zeek/scripts/base/protocols/dns
Jon Siwek c61dfb1963 Rewrite DNS state tracking which matches queries and replies.
The previous method of matching queries with replies was still
unreliable in cases where the reply contains no answers.  The new code
also takes extra measures to avoid pending state growing too large in
cases where the condition to match a query with a corresponding reply is
never met, but yet DNS messages continue to be exchanged over the same
connection 5-tuple (preventing cleanup of the pending state).
2014-01-30 17:21:01 -06:00
..
__load__.bro Hopefully the last major script reorganization. 2011-08-05 23:09:53 -04:00
consts.bro Fix typos and formatting in the dns protocol docs 2013-10-15 16:44:28 -05:00
main.bro Rewrite DNS state tracking which matches queries and replies. 2014-01-30 17:21:01 -06:00
README Add README files for base/protocols 2013-10-17 12:47:32 -05:00

Support for Domain Name System (DNS) protocol analysis.