameters request list;
- dhcp_ack exports rebinding time, renewal time and list of suboptions value of
  dhcp relay agent information option;
- dhcp_inform exports parameters request list.

Add option type specific variables within the scope of DHCP module
(see src/analyzer/protocol/dhcp/types.bif).

Move protocol specific variables "dhcp_msg" and "dhcp_router_list" from scope Global to DHCP::
and adapt inet_net_var in src/NetVar.cc consequently.

Extend src/analyzer/protocols/dhcp/main.bro to handle the new events and to log
dhcp_ack, dhcp_request and dhcp_discover.

Modify scripts/policy/protocols/dhcp/known-devices-and-hostnames.bro to
include new events' variables.
2018-01-08 21:53:58 +01:00
..
files Merge remote-tracking branch 'origin/topic/johanna/ocsp-sct-validate' 2017-07-30 08:49:41 -07:00
frameworks add a max_line_length flag to ContentLine_Analyzer 2017-11-03 16:25:26 -04:00
misc Fix at_least in Version.bro. 2017-06-05 15:16:41 -07:00
protocols Extend DHCP protocol analyzer with new options. 2018-01-08 21:53:58 +01:00
utils Fix to_json() to not lose precision for values of type double 2017-02-02 13:03:05 -06:00
init-bare.bro Extend DHCP protocol analyzer with new options. 2018-01-08 21:53:58 +01:00
init-default.bro Make OCSP analyzer part of the X.509 analyzer 2017-02-10 17:02:15 -08:00