zeek/scripts/policy/protocols
Valerio G 18499fd7d9 Extend DHCP protocol analyzer with new options.
Add the folowing option types:
- 55 Parameters Request List;
- 58 Renewal time;
- 59 Rebinding time;
- 61 Client Identifier;
- 82 Relay Agent Information.

Extend the following events with new parameters, specifically:
- dhcp_discover exports client identifier and parameters request list;
- dhcp_request exports client_identifier and parameters request list;
- dhcp_ack exports rebinding time, renewal time and list of suboptions value of
  dhcp relay agent information option;
- dhcp_inform exports parameters request list.

Add option type specific variables within the scope of DHCP module
(see src/analyzer/protocol/dhcp/types.bif).

Move protocol specific variables "dhcp_msg" and "dhcp_router_list" from scope Global to DHCP::
and adapt inet_net_var in src/NetVar.cc consequently.

Extend src/analyzer/protocols/dhcp/main.bro to handle the new events and to log
dhcp_ack, dhcp_request and dhcp_discover.

Modify scripts/policy/protocols/dhcp/known-devices-and-hostnames.bro to
include new events' variables.
2018-01-08 21:53:58 +01:00
..
conn Fix minor typos in documentation 2016-11-14 09:50:19 -06:00
dhcp Extend DHCP protocol analyzer with new options. 2018-01-08 21:53:58 +01:00
dns Rewrite DNS state tracking which matches queries and replies. 2014-01-30 17:21:01 -06:00
ftp Fix typos and formatting in the policy/protocols docs 2013-10-21 02:34:28 -05:00
http Merge branch 'topic/jgras/flash-detection' of https://github.com/J-Gras/bro 2015-07-27 11:05:49 -07:00
krb Refactor base krb scripts and update tests. 2017-02-18 13:55:39 -05:00
modbus Allow logging filters to inherit default path from stream. 2015-03-19 14:49:55 -05:00
mysql Merge remote-tracking branch 'origin/topic/vladg/mysql' 2014-11-11 11:49:26 -08:00
rdp New script to add a field to rdp.log when the connection is upgraded to SSL. 2015-03-04 14:50:41 -05:00
smb Add missing paths to SMM Log::create_streams calls 2017-01-12 13:45:39 +01:00
smtp SMTP does not need to pull in the notice framework. 2016-06-23 13:22:16 -07:00
ssh Ensure that the notice uid field is filled in. 2016-09-19 22:11:31 -04:00
ssl Merge remote-tracking branch 'origin/topic/johanna/ocsp-sct-validate' 2017-07-30 08:49:41 -07:00