Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-16 21:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Changing the start/end markers in logs to open/close now reflecting

Browse source 
wall clock.

Triggers lots of (simple) baseline updates.
This commit is contained in:
Robin Sommer 2012-07-27 12:15:21 -07:00
parent f5862fb014
commit 1fd0d7a607
102 changed files with 294 additions and 305 deletions
Download patch file Download diff file Expand all files Collapse all files

4
testing/btest/Baseline/scripts.base.frameworks.logging.empty-event/ssh.log
View file

@ -3,7 +3,7 @@
#empty_field (empty)
#unset_field -
#path ssh
#start 2012-07-20-01-49-20
#open 2012-07-20-01-49-20
#fields t id.orig_h id.orig_p id.resp_h id.resp_p status country
#types time addr port addr port string string
1342748960.468458 1.2.3.4 1234 2.3.4.5 80 success unknown
@ -11,4 +11,4 @@
1342748960.468458 1.2.3.4 1234 2.3.4.5 80 failure UK
1342748960.468458 1.2.3.4 1234 2.3.4.5 80 success BR
1342748960.468458 1.2.3.4 1234 2.3.4.5 80 failure MX
#end 2012-07-20-01-49-20
#close 2012-07-20-01-49-20