zeek/testing/btest/core/tunnels
Jon Siwek 5f3af9e9eb Add new Tunnel::delay_teredo_confirmation option, default to true.
This option indicates that the Teredo analyzer should wait until
it sees both sides of a connection using a valid Teredo encapsulation
before issuing a protocol_confirmation.  Previous behavior confirmed
on the first instance of a valid encapsulation, which could result
in more false positives (and e.g. bogus entries in known-services.log).

Addresses #890.
2012-10-02 15:13:38 -05:00
..
ayiya.test Add AYIYA tunnel decapsulation unit test. 2012-06-05 15:17:27 -05:00
false-teredo.bro Add new Tunnel::delay_teredo_confirmation option, default to true. 2012-10-02 15:13:38 -05:00
ip-in-ip.test Make tunnels always identifiable by UID, tunnel.log now gets populated. 2012-04-26 12:29:59 -05:00
ip-tunnel-uid.test Fix for IP tunnel UID persistence. 2012-04-27 10:28:46 -05:00
teredo-known-services.test Add new Tunnel::delay_teredo_confirmation option, default to true. 2012-10-02 15:13:38 -05:00
teredo.bro Add Teredo-specific events. 2012-06-05 15:07:56 -05:00
teredo_bubble_with_payload.test Make Teredo bubble packet parsing more lenient. 2012-06-19 12:59:38 -05:00