mirror of
https://github.com/zeek/zeek.git
synced 2025-10-03 15:18:20 +00:00
37 lines
1,007 B
Text
37 lines
1,007 B
Text
@load port-name
|
|
|
|
# Used to annotate apps for connections on ephemeral ports
|
|
global conn_app: table[conn_id] of string &default =
|
|
function(id: conn_id): string
|
|
{
|
|
local p = is_icmp_port(id$resp_p) ? id$orig_p : id$resp_p;
|
|
if ( p in port_names )
|
|
return port_names[p];
|
|
else
|
|
return fmt("%s", p);
|
|
};
|
|
|
|
redef port_names += {
|
|
[0/icmp] = "icmp-echo",
|
|
[8/icmp] = "icmp-echo",
|
|
[3/icmp] = "icmp-unreach",
|
|
|
|
[497/tcp] = "dantz",
|
|
[554/tcp] = "rtsp",
|
|
[5730/tcp] = "steltor", # calendar
|
|
[[7501/tcp, 7502/tcp, 7503/tcp, 7504/tcp, 7505/tcp,
|
|
7506/tcp, 7507/tcp, 7508/tcp, 7509/tcp, 7510/tcp]]
|
|
= "hpss",
|
|
[[3128/tcp, 8000/tcp, 8080/tcp, 8888/tcp]] = "http",
|
|
[8443/tcp] = "https",
|
|
[3396/tcp] = "printer-agent",
|
|
[13782/tcp] = "veritas-backup-ctrl",
|
|
[16384/tcp] = "connected-backup",
|
|
|
|
[67/udp] = "dhcp-s", # bootstrap for diskless hosts
|
|
[68/udp] = "dhcp-c", # reply-port
|
|
[427/udp] = "srvloc",
|
|
[11001/udp] = "metasys", # cardkey
|
|
[38293/udp] = "nav-ping", # norton anti-virus host discovery
|
|
};
|
|
|