zeek/testing/btest/scripts/base
Arne Welzel b2a2ad7e10 smb2/read: Parse only 1 byte for data_offset, ignore reserved1
A user provided a SMB2 pcap with the reserved1 field of a ReadResponse
set to 1 instead of 0. This confused the padding computation due to
including this byte into the offset. Properly split data_offset and
reserved1 into individual byte fields.

Closes #4730
2025-08-08 16:12:20 +02:00
..
files Default canonifier change to only remove first timestamp in line 2025-06-18 15:41:48 +01:00
frameworks Add flag to force synchronous mode when calling storage script-land functions 2025-07-23 13:14:34 -07:00
misc testing/btest/*zeek: Comment all @TEST lines 2025-04-17 16:30:23 +02:00
protocols smb2/read: Parse only 1 byte for data_offset, ignore reserved1 2025-08-08 16:12:20 +02:00
utils btest: Update tests and baselines after adding ctx to conn_id 2025-07-03 18:19:46 +02:00