You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
the zeek v6.1.0 release has some new modbus stuff:
The ModBus analyzer's function support was expanded, with new handling of the
Encapsulation Interface Transport (function 28) And Diagnostics (function 8)
functions. This adds new modbus_encap_interface_transport_{request,response}
and modbus_diagnostics_{request,response} events.
The ModBus file record read and write events now provide the full data from
the request and response messages as part of the event data.
The full PDU length was added to the ModBusHeader record type passed with
all of the ModBus events.
We ought to look at these changes and see if any of them could and/or should be reflected in the various modbus logs being generated by this plugin.
The text was updated successfully, but these errors were encountered:
Pull Request #10 addresses addition of new modbus_encap_interface_transport_{request,response}
and modbus_diagnostics_{request,response} events
Still need to look into Modbus file record read and write events to see if files can be parsed out similar to what was done in BACnet and S7Comm parsers
the zeek v6.1.0 release has some new modbus stuff:
We ought to look at these changes and see if any of them could and/or should be reflected in the various modbus logs being generated by this plugin.
The text was updated successfully, but these errors were encountered: