policy/protocols/conn/multicast-participants.zeek

Conn

Namespace:

Conn

Imports:

base/packet-protocols/igmp/types.zeek, base/protocols/conn

Summary

Types

Conn::MulticastParticipantsInfo: record

Redefinitions

Log::ID: enum	Conn::MULTICAST_PARTICIPANTS_LOG
connection: record	New Fields: connection multicast_srcs: set [addr] &optional

Events

Conn::log_multicast: event

Event that can be handled to access the Conn::Info record as it is sent on to the logging framework.

Hooks

Conn::log_policy_multicast: Log::PolicyHook

A default logging policy hook for the stream.

Detailed Interface

Types

Conn::MulticastParticipantsInfo

Type:

record

Fields:

ts: time &log

The timestamp of the connection.

cid: string &log

The UID string for the connection. This is the uid field from the original connection record.

orig_h: addr &log

The address of the host origintating the connection to the multicast group address.

group_addr: addr &log

The multicast group address for the connection.

group_p: port &log

The port used in the multicast connection.

participants: set [addr] &log

The set of multicast participants collected from IGMP for the group address.

Events

Conn::log_multicast

Type:

event (rec: Conn::MulticastParticipantsInfo)

Event that can be handled to access the Conn::Info record as it is sent on to the logging framework.

Hooks

Conn::log_policy_multicast

Type:

Log::PolicyHook

A default logging policy hook for the stream.