Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 06:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Add explicit TLS support for FTP

Browse source 
This is defined in RFC 4217; TLS initialized by the client sending an
`AUTH TLS` command.

Fixes GH-4463
This commit is contained in:
Johanna Amann 2025-05-27 13:45:23 +01:00
parent cef63e871e
commit 718307214e
9 changed files with 74 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

13
testing/btest/scripts/base/protocols/ftp/ftp-auth-tls.zeek Normal file
View file

@ -0,0 +1,13 @@
# This tests explicit TLS.
#
# @TEST-EXEC: zeek -r $TRACES/ftp/ftp-auth-tls.pcap %INPUT
# @TEST-EXEC: btest-diff conn.log
# @TEST-EXEC: btest-diff ftp.log
# @TEST-EXEC: btest-diff ssl.log
# @TEST-EXEC: btest-diff .stdout
redef FTP::logged_commands += { "<init>", "AUTH" };
event ftp_starttls(c: connection) {
print "starttls", c$id;
}