Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-07 00:58:19 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Merge branch 'pr/3946'

Browse source 
* pr/3946:
  Honor no plaintext password logging for PASS cmd

Closes #3946 - squashed commits into a single one.
This commit is contained in:
Arne Welzel 2024-09-27 16:47:39 +02:00
commit c36ae2f1a3
14 changed files with 93 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

12
testing/btest/scripts/base/protocols/ftp/ftp-password-pass-command.zeek Normal file
View file

@ -0,0 +1,12 @@
# @TEST-DOC: Adding PASS to logged commands should log the password in password and arg column
# @TEST-EXEC: zeek -b -Cr $TRACES/ftp/ftp-password-pass-command.pcap %INPUT
# @TEST-EXEC: btest-diff conn.log
# @TEST-EXEC: btest-diff ftp.log
# @TEST-EXEC: test ! -f reporter.log
@load base/protocols/conn
@load base/protocols/ftp
redef FTP::logged_commands += { "USER", "PASS", "SYST", "QUIT" };
redef FTP::default_capture_password = T;