23 lines
666 B
Plaintext
23 lines
666 B
Plaintext
# This tests how Zeek deals with encrypted connections. Right now, it
|
|
# doesn't log them as it can't parse much of value. We're testing for an
|
|
# empty mysql.log file.
|
|
|
|
# @TEST-EXEC: touch mysql.log
|
|
# @TEST-EXEC: zeek -b -r $TRACES/mysql/encrypted.trace %INPUT >out
|
|
# @TEST-EXEC: btest-diff mysql.log
|
|
# @TEST-EXEC: btest-diff out
|
|
#
|
|
# Ensure the connection was handed off by peaking into some other logs.
|
|
# @TEST-EXEC: btest-diff conn.log
|
|
# @TEST-EXEC: btest-diff ssl.log
|
|
# @TEST-EXEC: btest-diff x509.log
|
|
|
|
@load base/protocols/conn
|
|
@load base/protocols/mysql
|
|
@load base/protocols/ssl
|
|
|
|
event mysql_ssl_request(c: connection)
|
|
{
|
|
print "mysql ssl request", c$uid;
|
|
}
|