base/bif/plugins/Zeek_NTP.events.bif.zeek

GLOBAL
Namespace

GLOBAL

Summary

Events

ntp_message: event

Generated for all NTP messages.

Detailed Interface

Events

ntp_message
Type

event (c: connection, is_orig: bool, msg: NTP::Message)

Generated for all NTP messages. Different from many other of Zeek’s events, this one is generated for both client-side and server-side messages.

See Wikipedia for more information about the NTP protocol.

Parameters
  • c – The connection record describing the corresponding UDP flow.

  • is_orig – True if the message was sent by the originator.

  • msg – The parsed NTP message.