zeek/testing/btest/Baseline/scripts.base.protocols.modbus.exception_handling
Emmanuele Zambon 05d92dc2a5 Prevent non-Modbus on port 502 to be reported as Modbus
This commit prevents most non-Modbus TCP traffic on port 502 to be
reported as Modbus in conn.log as well as in modbus.log.
To do so, we have introduced two &enforce checks in the Modbus
protocol definition that checks that some specific fields of the
(supposedly) Modbus header are compatible with values specified in
the specs.

To ensure non-regression, with this commit we also introduce a
new btest.

Closes #3962
2024-10-21 14:40:45 +02:00
..
modbus.log Prevent non-Modbus on port 502 to be reported as Modbus 2024-10-21 14:40:45 +02:00