zeek/testing/btest/Baseline/scripts.base.protocols.socks.socks-auth-2/socks.log
Johanna Amann 8ba5c03538 Do not log SOCKS passwords by default.
This introduces a new option, SOCKS::default_capture_password which can
be used to specify if Socks passwords are logged by default

Like fot FTP/HTTP, this option is set to false by default.

Addresses BIT-1791
2017-12-01 14:36:57 -08:00

10 lines
510 B
Text

#separator \x09
#set_separator ,
#empty_field (empty)
#unset_field -
#path socks
#open 2017-12-01-22-33-17
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p version user password status request.host request.name request_p bound.host bound.name bound_p
#types time string addr port addr port count string string string addr string port addr string port
1368517392.724989 CHhAvVGS1DHFjwGM9 192.168.0.2 55951 192.168.0.1 1080 5 bob - succeeded 192.168.0.2 - 22 192.168.0.1 - 55951
#close 2017-12-01-22-33-17