Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 06:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Remove connection_successful and successful_connection_remove events

Browse source 
Related to https://github.com/zeek/zeek/issues/1119
This commit is contained in:
Jon Siwek 2020-09-10 12:06:50 -07:00
parent 2738b157ea
commit 5f435c2644
43 changed files with 364 additions and 533 deletions
Download patch file Download diff file Expand all files Collapse all files

4
scripts/base/protocols/ftp/main.zeek
View file

@ -337,7 +337,7 @@ event connection_reused(c: connection) &priority=5
c$ftp_data_reuse = T;
}
event successful_connection_remove(c: connection) &priority=-5
event connection_state_remove(c: connection) &priority=-5
{
if ( c$ftp_data_reuse ) return;
if ( [c$id$resp_h, c$id$resp_p] in ftp_data_expected )
@ -350,7 +350,7 @@ event successful_connection_remove(c: connection) &priority=-5
}
# Use remove event to cover connections terminated by RST.
event successful_connection_remove(c: connection) &priority=-5
event connection_state_remove(c: connection) &priority=-5
{
if ( ! c?$ftp ) return;