base/bif/plugins/Bro_DCE_RPC.events.bif.bro

GLOBAL
Namespace:GLOBAL
Source File:/scripts/base/bif/plugins/Bro_DCE_RPC.events.bif.bro

Detailed Interface

Events

dce_rpc_bind
Type:event (c: connection, uuid: string)

TODO.

See also: rpc_call, rpc_dialogue, rpc_reply, dce_rpc_message, dce_rpc_request, dce_rpc_response, rpc_timeout

Todo

Bro’s current default configuration does not activate the protocol analyzer that generates this event; the corresponding script has not yet been ported to Bro 2.x. To still enable this event, one needs to register a port for it or add a DPD payload signature.

dce_rpc_message
Type:event (c: connection, is_orig: bool, ptype: dce_rpc_ptype, msg: string)

TODO.

See also: rpc_call, rpc_dialogue, rpc_reply, dce_rpc_bind, dce_rpc_request, dce_rpc_response, rpc_timeout

Todo

Bro’s current default configuration does not activate the protocol analyzer that generates this event; the corresponding script has not yet been ported to Bro 2.x. To still enable this event, one needs to register a port for it or add a DPD payload signature.

dce_rpc_request
Type:event (c: connection, opnum: count, stub: string)

TODO.

See also: rpc_call, rpc_dialogue, rpc_reply, dce_rpc_bind, dce_rpc_message, dce_rpc_response, rpc_timeout

Todo

Bro’s current default configuration does not activate the protocol analyzer that generates this event; the corresponding script has not yet been ported to Bro 2.x. To still enable this event, one needs to register a port for it or add a DPD payload signature.

dce_rpc_response
Type:event (c: connection, opnum: count, stub: string)

TODO.

See also: rpc_call, rpc_dialogue, rpc_reply, dce_rpc_bind, dce_rpc_message, dce_rpc_request, rpc_timeout

Todo

Bro’s current default configuration does not activate the protocol analyzer that generates this event; the corresponding script has not yet been ported to Bro 2.x. To still enable this event, one needs to register a port for it or add a DPD payload signature.

epm_map_response
Type:event (c: connection, uuid: string, p: port, h: addr)

TODO.

See also: rpc_call, rpc_dialogue, rpc_reply, dce_rpc_bind, dce_rpc_message, dce_rpc_request, dce_rpc_response, rpc_timeout

Todo

Bro’s current default configuration does not activate the protocol analyzer that generates this event; the corresponding script has not yet been ported to Bro 2.x. To still enable this event, one needs to register a port for it or add a DPD payload signature.

Copyright 2013, The Bro Project. Last updated on July 19, 2016. Created using Sphinx 1.4.4.