Zeek_FTP.functions.bif.zeek¶

GLOBAL¶

Namespace:	GLOBAL

Summary¶

Functions¶

`fmt_ftp_port`: `function`	Formats an IP address and TCP port as an FTP PORT command.
`parse_eftp_port`: `function`	Converts a string representation of the FTP EPRT command (see RFC 2428) to an `ftp_port`.
`parse_ftp_epsv`: `function`	Converts the result of the FTP EPSV command (see RFC 2428) to an `ftp_port`.
`parse_ftp_pasv`: `function`	Converts the result of the FTP PASV command to an `ftp_port`.
`parse_ftp_port`: `function`	Converts a string representation of the FTP PORT command to an `ftp_port`.

Detailed Interface¶

Functions¶

fmt_ftp_port¶

Type:	`function` (a: `addr`, p: `port`) : `string`

Formats an IP address and TCP port as an FTP PORT command. For example, 10.0.0.1 and 1055/tcp yields "10,0,0,1,4,31".

A:	The IP address.
P:	The TCP port.
Returns:	The FTP PORT string.

parse_eftp_port¶

Type:	`function` (s: `string`) : `ftp_port`

Converts a string representation of the FTP EPRT command (see RFC 2428) to an ftp_port. The format is "EPRT<space><d><net-prt><d><net-addr><d><tcp-port><d>", where <d> is a delimiter in the ASCII range 33-126 (usually |).

S:	The string of the FTP EPRT command, e.g., `"\|1\|10.0.0.1\|1055\|"`.
Returns:	The FTP PORT, e.g., `[h=10.0.0.1, p=1055/tcp, valid=T]`.

parse_ftp_epsv¶

Type:	`function` (str: `string`) : `ftp_port`

Converts the result of the FTP EPSV command (see RFC 2428) to an ftp_port. The format is "<text> (<d><d><d><tcp-port><d>)", where <d> is a delimiter in the ASCII range 33-126 (usually |).

Str:	The string containing the result of the FTP EPSV command.
Returns:	The FTP PORT, e.g., `[h=10.0.0.1, p=1055/tcp, valid=T]`.

parse_ftp_pasv¶

Type:	`function` (str: `string`) : `ftp_port`

Converts the result of the FTP PASV command to an ftp_port.

Str:	The string containing the result of the FTP PASV command.
Returns:	The FTP PORT, e.g., `[h=10.0.0.1, p=1055/tcp, valid=T]`.

parse_ftp_port¶

Type:	`function` (s: `string`) : `ftp_port`

Converts a string representation of the FTP PORT command to an ftp_port.

S:	The string of the FTP PORT command, e.g., `"10,0,0,1,4,31"`.
Returns:	The FTP PORT, e.g., `[h=10.0.0.1, p=1055/tcp, valid=T]`.