From 501bf167c34393eda67848e06da7f5cafc6598f2 Mon Sep 17 00:00:00 2001
From: Vern Paxson <vern@corelight.com>
Date: Wed, 10 Jan 2024 18:44:36 -0800
Subject: [PATCH] fix for logic bug in ldap base script

---
 scripts/base/protocols/ldap/main.zeek | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/scripts/base/protocols/ldap/main.zeek b/scripts/base/protocols/ldap/main.zeek
index 417d6afad0..93c301a65a 100644
--- a/scripts/base/protocols/ldap/main.zeek
+++ b/scripts/base/protocols/ldap/main.zeek
@@ -203,7 +203,7 @@ event LDAP::message(c: connection,
     }
 
     if ( diagnostic_message != "" ) {
-      if ( ! sm?$diagnostic_message && sm$diagnostic_message != diagnostic_message ) {
+      if ( sm?$diagnostic_message && sm$diagnostic_message != diagnostic_message ) {
         Reporter::conn_weird("LDAP_search_diagnostic_message_change", c,
                              fmt("%s: %s -> %s", message_id, sm$diagnostic_message, diagnostic_message), "LDAP");
       }