mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 14:48:21 +00:00
9592f64225
- This addresses BIT-1011 - Add a new field to socks.log; "password". - Two new events; socks_login_userpass and socks_login_reply. - One new weird for unsupported authentication method. - A new test for authenticated socks traffic. - Credit to Nicolas Retrain for the initial patch. Thanks!
5 lines
151 B
Text
5 lines
151 B
Text
# @TEST-EXEC: bro -r $TRACES/socks-auth.pcap %INPUT
|
|
# @TEST-EXEC: btest-diff socks.log
|
|
# @TEST-EXEC: btest-diff tunnel.log
|
|
|
|
@load base/protocols/socks
|