corelight / corelight/CVE-2022-26937
btest fails with Zeek v8.0.0 due to conn.log ip_proto
Open
- Dominant language
- Zeek
- Stars
- 7
- Forks
- 4
- PR merge metrics
- No merged PRs in 30d
Description
conn.log includes ip_proto and the test baseline doesn't account for it
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by running btest for the package and inspect the conn.log test baseline referenced by the issue. Update the baseline to account for the ip_proto field added by Zeek v8.0.0, then confirm that btest passes.
Written by the indexing model from the issue text.
Assessment
- Domain
- networking, security
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100