[Bro-Dev] [JIRA] (BIT-194) RFB (vnc) analyzer

Johanna Amann (JIRA) jira at bro-tracker.atlassian.net
Mon Oct 19 13:10:00 PDT 2015


     [ https://bro-tracker.atlassian.net/browse/BIT-194?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Johanna Amann updated BIT-194:
------------------------------
    Resolution: Feedback Missing
        Status: Closed  (was: Open)

Closing due to no feedback - if you are interested in developing this further, please let us know.

> RFB (vnc) analyzer
> ------------------
>
>                 Key: BIT-194
>                 URL: https://bro-tracker.atlassian.net/browse/BIT-194
>             Project: Bro Issue Tracker
>          Issue Type: Patch
>          Components: Bro
>            Reporter: justin
>            Priority: Low
>              Labels: RFB, VNC
>         Attachments: rfb.patch
>
>
> I worked out an initial RFB analyzer.
> it adds the following events:
> {noformat}
> event rfb_server_version(c: connection, version: string)
> {
>     print "Server", c$id$resp_h, version;
> }
> event rfb_client_version(c: connection, version: string)
> {
>     print "Client", c$id$orig_h, version;
> }
> {noformat}
> it probably needs some work, and there is more information that can be parsed in the RFB_Client_Body and RFB_Server_Body.



--
This message was sent by Atlassian JIRA
(v7.0.0-OD-08-002#70107)


More information about the bro-dev mailing list