Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-10 10:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Tighten local-nets filtering in the logging framework's path-func-column-demote test

Browse source 
With private addresses treated as local ones, this picked up some private-range
flows in the test pcap involved.
This commit is contained in:
Christian Kreibich 2023-02-10 15:44:43 -08:00
parent d387da9f71
commit 4281d704c1
1 changed files with 3 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
testing/btest/scripts/base/frameworks/logging/path-func-column-demote.zeek
View file

@ -9,6 +9,9 @@
@load base/protocols/conn
@load base/frameworks/notice
# Don't automatically treat private address space as local here so we filter
# precisely on a single local prefix:
redef Site::private_address_space_is_local = F;
redef Site::local_nets = {141.142.0.0/16};
function split_log(id: Log::ID, path: string, rec: record {id:conn_id;}): string