Table of Contents
conn.log
uid
dns.log
http.log
files.log
ftp.log
ssl.log
x509.log
smtp.log
pe.log
net user
notice.log
dce_rpc.log
kerberos.log
smb_mapping.log
extract_files/
smb_files.log
smb_mapping
ntlm.log
irc.log
rdp.log
traceroute.log
tunnel.log
dpd.log
known_certs.log
known_hosts.log
known_services.log
software.log
weird.log
capture_loss.log
reporter.log
init-plugin
This script filters the ip_proto field out of the conn.log and disables logging of connections with unknown IP protocols.
base/frameworks/analyzer/main.zeek, base/protocols/conn
Conn::Info: record
Conn::Info
record