Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-11 02:58:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Test updates and cleanup.

Browse source
This commit is contained in:
Seth Hall 2013-04-02 00:30:14 -04:00
parent 0e3c84e863
commit 423bf3b3bf
22 changed files with 130 additions and 165 deletions
Download patch file Download diff file Expand all files Collapse all files

15
doc/scripts/DocSourcesList.cmake
View file

@ -49,6 +49,14 @@ rest_target(${psd} base/frameworks/logging/writers/none.bro)
rest_target(${psd} base/frameworks/measurement/cluster.bro) rest_target(${psd} base/frameworks/measurement/cluster.bro)
rest_target(${psd} base/frameworks/measurement/main.bro) rest_target(${psd} base/frameworks/measurement/main.bro)
rest_target(${psd} base/frameworks/measurement/non-cluster.bro) rest_target(${psd} base/frameworks/measurement/non-cluster.bro)
rest_target(${psd} base/frameworks/measurement/plugins/average.bro)
rest_target(${psd} base/frameworks/measurement/plugins/max.bro)
rest_target(${psd} base/frameworks/measurement/plugins/min.bro)
rest_target(${psd} base/frameworks/measurement/plugins/sample.bro)
rest_target(${psd} base/frameworks/measurement/plugins/std-dev.bro)
rest_target(${psd} base/frameworks/measurement/plugins/sum.bro)
rest_target(${psd} base/frameworks/measurement/plugins/unique.bro)
rest_target(${psd} base/frameworks/measurement/plugins/variance.bro)
rest_target(${psd} base/frameworks/notice/actions/add-geodata.bro) rest_target(${psd} base/frameworks/notice/actions/add-geodata.bro)
rest_target(${psd} base/frameworks/notice/actions/drop.bro) rest_target(${psd} base/frameworks/notice/actions/drop.bro)
rest_target(${psd} base/frameworks/notice/actions/email_admin.bro) rest_target(${psd} base/frameworks/notice/actions/email_admin.bro)
@ -107,6 +115,7 @@ rest_target(${psd} base/utils/queue.bro)
rest_target(${psd} base/utils/site.bro) rest_target(${psd} base/utils/site.bro)
rest_target(${psd} base/utils/strings.bro) rest_target(${psd} base/utils/strings.bro)
rest_target(${psd} base/utils/thresholds.bro) rest_target(${psd} base/utils/thresholds.bro)
rest_target(${psd} base/utils/time.bro)
rest_target(${psd} base/utils/urls.bro) rest_target(${psd} base/utils/urls.bro)
rest_target(${psd} policy/frameworks/communication/listen.bro) rest_target(${psd} policy/frameworks/communication/listen.bro)
rest_target(${psd} policy/frameworks/control/controllee.bro) rest_target(${psd} policy/frameworks/control/controllee.bro)
@ -122,9 +131,6 @@ rest_target(${psd} policy/frameworks/intel/smtp-url-extraction.bro)
rest_target(${psd} policy/frameworks/intel/smtp.bro) rest_target(${psd} policy/frameworks/intel/smtp.bro)
rest_target(${psd} policy/frameworks/intel/ssl.bro) rest_target(${psd} policy/frameworks/intel/ssl.bro)
rest_target(${psd} policy/frameworks/intel/where-locations.bro) rest_target(${psd} policy/frameworks/intel/where-locations.bro)
rest_target(${psd} policy/frameworks/metrics/conn-example.bro)
rest_target(${psd} policy/frameworks/metrics/http-example.bro)
rest_target(${psd} policy/frameworks/metrics/ssl-example.bro)
rest_target(${psd} policy/frameworks/software/version-changes.bro) rest_target(${psd} policy/frameworks/software/version-changes.bro)
rest_target(${psd} policy/frameworks/software/vulnerable.bro) rest_target(${psd} policy/frameworks/software/vulnerable.bro)
rest_target(${psd} policy/integration/barnyard2/main.bro) rest_target(${psd} policy/integration/barnyard2/main.bro)
@ -136,16 +142,17 @@ rest_target(${psd} policy/misc/capture-loss.bro)
rest_target(${psd} policy/misc/detect-traceroute/main.bro) rest_target(${psd} policy/misc/detect-traceroute/main.bro)
rest_target(${psd} policy/misc/loaded-scripts.bro) rest_target(${psd} policy/misc/loaded-scripts.bro)
rest_target(${psd} policy/misc/profiling.bro) rest_target(${psd} policy/misc/profiling.bro)
rest_target(${psd} policy/misc/scan.bro)
rest_target(${psd} policy/misc/stats.bro) rest_target(${psd} policy/misc/stats.bro)
rest_target(${psd} policy/misc/trim-trace-file.bro) rest_target(${psd} policy/misc/trim-trace-file.bro)
rest_target(${psd} policy/protocols/conn/conn-stats-per-host.bro) rest_target(${psd} policy/protocols/conn/conn-stats-per-host.bro)
rest_target(${psd} policy/protocols/conn/known-hosts.bro) rest_target(${psd} policy/protocols/conn/known-hosts.bro)
rest_target(${psd} policy/protocols/conn/known-services.bro) rest_target(${psd} policy/protocols/conn/known-services.bro)
rest_target(${psd} policy/protocols/conn/metrics.bro) rest_target(${psd} policy/protocols/conn/metrics.bro)
rest_target(${psd} policy/protocols/conn/scan.bro)
rest_target(${psd} policy/protocols/conn/weirds.bro) rest_target(${psd} policy/protocols/conn/weirds.bro)
rest_target(${psd} policy/protocols/dns/auth-addl.bro) rest_target(${psd} policy/protocols/dns/auth-addl.bro)
rest_target(${psd} policy/protocols/dns/detect-external-names.bro) rest_target(${psd} policy/protocols/dns/detect-external-names.bro)
rest_target(${psd} policy/protocols/ftp/detect-bruteforcing.bro)
rest_target(${psd} policy/protocols/ftp/detect.bro) rest_target(${psd} policy/protocols/ftp/detect.bro)
rest_target(${psd} policy/protocols/ftp/software.bro) rest_target(${psd} policy/protocols/ftp/software.bro)
rest_target(${psd} policy/protocols/http/detect-MHR.bro) rest_target(${psd} policy/protocols/http/detect-MHR.bro)

6
scripts/base/frameworks/measurement/main.bro
View file

@ -1,6 +1,4 @@
##! The metrics framework provides a way to count and measure data. ##! The measurement framework provides a way to count and measure data.
@load base/utils/queue
module Measurement; module Measurement;
@ -12,7 +10,7 @@ export {
## Represents a thing which is having measurement results collected for it. ## Represents a thing which is having measurement results collected for it.
type Key: record { type Key: record {
## A non-address related metric or a sub-key for an address based metric. ## A non-address related measurement or a sub-key for an address based measurement.
## An example might be successful SSH connections by client IP address ## An example might be successful SSH connections by client IP address
## where the client string would be the key value. ## where the client string would be the key value.
## Another example might be number of HTTP requests to a particular ## Another example might be number of HTTP requests to a particular

1
scripts/base/frameworks/measurement/plugins/average.bro
View file

@ -1,3 +1,4 @@
@load base/frameworks/measurement
module Measurement; module Measurement;

1
scripts/base/frameworks/measurement/plugins/max.bro
View file

@ -1,3 +1,4 @@
@load base/frameworks/measurement
module Measurement; module Measurement;

1
scripts/base/frameworks/measurement/plugins/min.bro
View file

@ -1,3 +1,4 @@
@load base/frameworks/measurement
module Measurement; module Measurement;

2
scripts/base/frameworks/measurement/plugins/std-dev.bro
View file

@ -1,5 +1,5 @@
@load ./sum
@load ./variance @load ./variance
@load base/frameworks/measurement
module Measurement; module Measurement;

1
scripts/base/frameworks/measurement/plugins/sum.bro
View file

@ -1,3 +1,4 @@
@load base/frameworks/measurement
module Measurement; module Measurement;

1
scripts/base/frameworks/measurement/plugins/unique.bro
View file

@ -1,3 +1,4 @@
@load base/frameworks/measurement
module Measurement; module Measurement;

1
scripts/base/frameworks/measurement/plugins/variance.bro
View file

@ -1,4 +1,5 @@
@load ./average @load ./average
@load base/frameworks/measurement
module Measurement; module Measurement;

3
scripts/test-all-policy.bro
View file

@ -24,9 +24,6 @@
@load frameworks/intel/smtp.bro @load frameworks/intel/smtp.bro
@load frameworks/intel/ssl.bro @load frameworks/intel/ssl.bro
@load frameworks/intel/where-locations.bro @load frameworks/intel/where-locations.bro
@load frameworks/metrics/conn-example.bro
@load frameworks/metrics/http-example.bro
@load frameworks/metrics/ssl-example.bro
@load frameworks/software/version-changes.bro @load frameworks/software/version-changes.bro
@load frameworks/software/vulnerable.bro @load frameworks/software/vulnerable.bro
@load integration/barnyard2/__load__.bro @load integration/barnyard2/__load__.bro

29
testing/btest/Baseline/coverage.bare-load-baseline/canonified_loaded_scripts.log
View file

@ -3,7 +3,7 @@
#empty_field (empty) #empty_field (empty)
#unset_field - #unset_field -
#path loaded_scripts #path loaded_scripts
#open 2012-07-20-14-34-11 #open 2013-04-02-04-24-03
#fields name #fields name
#types string #types string
scripts/base/init-bare.bro scripts/base/init-bare.bro
@ -14,20 +14,21 @@ scripts/base/init-bare.bro
build/src/base/reporter.bif.bro build/src/base/reporter.bif.bro
build/src/base/event.bif.bro build/src/base/event.bif.bro
scripts/base/frameworks/logging/__load__.bro scripts/base/frameworks/logging/__load__.bro
scripts/base/frameworks/logging/./main.bro scripts/base/frameworks/logging/main.bro
build/src/base/logging.bif.bro build/src/base/logging.bif.bro
scripts/base/frameworks/logging/./postprocessors/__load__.bro scripts/base/frameworks/logging/postprocessors/__load__.bro
scripts/base/frameworks/logging/./postprocessors/./scp.bro scripts/base/frameworks/logging/postprocessors/scp.bro
scripts/base/frameworks/logging/./postprocessors/./sftp.bro scripts/base/frameworks/logging/postprocessors/sftp.bro
scripts/base/frameworks/logging/./writers/ascii.bro scripts/base/frameworks/logging/writers/ascii.bro
scripts/base/frameworks/logging/./writers/dataseries.bro scripts/base/frameworks/logging/writers/dataseries.bro
scripts/base/frameworks/logging/./writers/elasticsearch.bro scripts/base/frameworks/logging/writers/elasticsearch.bro
scripts/base/frameworks/logging/./writers/none.bro scripts/base/frameworks/logging/writers/none.bro
scripts/base/frameworks/input/__load__.bro scripts/base/frameworks/input/__load__.bro
scripts/base/frameworks/input/./main.bro scripts/base/frameworks/input/main.bro
build/src/base/input.bif.bro build/src/base/input.bif.bro
scripts/base/frameworks/input/./readers/ascii.bro scripts/base/frameworks/input/readers/ascii.bro
scripts/base/frameworks/input/./readers/raw.bro scripts/base/frameworks/input/readers/raw.bro
scripts/base/frameworks/input/./readers/benchmark.bro scripts/base/frameworks/input/readers/benchmark.bro
scripts/policy/misc/loaded-scripts.bro scripts/policy/misc/loaded-scripts.bro
#close 2012-07-20-14-34-11 scripts/base/utils/paths.bro
#close 2013-04-02-04-24-03

148
testing/btest/Baseline/coverage.default-load-baseline/canonified_loaded_scripts.log
View file

@ -3,7 +3,7 @@
#empty_field (empty) #empty_field (empty)
#unset_field - #unset_field -
#path loaded_scripts #path loaded_scripts
#open 2013-02-11-18-44-43 #open 2013-04-02-04-22-32
#fields name #fields name
#types string #types string
scripts/base/init-bare.bro scripts/base/init-bare.bro
@ -14,24 +14,24 @@ scripts/base/init-bare.bro
build/src/base/reporter.bif.bro build/src/base/reporter.bif.bro
build/src/base/event.bif.bro build/src/base/event.bif.bro
scripts/base/frameworks/logging/__load__.bro scripts/base/frameworks/logging/__load__.bro
scripts/base/frameworks/logging/./main.bro scripts/base/frameworks/logging/main.bro
build/src/base/logging.bif.bro build/src/base/logging.bif.bro
scripts/base/frameworks/logging/./postprocessors/__load__.bro scripts/base/frameworks/logging/postprocessors/__load__.bro
scripts/base/frameworks/logging/./postprocessors/./scp.bro scripts/base/frameworks/logging/postprocessors/scp.bro
scripts/base/frameworks/logging/./postprocessors/./sftp.bro scripts/base/frameworks/logging/postprocessors/sftp.bro
scripts/base/frameworks/logging/./writers/ascii.bro scripts/base/frameworks/logging/writers/ascii.bro
scripts/base/frameworks/logging/./writers/dataseries.bro scripts/base/frameworks/logging/writers/dataseries.bro
scripts/base/frameworks/logging/./writers/elasticsearch.bro scripts/base/frameworks/logging/writers/elasticsearch.bro
scripts/base/frameworks/logging/./writers/none.bro scripts/base/frameworks/logging/writers/none.bro
scripts/base/frameworks/input/__load__.bro scripts/base/frameworks/input/__load__.bro
scripts/base/frameworks/input/./main.bro scripts/base/frameworks/input/main.bro
build/src/base/input.bif.bro build/src/base/input.bif.bro
scripts/base/frameworks/input/./readers/ascii.bro scripts/base/frameworks/input/readers/ascii.bro
scripts/base/frameworks/input/./readers/raw.bro scripts/base/frameworks/input/readers/raw.bro
scripts/base/frameworks/input/./readers/benchmark.bro scripts/base/frameworks/input/readers/benchmark.bro
scripts/base/init-default.bro scripts/base/init-default.bro
scripts/base/utils/site.bro scripts/base/utils/site.bro
scripts/base/utils/./patterns.bro scripts/base/utils/patterns.bro
scripts/base/utils/addrs.bro scripts/base/utils/addrs.bro
scripts/base/utils/conn-ids.bro scripts/base/utils/conn-ids.bro
scripts/base/utils/directions-and-hosts.bro scripts/base/utils/directions-and-hosts.bro
@ -41,83 +41,93 @@ scripts/base/init-default.bro
scripts/base/utils/queue.bro scripts/base/utils/queue.bro
scripts/base/utils/strings.bro scripts/base/utils/strings.bro
scripts/base/utils/thresholds.bro scripts/base/utils/thresholds.bro
scripts/base/utils/time.bro
scripts/base/utils/urls.bro scripts/base/utils/urls.bro
scripts/base/frameworks/notice/__load__.bro scripts/base/frameworks/notice/__load__.bro
scripts/base/frameworks/notice/./main.bro scripts/base/frameworks/notice/main.bro
scripts/base/frameworks/notice/./weird.bro scripts/base/frameworks/notice/weird.bro
scripts/base/frameworks/notice/./actions/drop.bro scripts/base/frameworks/notice/actions/drop.bro
scripts/base/frameworks/notice/./actions/email_admin.bro scripts/base/frameworks/notice/actions/email_admin.bro
scripts/base/frameworks/notice/./actions/page.bro scripts/base/frameworks/notice/actions/page.bro
scripts/base/frameworks/notice/./actions/add-geodata.bro scripts/base/frameworks/notice/actions/add-geodata.bro
scripts/base/frameworks/notice/./extend-email/hostnames.bro scripts/base/frameworks/notice/extend-email/hostnames.bro
scripts/base/frameworks/cluster/__load__.bro scripts/base/frameworks/cluster/__load__.bro
scripts/base/frameworks/cluster/./main.bro scripts/base/frameworks/cluster/main.bro
scripts/base/frameworks/control/__load__.bro scripts/base/frameworks/control/__load__.bro
scripts/base/frameworks/control/./main.bro scripts/base/frameworks/control/main.bro
scripts/base/frameworks/notice/./non-cluster.bro scripts/base/frameworks/notice/non-cluster.bro
scripts/base/frameworks/notice/./actions/pp-alarms.bro scripts/base/frameworks/notice/actions/pp-alarms.bro
scripts/base/frameworks/dpd/__load__.bro scripts/base/frameworks/dpd/__load__.bro
scripts/base/frameworks/dpd/./main.bro scripts/base/frameworks/dpd/main.bro
scripts/base/frameworks/signatures/__load__.bro scripts/base/frameworks/signatures/__load__.bro
scripts/base/frameworks/signatures/./main.bro scripts/base/frameworks/signatures/main.bro
scripts/base/frameworks/packet-filter/__load__.bro scripts/base/frameworks/packet-filter/__load__.bro
scripts/base/frameworks/packet-filter/./main.bro scripts/base/frameworks/packet-filter/main.bro
scripts/base/frameworks/packet-filter/./netstats.bro scripts/base/frameworks/packet-filter/netstats.bro
scripts/base/frameworks/software/__load__.bro scripts/base/frameworks/software/__load__.bro
scripts/base/frameworks/software/./main.bro scripts/base/frameworks/software/main.bro
scripts/base/frameworks/communication/__load__.bro scripts/base/frameworks/communication/__load__.bro
scripts/base/frameworks/communication/./main.bro scripts/base/frameworks/communication/main.bro
scripts/base/frameworks/metrics/__load__.bro scripts/base/frameworks/measurement/__load__.bro
scripts/base/frameworks/metrics/./main.bro scripts/base/frameworks/measurement/main.bro
scripts/base/frameworks/metrics/./non-cluster.bro scripts/base/frameworks/measurement/plugins/__load__.bro
scripts/base/frameworks/measurement/plugins/average.bro
scripts/base/frameworks/measurement/plugins/max.bro
scripts/base/frameworks/measurement/plugins/min.bro
scripts/base/frameworks/measurement/plugins/sample.bro
scripts/base/frameworks/measurement/plugins/std-dev.bro
scripts/base/frameworks/measurement/plugins/variance.bro
scripts/base/frameworks/measurement/plugins/sum.bro
scripts/base/frameworks/measurement/plugins/unique.bro
scripts/base/frameworks/measurement/non-cluster.bro
scripts/base/frameworks/intel/__load__.bro scripts/base/frameworks/intel/__load__.bro
scripts/base/frameworks/intel/./main.bro scripts/base/frameworks/intel/main.bro
scripts/base/frameworks/intel/./input.bro scripts/base/frameworks/intel/input.bro
scripts/base/frameworks/reporter/__load__.bro scripts/base/frameworks/reporter/__load__.bro
scripts/base/frameworks/reporter/./main.bro scripts/base/frameworks/reporter/main.bro
scripts/base/frameworks/tunnels/__load__.bro scripts/base/frameworks/tunnels/__load__.bro
scripts/base/frameworks/tunnels/./main.bro scripts/base/frameworks/tunnels/main.bro
scripts/base/protocols/conn/__load__.bro scripts/base/protocols/conn/__load__.bro
scripts/base/protocols/conn/./main.bro scripts/base/protocols/conn/main.bro
scripts/base/protocols/conn/./contents.bro scripts/base/protocols/conn/contents.bro
scripts/base/protocols/conn/./inactivity.bro scripts/base/protocols/conn/inactivity.bro
scripts/base/protocols/conn/./polling.bro scripts/base/protocols/conn/polling.bro
scripts/base/protocols/dns/__load__.bro scripts/base/protocols/dns/__load__.bro
scripts/base/protocols/dns/./consts.bro scripts/base/protocols/dns/consts.bro
scripts/base/protocols/dns/./main.bro scripts/base/protocols/dns/main.bro
scripts/base/protocols/ftp/__load__.bro scripts/base/protocols/ftp/__load__.bro
scripts/base/protocols/ftp/./utils-commands.bro scripts/base/protocols/ftp/utils-commands.bro
scripts/base/protocols/ftp/./main.bro scripts/base/protocols/ftp/main.bro
scripts/base/protocols/ftp/./file-extract.bro scripts/base/protocols/ftp/file-extract.bro
scripts/base/protocols/ftp/./gridftp.bro scripts/base/protocols/ftp/gridftp.bro
scripts/base/protocols/ssl/__load__.bro scripts/base/protocols/ssl/__load__.bro
scripts/base/protocols/ssl/./consts.bro scripts/base/protocols/ssl/consts.bro
scripts/base/protocols/ssl/./main.bro scripts/base/protocols/ssl/main.bro
scripts/base/protocols/ssl/./mozilla-ca-list.bro scripts/base/protocols/ssl/mozilla-ca-list.bro
scripts/base/protocols/http/__load__.bro scripts/base/protocols/http/__load__.bro
scripts/base/protocols/http/./main.bro scripts/base/protocols/http/main.bro
scripts/base/protocols/http/./utils.bro scripts/base/protocols/http/utils.bro
scripts/base/protocols/http/./file-ident.bro scripts/base/protocols/http/file-ident.bro
scripts/base/protocols/http/./file-hash.bro scripts/base/protocols/http/file-hash.bro
scripts/base/protocols/http/./file-extract.bro scripts/base/protocols/http/file-extract.bro
scripts/base/protocols/irc/__load__.bro scripts/base/protocols/irc/__load__.bro
scripts/base/protocols/irc/./main.bro scripts/base/protocols/irc/main.bro
scripts/base/protocols/irc/./dcc-send.bro scripts/base/protocols/irc/dcc-send.bro
scripts/base/protocols/modbus/__load__.bro scripts/base/protocols/modbus/__load__.bro
scripts/base/protocols/modbus/./consts.bro scripts/base/protocols/modbus/consts.bro
scripts/base/protocols/modbus/./main.bro scripts/base/protocols/modbus/main.bro
scripts/base/protocols/smtp/__load__.bro scripts/base/protocols/smtp/__load__.bro
scripts/base/protocols/smtp/./main.bro scripts/base/protocols/smtp/main.bro
scripts/base/protocols/smtp/./entities.bro scripts/base/protocols/smtp/entities.bro
scripts/base/protocols/smtp/./entities-excerpt.bro scripts/base/protocols/smtp/entities-excerpt.bro
scripts/base/protocols/socks/__load__.bro scripts/base/protocols/socks/__load__.bro
scripts/base/protocols/socks/./consts.bro scripts/base/protocols/socks/consts.bro
scripts/base/protocols/socks/./main.bro scripts/base/protocols/socks/main.bro
scripts/base/protocols/ssh/__load__.bro scripts/base/protocols/ssh/__load__.bro
scripts/base/protocols/ssh/./main.bro scripts/base/protocols/ssh/main.bro
scripts/base/protocols/syslog/__load__.bro scripts/base/protocols/syslog/__load__.bro
scripts/base/protocols/syslog/./consts.bro scripts/base/protocols/syslog/consts.bro
scripts/base/protocols/syslog/./main.bro scripts/base/protocols/syslog/main.bro
scripts/base/misc/find-checksum-offloading.bro scripts/base/misc/find-checksum-offloading.bro
scripts/policy/misc/loaded-scripts.bro scripts/policy/misc/loaded-scripts.bro
#close 2013-02-11-18-44-43 #close 2013-04-02-04-22-32

2
testing/btest/Baseline/coverage.init-default/missing_loads
View file

@ -3,5 +3,5 @@
-./frameworks/cluster/nodes/worker.bro -./frameworks/cluster/nodes/worker.bro
-./frameworks/cluster/setup-connections.bro -./frameworks/cluster/setup-connections.bro
-./frameworks/intel/cluster.bro -./frameworks/intel/cluster.bro
-./frameworks/metrics/cluster.bro -./frameworks/measurement/cluster.bro
-./frameworks/notice/cluster.bro -./frameworks/notice/cluster.bro

12
testing/btest/Baseline/scripts.base.frameworks.metrics.basic-cluster/manager-1.metrics.log
View file

@ -1,12 +0,0 @@
#separator \x09
#set_separator ,
#empty_field (empty)
#unset_field -
#path metrics
#open 2012-12-17-18-43-15
#fields ts ts_delta metric index.str index.host index.network result.begin result.end result.num result.sum result.min result.max result.avg result.variance result.std_dev result.unique
#types time interval string string addr subnet time time count double double double double double double count
1355769795.365325 3.000000 test.metric - 6.5.4.3 - 1355769793.449322 1355769793.458467 2 6.0 1.0 5.0 3.0 4.0 2.0 2
1355769795.365325 3.000000 test.metric - 1.2.3.4 - 1355769793.449322 1355769793.458467 9 437.0 3.0 95.0 48.555556 674.469136 25.970544 8
1355769795.365325 3.000000 test.metric - 7.2.1.5 - 1355769793.449322 1355769793.458467 2 145.0 54.0 91.0 72.5 342.25 18.5 2
#close 2012-12-17-18-43-21

12
testing/btest/Baseline/scripts.base.frameworks.metrics.basic/metrics.log
View file

@ -1,12 +0,0 @@
#separator \x09
#set_separator ,
#empty_field (empty)
#unset_field -
#path metrics
#open 2012-12-17-18-43-45
#fields ts ts_delta metric index.str index.host index.network result.begin result.end result.num result.sum result.min result.max result.avg result.variance result.std_dev result.unique
#types time interval string string addr subnet time time count double double double double double double count
1355769825.947161 3.000000 test.metric - 6.5.4.3 - 1355769825.947161 1355769825.947161 1 2.0 2.0 2.0 2.0 0.0 0.0 -
1355769825.947161 3.000000 test.metric - 1.2.3.4 - 1355769825.947161 1355769825.947161 5 221.0 5.0 94.0 44.2 915.36 30.254917 -
1355769825.947161 3.000000 test.metric - 7.2.1.5 - 1355769825.947161 1355769825.947161 1 1.0 1.0 1.0 1.0 0.0 0.0 -
#close 2012-12-17-18-43-45

1
testing/btest/Baseline/scripts.base.frameworks.metrics.cluster-intermediate-update/manager-1..stdout
View file

@ -1 +0,0 @@
A test metric threshold was crossed!

10
testing/btest/Baseline/scripts.base.frameworks.metrics.cluster-intermediate-update/manager-1.notice.log
View file

@ -1,10 +0,0 @@
#separator \x09
#set_separator ,
#empty_field (empty)
#unset_field -
#path notice
#open 2013-02-11-18-41-03
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p proto note msg sub src dst p n peer_descr actions suppress_for dropped remote_location.country_code remote_location.region remote_location.city remote_location.latitude remote_location.longitude metric_index.host metric_index.str metric_index.network
#types time string addr port addr port enum enum string string addr addr port count string table[enum] interval bool string string string double double addr string subnet
1360608063.517719 - - - - - - Test_Notice Threshold crossed by metric_index(host=1.2.3.4) 100/100 - 1.2.3.4 - - 100 manager-1 Notice::ACTION_LOG 3600.000000 F - - - - - 1.2.3.4 - -
#close 2013-02-11-18-41-03

11
testing/btest/Baseline/scripts.base.frameworks.metrics.notice/notice.log
View file

@ -1,11 +0,0 @@
#separator \x09
#set_separator ,
#empty_field (empty)
#unset_field -
#path notice
#open 2012-07-20-01-49-23
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p proto note msg sub src dst p n peer_descr actions policy_items suppress_for dropped remote_location.country_code remote_location.region remote_location.city remote_location.latitude remote_location.longitude metric_index.host metric_index.str metric_index.network
#types time string addr port addr port enum enum string string addr addr port count string table[enum] table[count] interval bool string string string double double addr string subnet
1342748963.085888 - - - - - - Test_Notice Threshold crossed by metric_index(host=1.2.3.4) 3/2 - 1.2.3.4 - - 3 bro Notice::ACTION_LOG 6 3600.000000 F - - - - - 1.2.3.4 - -
1342748963.085888 - - - - - - Test_Notice Threshold crossed by metric_index(host=6.5.4.3) 2/2 - 6.5.4.3 - - 2 bro Notice::ACTION_LOG 6 3600.000000 F - - - - - 6.5.4.3 - -
#close 2012-07-20-01-49-23

8
testing/btest/Baseline/scripts.base.frameworks.metrics.thresholding/.stdout
View file

@ -1,8 +0,0 @@
THRESHOLD_SERIES: hit a threshold series value at 3 for metric_index(host=1.2.3.4)
THRESHOLD_FUNC: hit a threshold function value at 3 for metric_index(host=1.2.3.4)
THRESHOLD_FUNC: hit a threshold function value at 2 for metric_index(host=6.5.4.3)
THRESHOLD_FUNC: hit a threshold function value at 1 for metric_index(host=7.2.1.5)
THRESHOLD: hit a threshold value at 6 for metric_index(host=1.2.3.4)
THRESHOLD_SERIES: hit a threshold series value at 6 for metric_index(host=1.2.3.4)
THRESHOLD: hit a threshold value at 1001 for metric_index(host=7.2.1.5)
THRESHOLD_SERIES: hit a threshold series value at 1001 for metric_index(host=7.2.1.5)

10
testing/btest/Baseline/scripts.base.frameworks.notice.cluster/manager-1.notice.log
View file

@ -3,8 +3,8 @@
#empty_field (empty) #empty_field (empty)
#unset_field - #unset_field -
#path notice #path notice
#open 2013-02-11-18-45-43 #open 2013-04-02-02-21-00
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p proto note msg sub src dst p n peer_descr actions suppress_for dropped remote_location.country_code remote_location.region remote_location.city remote_location.latitude remote_location.longitude metric_index.host metric_index.str metric_index.network #fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p proto note msg sub src dst p n peer_descr actions suppress_for dropped remote_location.country_code remote_location.region remote_location.city remote_location.latitude remote_location.longitude
#types time string addr port addr port enum enum string string addr addr port count string table[enum] interval bool string string string double double addr string subnet #types time string addr port addr port enum enum string string addr addr port count string table[enum] interval bool string string string double double
1360608343.088948 - - - - - - Test_Notice test notice! - - - - - worker-1 Notice::ACTION_LOG 3600.000000 F - - - - - - - - 1364869260.950557 - - - - - - Test_Notice test notice! - - - - - worker-1 Notice::ACTION_LOG 3600.000000 F - - - - -
#close 2013-02-11-18-45-43 #close 2013-04-02-02-21-00

10
testing/btest/Baseline/scripts.base.frameworks.notice.suppression-cluster/manager-1.notice.log
View file

@ -3,8 +3,8 @@
#empty_field (empty) #empty_field (empty)
#unset_field - #unset_field -
#path notice #path notice
#open 2013-02-11-18-45-14 #open 2013-04-02-02-21-29
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p proto note msg sub src dst p n peer_descr actions suppress_for dropped remote_location.country_code remote_location.region remote_location.city remote_location.latitude remote_location.longitude metric_index.host metric_index.str metric_index.network #fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p proto note msg sub src dst p n peer_descr actions suppress_for dropped remote_location.country_code remote_location.region remote_location.city remote_location.latitude remote_location.longitude
#types time string addr port addr port enum enum string string addr addr port count string table[enum] interval bool string string string double double addr string subnet #types time string addr port addr port enum enum string string addr addr port count string table[enum] interval bool string string string double double
1360608314.794257 - - - - - - Test_Notice test notice! - - - - - worker-2 Notice::ACTION_LOG 3600.000000 F - - - - - - - - 1364869289.545369 - - - - - - Test_Notice test notice! - - - - - worker-2 Notice::ACTION_LOG 3600.000000 F - - - - -
#close 2013-02-11-18-45-17 #close 2013-04-02-02-21-32

10
testing/btest/Baseline/scripts.base.protocols.ftp.gridftp/notice.log
View file

@ -3,8 +3,8 @@
#empty_field (empty) #empty_field (empty)
#unset_field - #unset_field -
#path notice #path notice
#open 2013-02-11-18-33-41 #open 2013-04-02-02-19-21
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p proto note msg sub src dst p n peer_descr actions suppress_for dropped remote_location.country_code remote_location.region remote_location.city remote_location.latitude remote_location.longitude metric_index.host metric_index.str metric_index.network #fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p proto note msg sub src dst p n peer_descr actions suppress_for dropped remote_location.country_code remote_location.region remote_location.city remote_location.latitude remote_location.longitude
#types time string addr port addr port enum enum string string addr addr port count string table[enum] interval bool string string string double double addr string subnet #types time string addr port addr port enum enum string string addr addr port count string table[enum] interval bool string string string double double
1348168976.558309 arKYeMETxOg 192.168.57.103 35391 192.168.57.101 55968 tcp GridFTP::Data_Channel GridFTP data channel over threshold 2 bytes - 192.168.57.103 192.168.57.101 55968 - bro Notice::ACTION_LOG 3600.000000 F - - - - - - - - 1348168976.558309 arKYeMETxOg 192.168.57.103 35391 192.168.57.101 55968 tcp GridFTP::Data_Channel GridFTP data channel over threshold 2 bytes - 192.168.57.103 192.168.57.101 55968 - bro Notice::ACTION_LOG 3600.000000 F - - - - -
#close 2013-02-11-18-33-41 #close 2013-04-02-02-19-21