Namespace: | GLOBAL |
---|---|
Source File: | /scripts/base/bif/plugins/Bro_DCE_RPC.events.bif.bro |
dce_rpc_bind: event | TODO. |
dce_rpc_message: event | TODO. |
dce_rpc_request: event | TODO. |
dce_rpc_response: event | TODO. |
epm_map_response: event | TODO. |
Type: | event (c: connection, uuid: string) |
---|
TODO.
See also: rpc_call, rpc_dialogue, rpc_reply, dce_rpc_message, dce_rpc_request, dce_rpc_response, rpc_timeout
Todo
Bro’s current default configuration does not activate the protocol analyzer that generates this event; the corresponding script has not yet been ported to Bro 2.x. To still enable this event, one needs to register a port for it or add a DPD payload signature.
Type: | event (c: connection, is_orig: bool, ptype: dce_rpc_ptype, msg: string) |
---|
TODO.
See also: rpc_call, rpc_dialogue, rpc_reply, dce_rpc_bind, dce_rpc_request, dce_rpc_response, rpc_timeout
Todo
Bro’s current default configuration does not activate the protocol analyzer that generates this event; the corresponding script has not yet been ported to Bro 2.x. To still enable this event, one needs to register a port for it or add a DPD payload signature.
Type: | event (c: connection, opnum: count, stub: string) |
---|
TODO.
See also: rpc_call, rpc_dialogue, rpc_reply, dce_rpc_bind, dce_rpc_message, dce_rpc_response, rpc_timeout
Todo
Bro’s current default configuration does not activate the protocol analyzer that generates this event; the corresponding script has not yet been ported to Bro 2.x. To still enable this event, one needs to register a port for it or add a DPD payload signature.
Type: | event (c: connection, opnum: count, stub: string) |
---|
TODO.
See also: rpc_call, rpc_dialogue, rpc_reply, dce_rpc_bind, dce_rpc_message, dce_rpc_request, rpc_timeout
Todo
Bro’s current default configuration does not activate the protocol analyzer that generates this event; the corresponding script has not yet been ported to Bro 2.x. To still enable this event, one needs to register a port for it or add a DPD payload signature.
Type: | event (c: connection, uuid: string, p: port, h: addr) |
---|
TODO.
See also: rpc_call, rpc_dialogue, rpc_reply, dce_rpc_bind, dce_rpc_message, dce_rpc_request, dce_rpc_response, rpc_timeout
Todo
Bro’s current default configuration does not activate the protocol analyzer that generates this event; the corresponding script has not yet been ported to Bro 2.x. To still enable this event, one needs to register a port for it or add a DPD payload signature.