mirror of
https://github.com/zeek/zeek.git
synced 2025-10-04 07:38:19 +00:00
89d66af792
The HTTP analyzer was propogating Gaps to the files framework even in the case of a packet drop occurring immediately after the headers are completed in an HTTP response when the response content length was declared to be zero (no file started, so no loss). Includes passing test.
10 lines
356 B
Text
10 lines
356 B
Text
# This tests an issue with interaction between zero length
|
|
# http bodies and the file analysis code. It is creating
|
|
# files when there isn't actually any body there and shouldn't
|
|
# create a file.
|
|
#
|
|
# @TEST-EXEC: bro -r $TRACES/http/zero-length-bodies-with-drops.pcap %INPUT
|
|
|
|
# There shouldn't be a files log (no files!)
|
|
# @TEST-EXEC: test ! -f files.log
|
|
|