Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-13 12:08:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Merge remote-tracking branch 'origin/topic/awelzel/3453-dnssec-ed448-ed25519'

Browse source 
* origin/topic/awelzel/3453-dnssec-ed448-ed25519:
  DNS: Add Ed25519 and Ed448 enum values to parser

(cherry picked from commit a5a79d3f3a)
This commit is contained in:
Arne Welzel 2023-11-21 10:07:51 +01:00 • committed by Tim Wojtulewicz
parent 2b5ac7ce19
commit a2af53cbf9
7 changed files with 52 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

24
testing/btest/scripts/base/protocols/dns/dnssec.zeek Normal file
View file

@ -0,0 +1,24 @@
# @TEST-DOC: Add the textual representation of the DNSSEC algorithm into answers and verify there's no weirds for the ed25519 and ed448 curves.
#
# @TEST-EXEC: zeek -b -r $TRACES/dnssec/ed25519.no.pcap %INPUT
# @TEST-EXEC: test ! -f weird.log
# @TEST-EXEC: zeek-cut -m id.orig_h id.resp_h qtype_name query answers < dns.log > dns.ed25519.log
#
# @TEST-EXEC: zeek -b -C -r $TRACES/dnssec/ed448.no.pcap %INPUT
# @TEST-EXEC: test ! -f weird.log
# @TEST-EXEC: zeek-cut -m id.orig_h id.resp_h questions answers < dns.log > dns.ed448.log
#
# @TEST-EXEC: btest-diff dns.ed25519.log
# @TEST-EXEC: btest-diff dns.ed448.log
@load base/protocols/dns
event dns_RRSIG(c: connection, msg: dns_msg, ans: dns_answer, rrsig: dns_rrsig_rr) &priority=4
{
c$dns$answers += DNS::algorithms[rrsig$algorithm];
}
event dns_DNSKEY(c: connection, msg: dns_msg, ans: dns_answer, dnskey: dns_dnskey_rr) &priority=4
{
c$dns$answers += DNS::algorithms[dnskey$algorithm];
}