mirror of
https://github.com/zeek/zeek.git
synced 2025-10-10 02:28:21 +00:00
![]() In the case multiple FIN packets are seen from a TCP endpoint (e.g. when one is retransmitted), only the first counted towards a byte in the sequence space. This could cause a subsequent FIN packet to induce an incorrect wrap around in the sequence numbers (e.g. the retransmitted FIN packet now is one sequence number behind the the first) and misleadingly large connection sizes. The change is to always treat a FIN packet as counting one byte in to the sequence space. |
||
---|---|---|
.. | ||
btest | ||
external | ||
scripts | ||
.gitignore | ||
Makefile | ||
README |
This directory contains suites for testing for Bro's correct operation: btest/ An ever-growing set of small unit tests testing Bro's functionality. external/ A framework for downloading additional test sets that run more complex Bro configuration on larger traces files. Due to their size, these are not included directly. See the README for more information. scripts/ Helpers scripts used by some tests.