base/bif/plugins/Zeek_NTP.events.bif.zeek

GLOBAL
Namespace:

GLOBAL

Summary

Events

ntp_message: event

Generated for all NTP messages.

Detailed Interface

Events

ntp_message
Type:

event (c: connection, is_orig: bool, msg: NTP::Message)

Generated for all NTP messages. Different from many other of Zeek’s events, this one is generated for both client-side and server-side messages.

See Wikipedia for more information about the NTP protocol.

Parameters:
  • c – The connection record describing the corresponding UDP flow.

  • is_orig – True if the message was sent by the originator.

  • msg – The parsed NTP message.