zeek/testing/btest/scripts/base/protocols/dce-rpc/ntlm-empty-av-pair-seq.zeek

8 lines
267 B
Text

# Tests for good parsing/handling of empty NTLM AV Pair sequences.
# @TEST-EXEC: zeek -b -r $TRACES/dce-rpc/ntlm-empty-av-sequence.pcap %INPUT
# @TEST-EXEC: btest-diff ntlm.log
# @TEST-EXEC: btest-diff dpd.log
@load base/protocols/dce-rpc
@load base/protocols/ntlm