Merge remote-tracking branch 'philipp-tg/asrep_enc_part'

* philipp-tg/asrep_enc_part:
  Make enc_part value from kerberos response available to scripts
This commit is contained in:
Tim Wojtulewicz 2025-02-03 18:41:40 -07:00
commit c8eab363fb
8 changed files with 147 additions and 1 deletions

View file

@ -0,0 +1,12 @@
# This test prints the enc_part value from the KRB::KDC_Response
# @TEST-EXEC: zeek -b -r $TRACES/krb/kinit.trace %INPUT > output
# @TEST-EXEC: btest-diff output
@load base/protocols/krb
event krb_as_response(c: connection, rep: KRB::KDC_Response)
{
print "as_response", c$uid;
print rep$enc_part;
}