zeek/scripts/base/protocols
Jon Siwek c61dfb1963 Rewrite DNS state tracking which matches queries and replies.
The previous method of matching queries with replies was still
unreliable in cases where the reply contains no answers.  The new code
also takes extra measures to avoid pending state growing too large in
cases where the condition to match a query with a corresponding reply is
never met, but yet DNS messages continue to be exchanged over the same
connection 5-tuple (preventing cleanup of the pending state).
2014-01-30 17:21:01 -06:00
..
conn Add README files for base/protocols 2013-10-17 12:47:32 -05:00
dhcp Integrate new Broxygen functionality into Sphinx. 2013-11-21 14:34:32 -06:00
dnp3 Add README files for base/protocols 2013-10-17 12:47:32 -05:00
dns Rewrite DNS state tracking which matches queries and replies. 2014-01-30 17:21:01 -06:00
ftp Add README files for base/protocols 2013-10-17 12:47:32 -05:00
http Integrate new Broxygen functionality into Sphinx. 2013-11-21 14:34:32 -06:00
irc Add README files for base/protocols 2013-10-17 12:47:32 -05:00
modbus Add README files for base/protocols 2013-10-17 12:47:32 -05:00
pop3 Add README files for base/protocols 2013-10-17 12:47:32 -05:00
smtp Tweak to SMTP script to adjust for new string slicing behaviour. 2013-12-04 13:45:46 -08:00
socks Add README files for base/protocols 2013-10-17 12:47:32 -05:00
ssh Remove resp_size from the log. Refactor when we write out to the log a bit. Geodata now works reliably. 2013-11-05 11:58:00 -05:00
ssl Change ciphers in changes ciphers from a set to a vector. 2013-12-04 11:38:15 -08:00
syslog Add README files for base/protocols 2013-10-17 12:47:32 -05:00
tunnels Moved DPD signatures into script specific directories. 2013-07-09 22:44:55 -04:00