zeek/testing/btest/core
Johanna Amann 74b847a122 Spicy SSL analyzer: make record layer version parsing more strict
The Spicy based SSL analyzer was, so far, more permissive with the
record layer versions that it would accept.

This change brings the parsing of record layer versions in line with the
binpac based analyzer. This behavioral difference was discovered due to
a test that changed with the recent dpd log changes.
2025-06-26 16:57:51 +01:00
..
event-groups testing/btest/*zeek: Comment all @TEST lines 2025-04-17 16:30:23 +02:00
event-metadata Event: Bail on add_missing_remote_network_timestamp without add_network_timestamp 2025-06-02 17:31:36 +02:00
icmp GH-1019: deprecate icmp_conn params for ICMP events 2020-07-10 11:06:28 -07:00
mmdb Merge remote-tracking branch 'origin/topic/vern/zam-asan-fixes' 2024-11-12 10:29:56 +01:00
network_time testing/btest/*zeek: Comment all @TEST lines 2025-04-17 16:30:23 +02:00
pcap Btests: don't use -C in Zeek invocations that don't actually need it 2025-06-06 13:46:45 -07:00
suspend_processing testing/btest/*zeek: Comment all @TEST lines 2025-04-17 16:30:23 +02:00
tcp Fixing productive connections with missing SYN still considered partial after flipping direction. 2022-11-16 09:56:51 +01:00
tunnels Btests: don't use -C in Zeek invocations that don't actually need it 2025-06-06 13:46:45 -07:00
analyzer-confirmation-violation-info-ftp.zeek Remove analyzer_confirmation/analyzer_violation events (6.1 deprecation) 2023-06-14 10:07:22 -07:00
analyzer-confirmation-violation-info.zeek testing: Add have-spicy-ssl helper and update tests 2024-10-29 09:30:01 +01:00
analyzer-stream-event-disable.zeek protocol: Add StreamEvent analyzer 2024-12-06 16:12:40 +01:00
analyzer-stream-event.zeek protocol: Add StreamEvent analyzer 2024-12-06 16:12:40 +01:00
bits_per_uid.zeek General btest cleanup 2020-08-11 11:26:22 -07:00
checksums-cli.test BTest baseline updates for -O gen-C++ 2023-05-05 12:03:00 -07:00
checksums.test General btest cleanup 2020-08-11 11:26:22 -07:00
checksums_ignore_nets.test ignore_checksums_nets: Add test for multiple subnets 2021-09-14 21:17:01 +02:00
checksums_ignore_nets_runtime_update.test Do not lookup ignore_checksums_nets for every packet 2021-08-06 10:32:53 +01:00
cisco-fabric-path.zeek The cisco-fabric-path pcap used in tests doesn't need the -C argument 2024-11-15 16:50:10 -07:00
command-line-option-redefs.zeek Fix several issues with command-line option redefs 2020-06-18 20:07:47 -07:00
conn-size-threshold.zeek General btest cleanup 2020-08-11 11:26:22 -07:00
conn-stats.zeek Add test for get_conn_stats BIF before reworking session stats 2021-04-29 10:24:45 -07:00
conn-uid.zeek Spelling testing 2022-11-16 20:05:03 -05:00
connection_flip_roles.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
connection_flipped.zeek Conn: In-place val flip and connection_flipped() 2023-07-04 20:01:17 +02:00
connection_status_update.zeek GH-1321: Prevent compounding of connection_status_update event timers 2020-12-08 11:20:02 -08:00
dict-iteration-expire-3523.zeek Dict: Invalidate iterators during Clear() 2024-01-09 09:12:21 +01:00
dict-iteration-expire1.zeek ZAM maintenance for recent changes and some newly exercised corner cases 2022-05-01 14:33:58 -07:00
dict-iteration-expire4.zeek testing/btest/*zeek: Comment all @TEST lines 2025-04-17 16:30:23 +02:00
dict-iteration-expire5.zeek testing/btest/*zeek: Comment all @TEST lines 2025-04-17 16:30:23 +02:00
discarder.zeek testing/btest/*zeek: Comment all @TEST lines 2025-04-17 16:30:23 +02:00
div-by-zero.zeek updates to test suite tests for compatibility with upcoming ZAM functionality 2021-06-01 09:25:30 -07:00
dns-init.zeek scan.l: Deprecate DNS resolutions of hostname literals 2025-03-05 19:23:08 +01:00
doctest.zeek Add btest that runs the doctest-based unit tests. 2022-07-19 11:35:09 +02:00
embedded-null.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
empty_conn_weird.zeek Merge remote-tracking branch 'htonl/weird_segfault' 2021-06-27 10:46:30 -07:00
enum-redef-exists.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
erspan.zeek Btests: don't use -C in Zeek invocations that don't actually need it 2025-06-06 13:46:45 -07:00
erspanI.zeek Btests: don't use -C in Zeek invocations that don't actually need it 2025-06-06 13:46:45 -07:00
erspanII.zeek Btests: don't use -C in Zeek invocations that don't actually need it 2025-06-06 13:46:45 -07:00
erspanIII.zeek Btests: don't use -C in Zeek invocations that don't actually need it 2025-06-06 13:46:45 -07:00
ether-addrs.zeek Btests: don't use -C in Zeek invocations that don't actually need it 2025-06-06 13:46:45 -07:00
event-arg-reuse.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
event-trace.zeek btest/core: Add event-trace test 2025-05-19 18:23:08 +02:00
expire-all-timers.zeek Add btest for expiration of all pending timers. 2022-11-27 15:02:09 +01:00
expired-conn-weird.zeek GH-998: Fix Reporter::conn_weird() to handle expired connections 2020-06-15 12:57:47 -07:00
expr-exception.zeek More robust memory management for ZAM execution - fixes #4052 2024-11-26 17:05:38 +01:00
fake_dns.zeek scan.l: Deprecate DNS resolutions of hostname literals 2025-03-05 19:23:08 +01:00
file-analyzer-violation.zeek testing/btest/*zeek: Comment all @TEST lines 2025-04-17 16:30:23 +02:00
global_opaque_val.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
history-flip.zeek Remove @load base/frameworks/dpd from tests 2022-08-31 17:00:55 +02:00
hostname-literal-resolve.zeek scan.l: Deprecate DNS resolutions of hostname literals 2025-03-05 19:23:08 +01:00
init-error.zeek Force event order in core/init-error btest 2022-08-24 12:47:25 +10:00
ip-broken-header.zeek Fix handling of IP packets with bogus IP header lengths 2021-05-27 16:33:50 -07:00
ipv6-atomic-frag.test General btest cleanup 2020-08-11 11:26:22 -07:00
ipv6-flow-labels.test GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
ipv6-frag.test General btest cleanup 2020-08-11 11:26:22 -07:00
ipv6_esp.test GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
ipv6_ext_headers.test GH-545: add "addl" parameter to flow_weird and net_weird events 2019-08-20 22:45:22 -04:00
ipv6_zero_len_ah.test GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
linuxsll2.zeek Skip test based on preprocessor flag set by cmake 2022-08-24 12:47:32 +10:00
load-duplicates-links.zeek GH-928: use realpath() instead of inode to de-duplicate scripts 2020-07-07 17:29:52 -07:00
load-duplicates.zeek updates for gen-C++ maintenance, including skipping some inappropriate tests 2022-08-01 16:47:17 -07:00
load-file-extension.zeek testing/btest/*zeek: Comment all @TEST lines 2025-04-17 16:30:23 +02:00
load-pkg.zeek testing/btest/*zeek: Comment all @TEST lines 2025-04-17 16:30:23 +02:00
load-prefixes.zeek testing/btest/*zeek: Comment all @TEST lines 2025-04-17 16:30:23 +02:00
load-relative.zeek testing/btest/*zeek: Comment all @TEST lines 2025-04-17 16:30:23 +02:00
load-stdin.zeek updates for gen-C++ maintenance, including skipping some inappropriate tests 2022-08-01 16:47:17 -07:00
load-unload.zeek testing/btest/*zeek: Comment all @TEST lines 2025-04-17 16:30:23 +02:00
max-analyzer-violations.zeek test: Add btest verifying max_analyzer_violations functionality 2022-11-08 16:44:34 -07:00
mobile-ipv6-dst-opts.test GH-1216: Enable Mobile IPv6 support by default 2021-06-28 11:11:55 -07:00
mobile-ipv6-home-addr.test GH-1216: Enable Mobile IPv6 support by default 2021-06-28 11:11:55 -07:00
mobile-ipv6-routing.test GH-1216: Enable Mobile IPv6 support by default 2021-06-28 11:11:55 -07:00
mobility-checksums.test GH-1216: Enable Mobile IPv6 support by default 2021-06-28 11:11:55 -07:00
mobility_msg.test GH-1216: Enable Mobile IPv6 support by default 2021-06-28 11:11:55 -07:00
mpls-in-vlan.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
network-time-init.zeek GH-938: fix IO loop iterations sometimes skipping offline pcap sources 2020-04-30 16:19:30 -07:00
network-time.zeek Merge branch 'network-time-init' of https://github.com/J-Gras/zeek 2020-05-04 17:51:39 -07:00
nflog.zeek General btest cleanup 2020-08-11 11:26:22 -07:00
nop.zeek General btest cleanup 2020-08-11 11:26:22 -07:00
option-errors.zeek testing/btest/*zeek: Comment all @TEST lines 2025-04-17 16:30:23 +02:00
option-priorities.zeek General btest cleanup 2020-08-11 11:26:22 -07:00
option-redef.zeek General btest cleanup 2020-08-11 11:26:22 -07:00
option-runtime-errors.zeek testing/btest/*zeek: Comment all @TEST lines 2025-04-17 16:30:23 +02:00
option-zeek-done.zeek option.bif: Short-circuit option changes when terminating 2022-07-29 18:22:03 +02:00
packet-analyzer-override.zeek Add reporter framework to core.packet-analyzer-override btest 2023-03-30 12:28:39 -07:00
parse-only-signature-file-issues.zeek testing/btest/*zeek: Comment all @TEST lines 2025-04-17 16:30:23 +02:00
parse-only-usage-issues.zeek updates for usage issues: support for -uu, maybe/definitely distinctions 2021-09-08 10:23:38 -07:00
pbb.zeek Add btest for PBB and update baselines 2023-02-15 14:36:26 -07:00
pcap_file_done.zeek Add Pcap::file_done event 2020-02-06 17:50:17 -08:00
ppp.test btest/core/ppp: Run test in bare mode 2023-10-11 15:13:23 +02:00
pppoe-over-qinq.zeek Spicy SSL analyzer: make record layer version parsing more strict 2025-06-26 16:57:51 +01:00
pppoe.test GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
print-bpf-filters.zeek ci/btest: Remove spicy-quic helper, disable Spicy on CentOS 7 2023-10-11 17:17:23 +02:00
print-interval.zeek GH-589: improve printing of sub-microsecond intervals 2019-09-23 19:57:49 -07:00
proc-status-file.zeek Make set_processing_status() signal-safe. 2020-08-24 10:26:58 +00:00
protocol-registration-error.zeek GH-1215: Remove dispatch_map from packet analysis, replace with BIF methods for registering dispatches 2020-11-02 19:03:25 +00:00
q-in-q.zeek General btest cleanup 2020-08-11 11:26:22 -07:00
radiotap.zeek Remove @load base/frameworks/dpd from tests 2022-08-31 17:00:55 +02:00
raw-truncation.zeek Add length checking to ToRawPktHdrVal for truncated packets 2023-05-19 09:37:18 -07:00
raw_packet.zeek GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev. 2019-05-01 21:43:45 +00:00
reassembly.zeek General btest cleanup 2020-08-11 11:26:22 -07:00
record-field-defer-parse-time-nested.zeek testing/btest: Un-deferred record initalization tests 2023-09-12 12:12:46 +02:00
record-field-defer-parse-time.zeek testing/btest: Un-deferred record initalization tests 2023-09-12 12:12:46 +02:00
record-field-defer-table.zeek testing/btest: Un-deferred record initalization tests 2023-09-12 12:12:46 +02:00
record-field-defer.zeek testing/btest: Un-deferred record initalization tests 2023-09-12 12:12:46 +02:00
record-field-redef-errors.zeek testing/btest: Fix double commented @TEST- lines 2025-05-06 14:06:29 +02:00
record-field-redef.zeek Support redef'ing the &log attribute of record fields 2022-08-10 17:27:05 +02:00
recursive-event.zeek btest: More verbose recursive-event output 2023-03-23 12:41:56 +01:00
recursive-types.zeek GH-1819: Handle recursive types when describing type in binary mode 2021-11-08 15:19:57 -07:00
reporter-error-in-handler.zeek Spelling testing 2022-11-16 20:05:03 -05:00
reporter-fmt-strings.zeek Fix code format of various reporter btests 2020-02-14 22:03:11 -08:00
reporter-parse-error.zeek Fix code format of various reporter btests 2020-02-14 22:03:11 -08:00
reporter-paths.zeek testing/btest/*zeek: Comment all @TEST lines 2025-04-17 16:30:23 +02:00
reporter-runtime-error.zeek Fix code format of various reporter btests 2020-02-14 22:03:11 -08:00
reporter-shutdown-order-errors.zeek General btest cleanup 2020-08-11 11:26:22 -07:00
reporter-type-mismatch.zeek Fix code format of various reporter btests 2020-02-14 22:03:11 -08:00
reporter-weird-sampling-disable.zeek GH-545: add "addl" parameter to flow_weird and net_weird events 2019-08-20 22:45:22 -04:00
reporter-weird-sampling-global.zeek Btests: don't use -C in Zeek invocations that don't actually need it 2025-06-06 13:46:45 -07:00
reporter-weird-sampling.zeek GH-545: add "addl" parameter to flow_weird and net_weird events 2019-08-20 22:45:22 -04:00
reporter.zeek Fix code format of various reporter btests 2020-02-14 22:03:11 -08:00
save-load-seeds.zeek util/init_random_seed: write_file implies deterministic 2025-02-04 11:57:51 +01:00
script-args.zeek btest: Skip core.script-args under TSAN 2024-08-08 15:32:20 +02:00
seed-errors.zeek Introduce ZEEK_SEED_VALUES environment variable 2023-05-12 19:50:37 +02:00
seed.zeek Introduce ZEEK_SEED_VALUES environment variable 2023-05-12 19:50:37 +02:00
sigterm-regular.sh Add btests to verify Zeek's handling of SIGTERM and reading stdin 2022-07-09 11:17:14 -07:00
sigterm-stdin.sh Add btests to verify Zeek's handling of SIGTERM and reading stdin 2022-07-09 11:17:14 -07:00
skip_analyzer.zeek GH-1215: Remove dispatch_map from packet analysis, replace with BIF methods for registering dispatches 2020-11-02 19:03:25 +00:00
tcp-padding.zeek Merge remote-tracking branch 'origin/topic/johanna/tcp-padding' 2023-08-03 07:18:49 +01:00
truncation.test General btest cleanup 2020-08-11 11:26:22 -07:00
udp-broadcast-no-flip.zeek IPBasedAnalyzer: Don't flip connections when destination is broadcast 2023-08-28 12:15:55 +02:00
udp-content-ports.zeek Add "udp_content_ports" option 2020-04-07 13:02:29 -07:00
udp-contents-delivery-ports-use-resp.zeek Add new "udp_content_delivery_ports_use_resp" option 2020-04-06 14:51:34 -07:00
udp-padding.zeek Do not forward padding to downstream TCP packet analyzer 2023-08-02 17:17:01 +01:00
unknown-ip-protocol.zeek Add conn.log entries for connections with unhandled IP protocols 2024-11-13 11:25:40 -07:00
unknown-protocol-event.zeek Update btest baselines for analyzer history 2024-08-12 12:21:09 +02:00
unknown-protocol-log.zeek Add btest for unknown_protocols.log 2024-12-10 14:54:19 +01:00
vector-assignment.zeek General btest cleanup 2020-08-11 11:26:22 -07:00
vlan-mpls.zeek Special case HTTP 0.9 early on 2023-03-10 09:52:34 -07:00
vntag-in-vlan.zeek Add analyzer registration from VLAN to VNTAG 2025-03-18 11:51:27 -07:00
vntag.zeek Add conn.log entries for connections with unhandled IP protocols 2024-11-13 11:25:40 -07:00
when-interpreter-exceptions.zeek update existing test suite usage of "when" statements to include captures 2022-01-07 14:54:06 -08:00
wlanmon.zeek Remove @load base/frameworks/dpd from tests 2022-08-31 17:00:55 +02:00
x509-generalizedtime.zeek General btest cleanup 2020-08-11 11:26:22 -07:00