Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 06:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Update public and private test suite for DPD changes.

Browse source 
The changes are mostly quite minor. The main change reasons are:

* analyzers that were confirmed, and later removed now show up in the
  conn.log.
* a couple of removed lines in analyzer.log, because non-confirmed
  analyzers get removed more quickly.
* in some cases there are additional lines in analyzer.log. These are
  cases in which an analyzer gets removed due to a violation and then
  re-attached because of a later signature match, which replays the
  violating content. In all examples that I have so far, this is caused
  by both sides of a connection speaking a differing protocol. There
  probably should be a better way to handle this - but it works.
* new column for failed analyzers in conn.log
This commit is contained in:
Johanna Amann 2025-01-29 14:07:38 +00:00
parent 2f712c3c24
commit 20ace6209f
3 changed files with 3 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
testing/external/commit-hash.zeek-testing vendored
View file

@ -1 +1 @@
5e5b54025ed7c3c2a9a23dadbb5b35fde15501e0
6a1cb339d394fe8d73c0f46e79bd13fbee507313