mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 06:38:20 +00:00

The payload is already consumed within the InitialPacket unit. Consuming it again resulted in UDP datagrams with multiple packets to ignore the remaining packets in the same UDP datagram. The baseline changes showing I being followed by a new H indicates that the INITIAL packet was followed by a HANDSHAKE packet, but previously Zeek discarded these.
11 lines
673 B
Text
11 lines
673 B
Text
### BTest baseline data generated by btest-diff. Do not edit. Use "btest -U/-u" to update. Requires BTest >= 0.63.
|
|
#separator \x09
|
|
#set_separator ,
|
|
#empty_field (empty)
|
|
#unset_field -
|
|
#path quic
|
|
#open XXXX-XX-XX-XX-XX-XX
|
|
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p version client_initial_dcid client_scid server_scid server_name client_protocol history
|
|
#types time string addr port addr port string string string string string string string
|
|
XXXXXXXXXX.XXXXXX CHhAvVGS1DHFjwGM9 172.17.0.2 34347 64.233.166.94 443 1 815d62c70884f4b51e8ccadd5beed372 e5ec6b26584229be98a164349ae910351c40d10b c15d62c70884f4b5 www.google.de h3 ISishIHhHhhH
|
|
#close XXXX-XX-XX-XX-XX-XX
|