main.zeek¶

Summary¶

The record type which contains the fields of the RFB log.

`Log::ID`: `enum`	`RFB::LOG`
`connection`: `record`	New Fields `connection` rfb: `RFB::Info` `&optional`

`RFB::finalize_rfb`: `Conn::RemovalHook`	RFB finalization hook.
`RFB::log_policy`: `Log::PolicyHook`

RFB::Info¶

Type

record

ts: time &log: Timestamp for when the event happened.
uid: string &log: Unique ID for the connection.
id: conn_id &log: The connection’s 4-tuple of endpoint addresses/ports.
client_major_version: string &log &optional: Major version of the client.
client_minor_version: string &log &optional: Minor version of the client.
server_major_version: string &log &optional: Major version of the server.
server_minor_version: string &log &optional: Minor version of the server.
authentication_method: string &log &optional: Identifier of authentication method used.
auth: bool &log &optional: Whether or not authentication was successful.
share_flag: bool &log &optional: Whether the client has an exclusive or a shared session.
desktop_name: string &log &optional: Name of the screen that is being shared.
width: count &log &optional: Width of the screen that is being shared.
height: count &log &optional: Height of the screen that is being shared.
done: bool &default = F &optional: Internally used value to determine if this connection has already been logged.

The record type which contains the fields of the RFB log.

RFB::log_rfb¶

RFB::finalize_rfb¶

RFB finalization hook. Remaining RFB info may get logged when it’s called.

RFB::log_policy¶