zeek/testing/btest/scripts/base/protocols/http/version-mismatch.zeek
Patrick Kelley 8fd444092b initial
2025-05-07 15:35:15 -04:00

8 lines
338 B
Plaintext

# @TEST-DOC: Pcap extracted from 2009-M57-day11-18.trace: The server replies with HTTP/1.1, then HTTP/1.0 (also different Server headers).
# @TEST-EXEC: zeek -b -Cr $TRACES/http/version-mismatch.pcap %INPUT
# @TEST-EXEC: btest-diff http.log
# @TEST-EXEC: btest-diff weird.log
@load base/protocols/http
@load base/frameworks/notice/weird