zeek/scripts/base
Jon Siwek eb9f686bb2 Add handling for IPv6 extension header chains (addresses #531)
- The script-layer 'pkt_hdr' type is extended with a new 'ip6' field
  representing the full IPv6 header chain.

- The 'new_packet' event is now raised for IPv6 packets (addresses #523)

- A new event called 'ipv6_ext_header' is raised for any IPv6 packet
  containing extension headers.

- A new event called 'esp_packet' is raised for any packets using ESP
  ('new_packet' and 'ipv6_ext_header' events provide connection info,
  but that info can't be provided here since the upper-layer payload
  is encrypted).

- The 'unknown_protocol' weird is now raised more reliably when Bro
  sees a transport protocol or IPv6 extension header it can't handle.
  (addresses #522)

Still need to do IPv6 fragment reassembly and needs more testing.
2012-03-02 20:20:57 -06:00
..
frameworks Checkpoint after pass. 2012-02-15 13:07:08 -08:00
misc Hopefully the last major script reorganization. 2011-08-05 23:09:53 -04:00
protocols Fix IPv6 URLs 2012-02-17 10:55:17 -06:00
utils Fix some malformed Broxygen xref roles. 2011-12-16 14:30:36 -06:00
init-bare.bro Add handling for IPv6 extension header chains (addresses #531) 2012-03-02 20:20:57 -06:00
init-default.bro Metrics framework update. Mostly to make metrics work on clusters. 2011-08-15 15:57:48 -04:00