zeek/scripts/base
Jon Siwek 9edbf3e53c Add GPRS Tunnelling Protocol (GTPv1) decapsulation.
This currently supports automatic decapsulation of GTP-U packets on
UDP port 2152.

The GTPv1 headers for such tunnels can be inspected by handling the
"gtpv1_g_pdu_packet" event, which has a parameter of type "gtpv1_hdr".

Analyzer and test cases are derived from submissions by Carsten Langer.

Addresses #690.
2012-10-19 14:02:35 -05:00
..
frameworks Add GPRS Tunnelling Protocol (GTPv1) decapsulation. 2012-10-19 14:02:35 -05:00
misc Hopefully the last major script reorganization. 2011-08-05 23:09:53 -04:00
protocols Merge remote-tracking branch 'origin/topic/jsiwek/gridftp' 2012-10-12 10:43:16 -07:00
utils Add support to Bro for connecting with peers over IPv6. 2012-05-09 15:08:36 -05:00
init-bare.bro Add GPRS Tunnelling Protocol (GTPv1) decapsulation. 2012-10-19 14:02:35 -05:00
init-default.bro Return of Robin's old SOCKS analyzer/decapsulator and tunnel code checkpoint. 2012-04-21 23:50:09 -04:00