Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-07 09:08:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Slightly earlier protocol confirmation for pop3.

Browse source 
This allows, e.g. pop3 sessions that are upgraded via STLS to be
properly marked as such.
This commit is contained in:
Johanna Amann 2015-07-23 16:53:01 -07:00
parent 0d60da7ae6
commit 5ffe76f336
3 changed files with 15 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
testing/btest/scripts/base/protocols/pop3/starttls.bro
View file

@ -1,8 +1,10 @@
# @TEST-EXEC: bro -C -b -r $TRACES/tls/pop3-starttls.pcap %INPUT
# @TEST-EXEC: btest-diff conn.log
# @TEST-EXEC: btest-diff ssl.log
# @TEST-EXEC: btest-diff x509.log
@load base/protocols/conn
@load base/frameworks/dpd
@load base/protocols/ssl
module POP3;