GLOBAL
Namespace: | GLOBAL |
---|---|
Source File: | /scripts/base/bif/plugins/Bro_DCE_RPC.events.bif.bro |
dce_rpc_bind : event |
TODO. |
dce_rpc_message : event |
TODO. |
dce_rpc_request : event |
TODO. |
dce_rpc_response : event |
TODO. |
epm_map_response : event |
TODO. |
dce_rpc_bind
Type: | event (c: connection , uuid: string ) |
---|
TODO.
See also: rpc_call
, rpc_dialogue
, rpc_reply
, dce_rpc_message
, dce_rpc_request
, dce_rpc_response
, rpc_timeout
Todo
Bro’s current default configuration does not activate the protocol analyzer that generates this event; the corresponding script has not yet been ported to Bro 2.x. To still enable this event, one needs to register a port for it or add a DPD payload signature.
dce_rpc_message
Type: | event (c: connection , is_orig: bool , ptype: dce_rpc_ptype , msg: string ) |
---|
TODO.
See also: rpc_call
, rpc_dialogue
, rpc_reply
, dce_rpc_bind
, dce_rpc_request
, dce_rpc_response
, rpc_timeout
Todo
Bro’s current default configuration does not activate the protocol analyzer that generates this event; the corresponding script has not yet been ported to Bro 2.x. To still enable this event, one needs to register a port for it or add a DPD payload signature.
dce_rpc_request
Type: | event (c: connection , opnum: count , stub: string ) |
---|
TODO.
See also: rpc_call
, rpc_dialogue
, rpc_reply
, dce_rpc_bind
, dce_rpc_message
, dce_rpc_response
, rpc_timeout
Todo
Bro’s current default configuration does not activate the protocol analyzer that generates this event; the corresponding script has not yet been ported to Bro 2.x. To still enable this event, one needs to register a port for it or add a DPD payload signature.
dce_rpc_response
Type: | event (c: connection , opnum: count , stub: string ) |
---|
TODO.
See also: rpc_call
, rpc_dialogue
, rpc_reply
, dce_rpc_bind
, dce_rpc_message
, dce_rpc_request
, rpc_timeout
Todo
Bro’s current default configuration does not activate the protocol analyzer that generates this event; the corresponding script has not yet been ported to Bro 2.x. To still enable this event, one needs to register a port for it or add a DPD payload signature.
epm_map_response
Type: | event (c: connection , uuid: string , p: port , h: addr ) |
---|
TODO.
See also: rpc_call
, rpc_dialogue
, rpc_reply
, dce_rpc_bind
, dce_rpc_message
, dce_rpc_request
, dce_rpc_response
, rpc_timeout
Todo
Bro’s current default configuration does not activate the protocol analyzer that generates this event; the corresponding script has not yet been ported to Bro 2.x. To still enable this event, one needs to register a port for it or add a DPD payload signature.