Ignore localnets as dst for callbacks !

initconf · initconf · commit f3aed0bbc656 · 2021-12-23T08:00:03.000-08:00
diff --git a/scripts/log4j-http-posts.zeek b/scripts/log4j-http-posts.zeek
@@ -47,6 +47,9 @@ event new_connection(c: connection)
         local resp=c$id$resp_h;
         local dport = c$id$resp_p;
 
+	if (resp in Site::local_nets)
+		return; 
+
         local a:ip_port=[$ip=resp, $p=dport];
 
         if (a in track_callback)
diff --git a/tests/.btest.failed.dat b/tests/.btest.failed.dat
@@ -1,5 +0,0 @@
-log4j.HTTP-POSTS
-log4j.Many-User-Agents
-log4j.multiple-name-values
-log4j.obfuscated-regexp
-log4j.scan-and-callback
