mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 22:58:20 +00:00
183789294f
This allows for data that won't match a SIP request method to precede an actual request and generates a new 'sip_junk_before_request' weird when encountering such a situation.
8 lines
275 B
Text
8 lines
275 B
Text
# This tests a PCAP with a few SIP commands from the Wireshark samples.
|
|
|
|
# @TEST-EXEC: zeek -b -r $TRACES/sip/sip-junk-before-request.pcap %INPUT
|
|
# @TEST-EXEC: btest-diff sip.log
|
|
# @TEST-EXEC: btest-diff weird.log
|
|
|
|
@load base/protocols/sip
|
|
@load base/frameworks/notice/weird
|