base/bif/plugins/Zeek_NTP.events.bif.zeek

GLOBAL

Namespace: GLOBAL

Summary

Events

ntp_message: event

Generated for all NTP messages.

Detailed Interface

Events

ntp_message

Type: event (c: connection, is_orig: bool, msg: NTP::Message)

Generated for all NTP messages. Different from many other of Zeek’s events, this one is generated for both client-side and server-side messages.

See Wikipedia for more information about the NTP protocol.

Parameters

c – The connection record describing the corresponding UDP flow.
is_orig – True if the message was sent by the originator.
msg – The parsed NTP message.