Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-03 15:18:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2
zeek/scripts/base/protocols
History
Seth Hall cdf6b7864e More file analysis updates. 
- Recorrected the module name to Files.

  - Added Files::analyzer_name to get a more readable name for a
    file analyzer.

  - Improved and just overall better handled multipart mime
    transfers in HTTP and SMTP.  HTTP now has orig_fuids and resp_fuids
    log fields since multiple "files" can be transferred with
    multipart mime in a single request/response pair.  SMTP has
    an fuids field which has file unique IDs for all parts
    transferred. FTP and IRC have a log field named fuid added
    because only a single file can be transferred per irc and ftp
    log line.
2013-07-09 11:50:54 -04:00
..
conn First prototype of new analyzer framework. 2013-03-26 11:05:38 -07:00
dns Merge remote-tracking branch 'origin/master' into topic/robin/plugins 2013-05-30 17:43:50 -07:00
ftp More file analysis updates. 2013-07-09 11:50:54 -04:00
http More file analysis updates. 2013-07-09 11:50:54 -04:00
irc More file analysis updates. 2013-07-09 11:50:54 -04:00
modbus First prototype of new analyzer framework. 2013-03-26 11:05:38 -07:00
smtp More file analysis updates. 2013-07-09 11:50:54 -04:00
socks First prototype of new analyzer framework. 2013-03-26 11:05:38 -07:00
ssh Add a call to lookup_connection in SSH scripts to update connval. 2013-07-04 22:32:07 -04:00
ssl Remove the log queueing mechanism that was included with the SSL log delay mechanism. 2013-06-28 11:40:02 -04:00
syslog Porting syslog analyzer as another example. 2013-04-05 13:13:30 -07:00