Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-08 01:28:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Add a btest for the PE analyzer.

Browse source
This commit is contained in:
Vlad Grigorescu 2015-04-19 20:27:24 -04:00
parent 93b84463f5
commit 0199ac5ece
2 changed files with 18 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

5
testing/btest/scripts/base/files/pe/basic.test Normal file
View file

@ -0,0 +1,5 @@
# This tests the PE analyzer against a PCAP of 4 PE files being downloaded via FTP.
# The files are a mix of DLL/EXEs, signed/unsigned, and 32/64-bit files.
# @TEST-EXEC: bro -r $TRACES/pe/pe.trace %INPUT
# @TEST-EXEC: btest-diff pe.log