Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 06:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1
zeek/testing/btest/Traces/postgresql
History
Fupeng Zhao e4e56789db
Report PostgreSQL login success only after ReadyForQuery 
Previously, Zeek treated the receipt of `AuthenticationOk` as a
successful login. However, according to the PostgreSQL
Frontend/Backend Protocol, the startup phase is not complete until
the server sends `ReadyForQuery`. It is still possible for the server
to emit an `ErrorResponse` (e.g. ERRCODE_INVALID_AUTHORIZATION_SPECIFICATION)
after `AuthenticationOk` but before `ReadyForQuery`.

This change updates the PostgreSQL analyzer to defer reporting login
success until `ReadyForQuery` is observed. This prevents false
positives in cases where authentication succeeds but session startup
fails.
2025-08-18 10:59:44 +08:00
..
bad-backend-message-1.pcap postgresql: Initial parser implementation 2024-09-06 16:10:48 +02:00
bad-startup-message-1.pcap postgresql: Initial parser implementation 2024-09-06 16:10:48 +02:00
http-on-port-5432.pcap postgresql: Initial parser implementation 2024-09-06 16:10:48 +02:00
mysql-on-port-5432.pcap postgresql: Initial parser implementation 2024-09-06 16:10:48 +02:00
psql-aws-ssl-disable-15432.pcap postgresql: Initial parser implementation 2024-09-06 16:10:48 +02:00
psql-aws-ssl-disable.pcap postgresql: Initial parser implementation 2024-09-06 16:10:48 +02:00
psql-aws-ssl-preferred.pcap postgresql: Initial parser implementation 2024-09-06 16:10:48 +02:00
psql-aws-ssl-require-15432.pcap postgresql: Initial parser implementation 2024-09-06 16:10:48 +02:00
psql-aws-ssl-require.pcap postgresql: Initial parser implementation 2024-09-06 16:10:48 +02:00
psql-create-insert-select-delete-drop.pcap postgresql: Initial parser implementation 2024-09-06 16:10:48 +02:00
psql-insert-fail-drop-fail.pcap postgresql: Initial parser implementation 2024-09-06 16:10:48 +02:00
psql-login-fail.pcap postgresql: Initial parser implementation 2024-09-06 16:10:48 +02:00
psql-login-no-role.pcap Report PostgreSQL login success only after ReadyForQuery 2025-08-18 10:59:44 +08:00
psql-login-no-sslrequest.pcap postgresql: Initial parser implementation 2024-09-06 16:10:48 +02:00
psql-login-wrong.pcap postgresql: Initial parser implementation 2024-09-06 16:10:48 +02:00
psql-login.pcap postgresql: Initial parser implementation 2024-09-06 16:10:48 +02:00
psql-select-now.pcap postgresql: Initial parser implementation 2024-09-06 16:10:48 +02:00