mirror of
https://github.com/zeek/zeek.git
synced 2025-10-03 15:18:20 +00:00
10b1857a9c
* The altered Modbus checks seemed overly strict -- the pcap used for the unit test at least had quantities/byte_count fields of zero, to which the server responds with an error (expected). * Most of the altered DNP3 checks seemed overly strict and caused the unit tests to fail. The one that was just wrong was the 'start' field in header blocks. * Removed the "start" parameter of the dnp3_header_block event since it's always the same value. * The SMB check failed to compile and I don't know what it intended to do, so removed.
6 lines
233 B
Text
6 lines
233 B
Text
dnp3_header_block, T, 14, 196, 1, 100
|
|
dnp3_application_request_header, T, 206, 2
|
|
dnp3_object_header, T, 20481, 0, 1, 7, 7
|
|
dnp3_object_prefix, T, 0
|
|
dnp3_header_block, F, 10, 68, 100, 1
|
|
dnp3_application_response_header, F, 206, 129, 0
|