zeek/scripts/base
Michael Torres b85801aa7e Add a field to Modbus/TCP log to indicate the Modbus PDU type
Add the `pdu_type` field to Modbus over TCP logs to indicate whether the Modbus
message was a request or a response. Due to the client/server nature of Modbus
over TCP/IP, all messages from the TCP session originator are requests, while
all messages from the TCP session responder are responses.

Adding this information to the default log surfaces protocol metadata in a way
that doesn't require users to understand the Modbus over TCP protocol.
2022-07-24 02:41:26 +00:00
..
files GH-1634: Address feedback 2021-07-02 15:12:58 +01:00
frameworks Merge remote-tracking branch 'origin/topic/awelzel/2120-logdir-leftover' 2022-07-07 08:06:13 +02:00
misc annotate base scripts with &is_used as needed 2022-05-26 17:39:17 -07:00
packet-protocols Fix ethertype for ARP in Geneve forwarding rules 2021-12-09 14:58:08 -07:00
protocols Add a field to Modbus/TCP log to indicate the Modbus PDU type 2022-07-24 02:41:26 +00:00
utils Expand build_path() function to handle empty dir arguments gracefully 2022-05-19 09:45:52 -07:00
init-bare.zeek Remove deprecated MemoryAllocation() methods and related code 2022-06-30 18:56:52 +00:00
init-default.zeek Add base/misc/installation.zeek, with Zeek installation directories 2022-05-23 14:16:59 -07:00
init-frameworks-and-bifs.zeek GH-1122: Allow initializing globals with calls to subdir BIFs 2020-08-27 12:20:37 -07:00
init-supervisor.zeek Establish a separate init script when using the supervisor 2021-07-08 13:12:53 -07:00