base/protocols/rfb/main.zeek

RFB
Namespace

RFB

Imports

base/protocols/conn/removal-hooks.zeek

Summary

Types

RFB::Info: record

The record type which contains the fields of the RFB log.

Redefinitions

Log::ID: enum

connection: record

New Fields

connection

rfb: RFB::Info &optional

Events

RFB::log_rfb: event

Hooks

RFB::finalize_rfb: Conn::RemovalHook

RFB finalization hook.

RFB::log_policy: Log::PolicyHook

Detailed Interface

Types

RFB::Info
Type

record

ts: time &log

Timestamp for when the event happened.

uid: string &log

Unique ID for the connection.

id: conn_id &log

The connection’s 4-tuple of endpoint addresses/ports.

client_major_version: string &log &optional

Major version of the client.

client_minor_version: string &log &optional

Minor version of the client.

server_major_version: string &log &optional

Major version of the server.

server_minor_version: string &log &optional

Minor version of the server.

authentication_method: string &log &optional

Identifier of authentication method used.

auth: bool &log &optional

Whether or not authentication was successful.

share_flag: bool &log &optional

Whether the client has an exclusive or a shared session.

desktop_name: string &log &optional

Name of the screen that is being shared.

width: count &log &optional

Width of the screen that is being shared.

height: count &log &optional

Height of the screen that is being shared.

done: bool &default = F &optional

Internally used value to determine if this connection has already been logged.

The record type which contains the fields of the RFB log.

Events

RFB::log_rfb
Type

event (rec: RFB::Info)

Hooks

RFB::finalize_rfb
Type

Conn::RemovalHook

RFB finalization hook. Remaining RFB info may get logged when it’s called.

RFB::log_policy
Type

Log::PolicyHook