zeek/scripts/base/protocols
Seth Hall 623ebea655 Rework the RADIUS base script.
- This fixes BIT-1769 by logging all requests even in the absence of a
   reply.  The way that request and replying matching were being handled
   was restructured to mostly ignore the transaction ids because they
   aren't that helpful for network monitoring and it makes the script
   structure more complicated.
 - Add `framed_addr` field to the radius log to indicate if the radius
   server is hinting at an address for the client.
 - Add `ttl` field to indicate how quickly the radius server is replying
   to the network access server.
 - Fix a bunch of indentation inconsistencies.
2017-02-20 00:07:14 -05:00
..
conn Merge remote-tracking branch 'origin/topic/robin/history-rxmit' 2016-07-08 19:30:10 -07:00
dce-rpc Fixed some warnings seen while running "make doc" 2016-11-14 14:46:53 -06:00
dhcp Allow logging filters to inherit default path from stream. 2015-03-19 14:49:55 -05:00
dnp3 Allow logging filters to inherit default path from stream. 2015-03-19 14:49:55 -05:00
dns Rewrite weird logging. 2016-06-15 13:49:35 -07:00
ftp Fixing FTP cwd getting overlue long. 2016-05-29 08:52:47 -07:00
http Fix minor typos in documentation of various scripts 2016-11-11 14:08:17 -06:00
imap Basic IMAP StartTLS analyzer. 2015-07-22 10:35:49 -07:00
irc File API updates complete. 2015-04-20 10:46:48 -04:00
krb Refactor base krb scripts and update tests. 2017-02-18 13:55:39 -05:00
modbus Allow logging filters to inherit default path from stream. 2015-03-19 14:49:55 -05:00
mysql Add missing documentation on the "Bro Package Index" page 2015-06-02 10:00:00 -05:00
ntlm Added missing README files for documentation 2016-10-10 22:55:50 -05:00
pop3 Add README files for base/protocols 2013-10-17 12:47:32 -05:00
radius Rework the RADIUS base script. 2017-02-20 00:07:14 -05:00
rdp Add missing documentation on the "Bro Package Index" page 2015-06-02 10:00:00 -05:00
rfb Fix minor typos in documentation of various scripts 2016-11-11 14:08:17 -06:00
sip Add some missing Bro script documentation 2016-05-05 16:35:31 -05:00
smb Fix minor typos in documentation of various scripts 2016-11-11 14:08:17 -06:00
smtp SMTP does not need to pull in the notice framework. 2016-06-23 13:22:16 -07:00
snmp Allow logging filters to inherit default path from stream. 2015-03-19 14:49:55 -05:00
socks Changing protocol_{confirmation,violation} events to queue like any 2016-05-27 13:19:04 -07:00
ssh Merge remote-tracking branch 'origin/topic/vladg/bit-1641' 2016-10-18 21:57:27 -04:00
ssl Add new TLS extension type (cached_info) 2017-01-19 13:22:34 -08:00
syslog Add some missing Bro script documentation 2016-05-05 16:35:31 -05:00
tunnels Added missing README files for documentation 2016-10-10 22:55:50 -05:00
xmpp Add xmpp dpd sig and fix a few parsing problems for connections that do 2015-07-21 13:20:35 -07:00