mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 06:38:20 +00:00
e76b56ce53
Highlights: - Reduced all DHCP events into a single dhcp_message event. (removed legacy events since they weren't widely used anyway) - Support many more DHCP options. - DHCP log is completely reworked and now represents DHCP sessions based on the transaction ID (and works on clusters). - Removed the known-devices-and-hostnames script since it's generally less relevant now with the updated log.
10 lines
518 B
Text
10 lines
518 B
Text
#separator \x09
|
|
#set_separator ,
|
|
#empty_field (empty)
|
|
#unset_field -
|
|
#path dhcp
|
|
#open 2018-03-01-15-32-52
|
|
#fields ts uids client_addr server_addr mac host_name client_fqdn domain requested_addr assigned_addr lease_time client_message server_message msg_types duration
|
|
#types time set[string] addr addr string string string string addr addr interval string string vector[string] interval
|
|
1374432420.186878 CHhAvVGS1DHFjwGM9 128.2.6.122 - 90:b1:1c:99:49:29 - - - - - - - - INFORM,ACK 0.004327
|
|
#close 2018-03-01-15-32-52
|