csirtgadgets / massive-octo-spice

DEPRECATED - USE v3 (bearded-avenger)
https://github.com/csirtgadgets/bearded-avenger-deploymentkit/wiki
GNU Lesser General Public License v3.0
227 stars 62 forks source link

added sipquery.txt #448

Closed jtkristoff closed 7 years ago

jtkristoff commented 7 years ago

Technically OPTIONS queries can arrive over either UDP or TCP, but practically I only ever see them over UDP. I could create an additional field in the feed that will say what the L4 protocol field is if that would be better and more helpful. Otherwise this might be fine for now?

wesyoung commented 7 years ago

wfm, only one way to find out! 👍