mirror of
https://github.com/zeek/zeek.git
synced 2025-10-05 16:18:19 +00:00
10b1857a9c
* The altered Modbus checks seemed overly strict -- the pcap used for the unit test at least had quantities/byte_count fields of zero, to which the server responds with an error (expected). * Most of the altered DNP3 checks seemed overly strict and caused the unit tests to fail. The one that was just wrong was the 'start' field in header blocks. * Removed the "start" parameter of the dnp3_header_block event since it's always the same value. * The SMB check failed to compile and I don't know what it intended to do, so removed.
22 lines
794 B
Text
22 lines
794 B
Text
dnp3_header_block, T, 26, 196, 2, 3
|
|
dnp3_application_request_header, T, 199, 3
|
|
dnp3_object_header, T, 3073, 40, 1, 256, 0
|
|
dnp3_object_prefix, T, 1
|
|
dnp3_crob, T, 3, 1, 100, 100, 0
|
|
dnp3_header_block, F, 28, 68, 3, 2
|
|
dnp3_application_response_header, F, 199, 129, 0
|
|
dnp3_object_header, F, 3073, 40, 1, 256, 0
|
|
dnp3_object_prefix, F, 1
|
|
dnp3_crob, F, 3, 1, 100, 100, 0
|
|
dnp3_response_data_object, F, 255
|
|
dnp3_header_block, T, 26, 196, 2, 3
|
|
dnp3_application_request_header, T, 200, 4
|
|
dnp3_object_header, T, 3073, 40, 1, 256, 0
|
|
dnp3_object_prefix, T, 1
|
|
dnp3_crob, T, 3, 1, 100, 100, 0
|
|
dnp3_header_block, F, 28, 68, 3, 2
|
|
dnp3_application_response_header, F, 200, 129, 0
|
|
dnp3_object_header, F, 3073, 40, 1, 256, 0
|
|
dnp3_object_prefix, F, 1
|
|
dnp3_crob, F, 3, 1, 100, 100, 0
|
|
dnp3_response_data_object, F, 255
|