policy/frameworks/dpd/detect-protocols.zeek¶
-
ProtocolDetector
¶
Finds connections with protocols on non-standard ports with DPD.
Namespace: | ProtocolDetector |
---|---|
Imports: | base/frameworks/notice, base/utils/conn-ids.zeek, base/utils/site.zeek |
Summary¶
Runtime Options¶
ProtocolDetector::minimum_duration : interval &redef |
|
ProtocolDetector::minimum_volume : double &redef |
|
ProtocolDetector::suppress_servers : set &redef |
|
ProtocolDetector::valids : table &redef |
Constants¶
ProtocolDetector::check_interval : interval |
State Variables¶
ProtocolDetector::servers : table &read_expire = 14.0 days |
Types¶
ProtocolDetector::dir : enum |
Redefinitions¶
Notice::Type : enum |
Functions¶
ProtocolDetector::found_protocol : function |
Detailed Interface¶
Runtime Options¶
-
ProtocolDetector::suppress_servers
¶ Type: set
[Analyzer::Tag
]Attributes: &redef
Default: {}
-
ProtocolDetector::valids
¶ Type: table
[Analyzer::Tag
,addr
,port
] ofProtocolDetector::dir
Attributes: &redef
Default: {}
State Variables¶
Types¶
Functions¶
-
ProtocolDetector::found_protocol
¶ Type: function
(c:connection
, atype:Analyzer::Tag
, protocol:string
) :void