Fix language.rare-events test to use new policy scripts.

DroppedPackets now goes in notice.log by default so that log is the
new baseline.
This commit is contained in:
Jon Siwek 2011-06-20 13:55:44 -05:00
parent c1638d7172
commit 2bb36a7d10
3 changed files with 5 additions and 4 deletions

View file

@ -0,0 +1,2 @@
# ts uid id.orig_h id.orig_p id.resp_h id.resp_p victim note msg sub src dst p n action tag do_alarm
1308596064.17872 - - - - - - PacketFilter::DroppedPackets 2 packets dropped after filtering, 1109 received, 10000 on link - - - - - Notice::ACTION_FILE @UWkUyAuUGXf F

View file

@ -1 +0,0 @@
1106953531.452525 DroppedPackets 2 packets dropped after filtering, 1109 received, 10000 on link

View file

@ -1,5 +1,5 @@
# @TEST-EXEC: bro %INPUT >output 2>&1 # @TEST-EXEC: bro %INPUT
# @TEST-EXEC: btest-diff output # @TEST-EXEC: btest-diff notice.log
# This is a test script whose job is to generate rarely-seen events # This is a test script whose job is to generate rarely-seen events
# (i.e., events that test traces might not include) to ensure that they're # (i.e., events that test traces might not include) to ensure that they're
@ -9,7 +9,7 @@
# Drop::restore_dropped_address is never defined. # Drop::restore_dropped_address is never defined.
redef check_for_unused_event_handlers = F; redef check_for_unused_event_handlers = F;
@load netstats @load packet-filter/netstats
function test_net_stats_update() function test_net_stats_update()
{ {