Jon Siwek 68aead024a Add an example of a GridFTP data channel detection script. ... It relies on the heuristics of GridFTP data channels commonly default to SSL mutual authentication with a NULL bulk cipher and that they usually transfer large datasets (default threshold of script is 1 GB). The script also defaults to skip_further_processing() after detection to try to save cycles analyzing the large, benign connection. Also added a script in base/protocols/conn/polling that generalizes the process of polling a connection for interesting features. The GridFTP data channel detection script depends on it to monitor bytes transferred.		2012-10-01 12:32:24 -05:00
..
frameworks	Merge remote-tracking branch 'origin/topic/bernhard/input-allow_invalid_types'	2012-08-22 16:11:28 -07:00
misc	Hopefully the last major script reorganization.	2011-08-05 23:09:53 -04:00
protocols	Add an example of a GridFTP data channel detection script.	2012-10-01 12:32:24 -05:00
utils	Add support to Bro for connecting with peers over IPv6.	2012-05-09 15:08:36 -05:00
init-bare.bro	Fix construction of ip6_ah (Authentication Header) record values.	2012-09-18 16:52:12 -05:00
init-default.bro	Return of Robin's old SOCKS analyzer/decapsulator and tunnel code checkpoint.	2012-04-21 23:50:09 -04:00