zeek/testing/btest/scripts/base/protocols
Arne Welzel 3f5cb75a2a ftp: Introduce FTP::max_command_length
oss-fuzz produced FTP traffic with a ~550KB long FTP command. Cap FTP command
length at 100 bytes, log a weird if a command is larger than that and move
on to the next. Likely it's not actual FTP traffic, but raising an
analyzer violation would allow clients an easy way to disable the analyzer
by sending an overly long command.

The added test PCAP was generated using a fake Python socket server/client.
2022-11-21 09:36:29 +01:00
..
arp Initial implementation of Lower-Level analyzers 2020-09-23 11:13:25 -07:00
bittorrent Adding test for BitTorrent tracker. 2021-12-21 17:48:26 +01:00
conn GH-1252: rename files with colons for Windows compatibility 2020-11-04 10:29:52 -08:00
dce-rpc Fix protocol forwarding in dce_rpc-auth 2021-09-23 08:50:11 -04:00
dhcp Prevent large dhcp log entries 2022-07-28 11:34:18 -07:00
dnp3 General btest cleanup 2020-08-11 11:26:22 -07:00
dns add svcb test case 2021-10-12 17:43:32 -04:00
ftp ftp: Introduce FTP::max_command_length 2022-11-21 09:36:29 +01:00
http http: Prevent script errors when http$current_entity is not set 2022-09-26 10:18:24 +02:00
icmp Remove deprecated ICMP events 2021-01-27 10:52:40 -07:00
imap Remove @load base/frameworks/dpd from tests 2022-08-31 17:00:55 +02:00
irc Remove @load base/frameworks/dpd from tests 2022-08-31 17:00:55 +02:00
krb Remove @load base/frameworks/dpd from tests 2022-08-31 17:00:55 +02:00
modbus Remove @load base/frameworks/dpd from tests 2022-08-31 17:00:55 +02:00
mount GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
mqtt GH-474: change MQTT::max_payload_size to be a runtime option 2019-08-05 18:11:54 -07:00
mysql Add btest for GH-1084 2020-07-24 09:28:11 -05:00
ncp General btest cleanup 2020-08-11 11:26:22 -07:00
nfs GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
ntp General btest cleanup 2020-08-11 11:26:22 -07:00
pop3 Remove @load base/frameworks/dpd from tests 2022-08-31 17:00:55 +02:00
portmap GH-684: Fix parsing of RPC calls with non-AUTH_UNIX flavors 2019-11-13 13:14:14 -08:00
radius Convert pcapng test suite files to pcap format 2019-11-08 13:08:06 -08:00
rdp Remove @load base/frameworks/dpd from tests 2022-08-31 17:00:55 +02:00
rfb regularize test suite names to avoid custom/outdated suffices 2022-05-12 13:32:49 -07:00
sip GH-1507: Tolerate junk data before SIP requests 2021-04-14 15:34:07 -07:00
smb updates for gen-C++ maintenance, including skipping some inappropriate tests 2022-08-01 16:47:17 -07:00
smtp GH-1352: Added flag to stop processing SMTP headers in attached 2021-01-21 14:55:10 -05:00
snmp General btest cleanup 2020-08-11 11:26:22 -07:00
socks General btest cleanup 2020-08-11 11:26:22 -07:00
ssh Change SSH version field to be &optional. 2021-06-17 09:24:46 +02:00
ssl Update CT log list. 2022-10-06 15:10:59 +01:00
syslog General btest cleanup 2020-08-11 11:26:22 -07:00
tcp Add testcase for TCP segment offloading. 2021-11-23 12:37:55 +00:00
xmpp Remove @load base/frameworks/dpd from tests 2022-08-31 17:00:55 +02:00