zeek/scripts/base/protocols/conn
Jon Siwek a16bd47bf7 GH-1164: Fix incorrect RSTOS0 conn_state determinations
The RSTOS0 `conn_state` label is documented as "Originator sent a SYN
followed by a RST, never saw SYN-ACK from responder", but was previously
applied to cases where no originator SYN exists, like a single RST-only
packet.
2020-09-11 16:14:41 -07:00
..
__load__.zeek Rename all scripts to have ".zeek" file extension 2019-04-11 21:12:40 -05:00
contents.zeek GH-234: rename Broxygen to Zeexygen along with roles/directives 2019-04-22 19:45:50 -07:00
inactivity.zeek Rename all scripts to have ".zeek" file extension 2019-04-11 21:12:40 -05:00
main.zeek GH-1164: Fix incorrect RSTOS0 conn_state determinations 2020-09-11 16:14:41 -07:00
polling.zeek reduce memory usage of ConnPolling 2020-06-26 18:51:29 -04:00
README Add README files for base/protocols 2013-10-17 12:47:32 -05:00
thresholds.zeek Merge remote-tracking branch 'origin/topic/johanna/conn-duration-thresholds' 2019-08-01 14:20:49 -07:00

Support for connection (TCP, UDP, or ICMP) analysis.