cisagov / icsnpp-bacnet

Zeek BACnet Parser - CISA ICSNPP
BSD 3-Clause "New" or "Revised" License
15 stars 11 forks source link

NPDU Message Type #40

Open kkvarfordt opened 3 months ago

kkvarfordt commented 3 months ago

💡 Summary

Fully implement parsing/logging of the NPDU Message Type

Motivation and context

At present, the parser processes and logs just the message type (Who-Is-Router-To-Networkm I-Am_Router-To_Network, etc), but lacks logging of the accompanying details of each message type. See section 6.2 Network Layer PDU Structure of the BACnet specification for additional information.

This update would provide more complete coverage of the protocol as well as additional insight into the network traffic.