Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 14:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

KRB: fix field value missing error for msg$client_name.

Browse source 
Reported by giesiger on IRC.
This commit is contained in:
Johanna Amann 2016-08-15 16:05:10 -07:00
parent bfdce4d419
commit a467f593de
1 changed files with 5 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

10
scripts/base/protocols/krb/main.bro
View file

@ -144,7 +144,7 @@ event krb_as_request(c: connection, msg: KDC_Request) &priority=5
info = c$krb; info = c$krb;
info$request_type = "AS"; info$request_type = "AS";
info$client = fmt("%s/%s", msg$client_name, msg$service_realm); info$client = fmt("%s/%s", msg?$client_name ? msg$client_name : "", msg$service_realm);
info$service = msg$service_name; info$service = msg$service_name;
if ( msg?$from ) if ( msg?$from )
@ -195,8 +195,8 @@ event krb_as_response(c: connection, msg: KDC_Response) &priority=5
info$id = c$id; info$id = c$id;
} }
if ( ! info?$client ) if ( ! info?$client && ( msg?$client_name || msg?$client_realm ) )
info$client = fmt("%s/%s", msg$client_name, msg$client_realm); info$client = fmt("%s/%s", msg?$client_name ? msg$client_name : "", msg?$client_realm ? msg$client_realm : "");
info$service = msg$ticket$service_name; info$service = msg$ticket$service_name;
info$cipher = cipher_name[msg$ticket$cipher]; info$cipher = cipher_name[msg$ticket$cipher];
@ -228,8 +228,8 @@ event krb_tgs_response(c: connection, msg: KDC_Response) &priority=5
info$id = c$id; info$id = c$id;
} }
if ( ! info?$client ) if ( ! info?$client && ( msg?$client_name || msg?$client_realm ) )
info$client = fmt("%s/%s", msg$client_name, msg$client_realm); info$client = fmt("%s/%s", msg?$client_name ? msg$client_name : "", msg?$client_realm ? msg$client_realm : "");
info$service = msg$ticket$service_name; info$service = msg$ticket$service_name;
info$cipher = cipher_name[msg$ticket$cipher]; info$cipher = cipher_name[msg$ticket$cipher];