zeek/testing/btest/scripts/base
Seth Hall bbedb73a45 Huge updates to the RDP analyzer from Josh Liburdi.
- More data pulled into scriptland.
  - Logs expanded with client screen resolution and desired color depth.
  - Values in UTF-16 on the wire are converted to UTF-8 before being
    sent to scriptland.
  - If the RDP turns into SSL records, we now pass data that appears
    to be SSL to the PIA analyzer.
  - If RDP uses native encryption with X.509 certs we pass those
    certs to the files framework and the base scripts pass them forward
    to the X.509 analyzer.
  - Lots of cleanup and adjustment to fit the documented protocol
    a bit better.
  - Cleaned up the DPD signatures.
  - Moved to flowunit instead of datagram.
  - Added tests.
2015-03-04 13:12:03 -05:00
..
files Revert "Workaround race condition in unified2 file module." 2015-01-05 14:51:58 -06:00
frameworks Fix a bug in the core files framework with handling the BOF buffer. 2015-02-05 09:09:08 -05:00
misc Merge remote-tracking branch 'origin/topic/jsiwek/tcp-improvements' 2014-02-04 22:34:35 -08:00
protocols Huge updates to the RDP analyzer from Josh Liburdi. 2015-03-04 13:12:03 -05:00
utils Deprecate split* family of BIFs. 2015-01-21 15:34:42 -06:00