Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-17 14:08:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Add conn.log entries for connections with unhandled IP protocols

Browse source
This commit is contained in:
Tim Wojtulewicz 2024-09-10 15:13:11 +02:00
parent a96515a2e8
commit 35ec9733c0
422 changed files with 97715 additions and 97282 deletions
Download patch file Download diff file Expand all files Collapse all files

10
testing/btest/Baseline/scripts.base.frameworks.file-analysis.http.pipeline/out
View file

@ -4,7 +4,7 @@ file #0, 0, 0
FILE_OVER_NEW_CONNECTION
FILE_STATE_REMOVE
file #0, 2675, 0
[orig_h=192.168.1.104, orig_p=1673/tcp, resp_h=63.245.209.11, resp_p=80/tcp]
[orig_h=192.168.1.104, orig_p=1673/tcp, resp_h=63.245.209.11, resp_p=80/tcp, proto=6]
FILE_BOF_BUFFER
/*\x0a********
MIME_TYPE
@ -18,7 +18,7 @@ file #1, 0, 0
FILE_OVER_NEW_CONNECTION
FILE_STATE_REMOVE
file #1, 21421, 0
[orig_h=192.168.1.104, orig_p=1673/tcp, resp_h=63.245.209.11, resp_p=80/tcp]
[orig_h=192.168.1.104, orig_p=1673/tcp, resp_h=63.245.209.11, resp_p=80/tcp, proto=6]
FILE_BOF_BUFFER
//-- Google
MIME_TYPE
@ -32,7 +32,7 @@ file #2, 0, 0
FILE_OVER_NEW_CONNECTION
FILE_STATE_REMOVE
file #2, 94, 0
[orig_h=192.168.1.104, orig_p=1673/tcp, resp_h=63.245.209.11, resp_p=80/tcp]
[orig_h=192.168.1.104, orig_p=1673/tcp, resp_h=63.245.209.11, resp_p=80/tcp, proto=6]
FILE_BOF_BUFFER
GIF89a\x04\x00\x04\x00\xb3
MIME_TYPE
@ -47,7 +47,7 @@ file #3, 0, 0
FILE_OVER_NEW_CONNECTION
FILE_STATE_REMOVE
file #3, 2349, 0
[orig_h=192.168.1.104, orig_p=1673/tcp, resp_h=63.245.209.11, resp_p=80/tcp]
[orig_h=192.168.1.104, orig_p=1673/tcp, resp_h=63.245.209.11, resp_p=80/tcp, proto=6]
FILE_BOF_BUFFER
\x89PNG\x0d\x0a\x1a\x0a\x00\x00\x00
MIME_TYPE
@ -62,7 +62,7 @@ file #4, 0, 0
FILE_OVER_NEW_CONNECTION
FILE_STATE_REMOVE
file #4, 27579, 0
[orig_h=192.168.1.104, orig_p=1673/tcp, resp_h=63.245.209.11, resp_p=80/tcp]
[orig_h=192.168.1.104, orig_p=1673/tcp, resp_h=63.245.209.11, resp_p=80/tcp, proto=6]
FILE_BOF_BUFFER
\x89PNG\x0d\x0a\x1a\x0a\x00\x00\x00
MIME_TYPE