Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-10 02:28:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Merge remote-tracking branch 'origin/topic/johanna/gh-1829-test'

Browse source 
* origin/topic/johanna/gh-1829-test:
  Add testcase for TCP segment offloading.
This commit is contained in:
Johanna Amann 2021-11-23 15:35:06 +00:00
commit 3fe6ad1a82
5 changed files with 32 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

4
CHANGES
View file

@ -1,3 +1,7 @@
4.2.0-dev.350 | 2021-11-23 15:35:06 +0000
* Add testcase for TCP segment offloading (GH-1829). (Johanna Amann, Corelight)
4.2.0-dev.348 | 2021-11-23 13:45:39 +0000
* OpenSSL 3 compatibility (Johanna Amann, Corelight)

2
VERSION
View file

@ -1 +1 @@
4.2.0-dev.348
4.2.0-dev.350

21
testing/btest/Baseline/scripts.base.protocols.tcp.krb-tcp-tso/kerberos.log Normal file
View file

@ -0,0 +1,21 @@
### BTest baseline data generated by btest-diff. Do not edit. Use "btest -U/-u" to update. Requires BTest >= 0.63.
#separator \x09
#set_separator ,
#empty_field (empty)
#unset_field -
#path kerberos
#open XXXX-XX-XX-XX-XX-XX
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p request_type client service success error_msg from till cipher forwardable renewable client_cert_subject client_cert_fuid server_cert_subject server_cert_fuid
#types time string addr port addr port string string string bool string time time string bool bool string string string string
XXXXXXXXXX.XXXXXX ClEkJM2Vm5giqnMf4h 172.16.0.211 49812 172.16.0.100 88 AS administrator/TEST.LOCAL krbtgt/TEST.LOCAL F KDC_ERR_PREAUTH_REQUIRED - XXXXXXXXXX.XXXXXX - T T - - - -
XXXXXXXXXX.XXXXXX C4J4Th3PJpwUYZZ6gc 172.16.0.211 49813 172.16.0.100 88 AS administrator/TEST.LOCAL krbtgt/TEST.LOCAL T - - XXXXXXXXXX.XXXXXX aes256-cts-hmac-sha1-96 T T - - - -
XXXXXXXXXX.XXXXXX CtPZjS20MLrsMUOJi2 172.16.0.211 49814 172.16.0.100 88 TGS Administrator/TEST.LOCAL cifs/win7.test.local T - - XXXXXXXXXX.XXXXXX aes256-cts-hmac-sha1-96 T T - - - -
XXXXXXXXXX.XXXXXX CHhAvVGS1DHFjwGM9 172.16.0.211 49811 172.16.0.5 445 - - - - - - - - - - - - - -
XXXXXXXXXX.XXXXXX CUM0KZ3MLUfNB0cl11 172.16.0.211 49815 172.16.0.100 445 - - - - - - - - - - - - - -
XXXXXXXXXX.XXXXXX CP5puj4I8PtEU4qzYg 172.16.0.211 49822 172.16.0.100 88 TGS DESKTOP-RBDMVVA$/TEST.LOCAL cifs/WIN-R5NF6DMLDVH T - - XXXXXXXXXX.XXXXXX aes256-cts-hmac-sha1-96 T T - - - -
XXXXXXXXXX.XXXXXX CmES5u32sYpV7JYN 172.16.0.211 49821 172.16.0.100 445 - - - - - - - - - - - - - -
XXXXXXXXXX.XXXXXX C3eiCBGOLw3VtHfOj 172.16.0.211 49828 172.16.0.100 88 AS administrator/TEST.LOCAL krbtgt/TEST.LOCAL F KDC_ERR_PREAUTH_REQUIRED - XXXXXXXXXX.XXXXXX - T T - - - -
XXXXXXXXXX.XXXXXX CwjjYJ2WqgTbAqiHl6 172.16.0.211 49829 172.16.0.100 88 AS administrator/TEST.LOCAL krbtgt/TEST.LOCAL T - - XXXXXXXXXX.XXXXXX aes256-cts-hmac-sha1-96 T T - - - -
XXXXXXXXXX.XXXXXX C0LAHyvtKSQHyJxIl 172.16.0.211 49830 172.16.0.100 88 TGS Administrator/TEST.LOCAL cifs/win7.test.local T - - XXXXXXXXXX.XXXXXX aes256-cts-hmac-sha1-96 T T - - - -
XXXXXXXXXX.XXXXXX C37jN32gN3y3AZzyf6 172.16.0.211 49827 172.16.0.5 445 - - - - - - - - - - - - - -
#close XXXX-XX-XX-XX-XX-XX

BIN
testing/btest/Traces/krb/kerberos_tso.pcap Normal file
View file

Binary file not shown.

6
testing/btest/scripts/base/protocols/tcp/krb-tcp-tso.test Normal file
View file

@ -0,0 +1,6 @@
# This test checks that packets get forwarded to a protocol analyzer,
# even when TCP segment offloading is enabled, and the IP length field is
# not correctly filled out. This requires -C to be passed.
#
# @TEST-EXEC: zeek -C -r $TRACES/krb/kerberos_tso.pcap
# @TEST-EXEC: btest-diff kerberos.log