Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-08 09:38:19 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Btest baseline updates to reflect new logging policy hooks

Browse source
This commit is contained in:
Christian Kreibich 2020-09-23 17:24:30 -07:00
parent 7bd8351719
commit 2a49715fe6
3 changed files with 564 additions and 552 deletions
Download patch file Download diff file Expand all files Collapse all files

2
testing/btest/Baseline/core.pcap.filter-error/output
View file

@ -1,3 +1,3 @@
fatal error in /home/robin/bro/master/scripts/base/frameworks/packet-filter/./main.zeek, line 282: Bad pcap filter 'kaputt' fatal error in /home/robin/bro/master/scripts/base/frameworks/packet-filter/./main.zeek, line 285: Bad pcap filter 'kaputt'
---- ----
error, cannot compile BPF filter "kaputt, too" error, cannot compile BPF filter "kaputt, too"

1106
testing/btest/Baseline/plugins.hooks/output
View file

File diff suppressed because it is too large Load diff

8
testing/btest/Baseline/scripts.base.frameworks.intel.remove-non-existing/output
View file

@ -3,9 +3,9 @@
#empty_field (empty) #empty_field (empty)
#unset_field - #unset_field -
#path reporter #path reporter
#open 2019-03-24-20-20-10 #open 2020-09-24-00-19-13
#fields ts level message location #fields ts level message location
#types time enum string string #types time enum string string
0.000000 Reporter::INFO Tried to remove non-existing item '192.168.1.1' (Intel::ADDR). /home/jgras/devel/zeek/scripts/base/frameworks/intel/./main.zeek, lines 563-564 1600906753.185591 Reporter::INFO Tried to remove non-existing item '192.168.1.1' (Intel::ADDR). /home/christian/devel/zeek/zeek/scripts/base/frameworks/intel/./main.zeek, lines 565-566
0.000000 Reporter::INFO received termination signal (empty) 1600906753.185591 Reporter::INFO received termination signal (empty)
#close 2019-03-24-20-20-10 #close 2020-09-24-00-19-13