Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 06:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1
zeek/scripts/base/protocols/postgresql
History
Exact
Fupeng Zhao e4e56789db
Report PostgreSQL login success only after ReadyForQuery 
Previously, Zeek treated the receipt of `AuthenticationOk` as a
successful login. However, according to the PostgreSQL
Frontend/Backend Protocol, the startup phase is not complete until
the server sends `ReadyForQuery`. It is still possible for the server
to emit an `ErrorResponse` (e.g. ERRCODE_INVALID_AUTHORIZATION_SPECIFICATION)
after `AuthenticationOk` but before `ReadyForQuery`.

This change updates the PostgreSQL analyzer to defer reporting login
success until `ReadyForQuery` is observed. This prevents false
positives in cases where authentication succeeds but session startup
fails.
2025-08-18 10:59:44 +08:00
..
__load__.zeek postgresql: Initial parser implementation 2024-09-06 16:10:48 +02:00
consts.zeek postgresql: Initial parser implementation 2024-09-06 16:10:48 +02:00
dpd.sig postgresql: Initial parser implementation 2024-09-06 16:10:48 +02:00
main.zeek Report PostgreSQL login success only after ReadyForQuery 2025-08-18 10:59:44 +08:00
spicy-events.zeek postgresql: Initial parser implementation 2024-09-06 16:10:48 +02:00