Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-12 11:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Call ProtocolConfirmation in SNMP only if we saw a response SNMP packet

Browse source
This commit is contained in:
Vlad Grigorescu 2016-03-17 14:25:15 -05:00
parent f4141bde6d
commit d731cb9a18
1 changed files with 3 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

4
src/analyzer/protocol/snmp/snmp-analyzer.pac
View file

@ -373,10 +373,12 @@ refine connection SNMP_Conn += {
function proc_header(rec: Header): bool function proc_header(rec: Header): bool
%{ %{
if ( ! ${rec.is_orig} )
bro_analyzer()->ProtocolConfirmation();
if ( rec->unknown() ) if ( rec->unknown() )
return false; return false;
bro_analyzer()->ProtocolConfirmation();
return true; return true;
%} %}