zeek/testing/btest/scripts/base
Emmanuele Zambon 05d92dc2a5 Prevent non-Modbus on port 502 to be reported as Modbus
This commit prevents most non-Modbus TCP traffic on port 502 to be
reported as Modbus in conn.log as well as in modbus.log.
To do so, we have introduced two &enforce checks in the Modbus
protocol definition that checks that some specific fields of the
(supposedly) Modbus header are compatible with values specified in
the specs.

To ensure non-regression, with this commit we also introduce a
new btest.

Closes #3962
2024-10-21 14:40:45 +02:00
..
files Merge branch 'files_pe_timestamp_sync' of https://github.com/mvhensbergen/zeek 2024-05-29 14:16:31 +01:00
frameworks input/Raw: Rework GetLine() 2024-10-09 14:21:07 -07:00
misc Parse and store localversion string 2024-04-17 14:17:22 -07:00
protocols Prevent non-Modbus on port 502 to be reported as Modbus 2024-10-21 14:40:45 +02:00
utils Restore label_names field in MetricOpts record 2024-06-04 14:14:58 -07:00