mirror of
https://github.com/zeek/zeek.git
synced 2025-10-17 05:58:20 +00:00

If connection flipping occured in Sessions.cc code (invoked e.g. when the original SYN is missing), layer 2 flipping was not performed. This change switches to always use the connection flipping code in Conn.cc which performs the switch correctly.
4 lines
135 B
Text
4 lines
135 B
Text
# @TEST-EXEC: bro -C -r $TRACES/tcp/missing-syn.pcap %INPUT
|
|
# @TEST-EXEC: btest-diff conn.log
|
|
|
|
@load policy/protocols/conn/mac-logging
|