zeek/scripts/base/protocols
Seth Hall bcdffe3212 No longer accidentally attempting to parse NBSTAT RRs as SRV RRs.
The NetBios name service RFC (1002) specified NBSTAT (NetBios Status)
resource records to have identifier 0x0021.  The DNS SRV RFC specified
SRV records to have identifier 33.  Unfortunately those are the
same number. :)

We now check the resp port to handle this situation better so that
we won't be attempting to parse NBSTAT records as SRV (which
causes several weird messages).
2014-03-06 09:06:23 -05:00
..
conn Add README files for base/protocols 2013-10-17 12:47:32 -05:00
dhcp Integrate new Broxygen functionality into Sphinx. 2013-11-21 14:34:32 -06:00
dnp3 Add README files for base/protocols 2013-10-17 12:47:32 -05:00
dns No longer accidentally attempting to parse NBSTAT RRs as SRV RRs. 2014-03-06 09:06:23 -05:00
ftp Add README files for base/protocols 2013-10-17 12:47:32 -05:00
http Merge branch 'topic/robin/http-connect' 2014-03-03 16:53:46 -08:00
irc Add README files for base/protocols 2013-10-17 12:47:32 -05:00
modbus Add README files for base/protocols 2013-10-17 12:47:32 -05:00
pop3 Add README files for base/protocols 2013-10-17 12:47:32 -05:00
smtp Tweak to SMTP script to adjust for new string slicing behaviour. 2013-12-04 13:45:46 -08:00
socks Add README files for base/protocols 2013-10-17 12:47:32 -05:00
ssh Remove resp_size from the log. Refactor when we write out to the log a bit. Geodata now works reliably. 2013-11-05 11:58:00 -05:00
ssl Fixing removal of support analyzers, plus some tweaking and cleanup of 2014-03-02 13:52:32 -08:00
syslog Add README files for base/protocols 2013-10-17 12:47:32 -05:00
tunnels Moved DPD signatures into script specific directories. 2013-07-09 22:44:55 -04:00