zeek/testing/btest/scripts/base/frameworks/analyzer/request-response-protocol-differences.zeek
Johanna Amann 2daf692c95 Add two protocol mismatch testcases
These traces contain different protocols being used by originator/responder.

Traces from GH-4251
2025-03-04 15:38:20 +00:00

10 lines
435 B
Text

# This test checks behavior when the originator and responder protocols
# differ - e.g. when a HTTPS client connects to a HTTP port.
#
# @TEST-EXEC: zeek -r ${TRACES}/http/http-to-ssh.pcap
# @TEST-EXEC: mv conn.log conn-http-to-ssh.log
# @TEST-EXEC: zeek -r ${TRACES}/tls/https-to-http.pcap
# @TEST-EXEC: mv conn.log conn-https-to-http.log
# @TEST-EXEC: btest-diff conn-http-to-ssh.log
# @TEST-EXEC: btest-diff conn-https-to-http.log