base/bif/plugins/Zeek_SIP.events.bif.zeek¶
-
GLOBAL
¶
Namespace: | GLOBAL |
---|
Summary¶
Events¶
sip_all_headers : event |
Generated once for all SIP headers from the originator or responder. |
sip_begin_entity : event |
Generated at the beginning of a SIP message. |
sip_end_entity : event |
Generated at the end of a SIP message. |
sip_header : event |
Generated for each SIP header. |
sip_reply : event |
Generated for SIP replies, used in Voice over IP (VoIP). |
sip_request : event |
Generated for SIP requests, used in Voice over IP (VoIP). |
Detailed Interface¶
Events¶
-
sip_all_headers
¶ Type: event
(c:connection
, is_orig:bool
, hlist:mime_header_list
)Generated once for all SIP headers from the originator or responder.
See Wikipedia for more information about the SIP protocol.
C: The connection. Is_orig: Whether the headers came from the originator. Hlist: All the headers, and their values See also:
sip_request
,sip_reply
,sip_header
,sip_begin_entity
,sip_end_entity
-
sip_begin_entity
¶ Type: event
(c:connection
, is_orig:bool
)Generated at the beginning of a SIP message.
This event is generated as soon as a message’s initial line has been parsed.
See Wikipedia for more information about the SIP protocol.
C: The connection. Is_orig: Whether the message came from the originator. See also:
sip_request
,sip_reply
,sip_header
,sip_all_headers
,sip_end_entity
-
sip_end_entity
¶ Type: event
(c:connection
, is_orig:bool
)Generated at the end of a SIP message.
See Wikipedia for more information about the SIP protocol.
C: The connection. Is_orig: Whether the message came from the originator. See also:
sip_request
,sip_reply
,sip_header
,sip_all_headers
,sip_begin_entity
-
sip_header
¶ Type: event
(c:connection
, is_orig:bool
, name:string
, value:string
)Generated for each SIP header.
See Wikipedia for more information about the SIP protocol.
C: The connection. Is_orig: Whether the header came from the originator. Name: Header name. Value: Header value. See also:
sip_request
,sip_reply
,sip_all_headers
,sip_begin_entity
,sip_end_entity
-
sip_reply
¶ Type: event
(c:connection
, version:string
, code:count
, reason:string
)Generated for SIP replies, used in Voice over IP (VoIP).
This event is generated as soon as a reply’s initial line has been parsed.
See Wikipedia for more information about the SIP protocol.
C: The connection. Version: The SIP version in use. Code: The response code. Reason: Textual details for the response code. See also:
sip_request
,sip_header
,sip_all_headers
,sip_begin_entity
,sip_end_entity
-
sip_request
¶ Type: event
(c:connection
, method:string
, original_URI:string
, version:string
)Generated for SIP requests, used in Voice over IP (VoIP).
This event is generated as soon as a request’s initial line has been parsed.
See Wikipedia for more information about the SIP protocol.
C: The connection. Method: The SIP method extracted from the request (e.g., REGISTER
,NOTIFY
).Original_URI: The unprocessed URI as specified in the request. Version: The version number specified in the request (e.g., 2.0
).See also:
sip_reply
,sip_header
,sip_all_headers
,sip_begin_entity
,sip_end_entity