mirror of
https://github.com/zeek/zeek.git
synced 2025-10-12 03:28:19 +00:00
add tests for ntp protocol (WIP)
This commit is contained in:
parent
75b7be302f
commit
50f265353b
14 changed files with 197 additions and 0 deletions
11
testing/btest/scripts/base/protocols/ntp/ntp.test
Normal file
11
testing/btest/scripts/base/protocols/ntp/ntp.test
Normal file
|
@ -0,0 +1,11 @@
|
|||
# @TEST-EXEC: bro -r $TRACES/ntp/ntp.pcap %INPUT
|
||||
# @TEST-EXEC: btest-diff ntp.log
|
||||
# @TEST-EXEC: btest-diff .stdout
|
||||
|
||||
@load base/protocols/ntp
|
||||
|
||||
event ntp_message(c: connection, is_orig: bool, msg: NTP::Message)
|
||||
{
|
||||
print fmt("ntp_message %s -> %s:%d %s", c$id$orig_h, c$id$resp_h, c$id$resp_p, msg);
|
||||
}
|
||||
|
11
testing/btest/scripts/base/protocols/ntp/ntp2.test
Normal file
11
testing/btest/scripts/base/protocols/ntp/ntp2.test
Normal file
|
@ -0,0 +1,11 @@
|
|||
# @TEST-EXEC: bro -r $TRACES/ntp/ntp2.pcap %INPUT
|
||||
# @TEST-EXEC: btest-diff ntp.log
|
||||
# @TEST-EXEC: btest-diff .stdout
|
||||
|
||||
@load base/protocols/ntp
|
||||
|
||||
event ntp_message(c: connection, is_orig: bool, msg: NTP::Message)
|
||||
{
|
||||
print fmt("ntp_message %s -> %s:%d %s", c$id$orig_h, c$id$resp_h, c$id$resp_p, msg);
|
||||
}
|
||||
|
11
testing/btest/scripts/base/protocols/ntp/ntp3.test
Normal file
11
testing/btest/scripts/base/protocols/ntp/ntp3.test
Normal file
|
@ -0,0 +1,11 @@
|
|||
# @TEST-EXEC: bro -r $TRACES/ntp/NTP_sync.pcap %INPUT
|
||||
# @TEST-EXEC: btest-diff ntp.log
|
||||
# @TEST-EXEC: btest-diff .stdout
|
||||
|
||||
@load base/protocols/ntp
|
||||
|
||||
event ntp_message(c: connection, is_orig: bool, msg: NTP::Message)
|
||||
{
|
||||
print fmt("ntp_message %s -> %s:%d %s", c$id$orig_h, c$id$resp_h, c$id$resp_p, msg);
|
||||
}
|
||||
|
9
testing/btest/scripts/base/protocols/ntp/ntpmode67.test
Normal file
9
testing/btest/scripts/base/protocols/ntp/ntpmode67.test
Normal file
|
@ -0,0 +1,9 @@
|
|||
# @TEST-EXEC: bro -r $TRACES/ntp/ntpmode67.pcap %INPUT
|
||||
|
||||
@load base/protocols/ntp
|
||||
|
||||
event ntp_message(c: connection, is_orig: bool, msg: NTP::Message)
|
||||
{
|
||||
print fmt("ntp_message %s -> %s:%d %s", c$id$orig_h, c$id$resp_h, c$id$resp_p, msg);
|
||||
}
|
||||
|
Loading…
Add table
Add a link
Reference in a new issue