mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 06:38:20 +00:00
28e8abbf19
We previously computed the length of the Geneve options field incorrectly which lead to us passing data at an incorrect offset to inner analyzers. With this patch we now interpret the length field correctly, according the the spec https://datatracker.ietf.org/doc/html/rfc8926#section-3.4. Closes #1726.
14 lines
749 B
Text
14 lines
749 B
Text
### BTest baseline data generated by btest-diff. Do not edit. Use "btest -U/-u" to update. Requires BTest >= 0.63.
|
|
#separator \x09
|
|
#set_separator ,
|
|
#empty_field (empty)
|
|
#unset_field -
|
|
#path tunnel
|
|
#open XXXX-XX-XX-XX-XX-XX
|
|
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p tunnel_type action
|
|
#types time string addr port addr port enum enum
|
|
XXXXXXXXXX.XXXXXX CHhAvVGS1DHFjwGM9 20.0.0.1 50901 20.0.0.2 6081 Tunnel::GENEVE Tunnel::DISCOVER
|
|
XXXXXXXXXX.XXXXXX C4J4Th3PJpwUYZZ6gc 20.0.0.2 0 20.0.0.1 6081 Tunnel::GENEVE Tunnel::DISCOVER
|
|
XXXXXXXXXX.XXXXXX C4J4Th3PJpwUYZZ6gc 20.0.0.2 0 20.0.0.1 6081 Tunnel::GENEVE Tunnel::CLOSE
|
|
XXXXXXXXXX.XXXXXX CHhAvVGS1DHFjwGM9 20.0.0.1 50901 20.0.0.2 6081 Tunnel::GENEVE Tunnel::CLOSE
|
|
#close XXXX-XX-XX-XX-XX-XX
|