zeek/scripts/base
Arne Welzel 85ca59484b postgresql: Initial parser implementation
This adds a protocol parser for the PostgreSQL protocol and a new
postgresql.log similar to the existing mysql.log.

This should be considered preliminary and hopefully during 7.1 and 7.2
with feedback from the community, we can improve on the events and logs.
Even if most PostgreSQL communication is encrypted in the real-world, this
will minimally allow monitoring of the SSLRequest and hand off further
analysis to the SSL analyzer.

This originates from github.com/awelzel/spicy-postgresql, with lots of
polishing happening in the past two days.
2024-09-06 16:10:48 +02:00
..
files Copy timestamp from file object 2024-05-17 15:03:06 +02:00
frameworks Spicy: Register well-known ports through an event handler. 2024-08-22 10:24:55 +02:00
misc Parse and store localversion string 2024-04-17 14:17:22 -07:00
packet-protocols Add registration for GRE-over-UDP 2023-10-16 11:42:24 -07:00
protocols postgresql: Initial parser implementation 2024-09-06 16:10:48 +02:00
utils Clarify membership in the Site::private_address_space prefix list. [skip ci] 2024-05-04 11:21:26 -07:00
init-bare.zeek Add DNS TKEY event 2024-08-16 10:20:42 -04:00
init-default.zeek postgresql: Initial parser implementation 2024-09-06 16:10:48 +02:00
init-frameworks-and-bifs.zeek Add necessary script-land changes 2024-05-31 13:30:31 -07:00
init-supervisor.zeek Establish a separate init script when using the supervisor 2021-07-08 13:12:53 -07:00