mirror of
https://github.com/zeek/zeek.git
synced 2025-10-17 05:58:20 +00:00
130c89a0a7
To address review feedback in GH-4362: rename analyzer-failed-log.zeek to loggig.zeek, analyzer-debug-log.zeek to debug-logging.zeek and dpd-log.zeek to deprecated-dpd-log.zeek. Includes respective test, NEWS, etc updates.
13 lines
417 B
Text
13 lines
417 B
Text
# Tests for good parsing/handling of empty NTLM AV Pair sequences.
|
|
|
|
# @TEST-EXEC: zeek -b -r $TRACES/dce-rpc/ntlm-empty-av-sequence.pcap %INPUT
|
|
# @TEST-EXEC: btest-diff ntlm.log
|
|
# @TEST-EXEC: btest-diff analyzer_failed.log
|
|
|
|
@load frameworks/analyzer/debug-logging.zeek
|
|
@load base/protocols/dce-rpc
|
|
@load base/protocols/ntlm
|
|
|
|
# ntlm by default excludes itself from analyzer logging
|
|
|
|
redef DPD::ignore_violations = {};
|