base/bif/plugins/Zeek_SIP.events.bif.zeek¶
-
GLOBAL¶
| Namespace: | GLOBAL |
|---|
Summary¶
Events¶
sip_all_headers: event |
Generated once for all SIP headers from the originator or responder. |
sip_begin_entity: event |
Generated at the beginning of a SIP message. |
sip_end_entity: event |
Generated at the end of a SIP message. |
sip_header: event |
Generated for each SIP header. |
sip_reply: event |
Generated for SIP replies, used in Voice over IP (VoIP). |
sip_request: event |
Generated for SIP requests, used in Voice over IP (VoIP). |
Detailed Interface¶
Events¶
-
sip_all_headers¶ Type: event(c:connection, is_orig:bool, hlist:mime_header_list)Generated once for all SIP headers from the originator or responder.
See Wikipedia for more information about the SIP protocol.
C: The connection. Is_orig: Whether the headers came from the originator. Hlist: All the headers, and their values See also:
sip_request,sip_reply,sip_header,sip_begin_entity,sip_end_entity
-
sip_begin_entity¶ Type: event(c:connection, is_orig:bool)Generated at the beginning of a SIP message.
This event is generated as soon as a message’s initial line has been parsed.
See Wikipedia for more information about the SIP protocol.
C: The connection. Is_orig: Whether the message came from the originator. See also:
sip_request,sip_reply,sip_header,sip_all_headers,sip_end_entity
-
sip_end_entity¶ Type: event(c:connection, is_orig:bool)Generated at the end of a SIP message.
See Wikipedia for more information about the SIP protocol.
C: The connection. Is_orig: Whether the message came from the originator. See also:
sip_request,sip_reply,sip_header,sip_all_headers,sip_begin_entity
-
sip_header¶ Type: event(c:connection, is_orig:bool, name:string, value:string)Generated for each SIP header.
See Wikipedia for more information about the SIP protocol.
C: The connection. Is_orig: Whether the header came from the originator. Name: Header name. Value: Header value. See also:
sip_request,sip_reply,sip_all_headers,sip_begin_entity,sip_end_entity
-
sip_reply¶ Type: event(c:connection, version:string, code:count, reason:string)Generated for SIP replies, used in Voice over IP (VoIP).
This event is generated as soon as a reply’s initial line has been parsed.
See Wikipedia for more information about the SIP protocol.
C: The connection. Version: The SIP version in use. Code: The response code. Reason: Textual details for the response code. See also:
sip_request,sip_header,sip_all_headers,sip_begin_entity,sip_end_entity
-
sip_request¶ Type: event(c:connection, method:string, original_URI:string, version:string)Generated for SIP requests, used in Voice over IP (VoIP).
This event is generated as soon as a request’s initial line has been parsed.
See Wikipedia for more information about the SIP protocol.
C: The connection. Method: The SIP method extracted from the request (e.g., REGISTER,NOTIFY).Original_URI: The unprocessed URI as specified in the request. Version: The version number specified in the request (e.g., 2.0).See also:
sip_reply,sip_header,sip_all_headers,sip_begin_entity,sip_end_entity