Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-03 07:08:19 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3
zeek/scripts/base/protocols/dhcp
History
Valerio G 18499fd7d9 Extend DHCP protocol analyzer with new options. 
Add the folowing option types:
- 55 Parameters Request List;
- 58 Renewal time;
- 59 Rebinding time;
- 61 Client Identifier;
- 82 Relay Agent Information.

Extend the following events with new parameters, specifically:
- dhcp_discover exports client identifier and parameters request list;
- dhcp_request exports client_identifier and parameters request list;
- dhcp_ack exports rebinding time, renewal time and list of suboptions value of
  dhcp relay agent information option;
- dhcp_inform exports parameters request list.

Add option type specific variables within the scope of DHCP module
(see src/analyzer/protocol/dhcp/types.bif).

Move protocol specific variables "dhcp_msg" and "dhcp_router_list" from scope Global to DHCP::
and adapt inet_net_var in src/NetVar.cc consequently.

Extend src/analyzer/protocols/dhcp/main.bro to handle the new events and to log
dhcp_ack, dhcp_request and dhcp_discover.

Modify scripts/policy/protocols/dhcp/known-devices-and-hostnames.bro to
include new events' variables.
2018-01-08 21:53:58 +01:00
..
__load__.bro DHCP: 2013-07-31 16:32:20 -04:00
consts.bro Fix typos and formatting in the dhcp protocol docs 2013-10-15 16:19:06 -05:00
dpd.sig DHCP: 2013-07-31 16:32:20 -04:00
main.bro Extend DHCP protocol analyzer with new options. 2018-01-08 21:53:58 +01:00
README Add README files for base/protocols 2013-10-17 12:47:32 -05:00
utils.bro Deprecate split* family of BIFs. 2015-01-21 15:34:42 -06:00

README 

Support for Dynamic Host Configuration Protocol (DHCP) analysis.