Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-13 03:58:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Tweak find-filtered-trace to not flag traces if they have non-TCP

Browse source 
traffic.

Closes #160.
This commit is contained in:
Robin Sommer 2020-09-25 11:27:54 +00:00
parent ee5212c4a9
commit 1f6fc4415f
5 changed files with 10 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
testing/btest/scripts/base/misc/find-filtered-trace.test
View file

@ -1,6 +1,8 @@
# @TEST-EXEC: zeek -b -r $TRACES/http/bro.org-filtered.pcap %INPUT >out1 2>&1
# @TEST-EXEC: zeek -b -r $TRACES/http/bro.org-filtered.pcap %INPUT "FilteredTraceDetection::enable=F" >out2 2>&1
# @TEST-EXEC: zeek -b -r $TRACES/wikipedia-filtered-plus-udp.trace %INPUT >out3 2>&1
# @TEST-EXEC: TEST_DIFF_CANONIFIER=$SCRIPTS/diff-remove-abspath btest-diff out1
# @TEST-EXEC: btest-diff out2
# @TEST-EXEC: btest-diff out3
@load base/misc/find-filtered-trace