mirror of
https://github.com/zeek/zeek.git
synced 2025-10-10 18:48:20 +00:00
65c3cb6faf
* Tests for the default software version parsing (showing how broken it is!) * Software::cmp_versions(v1: Version, v2: Version) is now exported * Many small naming tweaks to adjust to namespaces.
36 lines
No EOL
1.3 KiB
Text
36 lines
No EOL
1.3 KiB
Text
# @TEST-EXEC: bro %INPUT > output
|
|
# @TEST-EXEC: btest-diff output
|
|
|
|
@load software
|
|
|
|
global ts = network_time();
|
|
global matched_software: table[string] of Software::Info = {
|
|
["SSH-1.99-OpenSSH_4.4"] =
|
|
[$name="OpenSSH", $version=[$major=4,$minor=4], $ts=ts],
|
|
["SSH-2.0-OpenSSH_5.2"] =
|
|
[$name="OpenSSH", $version=[$major=5,$minor=2], $ts=ts],
|
|
["Apache/2.0.63 (Unix) mod_auth_kerb/5.3 mod_ssl/2.0.63 OpenSSL/0.9.7a mod_fastcgi/2.4.2"] =
|
|
[$name="Apache", $version=[$major=2,$minor=0,$minor2=63], $ts=ts],
|
|
["Apache/1.3.19 (Unix)"] =
|
|
[$name="Apache", $version=[$major=1,$minor=3,$minor2=19], $ts=ts],
|
|
["ProFTPD 1.2.5rc1 Server (Debian)"] =
|
|
[$name="ProFTPD", $version=[$major=1,$minor=2,$minor2=5,$addl="rc1"], $ts=ts],
|
|
["wu-2.4.2-academ[BETA-18-VR14](1)"] =
|
|
[$name="wu", $version=[$major=2,$minor=4,$minor2=2,$addl="academ[BETA-18-VR14](1)"], $ts=ts],
|
|
["wu-2.6.2(1)"] =
|
|
[$name="wu", $version=[$major=2,$minor=6,$minor2=2,$addl="(1)"], $ts=ts],
|
|
};
|
|
|
|
event bro_init()
|
|
{
|
|
for ( sw in matched_software )
|
|
{
|
|
local output = Software::default_parse(sw, 0.0.0.0, Software::UNKNOWN);
|
|
local sw_test = matched_software[sw];
|
|
if ( sw_test$name == output$name &&
|
|
Software::cmp_versions(sw_test$version,output$version) == 0 )
|
|
print fmt("success on: %s", sw);
|
|
else
|
|
print fmt("failure on: %s -- %s", sw, output$version);
|
|
}
|
|
} |