Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-15 13:08:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Make enc_part value from kerberos response available to scripts

Browse source
This commit is contained in:
Philipp Tekeser-Glasz 2025-01-31 12:58:14 +00:00
parent fdf887ce3b
commit 135e2f9c67
6 changed files with 142 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

12
testing/btest/scripts/base/protocols/krb/enc_part.test Normal file
View file

@ -0,0 +1,12 @@
# This test prints the enc_part value from the KRB::KDC_Response
# @TEST-EXEC: zeek -b -r $TRACES/krb/kinit.trace %INPUT > output
# @TEST-EXEC: btest-diff output
@load base/protocols/krb
event krb_as_response(c: connection, rep: KRB::KDC_Response)
{
print "as_response", c$uid;
print rep$enc_part;
}