zeek/testing/btest/scripts/base/protocols
Martin van Hensbergen 849875e8be Analyzer and bro script for RFB protocol (VNC)
This analyzer parses the Remote Frame Buffer
protocol, usually referred to as the 'VNC protocol'.

It supports several dialects (3.3, 3.7, 3.8) and
also handles the Apple Remote Desktop variant.

It will log such facts as client/server versions,
authentication method used, authentication result,
height, width and name of the shared screen.

It also includes two testcases.

Todo: Apple Remote Desktop seems to have some
bytes prepended to the screen name. This is
not interepreted correctly.
2016-04-11 10:35:00 +02:00
..
conn Add high level api for thresholding that holds lists of thresholds 2015-04-17 06:57:58 -07:00
dhcp DHCP: Adding unit tests. 2013-07-31 17:30:56 -04:00
dnp3 Merge remote-tracking branch 'origin/topic/robin/dnp3-merge-v4' 2015-01-14 13:25:42 -08:00
dns BIT-788: use DNS QR field to better identify flow direction. 2015-03-19 11:53:40 -05:00
ftp Files transferred over FTP were showing incorrect sizes. 2016-03-11 12:56:28 -05:00
http updated weird message and tests 2016-03-04 18:03:24 -05:00
irc Merge branch 'master' of https://github.com/marktayl/bro 2016-02-12 18:55:25 -08:00
krb Renaming krb.log to kerberos.log. 2015-04-21 12:22:58 -07:00
modbus Call ProtocolConfirmed on modbus 2015-06-19 07:00:38 -04:00
mysql Add a btest for the Wireshark sample MySQL PCAP 2014-08-08 15:02:18 -05:00
pop3 Slightly earlier protocol confirmation for pop3. 2015-07-23 16:55:02 -07:00
radius Radius functionality and memleak test. 2014-05-15 11:49:03 -04:00
rdp Huge updates to the RDP analyzer from Josh Liburdi. 2015-03-04 13:12:03 -05:00
rfb Analyzer and bro script for RFB protocol (VNC) 2016-04-11 10:35:00 +02:00
sip Add SIP btests. 2015-04-19 22:25:37 -04:00
smtp BIT-1410: Add btest 2015-06-01 20:49:04 -05:00
snmp Add SNMP datagram parsing support. 2014-02-18 14:41:32 -06:00
socks Update the SOCKS analyzer to support user/pass login. 2015-02-05 12:44:10 -05:00
ssh Merge branch 'patch-4' of https://github.com/aeppert/bro 2016-03-07 13:39:28 -08:00
ssl Add testcase for CVE-2015-3194 2016-01-19 14:45:52 -08:00
syslog Porting syslog analyzer as another example. 2013-04-05 13:13:30 -07:00