zeek/scripts/base/protocols/conn
Vlad Grigorescu 9cd4071cb3 Add Q and update I documentation for conn history
- Q (MULTI_FLAG_PKT) was not in the documentation for the history field.

- I (FIN_RST_PKT) was documented incorrectly. It was documented as a
SYN+RST, when it actually represents a FIN+RST.

The new documentation was derived from:
d3f513f/src/analyzer/protocol/tcp/TCP.cc (L493)

Addresses BIT-1466
2015-08-24 12:10:35 -05:00
..
__load__.bro Add high level api for thresholding that holds lists of thresholds 2015-04-17 06:57:58 -07:00
contents.bro Fix typos and formatting in the conn protocol docs 2013-10-14 17:19:29 -05:00
inactivity.bro First prototype of new analyzer framework. 2013-03-26 11:05:38 -07:00
main.bro Add Q and update I documentation for conn history 2015-08-24 12:10:35 -05:00
polling.bro Fix typos and formatting in the conn protocol docs 2013-10-14 17:19:29 -05:00
README Add README files for base/protocols 2013-10-17 12:47:32 -05:00
thresholds.bro Remove unneeded documentation cross-referencing. 2015-04-20 13:04:33 -05:00

Support for connection (TCP, UDP, or ICMP) analysis.