aboutsummaryrefslogtreecommitdiff
path: root/tests
diff options
context:
space:
mode:
authorNardi Ivan <nardi.ivan@gmail.com>2021-09-21 17:56:31 +0200
committerNardi Ivan <nardi.ivan@gmail.com>2021-09-21 20:53:04 +0200
commit017c1a42394501914f850fd54411884545105879 (patch)
treeff6f3b34143dd7031950d53734a06032b4091a04 /tests
parentbb52f1362ca80f58eb2bb4a76bb4840fa30afab3 (diff)
FTP: fix support for START-TLS sessions
When TLS-over-FTP is used, the credentials are encrypted. So we must not wait for the username and the password commands, otherwise we elaborate a lot of packets for nothing.
Diffstat (limited to 'tests')
-rw-r--r--tests/pcap/ftp-start-tls.pcapbin0 -> 8350 bytes
-rw-r--r--tests/result/ftp-start-tls.pcap.out7
2 files changed, 7 insertions, 0 deletions
diff --git a/tests/pcap/ftp-start-tls.pcap b/tests/pcap/ftp-start-tls.pcap
new file mode 100644
index 000000000..738ccba4e
--- /dev/null
+++ b/tests/pcap/ftp-start-tls.pcap
Binary files differ
diff --git a/tests/result/ftp-start-tls.pcap.out b/tests/result/ftp-start-tls.pcap.out
new file mode 100644
index 000000000..e793099ab
--- /dev/null
+++ b/tests/result/ftp-start-tls.pcap.out
@@ -0,0 +1,7 @@
+Guessed flow protos: 0
+
+DPI Packets (TCP): 10 (10.00 pkts/flow)
+
+FTP_CONTROL 51 7510 1
+
+ 1 TCP 10.238.26.36:62092 <-> 10.220.50.76:21 [proto: 1/FTP_CONTROL][ClearText][cat: Download/7][16 pkts/1744 bytes <-> 35 pkts/5766 bytes][Goodput ratio: 49/66][0.33 sec][bytes ratio: -0.536 (Download)][IAT c2s/s2c min/avg/max/stddev: 1/0 13/4 34/34 13/8][Pkt Len c2s/s2c min/avg/max/stddev: 60/60 109/165 384/566 80/152][Risk: ** Unsafe Protocol **][Risk Score: 10][PLAIN TEXT (Authorized users only. All acti)][Plen Bins: 22,25,32,0,2,0,5,0,0,0,2,0,0,0,0,0,10,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]