Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-15 21:18:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

QUIC: Skip packets with fixed_bit 0

Browse source 
The RFC specifies that QUIC packets with unset fixed_bit need to be
discarded. Do so.

Fixes #4847
This commit is contained in:
Arne Welzel 2025-10-08 16:14:14 +02:00
parent 050035e33e
commit 14429cf297
7 changed files with 130 additions and 73 deletions
Download patch file Download diff file Expand all files Collapse all files

9
testing/btest/scripts/base/protocols/quic/39264-rand.zeek Normal file
View file

@ -0,0 +1,9 @@
# @TEST-DOC: Regression test for #4847, QUIC packets with fixed_bit 0 are discarded.
# @TEST-REQUIRES: ${SCRIPTS}/have-spicy
# @TEST-EXEC: zeek -r $TRACES/quic/quic-39264-rand.pcap base/protocols/quic
# @TEST-EXEC: test ! -f analyzer.log || cat analyzer.log >&2
# @TEST-EXEC: zeek-cut -m ts uid history service < conn.log > conn.log.cut
# @TEST-EXEC: btest-diff conn.log.cut
# @TEST-EXEC: btest-diff ssl.log
# @TEST-EXEC: btest-diff quic.log