mirror of
https://github.com/zeek/zeek.git
synced 2025-10-06 16:48:19 +00:00
10b1857a9c
* The altered Modbus checks seemed overly strict -- the pcap used for the unit test at least had quantities/byte_count fields of zero, to which the server responds with an error (expected). * Most of the altered DNP3 checks seemed overly strict and caused the unit tests to fail. The one that was just wrong was the 'start' field in header blocks. * Removed the "start" parameter of the dnp3_header_block event since it's always the same value. * The SMB check failed to compile and I don't know what it intended to do, so removed.
9 lines
334 B
Text
9 lines
334 B
Text
dnp3_header_block, T, 99, 196, 4, 3
|
|
dnp3_application_request_header, T, 201, 27
|
|
dnp3_object_header, T, 17923, 91, 1, 1, 0
|
|
dnp3_object_prefix, T, 85
|
|
dnp3_header_block, F, 29, 68, 3, 4
|
|
dnp3_application_response_header, F, 201, 129, 0
|
|
dnp3_object_header, F, 17924, 91, 1, 1, 0
|
|
dnp3_object_prefix, F, 13
|
|
dnp3_response_data_object, F, 255
|