mirror of
https://github.com/zeek/zeek.git
synced 2025-10-11 11:08:20 +00:00
338d521003
CONNECT code. Removal of support analyzers was broken. The code now actually doesn't delete them immediately anymore but instead just flags them as disabled. They'll be destroyed with the parent analyzer later. Also includes a new leak tests exercising the CONNECT code. Lines starting # with '#' will be ignored, and an empty message aborts the commit. # On branch topic/robin/http-connect # Changes to be committed: # modified: scripts/base/protocols/http/main.bro # modified: scripts/base/protocols/ssl/consts.bro # modified: src/analyzer/Analyzer.cc # modified: src/analyzer/Analyzer.h # modified: src/analyzer/protocol/http/HTTP.cc # new file: testing/btest/core/leaks/http-connect.bro # modified: testing/btest/scripts/base/protocols/http/http-connect.bro # # Untracked files: # .tags # changes.txt # conn.log # debug.log # diff # mpls-in-vlan.patch # newfile.pcap # packet_filter.log # reporter.log # src/PktSrc.cc.orig # weird.log #
14 lines
417 B
Text
14 lines
417 B
Text
# This tests that the HTTP analyzer handles HTTP CONNECT proxying correctly.
|
|
#
|
|
# @TEST-EXEC: bro -r $TRACES/http/connect-with-smtp.trace %INPUT
|
|
# @TEST-EXEC: btest-diff conn.log
|
|
# @TEST-EXEC: btest-diff http.log
|
|
# @TEST-EXEC: btest-diff smtp.log
|
|
# @TEST-EXEC: btest-diff tunnel.log
|
|
|
|
@load base/protocols/conn
|
|
@load base/protocols/http
|
|
@load base/protocols/smtp
|
|
@load base/protocols/tunnels
|
|
@load base/frameworks/dpd
|
|
|