Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 06:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1
No description
2183 commits 387 branches 195 tags 255 MiB
Find a file
Jon Siwek 51bad73e1e Fixes for IPv6 truncation and ICMP/ICMP6 analysis. 
- Add more guards against trying to analyze captured packets with a
  truncated IPv6 static header or extension header chain.

- Add back in the ICMP payload tracking for ICMP "connections".

- Fix 'icmp_context' record construction.  Some field assignments
  were mismatched for ICMP and ICMP6.  Source and destination
  addresses were set incorrectly for context packets that don't
  contain a full IP header.  Some fields for ICMP6 weren't filled out.

- Changed ICMP Time Exceeded packets to raise the 'icmp_time_exceeded'
  event instead of 'icmp_error_message'.

- Add unit tests for truncation and the main types of ICMP/ICMP6
  that have specific events.

- Documentation clarifications.
2012-04-11 16:27:31 -05:00
aux Merge remote-tracking branch 'origin/fastpath' 2012-04-09 16:02:10 -07:00
cmake@5ddec45563 Updating submodule(s). 2012-04-04 18:36:40 -07:00
doc Merge remote-tracking branch 'origin/fastpath' 2012-04-09 16:02:10 -07:00
pkg Binary packaging script tweaks. 2011-11-14 15:13:20 -06:00
scripts Fixes for IPv6 truncation and ICMP/ICMP6 analysis. 2012-04-11 16:27:31 -05:00
src Fixes for IPv6 truncation and ICMP/ICMP6 analysis. 2012-04-11 16:27:31 -05:00
testing Fixes for IPv6 truncation and ICMP/ICMP6 analysis. 2012-04-11 16:27:31 -05:00
.gitignore Ignore tmp dir. 2011-10-25 19:59:25 -07:00
.gitmodules Update to use cmake submodule 2011-09-20 10:15:09 -05:00
bro-path-dev.in Fixes for script auto-documentation. 2011-08-08 19:50:45 -05:00
CHANGES Merge remote-tracking branch 'origin/topic/jsiwek/mobile-ipv6' 2012-04-09 17:49:52 -07:00
CMakeLists.txt Fix CMake from warning about unused ENABLE_PERFTOOLS_DEBUG variable. 2012-04-05 11:41:14 -05:00
config.h.in Add support for mobile IPv6 Mobility Header (RFC 6275). 2012-04-09 14:39:00 -05:00
configure Add support for mobile IPv6 Mobility Header (RFC 6275). 2012-04-09 14:39:00 -05:00
COPYING A set of script-reference polishing. 2012-01-09 18:04:34 -08:00
INSTALL Raise minimum required CMake version to 2.6.3 2012-02-24 13:14:49 -06:00
Makefile corrected some minor typos 2012-01-11 13:02:12 -06:00
NEWS Merge branch 'topic/robin/log-threads' 2012-04-04 17:32:13 -07:00
README corrected some minor typos 2012-01-11 13:02:12 -06:00
VERSION Merge remote-tracking branch 'origin/topic/jsiwek/mobile-ipv6' 2012-04-09 17:49:52 -07:00

README 

============================
Bro Network Security Monitor
============================

Bro is a powerful framework for network analysis and security
monitoring. Please see the INSTALL file for installation instructions
and pointers for getting started. NEWS contains release notes for the
current version, and CHANGES has the complete history of changes.
Please see COPYING for licensing information.

For more documentation, research publications, and community contact
information, please see Bro's home page:

    http://www.bro-ids.org

On behalf of the Bro Development Team,

Vern Paxson & Robin Sommer,
International Computer Science Institute &
Lawrence Berkeley National Laboratory
vern@icir.org / robin@icir.org