main.zeek

Summary

The record type which contains the fields of the RFB log.

`Log::ID`: `enum`	`RFB::LOG`
`connection`: `record`	New Fields `connection` rfb: `RFB::Info` `&optional`

`RFB::finalize_rfb`: `Conn::RemovalHook`	RFB finalization hook.
`RFB::log_policy`: `Log::PolicyHook`

Type

record

ts: time &log: Timestamp for when the event happened.
uid: string &log: Unique ID for the connection.
id: conn_id &log: The connection’s 4-tuple of endpoint addresses/ports.
client_major_version: string &log &optional: Major version of the client.
client_minor_version: string &log &optional: Minor version of the client.
server_major_version: string &log &optional: Major version of the server.
server_minor_version: string &log &optional: Minor version of the server.
authentication_method: string &log &optional: Identifier of authentication method used.
auth: bool &log &optional: Whether or not authentication was successful.
share_flag: bool &log &optional: Whether the client has an exclusive or a shared session.
desktop_name: string &log &optional: Name of the screen that is being shared.
width: count &log &optional: Width of the screen that is being shared.
height: count &log &optional: Height of the screen that is being shared.
done: bool &default = F &optional: Internally used value to determine if this connection has already been logged.

The record type which contains the fields of the RFB log.

RFB finalization hook. Remaining RFB info may get logged when it’s called.