zeek/testing/btest/scripts
Emmanuele Zambon 05d92dc2a5 Prevent non-Modbus on port 502 to be reported as Modbus
This commit prevents most non-Modbus TCP traffic on port 502 to be
reported as Modbus in conn.log as well as in modbus.log.
To do so, we have introduced two &enforce checks in the Modbus
protocol definition that checks that some specific fields of the
(supposedly) Modbus header are compatible with values specified in
the specs.

To ensure non-regression, with this commit we also introduce a
new btest.

Closes #3962
2024-10-21 14:40:45 +02:00
..
base Prevent non-Modbus on port 502 to be reported as Modbus 2024-10-21 14:40:45 +02:00
policy Spicy SSL analyzer - address feedback 2024-09-11 11:30:16 +02:00
site Remove deprecated policy/tuning/default package 2024-08-07 11:58:21 -07:00
check-test-all-policy.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00