zeek/src/analyzer/protocol/postgresql/CMakeLists.txt at 85ca59484bef3de04c74c619665009f056b2b327 - Mirror/zeek - git.uphillsecurity.com: We code.

Mirror/zeek

mirror of https://github.com/zeek/zeek.git synced 2025-10-02 06:38:20 +00:00

Arne Welzel 85ca59484b postgresql: Initial parser implementation

This adds a protocol parser for the PostgreSQL protocol and a new
postgresql.log similar to the existing mysql.log.

This should be considered preliminary and hopefully during 7.1 and 7.2
with feedback from the community, we can improve on the events and logs.
Even if most PostgreSQL communication is encrypted in the real-world, this
will minimally allow monitoring of the SSLRequest and hand off further
analysis to the SSL analyzer.

This originates from github.com/awelzel/spicy-postgresql, with lots of
polishing happening in the past two days.

2024-09-06 16:10:48 +02:00

5 lines

180 B

CMake

Raw Blame History

 spicy_add_analyzer(
     NAME PostgreSQL
     PACKAGE_NAME spicy-postgresql
     SOURCES postgresql.spicy postgresql.evt postgresql_zeek.spicy
     MODULES PostgreSQL PostgreSQL_Zeek)