zeek/scripts/base/protocols
Robin Sommer a7427e95bf
Switch to recording unmodified HTTP header.
We used to attempt to remove any port specification before recording
HTTP host headers in logs. Doing so would (1) remove potentially useful
information, (2) not match what the documentation seemed to suggest, and
(3) fail for IP6 addresses containing colons.

We now record the original HOST header as is.

Addresses #1844.
2021-12-21 21:54:47 +01:00
..
conn Add analyzer_confirmation and analyzer_violation events 2021-11-23 19:36:50 -07:00
dce-rpc Remove trailing whitespace from script files 2021-10-20 09:57:09 -07:00
dhcp Remove trailing whitespace from script files 2021-10-20 09:57:09 -07:00
dnp3 Support for log filter policy hooks 2020-09-30 12:32:45 -07:00
dns Remove trailing whitespace from script files 2021-10-20 09:57:09 -07:00
ftp Remove trailing whitespace from script files 2021-10-20 09:57:09 -07:00
http Switch to recording unmodified HTTP header. 2021-12-21 21:54:47 +01:00
imap Merge remote-tracking branch 'origin/topic/seth/zeek_init' 2019-04-19 11:24:29 -07:00
irc Remove trailing whitespace from script files 2021-10-20 09:57:09 -07:00
krb Remove trailing whitespace from script files 2021-10-20 09:57:09 -07:00
modbus Support for log filter policy hooks 2020-09-30 12:32:45 -07:00
mqtt Disable MQTT by default 2019-08-05 17:04:39 -07:00
mysql Support for log filter policy hooks 2020-09-30 12:32:45 -07:00
ntlm Remove trailing whitespace from script files 2021-10-20 09:57:09 -07:00
ntp &is_set => &is_assigned 2021-02-04 12:18:46 -08:00
pop3 Rename all scripts to have ".zeek" file extension 2019-04-11 21:12:40 -05:00
radius Remove trailing whitespace from script files 2021-10-20 09:57:09 -07:00
rdp Add analyzer_confirmation and analyzer_violation events 2021-11-23 19:36:50 -07:00
rfb Support for log filter policy hooks 2020-09-30 12:32:45 -07:00
sip Support for log filter policy hooks 2020-09-30 12:32:45 -07:00
smb Remove trailing whitespace from script files 2021-10-20 09:57:09 -07:00
smtp GH-1589: Avoid extracting IP-like strings from SMTP headers 2021-09-03 17:35:10 +00:00
snmp Support for log filter policy hooks 2020-09-30 12:32:45 -07:00
socks Support for log filter policy hooks 2020-09-30 12:32:45 -07:00
ssh Add analyzer_confirmation and analyzer_violation events 2021-11-23 19:36:50 -07:00
ssl Add analyzer_confirmation and analyzer_violation events 2021-11-23 19:36:50 -07:00
syslog Remove trailing whitespace from script files 2021-10-20 09:57:09 -07:00
tunnels Add Teredo packet analyzer, disable old analyzer 2021-11-23 19:36:50 -07:00
xmpp Merge remote-tracking branch 'origin/topic/seth/zeek_init' 2019-04-19 11:24:29 -07:00