Added to the likely_server_ports set for protocols with analyzers.

- Updated some tests since Bro is getting the direction
  correct now.

- Updated BPF filter test since I added a few ports to IRC
  as well.
This commit is contained in:
Seth Hall 2011-10-07 13:44:28 -04:00
parent 686946d0dd
commit 6d67f7830d
13 changed files with 40 additions and 9 deletions

View file

@ -115,6 +115,11 @@ redef capture_filters += {
["http"] = "tcp and port (80 or 81 or 631 or 1080 or 3138 or 8000 or 8080 or 8888)"
};
redef likely_server_ports += {
80/tcp, 81/tcp, 631/tcp, 1080/tcp, 3138/tcp,
8000/tcp, 8080/tcp, 8888/tcp,
};
function code_in_range(c: count, min: count, max: count) : bool
{
return c >= min && c <= max;