mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 06:38:20 +00:00
ee12a7a6e7
Using pcaps from https://interop.seemann.io/ as samples for QUIC protocol data didn't produce a conn.log for the contained data. `tcpdump -r` and Wireshark do show the contained IP/UDP packets. Teach Zeek how to handle link type DLT_PPP 0x09 using a new PPP analyzer based on the PPPSerial analyzer code. Usual update to files/x509 baseline after adding new analyzer due to enum values changing.
234 lines
7.9 KiB
Text
234 lines
7.9 KiB
Text
### BTest baseline data generated by btest-diff. Do not edit. Use "btest -U/-u" to update. Requires BTest >= 0.63.
|
|
0.000000 zeek_init
|
|
0.000000 NetControl::init
|
|
0.000000 filter_change_tracking
|
|
XXXXXXXXXX.XXXXXX Broker::log_flush
|
|
XXXXXXXXXX.XXXXXX ChecksumOffloading::check
|
|
XXXXXXXXXX.XXXXXX run_sync_hook
|
|
XXXXXXXXXX.XXXXXX filter_change_tracking
|
|
XXXXXXXXXX.XXXXXX new_connection
|
|
XXXXXXXXXX.XXXXXX dns_message
|
|
XXXXXXXXXX.XXXXXX dns_request
|
|
XXXXXXXXXX.XXXXXX analyzer_confirmation_info
|
|
XXXXXXXXXX.XXXXXX dns_end
|
|
XXXXXXXXXX.XXXXXX dns_message
|
|
XXXXXXXXXX.XXXXXX dns_CNAME_reply
|
|
XXXXXXXXXX.XXXXXX dns_A_reply
|
|
XXXXXXXXXX.XXXXXX dns_end
|
|
XXXXXXXXXX.XXXXXX new_connection
|
|
XXXXXXXXXX.XXXXXX connection_established
|
|
XXXXXXXXXX.XXXXXX smtp_reply
|
|
XXXXXXXXXX.XXXXXX smtp_reply
|
|
XXXXXXXXXX.XXXXXX smtp_reply
|
|
XXXXXXXXXX.XXXXXX analyzer_confirmation_info
|
|
XXXXXXXXXX.XXXXXX smtp_request
|
|
XXXXXXXXXX.XXXXXX Broker::log_flush
|
|
XXXXXXXXXX.XXXXXX smtp_reply
|
|
XXXXXXXXXX.XXXXXX smtp_reply
|
|
XXXXXXXXXX.XXXXXX smtp_reply
|
|
XXXXXXXXXX.XXXXXX smtp_reply
|
|
XXXXXXXXXX.XXXXXX smtp_reply
|
|
XXXXXXXXXX.XXXXXX smtp_reply
|
|
XXXXXXXXXX.XXXXXX smtp_request
|
|
XXXXXXXXXX.XXXXXX smtp_reply
|
|
XXXXXXXXXX.XXXXXX smtp_request
|
|
XXXXXXXXXX.XXXXXX smtp_reply
|
|
XXXXXXXXXX.XXXXXX smtp_request
|
|
XXXXXXXXXX.XXXXXX Broker::log_flush
|
|
XXXXXXXXXX.XXXXXX smtp_reply
|
|
XXXXXXXXXX.XXXXXX smtp_request
|
|
XXXXXXXXXX.XXXXXX smtp_reply
|
|
XXXXXXXXXX.XXXXXX smtp_request
|
|
XXXXXXXXXX.XXXXXX smtp_reply
|
|
XXXXXXXXXX.XXXXXX smtp_request
|
|
XXXXXXXXXX.XXXXXX mime_begin_entity
|
|
XXXXXXXXXX.XXXXXX Broker::log_flush
|
|
XXXXXXXXXX.XXXXXX smtp_reply
|
|
XXXXXXXXXX.XXXXXX mime_one_header
|
|
XXXXXXXXXX.XXXXXX mime_one_header
|
|
XXXXXXXXXX.XXXXXX mime_one_header
|
|
XXXXXXXXXX.XXXXXX mime_one_header
|
|
XXXXXXXXXX.XXXXXX mime_one_header
|
|
XXXXXXXXXX.XXXXXX mime_one_header
|
|
XXXXXXXXXX.XXXXXX mime_one_header
|
|
XXXXXXXXXX.XXXXXX mime_one_header
|
|
XXXXXXXXXX.XXXXXX mime_one_header
|
|
XXXXXXXXXX.XXXXXX mime_one_header
|
|
XXXXXXXXXX.XXXXXX mime_one_header
|
|
XXXXXXXXXX.XXXXXX mime_one_header
|
|
XXXXXXXXXX.XXXXXX mime_begin_entity
|
|
XXXXXXXXXX.XXXXXX mime_one_header
|
|
XXXXXXXXXX.XXXXXX mime_begin_entity
|
|
XXXXXXXXXX.XXXXXX mime_one_header
|
|
XXXXXXXXXX.XXXXXX mime_one_header
|
|
XXXXXXXXXX.XXXXXX get_file_handle
|
|
XXXXXXXXXX.XXXXXX file_new
|
|
XXXXXXXXXX.XXXXXX file_over_new_connection
|
|
XXXXXXXXXX.XXXXXX mime_end_entity
|
|
XXXXXXXXXX.XXXXXX file_sniff
|
|
XXXXXXXXXX.XXXXXX file_state_remove
|
|
XXXXXXXXXX.XXXXXX mime_begin_entity
|
|
XXXXXXXXXX.XXXXXX mime_one_header
|
|
XXXXXXXXXX.XXXXXX mime_one_header
|
|
XXXXXXXXXX.XXXXXX get_file_handle
|
|
XXXXXXXXXX.XXXXXX file_new
|
|
XXXXXXXXXX.XXXXXX file_over_new_connection
|
|
XXXXXXXXXX.XXXXXX mime_end_entity
|
|
XXXXXXXXXX.XXXXXX file_sniff
|
|
XXXXXXXXXX.XXXXXX file_state_remove
|
|
XXXXXXXXXX.XXXXXX mime_end_entity
|
|
XXXXXXXXXX.XXXXXX get_file_handle
|
|
XXXXXXXXXX.XXXXXX get_file_handle
|
|
XXXXXXXXXX.XXXXXX mime_begin_entity
|
|
XXXXXXXXXX.XXXXXX mime_one_header
|
|
XXXXXXXXXX.XXXXXX mime_one_header
|
|
XXXXXXXXXX.XXXXXX mime_one_header
|
|
XXXXXXXXXX.XXXXXX get_file_handle
|
|
XXXXXXXXXX.XXXXXX file_new
|
|
XXXXXXXXXX.XXXXXX file_over_new_connection
|
|
XXXXXXXXXX.XXXXXX new_connection
|
|
XXXXXXXXXX.XXXXXX file_sniff
|
|
XXXXXXXXXX.XXXXXX Broker::log_flush
|
|
XXXXXXXXXX.XXXXXX mime_end_entity
|
|
XXXXXXXXXX.XXXXXX file_state_remove
|
|
XXXXXXXXXX.XXXXXX mime_end_entity
|
|
XXXXXXXXXX.XXXXXX get_file_handle
|
|
XXXXXXXXXX.XXXXXX get_file_handle
|
|
XXXXXXXXXX.XXXXXX get_file_handle
|
|
XXXXXXXXXX.XXXXXX get_file_handle
|
|
XXXXXXXXXX.XXXXXX smtp_request
|
|
XXXXXXXXXX.XXXXXX smtp_reply
|
|
XXXXXXXXXX.XXXXXX Broker::log_flush
|
|
XXXXXXXXXX.XXXXXX smtp_request
|
|
XXXXXXXXXX.XXXXXX smtp_reply
|
|
XXXXXXXXXX.XXXXXX Broker::log_flush
|
|
XXXXXXXXXX.XXXXXX new_connection
|
|
XXXXXXXXXX.XXXXXX run_sync_hook
|
|
XXXXXXXXXX.XXXXXX ChecksumOffloading::check
|
|
XXXXXXXXXX.XXXXXX connection_state_remove
|
|
XXXXXXXXXX.XXXXXX Broker::log_flush
|
|
XXXXXXXXXX.XXXXXX connection_state_remove
|
|
XXXXXXXXXX.XXXXXX connection_state_remove
|
|
XXXXXXXXXX.XXXXXX connection_state_remove
|
|
XXXXXXXXXX.XXXXXX filter_change_tracking
|
|
XXXXXXXXXX.XXXXXX new_connection
|
|
XXXXXXXXXX.XXXXXX Broker::log_flush
|
|
XXXXXXXXXX.XXXXXX run_sync_hook
|
|
XXXXXXXXXX.XXXXXX new_connection
|
|
XXXXXXXXXX.XXXXXX connection_established
|
|
XXXXXXXXXX.XXXXXX smtp_reply
|
|
XXXXXXXXXX.XXXXXX analyzer_confirmation_info
|
|
XXXXXXXXXX.XXXXXX smtp_request
|
|
XXXXXXXXXX.XXXXXX smtp_reply
|
|
XXXXXXXXXX.XXXXXX smtp_reply
|
|
XXXXXXXXXX.XXXXXX smtp_reply
|
|
XXXXXXXXXX.XXXXXX smtp_reply
|
|
XXXXXXXXXX.XXXXXX smtp_request
|
|
XXXXXXXXXX.XXXXXX smtp_reply
|
|
XXXXXXXXXX.XXXXXX smtp_request
|
|
XXXXXXXXXX.XXXXXX smtp_reply
|
|
XXXXXXXXXX.XXXXXX smtp_request
|
|
XXXXXXXXXX.XXXXXX smtp_reply
|
|
XXXXXXXXXX.XXXXXX smtp_request
|
|
XXXXXXXXXX.XXXXXX smtp_reply
|
|
XXXXXXXXXX.XXXXXX smtp_request
|
|
XXXXXXXXXX.XXXXXX mime_begin_entity
|
|
XXXXXXXXXX.XXXXXX smtp_reply
|
|
XXXXXXXXXX.XXXXXX mime_one_header
|
|
XXXXXXXXXX.XXXXXX mime_one_header
|
|
XXXXXXXXXX.XXXXXX mime_one_header
|
|
XXXXXXXXXX.XXXXXX mime_one_header
|
|
XXXXXXXXXX.XXXXXX mime_one_header
|
|
XXXXXXXXXX.XXXXXX mime_one_header
|
|
XXXXXXXXXX.XXXXXX mime_one_header
|
|
XXXXXXXXXX.XXXXXX mime_one_header
|
|
XXXXXXXXXX.XXXXXX mime_one_header
|
|
XXXXXXXXXX.XXXXXX mime_one_header
|
|
XXXXXXXXXX.XXXXXX mime_one_header
|
|
XXXXXXXXXX.XXXXXX mime_one_header
|
|
XXXXXXXXXX.XXXXXX get_file_handle
|
|
XXXXXXXXXX.XXXXXX file_new
|
|
XXXXXXXXXX.XXXXXX file_over_new_connection
|
|
XXXXXXXXXX.XXXXXX mime_end_entity
|
|
XXXXXXXXXX.XXXXXX file_sniff
|
|
XXXXXXXXXX.XXXXXX file_state_remove
|
|
XXXXXXXXXX.XXXXXX get_file_handle
|
|
XXXXXXXXXX.XXXXXX get_file_handle
|
|
XXXXXXXXXX.XXXXXX smtp_request
|
|
XXXXXXXXXX.XXXXXX smtp_reply
|
|
XXXXXXXXXX.XXXXXX Broker::log_flush
|
|
XXXXXXXXXX.XXXXXX run_sync_hook
|
|
XXXXXXXXXX.XXXXXX new_connection
|
|
XXXXXXXXXX.XXXXXX new_connection
|
|
XXXXXXXXXX.XXXXXX new_connection
|
|
XXXXXXXXXX.XXXXXX Broker::log_flush
|
|
XXXXXXXXXX.XXXXXX connection_established
|
|
XXXXXXXXXX.XXXXXX ssl_extension_server_name
|
|
XXXXXXXXXX.XXXXXX ssl_extension
|
|
XXXXXXXXXX.XXXXXX ssl_extension
|
|
XXXXXXXXXX.XXXXXX ssl_extension
|
|
XXXXXXXXXX.XXXXXX ssl_extension
|
|
XXXXXXXXXX.XXXXXX ssl_extension
|
|
XXXXXXXXXX.XXXXXX analyzer_confirmation_info
|
|
XXXXXXXXXX.XXXXXX ssl_client_hello
|
|
XXXXXXXXXX.XXXXXX ssl_handshake_message
|
|
XXXXXXXXXX.XXXXXX ssl_plaintext_data
|
|
XXXXXXXXXX.XXXXXX ssl_extension
|
|
XXXXXXXXXX.XXXXXX ssl_server_hello
|
|
XXXXXXXXXX.XXXXXX ssl_handshake_message
|
|
XXXXXXXXXX.XXXXXX file_new
|
|
XXXXXXXXXX.XXXXXX file_over_new_connection
|
|
XXXXXXXXXX.XXXXXX file_sniff
|
|
XXXXXXXXXX.XXXXXX file_hash
|
|
XXXXXXXXXX.XXXXXX x509_certificate
|
|
XXXXXXXXXX.XXXXXX x509_extension
|
|
XXXXXXXXXX.XXXXXX x509_extension
|
|
XXXXXXXXXX.XXXXXX x509_extension
|
|
XXXXXXXXXX.XXXXXX x509_ext_basic_constraints
|
|
XXXXXXXXXX.XXXXXX x509_extension
|
|
XXXXXXXXXX.XXXXXX x509_extension
|
|
XXXXXXXXXX.XXXXXX x509_extension
|
|
XXXXXXXXXX.XXXXXX x509_extension
|
|
XXXXXXXXXX.XXXXXX x509_extension
|
|
XXXXXXXXXX.XXXXXX x509_extension
|
|
XXXXXXXXXX.XXXXXX x509_ext_subject_alternative_name
|
|
XXXXXXXXXX.XXXXXX file_hash
|
|
XXXXXXXXXX.XXXXXX file_hash
|
|
XXXXXXXXXX.XXXXXX file_state_remove
|
|
XXXXXXXXXX.XXXXXX file_new
|
|
XXXXXXXXXX.XXXXXX file_over_new_connection
|
|
XXXXXXXXXX.XXXXXX file_sniff
|
|
XXXXXXXXXX.XXXXXX file_hash
|
|
XXXXXXXXXX.XXXXXX x509_certificate
|
|
XXXXXXXXXX.XXXXXX x509_extension
|
|
XXXXXXXXXX.XXXXXX x509_extension
|
|
XXXXXXXXXX.XXXXXX x509_extension
|
|
XXXXXXXXXX.XXXXXX x509_ext_basic_constraints
|
|
XXXXXXXXXX.XXXXXX x509_extension
|
|
XXXXXXXXXX.XXXXXX x509_extension
|
|
XXXXXXXXXX.XXXXXX x509_extension
|
|
XXXXXXXXXX.XXXXXX x509_extension
|
|
XXXXXXXXXX.XXXXXX file_hash
|
|
XXXXXXXXXX.XXXXXX file_hash
|
|
XXXXXXXXXX.XXXXXX file_state_remove
|
|
XXXXXXXXXX.XXXXXX ssl_handshake_message
|
|
XXXXXXXXXX.XXXXXX ssl_handshake_message
|
|
XXXXXXXXXX.XXXXXX ssl_plaintext_data
|
|
XXXXXXXXXX.XXXXXX ssl_handshake_message
|
|
XXXXXXXXXX.XXXXXX ssl_plaintext_data
|
|
XXXXXXXXXX.XXXXXX ssl_change_cipher_spec
|
|
XXXXXXXXXX.XXXXXX ssl_plaintext_data
|
|
XXXXXXXXXX.XXXXXX ssl_change_cipher_spec
|
|
XXXXXXXXXX.XXXXXX ssl_plaintext_data
|
|
XXXXXXXXXX.XXXXXX ssl_established
|
|
XXXXXXXXXX.XXXXXX net_done
|
|
XXXXXXXXXX.XXXXXX Broker::log_flush
|
|
XXXXXXXXXX.XXXXXX run_sync_hook
|
|
XXXXXXXXXX.XXXXXX filter_change_tracking
|
|
XXXXXXXXXX.XXXXXX connection_state_remove
|
|
XXXXXXXXXX.XXXXXX connection_state_remove
|
|
XXXXXXXXXX.XXXXXX connection_state_remove
|
|
XXXXXXXXXX.XXXXXX connection_state_remove
|
|
XXXXXXXXXX.XXXXXX connection_state_remove
|
|
XXXXXXXXXX.XXXXXX zeek_done
|
|
XXXXXXXXXX.XXXXXX ChecksumOffloading::check
|