Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 14:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Merge branch 'master' of https://github.com/dopheide-esnet/zeek

Browse source 
* 'master' of https://github.com/dopheide-esnet/zeek:
  Sometimes user_agent is missing
This commit is contained in:
Jon Siwek 2021-03-24 16:58:50 -07:00
commit a31ad5d9da
3 changed files with 9 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

7
CHANGES
View file

@ -1,4 +1,11 @@
4.1.0-dev.404 | 2021-03-24 16:58:50 -0700
* Fix missing `user_agent` existence check in smtp/software.zeek (Michael Dopheide)
Without the check there can be extra reporter.log error noise, but
no actual difference in functionality.
4.1.0-dev.402 | 2021-03-24 15:49:52 -0700
* Add `bin_dir` setting for default zkg config file (Jon Siwek, Corelight)

2
VERSION
View file

@ -1 +1 @@
4.1.0-dev.402
4.1.0-dev.404

2
scripts/policy/protocols/smtp/software.zeek
View file

@ -48,7 +48,7 @@ export {
event mime_one_header(c: connection, h: mime_header_rec) &priority=4
{
if ( ! c?$smtp ) return;
if ( ! c?$smtp || ! c$smtp?$user_agent ) return;
if ( h$name == "USER-AGENT" && webmail_user_agents in c$smtp$user_agent )
c$smtp$is_webmail = T;
}