Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-09 18:18:19 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Merge remote-tracking branch 'security/topic/awelzel/119-http-timeout-tspacerr'

Browse source 
* security/topic/awelzel/119-http-timeout-tspacerr:
  http: Heuristic around rejecting malformed HTTP/0.9 traffic
This commit is contained in:
Tim Wojtulewicz 2022-11-22 12:26:50 -07:00
commit eb3fb68fcc
10 changed files with 71 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

7
testing/btest/scripts/base/protocols/http/curl-http-09.zeek Normal file
View file

@ -0,0 +1,7 @@
# @TEST-DOC: curl --http0.9 to accept the headerless response.
# @TEST-EXEC: zeek -b -Cr $TRACES/http/curl_http_09.pcap %INPUT
# @TEST-EXEC: btest-diff http.log
# @TEST-EXEC: test ! -f weird.log
@load base/frameworks/notice/weird
@load base/protocols/http

7
testing/btest/scripts/base/protocols/http/http-09.zeek Normal file
View file

@ -0,0 +1,7 @@
# @TEST-DOC: Artificially created PCAP with one proper HTTP 0.9 request/response and a few invalid ones.
# @TEST-EXEC: zeek -b -Cr $TRACES/http/http_09.pcap %INPUT
# @TEST-EXEC: btest-diff http.log
# @TEST-EXEC: btest-diff weird.log
@load base/frameworks/notice/weird
@load base/protocols/http