[Bro-Dev] [JIRA] (BIT-194) RFB (vnc) analyzer
Johanna Amann (JIRA)
jira at bro-tracker.atlassian.net
Mon Oct 19 13:10:00 PDT 2015
[ https://bro-tracker.atlassian.net/browse/BIT-194?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Johanna Amann updated BIT-194:
------------------------------
Resolution: Feedback Missing
Status: Closed (was: Open)
Closing due to no feedback - if you are interested in developing this further, please let us know.
> RFB (vnc) analyzer
> ------------------
>
> Key: BIT-194
> URL: https://bro-tracker.atlassian.net/browse/BIT-194
> Project: Bro Issue Tracker
> Issue Type: Patch
> Components: Bro
> Reporter: justin
> Priority: Low
> Labels: RFB, VNC
> Attachments: rfb.patch
>
>
> I worked out an initial RFB analyzer.
> it adds the following events:
> {noformat}
> event rfb_server_version(c: connection, version: string)
> {
> print "Server", c$id$resp_h, version;
> }
> event rfb_client_version(c: connection, version: string)
> {
> print "Client", c$id$orig_h, version;
> }
> {noformat}
> it probably needs some work, and there is more information that can be parsed in the RFB_Client_Body and RFB_Server_Body.
--
This message was sent by Atlassian JIRA
(v7.0.0-OD-08-002#70107)
More information about the bro-dev
mailing list