mirrors/midbro - Packet Capturing for Intrusion Detection Systems (GitHub mirror)

	Commit message (Collapse)	Author	Age
...
*	Add statistics after SIGINT	Robert Gustafsson	2017-10-18
\|
*	Rename midbropasad -> midbro in C impl..	Robert Gustafsson	2017-10-18
\| \| \| \|	* files in script/ are not changed
*	Add define to use policy drop first element	Robert Gustafsson	2017-10-18
\|
*	Add timestamps to measurements	Andreas Lindhé	2017-10-15
\|
*	Start by analyzing cpu idle load in script	Andreas Lindhé	2017-10-14
\|
*	Modify script to run remotely on pi	Andreas Lindhé	2017-10-14
\| \| \| \| \| \| \| \|	* Add separate interface argument in case the laptop ethernet interface has different name than than on the pi * Add command to run as sudo on pi over SSH. This assumes root has pasadpi_rsa in /root/.ssh/ *
*	Add parameter to modbus.bro for Pcap bufsize	Andreas Lindhé	2017-10-14
\|
*	script: measure-packets: Adapt for usage over SSH	Robin Krahl	2017-10-14
\|
*	Add script for packet drop measurements	Robin Krahl	2017-10-13
\|
*	Add debug mode	Robert Gustafsson	2017-10-12
\|
*	Make it possible to print less debug info	Andreas Lindhé	2017-10-12
\|
*	Include the modbus base script in bro-script	Andreas Lindhé	2017-10-12
\| \| \| \|	This makes it work in conjunction with the `-b` flag.
*	Ignore lib dir	Andreas Lindhé	2017-10-11
\|
*	Ignore .o files and .log	Andreas Lindhé	2017-10-11
\|
*	investigate.sh: Check that the dump file really exists	Robin Krahl	2017-10-11
\|
*	Add script to execute midbropasad & bro	Robin Krahl	2017-10-11
\|
*	investigate.sh: Fix the handling of relative dump paths	Robin Krahl	2017-10-11
\|
*	Add investigate script that extracts and plots data	Robin Krahl	2017-10-11
\|
*	Add a filtering option to the Modbus Bro script	Robin Krahl	2017-10-11
\|
*	Move files from bro-script directory	Andreas Lindhé	2017-10-11
\|
*	Add shared library	Robert Gustafsson	2017-10-10
\|
*	Ignore build files	Andreas Lindhé	2017-10-09
\|
*	Change: user responsible for memory allocation	Robert Gustafsson	2017-10-09
\| \| \| \|	* Add function to request only one sensor value.
*	broevent: Combine the pasad-parsed script with midbro	Robin Krahl	2017-10-09
\|
*	Add function to release sensor values	Robert Gustafsson	2017-10-09
\|
*	Fix synch issue with semaphores	Robert Gustafsson	2017-10-09
\|
*	Create output dirs when compiling	Robert Gustafsson	2017-10-09
\|
*	Some refactoring	Robert Gustafsson	2017-10-09
\|
*	Add some basic unit tests	Robert Gustafsson	2017-10-09
\|
*	Fix memory alloc issue in fifoqueue	Robert Gustafsson	2017-10-09
\|
*	Add blocking wait when buffer is empty	Robert Gustafsson	2017-10-09
\|
*	Add new thread for event handling	Robert Gustafsson	2017-10-09
\|
*	Add new main file	Robert Gustafsson	2017-10-09
\|
*	Move includes folder to broccoli	Robert Gustafsson	2017-10-09
\|
*	Some renaming	Robert Gustafsson	2017-10-09
\|
*	Add basic fifoqueue to buffer events	Robert Gustafsson	2017-10-09
\|
*	Add first test of broccoli	Robert Gustafsson	2017-10-09
\|
*	bro-script: pasad-parsed: Implement transaction handling	Robin Krahl	2017-10-03
\|
*	bro-script: pasad-simple: Add origin and response IP addresses to log	Robin Krahl	2017-09-26
\|
*	bro-script: Explain log file source in README	Robin Krahl	2017-09-25
\|
*	bro-script: Add more advanced implementation	Robin Krahl	2017-09-25
\| \| \| \| \| \| \|	Add a more advanced Bro script implementation that outputs the address and the register value, one line per address. This approach also suffers from the connection assumption described for pasad-simple and contains no sanity checks at all.
*	bro-script: pasad-simple: Change log name to pasad-simple	Robin Krahl	2017-09-25
\|
*	bro-script: pasad-simple: Fix typo	Robin Krahl	2017-09-25
\| \| \| \|	Write ‘address’ instead of ‘adress’.
*	bro-script: Add simple baseline implementation	Robin Krahl	2017-09-25
\| \| \| \| \| \| \| \| \| \| \| \| \| \|	This implementation only logs the (combined) request and response events that occur within the same connection. This assumes that a response is always send over the same connection as a request. It is unclear whether this assumption really holds. This implementation does not yet contain error handling, so if there was no response for a request, Bro displays an error message. It also does not contain an interpretation of the values, so if multiple values are read within one request, they are displayed in the same log entry.
*	Add directory for bro-script	Robin Krahl	2017-09-25
	Add a (nearly) empty directory for the baseline implementation of the payload extraction as a Bro script executed directly within Bro.