Arne Welzel 377fd711bd HTTP: Implement FlipRoles() ... When Zeek flips roles of a HTTP connection subsequent to the HTTP analyzer being attached, that analyzer would not update its own ContentLine analyzer state, resulting in the wrong ContentLine analyzer being switched into plain delivery mode. In debug builds, this would result in assertion failures, in production builds, the HTTP analyzer would receive HTTP bodies as individual header lines, or conversely, individual header lines would be delivered as a large chunk from the ContentLine analyzer. PCAPs were generated locally using tcprewrite to select well-known-http ports for both endpoints, then editcap to drop the first SYN packet. Kudos to @JordanBarnartt for keeping at it. Closes #3789		2024-07-04 11:38:33 +02:00
..
arp	Initial implementation of Lower-Level analyzers	2020-09-23 11:13:25 -07:00
bittorrent	Adding test for BitTorrent tracker.	2021-12-21 17:48:26 +01:00
conn	GH-1252: rename files with colons for Windows compatibility	2020-11-04 10:29:52 -08:00
dce-rpc	dce-rpc: Test cases for unbounded state growth	2023-06-30 15:14:35 +02:00
dhcp	dhcp: Handle is_orig=T for connections from server to 255.255.255.255	2023-08-28 12:15:55 +02:00
dnp3	General btest cleanup	2020-08-11 11:26:22 -07:00
dns	DNS: Add Ed25519 and Ed448 enum values to parser	2023-11-17 19:56:47 +01:00
finger	Provide infrastructure to migrate legacy analyzers to Spicy.	2023-02-01 11:33:48 +01:00
ftp	ftp/main: Skip get_pending_command() for intermediate reply lines	2023-03-23 13:50:36 +01:00
http	HTTP: Implement FlipRoles()	2024-07-04 11:38:33 +02:00
icmp	Remove deprecated ICMP events	2021-01-27 10:52:40 -07:00
imap	Remove @load base/frameworks/dpd from tests	2022-08-31 17:00:55 +02:00
irc	Add irc_dcc_send_ack event and fix missing fields	2023-04-24 07:29:51 +00:00
krb	krb/smb2_krb_nokeytab: Register get_file_handle() to avoid warnings	2023-02-06 18:09:11 +01:00
ldap	ldap: Fix substring filter parsing and rendering	2024-01-05 16:06:23 +01:00
modbus	Pass parsed file record information with ReadFile/WriteFile events	2023-08-07 13:44:38 -07:00
mount	GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev.	2019-05-01 21:43:45 +00:00
mqtt	Remove full scripts marked as 6.1 deprecations	2023-06-14 10:07:22 -07:00
mysql	mysql: Recognize when client/server negotiate SSL	2023-01-27 12:42:19 +01:00
ncp	General btest cleanup	2020-08-11 11:26:22 -07:00
nfs	GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev.	2019-05-01 21:43:45 +00:00
ntp	NTP: Detect out-of-order packets	2023-05-04 19:44:02 +02:00
pop3	Remove @load base/frameworks/dpd from tests	2022-08-31 17:00:55 +02:00
portmap	GH-684: Fix parsing of RPC calls with non-AUTH_UNIX flavors	2019-11-13 13:14:14 -08:00
quic	Bump Spicy to current main.	2024-01-29 09:59:46 +01:00
radius	Convert pcapng test suite files to pcap format	2019-11-08 13:08:06 -08:00
rdp	RDP: add some enforcement to required values based on MS-RDPBCGR docs	2023-03-24 10:33:21 -07:00
rfb	regularize test suite names to avoid custom/outdated suffices	2022-05-12 13:32:49 -07:00
sip	GH-1507: Tolerate junk data before SIP requests	2021-04-14 15:34:07 -07:00
smb	Allow SMB_TCP record to contain multiple protocol identifiers/headers	2024-04-22 15:55:25 -07:00
smtp	btest/smtp/bdat: Move tests into proper directory	2024-01-23 21:49:50 +01:00
snap	Add basic LLC, SNAP, and Novell 802.3 packet analyzers	2023-04-25 12:29:54 -07:00
snmp	General btest cleanup	2020-08-11 11:26:22 -07:00
socks	socks/dpd: Fix socks5_server side signature	2023-06-05 13:54:47 +02:00
ssh	ssh: Revert half-duplex robustness	2024-06-19 16:04:51 +02:00
ssl	Update TLS consts, mainly new named curves.	2024-05-23 14:50:36 +01:00
syslog	General btest cleanup	2020-08-11 11:26:22 -07:00
tcp	Add testcase for TCP segment offloading.	2021-11-23 12:37:55 +00:00
websocket	websocket: Add Spicy parser version, too.	2024-02-06 17:29:55 +01:00
xmpp	Remove @load base/frameworks/dpd from tests	2022-08-31 17:00:55 +02:00