main.zeek¶

Base Modbus analysis script.

Summary¶

`Log::ID`: `enum`	`Modbus::LOG`
`connection`: `record`	New Fields `connection` modbus: `Modbus::Info` `&optional`
`likely_server_ports`: `set` `&redef`

Event that can be handled to access the Modbus record as it is sent on to the logging framework.

Modbus::Info¶

Type

record

ts: time &log: Time of the request.
uid: string &log: Unique identifier for the connection.
id: conn_id &log: Identifier for the connection.
func: string &log &optional: The name of the function message that was sent.
exception: string &log &optional: The exception if the response was a failure.
track_address: count &default = 0 &optional: (present if policy/protocols/modbus/track-memmap.zeek is loaded)

Modbus::log_modbus¶

Event that can be handled to access the Modbus record as it is sent on to the logging framework.

Modbus::log_policy¶