mirror of
https://github.com/zeek/zeek.git
synced 2025-10-03 07:08:19 +00:00
10b1857a9c
* The altered Modbus checks seemed overly strict -- the pcap used for the unit test at least had quantities/byte_count fields of zero, to which the server responds with an error (expected). * Most of the altered DNP3 checks seemed overly strict and caused the unit tests to fail. The one that was just wrong was the 'start' field in header blocks. * Removed the "start" parameter of the dnp3_header_block event since it's always the same value. * The SMB check failed to compile and I don't know what it intended to do, so removed.
6 lines
229 B
Text
6 lines
229 B
Text
dnp3_header_block, T, 18, 196, 2, 3
|
|
dnp3_application_request_header, T, 192, 2
|
|
dnp3_object_header, T, 12801, 7, 1, 1, 0
|
|
dnp3_object_prefix, T, 0
|
|
dnp3_header_block, F, 10, 68, 3, 2
|
|
dnp3_application_response_header, F, 192, 129, 0
|