mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 06:38:20 +00:00

This commit renames analyzer-failed.log to analyzer.log, and updates the respective news entry.
13 lines
410 B
Text
13 lines
410 B
Text
# Tests for good parsing/handling of empty NTLM AV Pair sequences.
|
|
|
|
# @TEST-EXEC: zeek -b -r $TRACES/dce-rpc/ntlm-empty-av-sequence.pcap %INPUT
|
|
# @TEST-EXEC: btest-diff ntlm.log
|
|
# @TEST-EXEC: btest-diff analyzer.log
|
|
|
|
@load frameworks/analyzer/debug-logging.zeek
|
|
@load base/protocols/dce-rpc
|
|
@load base/protocols/ntlm
|
|
|
|
# ntlm by default excludes itself from analyzer logging
|
|
|
|
redef DPD::ignore_violations = {};
|