zeek/scripts/base
Jon Siwek 32ae94de9a Merge remote-tracking branch 'origin/topic/seth/rdp'
* origin/topic/seth/rdp: (31 commits)
  Improved transition into SSL/TLS from RDP.
  Fixes tests in RDP branch.
  add a special case to the X509 code that deals with RDP certificates.
  A few more changes to handling encryption in RDP.
  Adds some comments and fixes a broxygen warning.
  Fixes another optional part of an RDP unit.
  Support RDP negotiation requests optionally and support zero length cookies.
  Changed UTF-16 to UTF-8 conversion to be more lenient.
  Fixed an issue with parse failure on an optional field.
  Removing a stray printf from RDP analyzer.
  Another big RDP update.
  New script to add a field to rdp.log when the connection is upgraded to SSL.
  Huge updates to the RDP analyzer from Josh Liburdi.
  FreeRDP test trace showing SSL encryption -- RDP analyzer does not currently handle this and SSL analyzer does not identify it either
  Wireshark test trace for native encryption -- generates a binpac error
  Delete RDP-004.pcap
  Delete nla_win7_win2k8r2.pcap
  Update dpd.sig
  Fixed typo
  Added check for connection existence
  ...

BIT-1340 #merged
2015-03-30 17:10:04 -05:00
..
files Allow logging filters to inherit default path from stream. 2015-03-19 14:49:55 -05:00
frameworks Log::write in signature framework was missing ts 2015-03-25 12:01:09 -07:00
misc Add script to detect filtered TCP traces, addresses BIT-1119. 2014-01-31 17:04:58 -06:00
protocols Merge remote-tracking branch 'origin/topic/seth/rdp' 2015-03-30 17:10:04 -05:00
utils Deprecate split* family of BIFs. 2015-01-21 15:34:42 -06:00
init-bare.bro Merge remote-tracking branch 'origin/topic/seth/rdp' 2015-03-30 17:10:04 -05:00
init-default.bro Fixes tests in RDP branch. 2015-03-05 16:08:18 -05:00