Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 14:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Add TEST-REQUIRES: which jq to two new tests that are using jq

Browse source
This commit is contained in:
Johanna Amann 2024-11-27 16:51:53 +00:00
parent e52bad6192
commit 079581aa6b
2 changed files with 2 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
testing/btest/scripts/policy/protocols/conn/disable-unknown-ip-proto-support.zeek
View file

@ -1,3 +1,4 @@
# @TEST-REQUIRES: which jq
# @TEST-DOC: Test the policy for removing the unknown IP protocol field and connections from conn.log # @TEST-DOC: Test the policy for removing the unknown IP protocol field and connections from conn.log
# @TEST-EXEC: zeek -r $TRACES/cisco-fabric-path.pcap %INPUT # @TEST-EXEC: zeek -r $TRACES/cisco-fabric-path.pcap %INPUT
# @TEST-EXEC: test $(head -1 conn.log | jq 'has("ip_proto")') = "false" # @TEST-EXEC: test $(head -1 conn.log | jq 'has("ip_proto")') = "false"

1
testing/btest/scripts/policy/protocols/conn/ip-proto-name-logging.zeek
View file

@ -1,3 +1,4 @@
# @TEST-REQUIRES: which jq
# @TEST-DOC: Tests the ip-proto-name-logging policy file # @TEST-DOC: Tests the ip-proto-name-logging policy file
# @TEST-EXEC: zeek -r $TRACES/cisco-fabric-path.pcap %INPUT > out # @TEST-EXEC: zeek -r $TRACES/cisco-fabric-path.pcap %INPUT > out