zeek/testing/btest/core/tcp/flip-without-syn.zeek
Patrick Kelley 8fd444092b initial
2025-05-07 15:35:15 -04:00

5 lines
249 B
Plaintext

# @TEST-EXEC: zeek -r $TRACES/tcp/http-on-irc-port-missing-syn.pcap %INPUT
# @TEST-EXEC: btest-diff conn.log
# @TEST-DOC: Regression test for #2191: missing SYN and misleading well-known port. Zeek flips, and DPD still figures out the protocol ok.