Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 06:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

RDP: cookie is optional

Browse source 
Fixes GH-4237
This commit is contained in:
Johanna Amann 2025-02-20 09:36:18 +01:00
parent 27bfd5b4a8
commit 72ea7fc06c
8 changed files with 60 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

12
testing/btest/scripts/base/protocols/rdp/rdp-no-cookie-msthash.zeek Normal file
View file

@ -0,0 +1,12 @@
# Test a trace that does not have a cookie field.
# @TEST-EXEC: zeek -b -r $TRACES/rdp/rdp-no-cookie-mstshash.pcap %INPUT
# @TEST-EXEC: btest-diff rdp.log
# @TEST-EXEC: btest-diff ssl.log
# @TEST-EXEC: test ! -f analyzer.log
# @TEST-EXEC: test ! -f dpd.log
@load base/protocols/rdp
@load base/protocols/ssl
redef SSL::log_include_server_certificate_subject_issuer=T;