Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 06:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

dpd->analyzer.log change - rename files

Browse source 
To address review feedback in GH-4362: rename analyzer-failed-log.zeek
to loggig.zeek, analyzer-debug-log.zeek to debug-logging.zeek and
dpd-log.zeek to deprecated-dpd-log.zeek.

Includes respective test, NEWS, etc updates.
This commit is contained in:
Johanna Amann 2025-04-15 11:56:31 +01:00
parent af77a7a83b
commit 130c89a0a7
29 changed files with 36 additions and 39 deletions
Download patch file Download diff file Expand all files Collapse all files

2
testing/btest/scripts/base/protocols/dce-rpc/ntlm-empty-av-pair-seq.zeek
View file

@ -4,7 +4,7 @@
# @TEST-EXEC: btest-diff ntlm.log
# @TEST-EXEC: btest-diff analyzer_failed.log
@load frameworks/analyzer/analyzer-debug-log.zeek
@load frameworks/analyzer/debug-logging.zeek
@load base/protocols/dce-rpc
@load base/protocols/ntlm

2
testing/btest/scripts/base/protocols/modbus/modbus_and_non_modbus_on_port_502.test
View file

@ -31,4 +31,4 @@
# The pcap has non Modbus traffic (i.e., DCERPC, HTTP, Magellan, NFS, RDP, TLS) on TCP port 502.
# This traffic should not be labelled as Modbus in conn.log, and not generate any Modbus events.
@load frameworks/analyzer/analyzer-debug-log.zeek
@load frameworks/analyzer/debug-logging.zeek

2
testing/btest/scripts/base/protocols/pop3/bad-list-retr-crafted.zeek
View file

@ -4,7 +4,7 @@
# @TEST-EXEC: btest-diff weird.log
# @TEST-EXEC: btest-diff analyzer_debug.log
@load frameworks/analyzer/analyzer-debug-log.zeek
@load frameworks/analyzer/debug-logging.zeek
@load base/frameworks/notice/weird
@load base/protocols/conn
@load base/protocols/pop3

2
testing/btest/scripts/base/protocols/pop3/redis.zeek
View file

@ -5,7 +5,7 @@
# @TEST-EXEC: btest-diff weird.log
# @TEST-EXEC: btest-diff analyzer_debug.log
@load frameworks/analyzer/analyzer-debug-log.zeek
@load frameworks/analyzer/debug-logging.zeek
@load base/frameworks/notice/weird
@load base/protocols/conn
@load base/protocols/pop3

2
testing/btest/scripts/base/protocols/postgresql/http-on-port-5432.zeek
View file

@ -9,6 +9,6 @@
# @TEST-EXEC: TEST_DIFF_CANONIFIER="sed -r 's,(.*) \(/[^\)]+\),\1 (...),'" btest-diff analyzer.cut
# @TEST-EXEC: test ! -f postgresql.log
@load frameworks/analyzer/analyzer-debug-log.zeek
@load frameworks/analyzer/debug-logging.zeek
@load base/protocols/conn
@load base/protocols/postgresql

2
testing/btest/scripts/base/protocols/postgresql/mysql-on-port-5432.zeek
View file

@ -9,6 +9,6 @@
# @TEST-EXEC: TEST_DIFF_CANONIFIER="sed -r 's,(.*) \(/[^\)]+\),\1 (...),'" btest-diff analyzer.cut
# @TEST-EXEC: test ! -f postgresql.log
@load frameworks/analyzer/analyzer-debug-log.zeek
@load frameworks/analyzer/debug-logging.zeek
@load base/protocols/conn
@load base/protocols/postgresql

2
testing/btest/scripts/base/protocols/quic/decrypt-crash.zeek
View file

@ -7,4 +7,4 @@
# @TEST-EXEC: btest-diff conn.log.cut
# @TEST-EXEC: TEST_DIFF_CANONIFIER='sed -E "s/\((.+)\.spicy:[0-9]+:[0-9]+(-[0-9]+:[0-9]+)?\)/(\1.spicy:<location>)/g" | $SCRIPTS/diff-remove-abspath' btest-diff analyzer_debug.log.cut
@load frameworks/analyzer/analyzer-debug-log.zeek
@load frameworks/analyzer/debug-logging.zeek

2
testing/btest/scripts/base/protocols/quic/vector-max-size-crash.zeek
View file

@ -10,7 +10,7 @@
# @TEST-EXEC: TEST_DIFF_CANONIFIER='sed -E "s/\((.+)\.spicy:[0-9]+:[0-9]+(-[0-9]+:[0-9]+)?\)/(\1.spicy:<location>)/g" | $SCRIPTS/diff-remove-abspath' btest-diff analyzer_debug.log.cut
@load frameworks/analyzer/analyzer-debug-log.zeek
@load frameworks/analyzer/debug-logging.zeek
event QUIC::unhandled_version(c: connection, is_orig: bool, version: count, dcid: string, scid: string)
{

2
testing/btest/scripts/base/protocols/rdp/rdp-invalid-length.zeek
View file

@ -5,5 +5,5 @@
# @TEST-EXEC: zeek -C -b -r $TRACES/rdp/rdp-invalid-length.pcap %INPUT
# @TEST-EXEC: btest-diff analyzer_debug.log
@load frameworks/analyzer/analyzer-debug-log.zeek
@load frameworks/analyzer/debug-logging.zeek
@load base/protocols/rdp

2
testing/btest/scripts/base/protocols/smb/smb1-OSS-fuzz-54883.test
View file

@ -3,7 +3,7 @@
#@TEST-EXEC: ! test -f reporter.log
@load base/protocols/smb
@load frameworks/analyzer/analyzer-debug-log.zeek
@load frameworks/analyzer/debug-logging.zeek
# The traffic generated by OSS Fuzz is broken to the extreme, ensure
# the analyzer isn't disabled so the original scripting issue triggers.

2
testing/btest/scripts/base/protocols/ssh/half-duplex-client.zeek
View file

@ -7,5 +7,5 @@
# @TEST-EXEC: btest-diff conn.log
# @TEST-EXEC: btest-diff .stdout
@load frameworks/analyzer/analyzer-debug-log.zeek
@load frameworks/analyzer/debug-logging.zeek

2
testing/btest/scripts/base/protocols/ssh/half-duplex-server.zeek
View file

@ -7,4 +7,4 @@
# @TEST-EXEC: btest-diff conn.log
# @TEST-EXEC: btest-diff .stdout
@load frameworks/analyzer/analyzer-debug-log.zeek
@load frameworks/analyzer/debug-logging.zeek

2
testing/btest/scripts/base/protocols/ssh/http-port-22.test
View file

@ -6,5 +6,5 @@
# @TEST-EXEC: btest-diff conn.log
# @TEST-EXEC: TEST_DIFF_CANONIFIER="$SCRIPTS/diff-remove-abspath | $SCRIPTS/diff-remove-timestamps" btest-diff analyzer_debug.log
@load frameworks/analyzer/analyzer-debug-log.zeek
@load frameworks/analyzer/debug-logging.zeek

2
testing/btest/scripts/policy/frameworks/analyzer/logging-debug.zeek
View file

@ -14,7 +14,7 @@
@load base/protocols/dns
@load base/protocols/socks
@load frameworks/analyzer/analyzer-debug-log
@load frameworks/analyzer/debug-logging
# DCE RPC violations are ignored by default. Consider violations for this
# test so that the analyzer will be disabled eventually.