Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-11 02:58:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Merge remote-tracking branch 'origin/topic/jsiwek/gh-1164-fix-rst-conn-state'

Browse source 
* origin/topic/jsiwek/gh-1164-fix-rst-conn-state:
  GH-1164: Fix incorrect RSTOS0 conn_state determinations
This commit is contained in:
Tim Wojtulewicz 2020-09-17 13:39:46 -07:00
commit 6b93020c6f
13 changed files with 1375 additions and 1340 deletions
Download patch file Download diff file Expand all files Collapse all files

12
testing/btest/scripts/base/protocols/conn/conn_state-RST-behavior.zeek Normal file
View file

@ -0,0 +1,12 @@
# @TEST-EXEC: zeek -b -C -r $TRACES/tcp/single-rst.pcap %INPUT >out
# @TEST-EXEC: zeek -b -C -r $TRACES/tcp/syn-then-rst.pcap %INPUT >>out
# @TEST-EXEC: zeek -b -C -r $TRACES/tcp/syn-then-ack-then-rst.pcap %INPUT >>out
# @TEST-EXEC: zeek -b -C -r $TRACES/tcp/syn-then-stuff-then-rst.pcap %INPUT >>out
# @TEST-EXEC: btest-diff out
@load base/protocols/conn
event connection_state_remove(c: connection)
{
print c$history, c$conn$conn_state;
}