Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-05 16:18:19 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

add test for smb1_com_transaction2_request event changes

Browse source
This commit is contained in:
Jeffrey Bencteux 2018-01-18 15:20:47 +01:00
parent 314e992284
commit 4807b7d847
3 changed files with 13 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

12
testing/btest/scripts/base/protocols/smb/smb1-transaction2-request.test Normal file
View file

@ -0,0 +1,12 @@
#@TEST-EXEC: bro -b -C -r $TRACES/smb/smb1_transaction2_request.pcap %INPUT
#@TEST-EXEC: btest-diff .stdout
@load base/protocols/smb
@load policy/protocols/smb
# Check that smb1_transaction2 requests are parsed correctly
event smb1_transaction2_request(c: connection, hdr: SMB1::Header, args: SMB1::Trans2_Args, sub_cmd: count)
{
print fmt("smb1_transaction2_request hdr: %s, args: %s, sub_cmd: %x", hdr, args, sub_cmd);
}