zeek/scripts/base/protocols/dhcp
Peter Cullen fb4858d42b Prevent large dhcp log entries
A flood of DHCP traffic can result if very large log entries consisting
of many uids and/or msg_types. Such large log entries can disrupt a SIEM
ingestion pipeline. This change forcing a log entry to be written when
the number of uids or the number of msg_Types exceed a certain value.
The values are treated as options for easy configuration.
2022-07-28 11:34:18 -07:00
..
__load__.zeek Rename all scripts to have ".zeek" file extension 2019-04-11 21:12:40 -05:00
consts.zeek tweaks to base scripts revealed by switch to expression-based initialization 2022-03-23 15:36:35 -07:00
dpd.sig Rework to the DHCP analyzer. 2018-03-01 08:36:32 -08:00
main.zeek Prevent large dhcp log entries 2022-07-28 11:34:18 -07:00
README Add README files for base/protocols 2013-10-17 12:47:32 -05:00

Support for Dynamic Host Configuration Protocol (DHCP) analysis.