Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 06:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Updating tests for the #start/#end change.

Browse source
This commit is contained in:
Robin Sommer 2012-07-19 18:57:15 -07:00
parent 87e10b5f97
commit 5cfb8d65c3
123 changed files with 442 additions and 162 deletions
Download patch file Download diff file Expand all files Collapse all files

12
testing/btest/Baseline/scripts.base.frameworks.logging.empty-event/ssh.log
View file

@ -3,10 +3,12 @@
#empty_field (empty)
#unset_field -
#path ssh
#start 2012-07-20-01-49-20
#fields t id.orig_h id.orig_p id.resp_h id.resp_p status country
#types time addr port addr port string string
1324314314.443785 1.2.3.4 1234 2.3.4.5 80 success unknown
1324314314.443785 1.2.3.4 1234 2.3.4.5 80 failure US
1324314314.443785 1.2.3.4 1234 2.3.4.5 80 failure UK
1324314314.443785 1.2.3.4 1234 2.3.4.5 80 success BR
1324314314.443785 1.2.3.4 1234 2.3.4.5 80 failure MX
1342748960.468458 1.2.3.4 1234 2.3.4.5 80 success unknown
1342748960.468458 1.2.3.4 1234 2.3.4.5 80 failure US
1342748960.468458 1.2.3.4 1234 2.3.4.5 80 failure UK
1342748960.468458 1.2.3.4 1234 2.3.4.5 80 success BR
1342748960.468458 1.2.3.4 1234 2.3.4.5 80 failure MX
#end 2012-07-20-01-49-20