base/bif/plugins/Zeek_GTPv1.events.bif.zeek
- GLOBAL
- Namespace:
GLOBAL
Summary
Events
Generated for GTPv1-C Create PDP Context Request messages. |
|
Generated for GTPv1-C Create PDP Context Response messages. |
|
Generated for GTPv1-C Delete PDP Context Request messages. |
|
Generated for GTPv1-C Delete PDP Context Response messages. |
|
Generated for GTPv1 G-PDU packets. |
|
Generated for any GTP message with a GTPv1 header. |
|
Generated for GTPv1-C Update PDP Context Request messages. |
|
Generated for GTPv1-C Update PDP Context Response messages. |
|
Generated when a new GTP analyzer is instantiated for a connection. |
Detailed Interface
Events
- gtpv1_create_pdp_ctx_request
- Type:
event
(c:connection
, hdr:gtpv1_hdr
, elements:gtp_create_pdp_ctx_request_elements
)
Generated for GTPv1-C Create PDP Context Request messages.
- Parameters:
c – The connection over which the message is sent.
hdr – The GTPv1 header.
elements – The set of Information Elements comprising the message.
- gtpv1_create_pdp_ctx_response
- Type:
event
(c:connection
, hdr:gtpv1_hdr
, elements:gtp_create_pdp_ctx_response_elements
)
Generated for GTPv1-C Create PDP Context Response messages.
- Parameters:
c – The connection over which the message is sent.
hdr – The GTPv1 header.
elements – The set of Information Elements comprising the message.
- gtpv1_delete_pdp_ctx_request
- Type:
event
(c:connection
, hdr:gtpv1_hdr
, elements:gtp_delete_pdp_ctx_request_elements
)
Generated for GTPv1-C Delete PDP Context Request messages.
- Parameters:
c – The connection over which the message is sent.
hdr – The GTPv1 header.
elements – The set of Information Elements comprising the message.
- gtpv1_delete_pdp_ctx_response
- Type:
event
(c:connection
, hdr:gtpv1_hdr
, elements:gtp_delete_pdp_ctx_response_elements
)
Generated for GTPv1-C Delete PDP Context Response messages.
- Parameters:
c – The connection over which the message is sent.
hdr – The GTPv1 header.
elements – The set of Information Elements comprising the message.
- gtpv1_g_pdu_packet
- Type:
event
(outer:connection
, inner_gtp:gtpv1_hdr
, inner_ip:pkt_hdr
)
Generated for GTPv1 G-PDU packets. That is, packets with a UDP payload that includes a GTP header followed by an IPv4 or IPv6 packet.
- Parameters:
outer – The GTP outer tunnel connection.
inner_gtp – The GTP header.
inner_ip – The inner IP and transport layer packet headers.
Note
Since this event may be raised on a per-packet basis, handling it may become particularly expensive for real-time analysis.
- gtpv1_message
- Type:
event
(c:connection
, hdr:gtpv1_hdr
)
Generated for any GTP message with a GTPv1 header.
- Parameters:
c – The connection over which the message is sent.
hdr – The GTPv1 header.
- gtpv1_update_pdp_ctx_request
- Type:
event
(c:connection
, hdr:gtpv1_hdr
, elements:gtp_update_pdp_ctx_request_elements
)
Generated for GTPv1-C Update PDP Context Request messages.
- Parameters:
c – The connection over which the message is sent.
hdr – The GTPv1 header.
elements – The set of Information Elements comprising the message.
- gtpv1_update_pdp_ctx_response
- Type:
event
(c:connection
, hdr:gtpv1_hdr
, elements:gtp_update_pdp_ctx_response_elements
)
Generated for GTPv1-C Update PDP Context Response messages.
- Parameters:
c – The connection over which the message is sent.
hdr – The GTPv1 header.
elements – The set of Information Elements comprising the message.
- new_gtpv1_state
- Type:
event
(c:connection
)
Generated when a new GTP analyzer is instantiated for a connection.
This event exists to install a connection removal hook to clear internal per-connection GTPv1 state.
- Parameters:
c – The connection for which the analyzer is instantiated.