zeek/testing/btest/scripts/base/protocols/ftp/ftp-password-pass-command-hidden.zeek
2024-09-27 16:45:06 +02:00

12 lines
No EOL
436 B
Text

# @TEST-DOC: Adding PASS to logged commands should hide the password in password and arg column
# @TEST-EXEC: zeek -b -Cr $TRACES/ftp/ftp-password-pass-command.pcap %INPUT
# @TEST-EXEC: btest-diff conn.log
# @TEST-EXEC: btest-diff ftp.log
# @TEST-EXEC: test ! -f reporter.log
@load base/protocols/conn
@load base/protocols/ftp
redef FTP::logged_commands += { "USER", "PASS", "SYST", "QUIT" };
redef FTP::default_capture_password = F;