├── LICENSE ├── README.md ├── analyzers └── rip │ ├── RIP_v1.pcap │ ├── analyzer │ ├── CMakeLists.txt │ ├── Plugin.cc │ ├── RIP.cc │ ├── RIP.h │ ├── events.bif │ ├── rip-analyzer.pac │ ├── rip-protocol.pac │ └── rip.pac │ └── scripts │ ├── __load__.bro │ ├── consts.bro │ ├── dpd.sig │ └── main.bro ├── capinfos.bro ├── cif.bro ├── dns-audit.bro ├── ipmi.bro ├── ntp-audit.bro ├── rsyslog-invalid-pri.bro ├── rsyslog-invalid-pri.pcap ├── syslog-outbound.bro └── tests ├── cif.txt └── cif2.txt /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jonschipp/bro-scripts/HEAD/LICENSE -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jonschipp/bro-scripts/HEAD/README.md -------------------------------------------------------------------------------- /analyzers/rip/RIP_v1.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jonschipp/bro-scripts/HEAD/analyzers/rip/RIP_v1.pcap -------------------------------------------------------------------------------- /analyzers/rip/analyzer/CMakeLists.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jonschipp/bro-scripts/HEAD/analyzers/rip/analyzer/CMakeLists.txt -------------------------------------------------------------------------------- /analyzers/rip/analyzer/Plugin.cc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jonschipp/bro-scripts/HEAD/analyzers/rip/analyzer/Plugin.cc -------------------------------------------------------------------------------- /analyzers/rip/analyzer/RIP.cc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jonschipp/bro-scripts/HEAD/analyzers/rip/analyzer/RIP.cc -------------------------------------------------------------------------------- /analyzers/rip/analyzer/RIP.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jonschipp/bro-scripts/HEAD/analyzers/rip/analyzer/RIP.h -------------------------------------------------------------------------------- /analyzers/rip/analyzer/events.bif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jonschipp/bro-scripts/HEAD/analyzers/rip/analyzer/events.bif -------------------------------------------------------------------------------- /analyzers/rip/analyzer/rip-analyzer.pac: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jonschipp/bro-scripts/HEAD/analyzers/rip/analyzer/rip-analyzer.pac -------------------------------------------------------------------------------- /analyzers/rip/analyzer/rip-protocol.pac: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jonschipp/bro-scripts/HEAD/analyzers/rip/analyzer/rip-protocol.pac -------------------------------------------------------------------------------- /analyzers/rip/analyzer/rip.pac: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jonschipp/bro-scripts/HEAD/analyzers/rip/analyzer/rip.pac -------------------------------------------------------------------------------- /analyzers/rip/scripts/__load__.bro: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jonschipp/bro-scripts/HEAD/analyzers/rip/scripts/__load__.bro -------------------------------------------------------------------------------- /analyzers/rip/scripts/consts.bro: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jonschipp/bro-scripts/HEAD/analyzers/rip/scripts/consts.bro -------------------------------------------------------------------------------- /analyzers/rip/scripts/dpd.sig: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jonschipp/bro-scripts/HEAD/analyzers/rip/scripts/dpd.sig -------------------------------------------------------------------------------- /analyzers/rip/scripts/main.bro: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jonschipp/bro-scripts/HEAD/analyzers/rip/scripts/main.bro -------------------------------------------------------------------------------- /capinfos.bro: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jonschipp/bro-scripts/HEAD/capinfos.bro -------------------------------------------------------------------------------- /cif.bro: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jonschipp/bro-scripts/HEAD/cif.bro -------------------------------------------------------------------------------- /dns-audit.bro: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jonschipp/bro-scripts/HEAD/dns-audit.bro -------------------------------------------------------------------------------- /ipmi.bro: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jonschipp/bro-scripts/HEAD/ipmi.bro -------------------------------------------------------------------------------- /ntp-audit.bro: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jonschipp/bro-scripts/HEAD/ntp-audit.bro -------------------------------------------------------------------------------- /rsyslog-invalid-pri.bro: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jonschipp/bro-scripts/HEAD/rsyslog-invalid-pri.bro -------------------------------------------------------------------------------- /rsyslog-invalid-pri.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jonschipp/bro-scripts/HEAD/rsyslog-invalid-pri.pcap -------------------------------------------------------------------------------- /syslog-outbound.bro: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jonschipp/bro-scripts/HEAD/syslog-outbound.bro -------------------------------------------------------------------------------- /tests/cif.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jonschipp/bro-scripts/HEAD/tests/cif.txt -------------------------------------------------------------------------------- /tests/cif2.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jonschipp/bro-scripts/HEAD/tests/cif2.txt --------------------------------------------------------------------------------