mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 14:48:21 +00:00
f56785740c
The user and password fields are replicated to each of the ftp.log entries. Using a very large username (100s of KBs) allows to bloat the log without actually sending much traffic. Further, limit the arg and reply_msg columns to large, but not unbounded values.
13 lines
400 B
Text
13 lines
400 B
Text
# Test truncation of the user and password fields in the log.
|
|
# The password is "test", the user is "anonymous".
|
|
#
|
|
# @TEST-EXEC: zeek -b -r $TRACES/ftp/ipv4.trace %INPUT
|
|
# @TEST-EXEC: btest-diff ftp.log
|
|
# @TEST-EXEC: btest-diff weird.log
|
|
|
|
@load base/protocols/conn
|
|
@load base/protocols/ftp
|
|
|
|
redef FTP::max_user_length = 4;
|
|
redef FTP::max_password_length = 2;
|
|
redef FTP::default_capture_password = T;
|