diff --git a/scripts/policy/protocols/conn/known-services.zeek b/scripts/policy/protocols/conn/known-services.zeek index aa1ae58700..373995beae 100644 --- a/scripts/policy/protocols/conn/known-services.zeek +++ b/scripts/policy/protocols/conn/known-services.zeek @@ -212,10 +212,6 @@ function known_services_done(c: connection) if ( ! addr_matches_host(id$resp_h, service_tracking) ) return; - # don't log empty service - if ( |c$service| == 0 ) - return; - if ( |c$service| == 1 ) { if ( "ftp-data" in c$service )