mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 06:38:20 +00:00
a0e0b7161f
This reverts part of commit a0888b7e36 due
to inhibiting analyzer violations when parsing non SSH traffic when
the &restofdata path is entered.
@J-Gras reported the analyzer not being disabled when sending HTTP
traffic on port 22.
This adds the verbose analyzer.log baselines such that future improvements
of these scenarios become visible.
8 lines
308 B
Text
8 lines
308 B
Text
# Tests processing of half-duplex client-side connections, including no
|
|
# analyzer.log output.
|
|
|
|
# @TEST-EXEC: zeek -r $TRACES/ssh/ssh.client-side-half-duplex.pcap %INPUT
|
|
# @TEST-EXEC: btest-diff analyzer.log
|
|
# @TEST-EXEC: btest-diff ssh.log
|
|
# @TEST-EXEC: btest-diff conn.log
|
|
# @TEST-EXEC: btest-diff .stdout
|