mirror of
https://github.com/zeek/zeek.git
synced 2025-10-10 18:48:20 +00:00
Merge remote-tracking branch 'origin/fastpath'
* origin/fastpath: Add some extra TLS extension values. Fix problem with extracting FTP passwords.
This commit is contained in:
commit
0ae38ce2b8
4 changed files with 18 additions and 3 deletions
9
CHANGES
9
CHANGES
|
@ -1,4 +1,13 @@
|
|||
|
||||
2.0-306 | 2012-04-24 14:37:00 -0700
|
||||
|
||||
* Add further TLS extension values "extended_random" and
|
||||
"heartbeat". (Seth Hall)
|
||||
|
||||
* Fix problem with extracting FTP passwords and add "ftpuser" as
|
||||
another anonymous username. (Seth Hall, discovered by Patrik
|
||||
Lundin).
|
||||
|
||||
2.0-303 | 2012-04-19 10:01:06 -0700
|
||||
|
||||
* Changes related to ICMPv6 Neighbor Discovery messages. (Jon Siwek)
|
||||
|
|
2
VERSION
2
VERSION
|
@ -1 +1 @@
|
|||
2.0-303
|
||||
2.0-306
|
||||
|
|
|
@ -22,7 +22,7 @@ export {
|
|||
const default_capture_password = F &redef;
|
||||
|
||||
## User IDs that can be considered "anonymous".
|
||||
const guest_ids = { "anonymous", "ftp", "guest" } &redef;
|
||||
const guest_ids = { "anonymous", "ftp", "ftpuser", "guest" } &redef;
|
||||
|
||||
type Info: record {
|
||||
## Time when the command was sent.
|
||||
|
@ -160,8 +160,12 @@ function ftp_message(s: Info)
|
|||
# or it's a deliberately logged command.
|
||||
if ( |s$tags| > 0 || (s?$cmdarg && s$cmdarg$cmd in logged_commands) )
|
||||
{
|
||||
if ( s?$password && to_lower(s$user) !in guest_ids )
|
||||
if ( s?$password &&
|
||||
! s$capture_password &&
|
||||
to_lower(s$user) !in guest_ids )
|
||||
{
|
||||
s$password = "<hidden>";
|
||||
}
|
||||
|
||||
local arg = s$cmdarg$arg;
|
||||
if ( s$cmdarg$cmd in file_cmds )
|
||||
|
|
|
@ -77,7 +77,9 @@ export {
|
|||
[12] = "srp",
|
||||
[13] = "signature_algorithms",
|
||||
[14] = "use_srtp",
|
||||
[15] = "heartbeat",
|
||||
[35] = "SessionTicket TLS",
|
||||
[40] = "extended_random",
|
||||
[13172] = "next_protocol_negotiation",
|
||||
[65281] = "renegotiation_info"
|
||||
} &default=function(i: count):string { return fmt("unknown-%d", i); };
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue