Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-14 12:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

removed check on kerberos request or response type. allow the kerberos analyzer to handle what it can, gssapi shouldn't check this

Browse source
This commit is contained in:
Justin Oursler 2017-10-11 14:18:58 -04:00
parent 57bfbc02b1
commit 3d2ec29d04
1 changed files with 2 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

6
src/analyzer/protocol/gssapi/gssapi-analyzer.pac
View file

@ -74,10 +74,8 @@ refine connection GSSAPI_Conn += {
if ( ! krb5 ) if ( ! krb5 )
krb5 = analyzer_mgr->InstantiateAnalyzer("KRB", bro_analyzer()->Conn()); krb5 = analyzer_mgr->InstantiateAnalyzer("KRB", bro_analyzer()->Conn());
if ( krb5 && ( if ( krb5 ) // accepting all KRB types (REQ, REP, etc)
memcmp("\x01\x00", p, 2) == 0 || // KRB5 AP REQ
memcmp("\x02\x00", p, 2) == 0 ) // KRB5 AP REP
)
{ {
krb5->DeliverPacket(len_to_send-2, krb5->DeliverPacket(len_to_send-2,
p+2, p+2,