base/protocols/socks/main.bro

SOCKS
Namespace:SOCKS
Imports:base/frameworks/tunnels, base/protocols/socks/consts.bro
Source File:/scripts/base/protocols/socks/main.bro

Summary

Types

SOCKS::Info: record  

Events

SOCKS::log_socks: event Event that can be handled to access the SOCKS record as it is sent on to the logging framework.

Detailed Interface

Types

SOCKS::Info
Type:

record

ts: time &log

Time when the proxy connection was first detected.

uid: string &log

Unique ID for the tunnel - may correspond to connection uid or be non-existent.

id: conn_id &log

The connection’s 4-tuple of endpoint addresses/ports.

version: count &log

Protocol version of SOCKS.

user: string &log &optional

Username for the proxy if extracted from the network.

status: string &log &optional

Server status for the attempt at using the proxy.

request: SOCKS::Address &log &optional

Client requested SOCKS address. Could be an address, a name or both.

request_p: port &log &optional

Client requested port.

bound: SOCKS::Address &log &optional

Server bound address. Could be an address, a name or both.

bound_p: port &log &optional

Server bound port.

Events

SOCKS::log_socks
Type:event (rec: SOCKS::Info)

Event that can be handled to access the SOCKS record as it is sent on to the logging framework.


Copyright 2013, The Bro Project. Last updated on June 15, 2015. Created using Sphinx 1.2.2.