Skip to content

Commit

Permalink
handle changes to ICSNPP parsers with source_ip/destination_ip fields i…
Browse files Browse the repository at this point in the history
  • Loading branch information
mmguero committed Aug 1, 2023
1 parent 4c1644a commit 067fa9a
Show file tree
Hide file tree
Showing 5 changed files with 55 additions and 54 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -368,7 +368,6 @@
"destination.ip",
"event.action",
"event.result",
"network.is_orig",
"zeek.cip.direction",
"zeek.cip.cip_sequence_count",
"zeek.cip.class_id",
Expand Down Expand Up @@ -457,7 +456,6 @@
"destination.ip",
"event.action",
"event.result",
"network.is_orig",
"zeek.enip.options",
"zeek.enip.sender_context",
"zeek.enip.session_handle",
Expand Down Expand Up @@ -500,7 +498,6 @@
"columns": [
"source.ip",
"destination.ip",
"network.is_orig",
"zeek.cip_io.connection_id",
"zeek.cip_io.sequence_number",
"zeek.cip_io.data_length",
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -435,7 +435,6 @@
"columns": [
"source.ip",
"destination.ip",
"network.is_orig",
"zeek.bacnet.bvlc_function",
"zeek.bacnet.pdu_type",
"zeek.bacnet.pdu_service",
Expand Down Expand Up @@ -478,7 +477,6 @@
"columns": [
"source.ip",
"destination.ip",
"network.is_orig",
"zeek.bacnet_property.pdu_service",
"zeek.bacnet_property.object_type",
"zeek.bacnet.instance_number",
Expand Down Expand Up @@ -522,7 +520,6 @@
"columns": [
"source.ip",
"destination.ip",
"network.is_orig",
"zeek.bacnet_discovery.pdu_service",
"zeek.bacnet_discovery.object_type",
"zeek.bacnet.instance_number",
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -359,7 +359,6 @@
"source.port",
"destination.ip",
"destination.port",
"network.is_orig",
"event.action",
"event.result",
"zeek.s7comm.pdu_reference",
Expand Down Expand Up @@ -400,7 +399,6 @@
"source.port",
"destination.ip",
"destination.port",
"network.is_orig",
"event.action",
"event.result",
"zeek.uid"
Expand Down
Loading

0 comments on commit 067fa9a

Please sign in to comment.