mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 22:58:20 +00:00
574bcb0a51
This is a very simple XMPP analyzer that basically only can parse the protocol until the client and server start negotiating a TLS session. At that point, the TLS analyzer is attached. While the basic case seems to be working, I fully expect that I missed something and that this might break in a lot of cases.
11 lines
193 B
Text
11 lines
193 B
Text
|
|
module XMPP;
|
|
|
|
const ports = { 5222/tcp, 5269/tcp };
|
|
redef likely_server_ports += { ports };
|
|
|
|
event bro_init() &priority=5
|
|
{
|
|
Analyzer::register_for_ports(Analyzer::ANALYZER_XMPP, ports);
|
|
}
|
|
|