Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-13 03:58:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Fixing SMTP state tracking.

Browse source 
This fixes the case that an SMTP session has multiple mails sent from
the originator but we miss the server's response (e.g., because we
don't see server side packets at all).
This commit is contained in:
Robin Sommer 2014-06-10 16:47:26 -07:00
parent c289a2743b
commit 9301ef5a4f
6 changed files with 73 additions and 51 deletions
Download patch file Download diff file Expand all files Collapse all files

4
testing/btest/scripts/base/protocols/smtp/one-side.test Normal file
View file

@ -0,0 +1,4 @@
# @TEST-EXEC: bro -C -r $TRACES/smtp-one-side-only.trace %INPUT
# @TEST-EXEC: btest-diff smtp.log
@load base/protocols/smtp