mirror of
https://github.com/zeek/zeek.git
synced 2025-10-12 19:48:20 +00:00
2696ca3005
Mostly rewrote the parsing logic to support incremental parsing and to support parsing of client messages. Though I did not add events for client messages, that's easy to add later. Parsing now stops for both client and server if either encounters any parsing error or invalid state. After a complete handshake, server messages are no longer parsed. Support for that is incomplete and not sure it's that useful anyway since it mostly contains pixel data.
4 lines
112 B
Text
4 lines
112 B
Text
# @TEST-EXEC: bro -C -r $TRACES/rfb/vnc-scanner.pcap
|
|
# @TEST-EXEC: btest-diff rfb.log
|
|
|
|
@load base/protocols/rfb
|