mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 14:48:21 +00:00
0cab87c185
ASN1Message(True) may go off parsing arbitrary input data as "something ASN.1" This could be GBs of octet strings or just very long sequences. Avoid this by open-coding some top-level types expected. This also tries to avoid some of the &parse-from usages that result in unnecessary copies of data. Adds a locally generated PCAP with addRequest/addResponse that we don't currently handle.
11 lines
487 B
Text
11 lines
487 B
Text
# Copyright (c) 2024 by the Zeek Project. See LICENSE for details.
|
|
|
|
# @TEST-REQUIRES: have-spicy
|
|
# @TEST-EXEC: zeek -C -r ${TRACES}/ldap/ldap-add.pcap %INPUT
|
|
# @TEST-EXEC: cat conn.log | zeek-cut -Cn local_orig local_resp > conn.log2 && mv conn.log2 conn.log
|
|
# @TEST-EXEC: btest-diff conn.log
|
|
# @TEST-EXEC: btest-diff ldap.log
|
|
# @TEST-EXEC: ! test -f dpd.log
|
|
# @TEST-EXEC: ! test -f analyzer.log
|
|
#
|
|
# @TEST-DOC: The addRequest/addResponse operation is not implemented, yet we process it.
|