base/bif/plugins/Zeek_SIP.events.bif.zeek

GLOBAL

Namespace:GLOBAL

Summary

Events

sip_all_headers: event	Generated once for all SIP headers from the originator or responder.
sip_begin_entity: event	Generated at the beginning of a SIP message.
sip_end_entity: event	Generated at the end of a SIP message.
sip_header: event	Generated for each SIP header.
sip_reply: event	Generated for SIP replies, used in Voice over IP (VoIP).
sip_request: event	Generated for SIP requests, used in Voice over IP (VoIP).

Detailed Interface

Events

sip_all_headers

Type:event (c: connection, is_orig: bool, hlist: mime_header_list)

Generated once for all SIP headers from the originator or responder.

See Wikipedia for more information about the SIP protocol.

C:The connection. Is_orig:Whether the headers came from the originator. Hlist:All the headers, and their values

See also: sip_request, sip_reply, sip_header, sip_begin_entity, sip_end_entity

sip_begin_entity

Type:event (c: connection, is_orig: bool)

Generated at the beginning of a SIP message.

This event is generated as soon as a message’s initial line has been parsed.

See Wikipedia for more information about the SIP protocol.

C:The connection. Is_orig:Whether the message came from the originator.

See also: sip_request, sip_reply, sip_header, sip_all_headers, sip_end_entity

sip_end_entity

Type:event (c: connection, is_orig: bool)

Generated at the end of a SIP message.

See Wikipedia for more information about the SIP protocol.

C:The connection. Is_orig:Whether the message came from the originator.

See also: sip_request, sip_reply, sip_header, sip_all_headers, sip_begin_entity

sip_header

Type:event (c: connection, is_orig: bool, name: string, value: string)

Generated for each SIP header.

See Wikipedia for more information about the SIP protocol.

C:The connection. Is_orig:Whether the header came from the originator. Name:Header name. Value:Header value.

See also: sip_request, sip_reply, sip_all_headers, sip_begin_entity, sip_end_entity

sip_reply

Type:event (c: connection, version: string, code: count, reason: string)

Generated for SIP replies, used in Voice over IP (VoIP).

This event is generated as soon as a reply’s initial line has been parsed.

See Wikipedia for more information about the SIP protocol.

C:The connection. Version:The SIP version in use. Code:The response code. Reason:Textual details for the response code.

See also: sip_request, sip_header, sip_all_headers, sip_begin_entity, sip_end_entity

sip_request

Type:event (c: connection, method: string, original_URI: string, version: string)

Generated for SIP requests, used in Voice over IP (VoIP).

This event is generated as soon as a request’s initial line has been parsed.

See Wikipedia for more information about the SIP protocol.

C:The connection. Method:The SIP method extracted from the request (e.g., REGISTER, NOTIFY). Original_URI:The unprocessed URI as specified in the request. Version:The version number specified in the request (e.g., 2.0).

See also: sip_reply, sip_header, sip_all_headers, sip_begin_entity, sip_end_entity