main.bro¶

Base Modbus analysis script.

Namespace:	Modbus
Imports:	base/protocols/modbus/consts.bro
Source File:	`/scripts/base/protocols/modbus/main.bro`

Summary¶

Modbus::Info: record

`Log::ID`: `enum`
`connection`: `record`
`likely_server_ports`: `set` `&redef`

Modbus::log_modbus: event Event that can be handled to access the Modbus record as it is sent on to the logging framework.

Modbus::Info¶

Type:

Type:	`record` ts: `time` `&log` Time of the request. uid: `string` `&log` Unique identifier for the connection. id: `conn_id` `&log` Identifier for the connection. func: `string` `&log` `&optional` The name of the function message that was sent. exception: `string` `&log` `&optional` The exception if the response was a failure. track_address: `count` `&default` = `0` `&optional` (present if policy/protocols/modbus/track-memmap.bro is loaded)

ts: time &log: Time of the request.
uid: string &log: Unique identifier for the connection.
id: conn_id &log: Identifier for the connection.
func: string &log &optional: The name of the function message that was sent.
exception: string &log &optional: The exception if the response was a failure.
track_address: count &default = 0 &optional: (present if policy/protocols/modbus/track-memmap.bro is loaded)

Modbus::log_modbus¶

Type:	`event` (rec: `Modbus::Info`)

Event that can be handled to access the Modbus record as it is sent on to the logging framework.