base/bif/plugins/Zeek_Login.functions.bif.zeek

GLOBAL
Namespace

GLOBAL

Summary

Functions

get_login_state: function

Returns the state of the given login (Telnet or Rlogin) connection.

set_login_state: function

Sets the login state of a connection with a login analyzer.

Detailed Interface

Functions

get_login_state
Type

function (cid: conn_id) : count

Returns the state of the given login (Telnet or Rlogin) connection.

Cid

The connection ID.

Returns

False if the connection is not active or is not tagged as a login analyzer. Otherwise the function returns the state, which can be one of:

  • LOGIN_STATE_AUTHENTICATE: The connection is in its initial authentication dialog.

  • LOGIN_STATE_LOGGED_IN: The analyzer believes the user has successfully authenticated.

  • LOGIN_STATE_SKIP: The analyzer has skipped any further processing of the connection.

  • LOGIN_STATE_CONFUSED: The analyzer has concluded that it does not correctly know the state of the connection, and/or the username associated with it.

See also: set_login_state

set_login_state
Type

function (cid: conn_id, new_state: count) : bool

Sets the login state of a connection with a login analyzer.

Cid

The connection ID.

New_state

The new state of the login analyzer. See get_login_state for possible values.

Returns

Returns false if cid is not an active connection or is not tagged as a login analyzer, and true otherwise.

See also: get_login_state