Skip to content

Zeek network security monitor plugin that enables parsing of the S7 protocol

License

Notifications You must be signed in to change notification settings

TelefonicaTC2Tech/zeek-plugin-s7comm

 
 

Repository files navigation

Zeek Plugin S7comm

When running as part of your Zeek installation this plugin will produce two log files containing metadata extracted from any ISO COTP and Siemens S7 traffic observed on TCP port 102. S7 uses COTP as transport.

Installation and Usage

zeek-plugin-s7comm is distributed as a Zeek package and is compatible with the zkg command line tool.

Sharing and Contributing

This code is made available under the BSD-3-Clause license. Guidelines for contributing are available as well as a pull request template. A Dockerfile has been included in the repository to assist with setting up an environment for testing any changes to the plugin.

Acknowledgements

About

Zeek network security monitor plugin that enables parsing of the S7 protocol

Resources

License

Code of conduct

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • Zeek 62.2%
  • JavaScript 28.3%
  • C++ 4.9%
  • Dockerfile 2.4%
  • Makefile 1.1%
  • Shell 0.6%
  • CMake 0.5%