zeek/scripts/policy
Valerio G 18499fd7d9 Extend DHCP protocol analyzer with new options.
Add the folowing option types:
- 55 Parameters Request List;
- 58 Renewal time;
- 59 Rebinding time;
- 61 Client Identifier;
- 82 Relay Agent Information.

Extend the following events with new parameters, specifically:
- dhcp_discover exports client identifier and parameters request list;
- dhcp_request exports client_identifier and parameters request list;
- dhcp_ack exports rebinding time, renewal time and list of suboptions value of
  dhcp relay agent information option;
- dhcp_inform exports parameters request list.

Add option type specific variables within the scope of DHCP module
(see src/analyzer/protocol/dhcp/types.bif).

Move protocol specific variables "dhcp_msg" and "dhcp_router_list" from scope Global to DHCP::
and adapt inet_net_var in src/NetVar.cc consequently.

Extend src/analyzer/protocols/dhcp/main.bro to handle the new events and to log
dhcp_ack, dhcp_request and dhcp_discover.

Modify scripts/policy/protocols/dhcp/known-devices-and-hostnames.bro to
include new events' variables.
2018-01-08 21:53:58 +01:00
..
files/x509 Merge remote-tracking branch 'origin/topic/johanna/ocsp-sct-validate' 2017-07-30 08:49:41 -07:00
frameworks Updated Windows version detection to include Windows 10 2017-02-21 15:06:39 -05:00
integration Allow logging filters to inherit default path from stream. 2015-03-19 14:49:55 -05:00
misc Fix minor typos in documentation of various scripts 2016-11-11 14:08:17 -06:00
protocols Extend DHCP protocol analyzer with new options. 2018-01-08 21:53:58 +01:00
tuning Move DataSeries and ElasticSearch into plugins. 2014-08-08 18:32:21 -07:00