mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 14:48:21 +00:00
942f829825
These have been created artificially. The tests show that for an invalid reply line without a numeric code, with a numeric code < 100 or a numeric code not followed by a space we now raise an analyzer violation and disable the analyzer.
11 lines
421 B
Text
11 lines
421 B
Text
# @TEST-DOC: Th server replies with a line that does not contain a numeric code.: violation.
|
|
# @TEST-EXEC: zeek -b -r $TRACES/ftp/ftp-missing-reply-code.pcap %INPUT
|
|
# @TEST-EXEC: btest-diff conn.log
|
|
# @TEST-EXEC: btest-diff ftp.log
|
|
# @TEST-EXEC: btest-diff dpd.log
|
|
# @TEST-EXEC: test ! -f reporter.log
|
|
|
|
@load base/protocols/conn
|
|
@load base/protocols/ftp
|
|
|
|
redef FTP::logged_commands += { "USER", "PASS", "SYST", "QUIT" };
|