Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-16 05:28:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Add speculative service script.

Browse source 
The speculative service script handles dpd_late_match events to extend
conn.log with infos about potential protocol identifications.
This commit is contained in:
Jan Grashoefer 2019-08-29 11:47:04 +02:00
parent 5901b6d33c
commit 788b56a652
4 changed files with 51 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

6
testing/btest/scripts/policy/protocols/conn/speculative-service.zeek Normal file
View file

@ -0,0 +1,6 @@
# A basic test of the speculative service detection
# @TEST-EXEC: zeek -C -r $TRACES/http/http-post-large.pcap %INPUT
# @TEST-EXEC: btest-diff conn.log
@load protocols/conn/speculative-service