Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-10 18:48:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Ensure TGS req does not stomp out AP data

Browse source
This commit is contained in:
John E. Rollinson 2017-01-29 09:39:40 +09:00
parent 832f6d34b4
commit 68e3f0d96a
1 changed files with 10 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

7
scripts/base/protocols/krb/main.bro
View file

@ -164,9 +164,16 @@ event krb_tgs_request(c: connection, msg: KDC_Request) &priority=5
return; return;
local info: Info; local info: Info;
if ( !c?$krb )
{
info$ts = network_time(); info$ts = network_time();
info$uid = c$uid; info$uid = c$uid;
info$id = c$id; info$id = c$id;
}
else
info = c$krb;
info$request_type = "TGS"; info$request_type = "TGS";
info$service = msg$service_name; info$service = msg$service_name;
if ( msg?$from ) info$from = msg$from; if ( msg?$from ) info$from = msg$from;