zeek/testing/btest/scripts/base/protocols/dce-rpc/ntlm-unterminated-av-pair-seq.zeek
Johanna Amann 42ba2fcca0 Settle on analyzer.log for the dpd.log replacement
This commit renames analyzer-failed.log to analyzer.log, and updates the
respective news entry.
2025-06-03 17:33:36 +01:00

12 lines
379 B
Text

# Tests for good parsing/handling of unterminated NTLM AV Pair sequences.
# @TEST-EXEC: zeek -b -r $TRACES/dce-rpc/ntlm-unterminated-av-sequence.pcap %INPUT
# @TEST-EXEC: btest-diff ntlm.log
# @TEST-EXEC: btest-diff analyzer.log
@load base/protocols/dce-rpc
@load base/protocols/ntlm
# ntlm by default excludes itself from analyzer logging
redef DPD::ignore_violations = {};