Emmanuele Zambon 05d92dc2a5 Prevent non-Modbus on port 502 to be reported as Modbus ... This commit prevents most non-Modbus TCP traffic on port 502 to be reported as Modbus in conn.log as well as in modbus.log. To do so, we have introduced two &enforce checks in the Modbus protocol definition that checks that some specific fields of the (supposedly) Modbus header are compatible with values specified in the specs. To ensure non-regression, with this commit we also introduce a new btest. Closes #3962		2024-10-21 14:40:45 +02:00
..
coil_parsing_big.zeek	General btest cleanup	2020-08-11 11:26:22 -07:00
coil_parsing_small.zeek	General btest cleanup	2020-08-11 11:26:22 -07:00
events.zeek	Pass parsed file record information with ReadFile/WriteFile events	2023-08-07 13:44:38 -07:00
exception_handling.test	More bro-to-zeek renaming in the unit tests	2019-05-16 02:27:54 -05:00
length_mismatch.zeek	Spelling testing	2022-11-16 20:05:03 -05:00
modbus_and_non_modbus_on_port_502.test	Prevent non-Modbus on port 502 to be reported as Modbus	2024-10-21 14:40:45 +02:00
policy.zeek	GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev.	2019-05-01 21:43:45 +00:00
register_parsing.zeek	General btest cleanup	2020-08-11 11:26:22 -07:00