mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 14:48:21 +00:00
f56785740c
The user and password fields are replicated to each of the ftp.log entries. Using a very large username (100s of KBs) allows to bloat the log without actually sending much traffic. Further, limit the arg and reply_msg columns to large, but not unbounded values.
12 lines
348 B
Text
12 lines
348 B
Text
# Test truncation of the arg field in the ftp.log.
|
|
#
|
|
# @TEST-EXEC: zeek -b -r $TRACES/ftp/ipv4.trace %INPUT
|
|
# @TEST-EXEC: btest-diff ftp.log
|
|
# @TEST-EXEC: btest-diff weird.log
|
|
|
|
@load base/protocols/conn
|
|
@load base/protocols/ftp
|
|
|
|
redef FTP::logged_commands += { "CWD", "USER" };
|
|
redef FTP::max_arg_length = 13;
|
|
redef FTP::max_reply_msg_length = 17;
|