mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 14:48:21 +00:00
2f712c3c24
This introduces ian options, DPD::track_removed_services_in_connection. It adds failed services to the services column, prefixed with a "-". Alternatively, this commit also adds policy/protocols/conn/failed-services.zeek, which provides the same information in a new column in conn.log.
11 lines
421 B
Text
11 lines
421 B
Text
# @TEST-DOC: The server replies with a line that does not contain a numeric code: violation.
|
|
# @TEST-EXEC: zeek -b -r $TRACES/ftp/ftp-invalid-reply-code.pcap %INPUT
|
|
# @TEST-EXEC: btest-diff conn.log
|
|
# @TEST-EXEC: btest-diff ftp.log
|
|
# @TEST-EXEC: btest-diff dpd.log
|
|
# @TEST-EXEC: test ! -f reporter.log
|
|
|
|
@load base/protocols/conn
|
|
@load base/protocols/ftp
|
|
|
|
redef FTP::logged_commands += { "USER", "PASS", "SYST", "QUIT" };
|