mirror of
https://github.com/zeek/zeek.git
synced 2025-10-04 23:58:20 +00:00
Merge remote-tracking branch 'origin/master' into topic/seth/metrics-updates
Conflicts: testing/btest/Baseline/scripts.base.frameworks.metrics.basic-cluster/manager-1.metrics.log testing/btest/Baseline/scripts.base.frameworks.metrics.basic/metrics.log testing/btest/Baseline/scripts.base.frameworks.metrics.cluster-intermediate-update/manager-1.notice.log testing/btest/Baseline/scripts.base.frameworks.metrics.notice/notice.log testing/btest/scripts/base/frameworks/metrics/basic-cluster.bro
This commit is contained in:
commit
6750b0f7b9
911 changed files with 36856 additions and 5211 deletions
|
@ -6,13 +6,13 @@ all: make-verbose coverage
|
|||
brief: make-brief coverage
|
||||
|
||||
make-verbose:
|
||||
@for repo in $(DIRS); do (cd $$repo && make ); done
|
||||
@for repo in $(DIRS); do (cd $$repo && make -s ); done
|
||||
|
||||
make-brief:
|
||||
@for repo in $(DIRS); do (cd $$repo && make brief ); done
|
||||
@for repo in $(DIRS); do (cd $$repo && make -s brief ); done
|
||||
|
||||
coverage:
|
||||
@for repo in $(DIRS); do (cd $$repo && echo "Coverage for '$$repo' dir:" && make coverage); done
|
||||
@for repo in $(DIRS); do (cd $$repo && echo "Coverage for '$$repo' dir:" && make -s coverage); done
|
||||
@test -f btest/coverage.log && cp btest/coverage.log `mktemp brocov.tmp.XXX` || true
|
||||
@for f in external/*/coverage.log; do test -f $$f && cp $$f `mktemp brocov.tmp.XXX` || true; done
|
||||
@echo "Complete test suite code coverage:"
|
||||
|
|
1
testing/btest/.gitignore
vendored
1
testing/btest/.gitignore
vendored
|
@ -1,3 +1,4 @@
|
|||
.tmp
|
||||
.btest.failed.dat
|
||||
diag.log
|
||||
coverage.log
|
||||
|
|
|
@ -1,5 +0,0 @@
|
|||
1128727430.350788 ? 141.42.64.125 125.190.109.199 other 56729 12345 tcp ? ? S0 X 1 60 0 0 cc=1
|
||||
1144876538.705610 5.921003 169.229.147.203 239.255.255.253 other 49370 427 udp 147 ? S0 X 3 231 0 0
|
||||
1144876599.397603 0.815763 192.150.186.169 194.64.249.244 http 53063 80 tcp 377 445 SF X 6 677 5 713
|
||||
1144876709.032670 9.000191 169.229.147.43 239.255.255.253 other 49370 427 udp 196 ? S0 X 4 308 0 0
|
||||
1144876697.068273 0.000650 192.150.186.169 192.150.186.15 icmp-unreach 3 3 icmp 56 ? OTH X 2 112 0 0
|
|
@ -1,5 +0,0 @@
|
|||
1128727430.350788 ? 141.42.64.125 125.190.109.199 other 56729 12345 tcp ? ? S0 X 1 60 0 0
|
||||
1144876538.705610 5.921003 169.229.147.203 239.255.255.253 other 49370 427 udp 147 ? S0 X 3 231 0 0
|
||||
1144876599.397603 0.815763 192.150.186.169 194.64.249.244 http 53063 80 tcp 377 445 SF X 6 697 5 713
|
||||
1144876709.032670 9.000191 169.229.147.43 239.255.255.253 other 49370 427 udp 196 ? S0 X 4 308 0 0
|
||||
1144876697.068273 0.000650 192.150.186.169 192.150.186.15 icmp-unreach 3 3 icmp 56 ? OTH X 2 112 0 0
|
3
testing/btest/Baseline/bifs.all_set/out
Normal file
3
testing/btest/Baseline/bifs.all_set/out
Normal file
|
@ -0,0 +1,3 @@
|
|||
F
|
||||
F
|
||||
T
|
1
testing/btest/Baseline/bifs.analyzer_name/out
Normal file
1
testing/btest/Baseline/bifs.analyzer_name/out
Normal file
|
@ -0,0 +1 @@
|
|||
PIA_TCP
|
3
testing/btest/Baseline/bifs.any_set/out
Normal file
3
testing/btest/Baseline/bifs.any_set/out
Normal file
|
@ -0,0 +1,3 @@
|
|||
T
|
||||
F
|
||||
F
|
1
testing/btest/Baseline/bifs.byte_len/out
Normal file
1
testing/btest/Baseline/bifs.byte_len/out
Normal file
|
@ -0,0 +1 @@
|
|||
11
|
3
testing/btest/Baseline/bifs.bytestring_to_hexstr/out
Normal file
3
testing/btest/Baseline/bifs.bytestring_to_hexstr/out
Normal file
|
@ -0,0 +1,3 @@
|
|||
3034
|
||||
|
||||
00
|
1
testing/btest/Baseline/bifs.capture_state_updates/out
Normal file
1
testing/btest/Baseline/bifs.capture_state_updates/out
Normal file
|
@ -0,0 +1 @@
|
|||
T
|
6
testing/btest/Baseline/bifs.cat/out
Normal file
6
testing/btest/Baseline/bifs.cat/out
Normal file
|
@ -0,0 +1,6 @@
|
|||
foo3T
|
||||
|
||||
3T
|
||||
foo|3|T
|
||||
|
||||
<empty>|3|T
|
3
testing/btest/Baseline/bifs.cat_string_array/out
Normal file
3
testing/btest/Baseline/bifs.cat_string_array/out
Normal file
|
@ -0,0 +1,3 @@
|
|||
isatest
|
||||
thisisatest
|
||||
isa
|
2
testing/btest/Baseline/bifs.clear_table/out
Normal file
2
testing/btest/Baseline/bifs.clear_table/out
Normal file
|
@ -0,0 +1,2 @@
|
|||
1
|
||||
0
|
3
testing/btest/Baseline/bifs.convert_for_pattern/out
Normal file
3
testing/btest/Baseline/bifs.convert_for_pattern/out
Normal file
|
@ -0,0 +1,3 @@
|
|||
foo
|
||||
|
||||
b\[a\-z\]\+
|
15
testing/btest/Baseline/bifs.create_file/out
Normal file
15
testing/btest/Baseline/bifs.create_file/out
Normal file
|
@ -0,0 +1,15 @@
|
|||
T
|
||||
testfile
|
||||
F
|
||||
15.0
|
||||
T
|
||||
F
|
||||
28.0
|
||||
-1.0
|
||||
15.0
|
||||
0.0
|
||||
T
|
||||
15.0
|
||||
T
|
||||
testdir/testfile4
|
||||
F
|
2
testing/btest/Baseline/bifs.create_file/testfile
Normal file
2
testing/btest/Baseline/bifs.create_file/testfile
Normal file
|
@ -0,0 +1,2 @@
|
|||
This is a test
|
||||
another test
|
1
testing/btest/Baseline/bifs.create_file/testfile2
Normal file
1
testing/btest/Baseline/bifs.create_file/testfile2
Normal file
|
@ -0,0 +1 @@
|
|||
new text
|
1
testing/btest/Baseline/bifs.edit/out
Normal file
1
testing/btest/Baseline/bifs.edit/out
Normal file
|
@ -0,0 +1 @@
|
|||
llo t
|
2
testing/btest/Baseline/bifs.entropy_test/out
Normal file
2
testing/btest/Baseline/bifs.entropy_test/out
Normal file
|
@ -0,0 +1,2 @@
|
|||
[entropy=4.715374, chi_square=591.981818, mean=75.472727, monte_carlo_pi=4.0, serial_correlation=-0.11027]
|
||||
[entropy=2.083189, chi_square=3906.018182, mean=69.054545, monte_carlo_pi=4.0, serial_correlation=0.849402]
|
10
testing/btest/Baseline/bifs.escape_string/out
Normal file
10
testing/btest/Baseline/bifs.escape_string/out
Normal file
|
@ -0,0 +1,10 @@
|
|||
12
|
||||
Test \0string
|
||||
13
|
||||
Test \0string
|
||||
15
|
||||
Test \x00string
|
||||
13
|
||||
Test \0string
|
||||
24
|
||||
546573742000737472696e67
|
1
testing/btest/Baseline/bifs.exit/out
Normal file
1
testing/btest/Baseline/bifs.exit/out
Normal file
|
@ -0,0 +1 @@
|
|||
hello
|
10
testing/btest/Baseline/bifs.file_mode/out
Normal file
10
testing/btest/Baseline/bifs.file_mode/out
Normal file
|
@ -0,0 +1,10 @@
|
|||
rw-r--r--
|
||||
rwxrwxrwx
|
||||
rwxrwxrwt
|
||||
rwxr-x--T
|
||||
rwsr-xr-x
|
||||
r-S------
|
||||
rwxr-sr-x
|
||||
r--r-S---
|
||||
--xr-xrwx
|
||||
---------
|
4
testing/btest/Baseline/bifs.find_all/out
Normal file
4
testing/btest/Baseline/bifs.find_all/out
Normal file
|
@ -0,0 +1,4 @@
|
|||
es
|
||||
hi
|
||||
-------------------
|
||||
0
|
2
testing/btest/Baseline/bifs.find_entropy/out
Normal file
2
testing/btest/Baseline/bifs.find_entropy/out
Normal file
|
@ -0,0 +1,2 @@
|
|||
[entropy=4.715374, chi_square=591.981818, mean=75.472727, monte_carlo_pi=4.0, serial_correlation=-0.11027]
|
||||
[entropy=2.083189, chi_square=3906.018182, mean=69.054545, monte_carlo_pi=4.0, serial_correlation=0.849402]
|
3
testing/btest/Baseline/bifs.find_last/out
Normal file
3
testing/btest/Baseline/bifs.find_last/out
Normal file
|
@ -0,0 +1,3 @@
|
|||
es
|
||||
-------------------
|
||||
0
|
55
testing/btest/Baseline/bifs.fmt/out
Normal file
55
testing/btest/Baseline/bifs.fmt/out
Normal file
|
@ -0,0 +1,55 @@
|
|||
test
|
||||
%
|
||||
|
||||
*test *
|
||||
* test*
|
||||
* T*
|
||||
*T *
|
||||
* 3.14e+00*
|
||||
*3.14e+00 *
|
||||
* 3.14*
|
||||
* 3.1*
|
||||
* -3.14e+00*
|
||||
* -3.14*
|
||||
* -3.1*
|
||||
*-3.14e+00 *
|
||||
*-3.14 *
|
||||
*-3.1 *
|
||||
* -128*
|
||||
*-128 *
|
||||
* 128*
|
||||
*0000000128*
|
||||
*128 *
|
||||
* a0*
|
||||
*00000000a0*
|
||||
* a0*
|
||||
* 160/tcp*
|
||||
* 127.0.0.1*
|
||||
* 7f000001*
|
||||
*192.168.0.0/16*
|
||||
* ::1*
|
||||
*fe000000000000000000000000000001*
|
||||
*fe80:1234::1*
|
||||
*fe80:1234::/32*
|
||||
* 3.0 hrs*
|
||||
*/^?(^foo|bar)$?/*
|
||||
* Blue*
|
||||
* [1, 2, 3]*
|
||||
*{^J^I2,^J^I1,^J^I3^J}*
|
||||
*{^J^I[2] = bro,^J^I[1] = test^J}*
|
||||
3.100000e+02
|
||||
310.000000
|
||||
310
|
||||
3.100e+02
|
||||
310.000
|
||||
310
|
||||
310
|
||||
2
|
||||
3
|
||||
4
|
||||
2
|
||||
2
|
||||
6
|
||||
2
|
||||
2
|
||||
6
|
2
testing/btest/Baseline/bifs.fmt_ftp_port/out
Normal file
2
testing/btest/Baseline/bifs.fmt_ftp_port/out
Normal file
|
@ -0,0 +1,2 @@
|
|||
192,168,0,2,1,1
|
||||
|
3
testing/btest/Baseline/bifs.get_port_transport_proto/out
Normal file
3
testing/btest/Baseline/bifs.get_port_transport_proto/out
Normal file
|
@ -0,0 +1,3 @@
|
|||
tcp
|
||||
udp
|
||||
icmp
|
3
testing/btest/Baseline/bifs.getsetenv/out
Normal file
3
testing/btest/Baseline/bifs.getsetenv/out
Normal file
|
@ -0,0 +1,3 @@
|
|||
OK
|
||||
OK
|
||||
OK
|
1
testing/btest/Baseline/bifs.global_ids/out
Normal file
1
testing/btest/Baseline/bifs.global_ids/out
Normal file
|
@ -0,0 +1 @@
|
|||
func
|
1
testing/btest/Baseline/bifs.global_sizes/out
Normal file
1
testing/btest/Baseline/bifs.global_sizes/out
Normal file
|
@ -0,0 +1 @@
|
|||
found bro_init
|
1
testing/btest/Baseline/bifs.hexdump/out
Normal file
1
testing/btest/Baseline/bifs.hexdump/out
Normal file
|
@ -0,0 +1 @@
|
|||
0000 61 62 63 ff 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f abc.defg hijklmno^J0010 70 71 72 73 74 75 76 77 78 79 7a pqrstuvw xyz^J
|
4
testing/btest/Baseline/bifs.identify_data/out
Normal file
4
testing/btest/Baseline/bifs.identify_data/out
Normal file
|
@ -0,0 +1,4 @@
|
|||
ASCII text, with no line terminators
|
||||
text/plain; charset=us-ascii
|
||||
PNG image
|
||||
image/png; charset=binary
|
|
@ -0,0 +1,8 @@
|
|||
[orig_h=141.142.220.118, orig_p=48649/tcp, resp_h=208.80.152.118, resp_p=80/tcp]
|
||||
[orig_h=141.142.220.118, orig_p=49996/tcp, resp_h=208.80.152.3, resp_p=80/tcp]
|
||||
[orig_h=141.142.220.118, orig_p=49997/tcp, resp_h=208.80.152.3, resp_p=80/tcp]
|
||||
[orig_h=141.142.220.118, orig_p=49998/tcp, resp_h=208.80.152.3, resp_p=80/tcp]
|
||||
[orig_h=141.142.220.118, orig_p=49999/tcp, resp_h=208.80.152.3, resp_p=80/tcp]
|
||||
[orig_h=141.142.220.118, orig_p=50000/tcp, resp_h=208.80.152.3, resp_p=80/tcp]
|
||||
[orig_h=141.142.220.118, orig_p=50001/tcp, resp_h=208.80.152.3, resp_p=80/tcp]
|
||||
[orig_h=141.142.220.118, orig_p=35642/tcp, resp_h=208.80.152.2, resp_p=80/tcp]
|
2
testing/btest/Baseline/bifs.is_ascii/out
Normal file
2
testing/btest/Baseline/bifs.is_ascii/out
Normal file
|
@ -0,0 +1,2 @@
|
|||
F
|
||||
T
|
4
testing/btest/Baseline/bifs.is_local_interface/out
Normal file
4
testing/btest/Baseline/bifs.is_local_interface/out
Normal file
|
@ -0,0 +1,4 @@
|
|||
T
|
||||
F
|
||||
F
|
||||
T
|
9
testing/btest/Baseline/bifs.is_port/out
Normal file
9
testing/btest/Baseline/bifs.is_port/out
Normal file
|
@ -0,0 +1,9 @@
|
|||
T
|
||||
F
|
||||
F
|
||||
F
|
||||
T
|
||||
F
|
||||
F
|
||||
F
|
||||
T
|
6
testing/btest/Baseline/bifs.join_string/out
Normal file
6
testing/btest/Baseline/bifs.join_string/out
Normal file
|
@ -0,0 +1,6 @@
|
|||
this * is * a * test
|
||||
thisisatest
|
||||
mytest
|
||||
this__is__another__test
|
||||
thisisanothertest
|
||||
Test
|
6
testing/btest/Baseline/bifs.length/out
Normal file
6
testing/btest/Baseline/bifs.length/out
Normal file
|
@ -0,0 +1,6 @@
|
|||
1
|
||||
4
|
||||
2
|
||||
0
|
||||
0
|
||||
0
|
5
testing/btest/Baseline/bifs.lookup_ID/out
Normal file
5
testing/btest/Baseline/bifs.lookup_ID/out
Normal file
|
@ -0,0 +1,5 @@
|
|||
bro test
|
||||
<unknown id>
|
||||
<unknown id>
|
||||
<unknown id>
|
||||
event()
|
2
testing/btest/Baseline/bifs.lowerupper/out
Normal file
2
testing/btest/Baseline/bifs.lowerupper/out
Normal file
|
@ -0,0 +1,2 @@
|
|||
this is a test
|
||||
THIS IS A TEST
|
8
testing/btest/Baseline/bifs.math/out
Normal file
8
testing/btest/Baseline/bifs.math/out
Normal file
|
@ -0,0 +1,8 @@
|
|||
3.0
|
||||
2.0
|
||||
-4.0
|
||||
-3.0
|
||||
1.772005
|
||||
23.103867
|
||||
1.144223
|
||||
0.49693
|
6
testing/btest/Baseline/bifs.md5/output
Normal file
6
testing/btest/Baseline/bifs.md5/output
Normal file
|
@ -0,0 +1,6 @@
|
|||
f97c5d29941bfb1b2fdab0874906ab82
|
||||
7b0391feb2e0cd271f1cf39aafb4376f
|
||||
f97c5d29941bfb1b2fdab0874906ab82
|
||||
7b0391feb2e0cd271f1cf39aafb4376f
|
||||
571c0a35c7858ad5a0e16b8fdb41adcd
|
||||
1751cbd623726f423f734e23a8c7ec06
|
2
testing/btest/Baseline/bifs.merge_pattern/out
Normal file
2
testing/btest/Baseline/bifs.merge_pattern/out
Normal file
|
@ -0,0 +1,2 @@
|
|||
match
|
||||
match
|
8
testing/btest/Baseline/bifs.order/out
Normal file
8
testing/btest/Baseline/bifs.order/out
Normal file
|
@ -0,0 +1,8 @@
|
|||
[5, 2, 8, 3]
|
||||
[1, 3, 0, 2]
|
||||
[5.0 hrs, 2.0 days, 1.0 sec, -7.0 mins]
|
||||
[3, 2, 0, 1]
|
||||
[192.168.123.200, 10.0.0.157, 192.168.0.3]
|
||||
[1, 2, 0]
|
||||
[3.03, 3.01, 3.02, 3.015]
|
||||
[1, 3, 2, 0]
|
5
testing/btest/Baseline/bifs.parse_ftp/out
Normal file
5
testing/btest/Baseline/bifs.parse_ftp/out
Normal file
|
@ -0,0 +1,5 @@
|
|||
[h=192.168.0.2, p=257/tcp, valid=T]
|
||||
[h=192.168.0.2, p=257/tcp, valid=T]
|
||||
[h=fe80::12, p=1234/tcp, valid=T]
|
||||
[h=192.168.0.2, p=257/tcp, valid=T]
|
||||
[h=::, p=1234/tcp, valid=T]
|
6
testing/btest/Baseline/bifs.rand/out
Normal file
6
testing/btest/Baseline/bifs.rand/out
Normal file
|
@ -0,0 +1,6 @@
|
|||
985
|
||||
474
|
||||
738
|
||||
4
|
||||
634
|
||||
473
|
6
testing/btest/Baseline/bifs.rand/out.2
Normal file
6
testing/btest/Baseline/bifs.rand/out.2
Normal file
|
@ -0,0 +1,6 @@
|
|||
985
|
||||
474
|
||||
738
|
||||
974
|
||||
371
|
||||
638
|
2
testing/btest/Baseline/bifs.raw_bytes_to_v4_addr/out
Normal file
2
testing/btest/Baseline/bifs.raw_bytes_to_v4_addr/out
Normal file
|
@ -0,0 +1,2 @@
|
|||
65.66.67.68
|
||||
0.0.0.0
|
1
testing/btest/Baseline/bifs.reading_traces/out1
Normal file
1
testing/btest/Baseline/bifs.reading_traces/out1
Normal file
|
@ -0,0 +1 @@
|
|||
F
|
1
testing/btest/Baseline/bifs.reading_traces/out2
Normal file
1
testing/btest/Baseline/bifs.reading_traces/out2
Normal file
|
@ -0,0 +1 @@
|
|||
T
|
1
testing/btest/Baseline/bifs.record_type_to_vector/out
Normal file
1
testing/btest/Baseline/bifs.record_type_to_vector/out
Normal file
|
@ -0,0 +1 @@
|
|||
[, ct, str1]
|
4
testing/btest/Baseline/bifs.resize/out
Normal file
4
testing/btest/Baseline/bifs.resize/out
Normal file
|
@ -0,0 +1,4 @@
|
|||
3
|
||||
5
|
||||
0
|
||||
7
|
3
testing/btest/Baseline/bifs.rotate_file/out
Normal file
3
testing/btest/Baseline/bifs.rotate_file/out
Normal file
|
@ -0,0 +1,3 @@
|
|||
file rotated
|
||||
15.0
|
||||
0.0
|
3
testing/btest/Baseline/bifs.rotate_file_by_name/out
Normal file
3
testing/btest/Baseline/bifs.rotate_file_by_name/out
Normal file
|
@ -0,0 +1,3 @@
|
|||
file rotated
|
||||
15.0
|
||||
0.0
|
|
@ -0,0 +1 @@
|
|||
[2001:78:1:32::1, 2001:78:1:32::2]
|
3
testing/btest/Baseline/bifs.same_object/out
Normal file
3
testing/btest/Baseline/bifs.same_object/out
Normal file
|
@ -0,0 +1,3 @@
|
|||
T
|
||||
F
|
||||
F
|
4
testing/btest/Baseline/bifs.sha1/output
Normal file
4
testing/btest/Baseline/bifs.sha1/output
Normal file
|
@ -0,0 +1,4 @@
|
|||
fe05bcdcdc4928012781a5f1a2a77cbb5398e106
|
||||
3e949019500deb1369f13d9644d420d3a920aa5e
|
||||
fe05bcdcdc4928012781a5f1a2a77cbb5398e106
|
||||
3e949019500deb1369f13d9644d420d3a920aa5e
|
4
testing/btest/Baseline/bifs.sha256/output
Normal file
4
testing/btest/Baseline/bifs.sha256/output
Normal file
|
@ -0,0 +1,4 @@
|
|||
7692c3ad3540bb803c020b3aee66cd8887123234ea0c6e7143c0add73ff431ed
|
||||
4592092e1061c7ea85af2aed194621cc17a2762bae33a79bf8ce33fd0168b801
|
||||
7692c3ad3540bb803c020b3aee66cd8887123234ea0c6e7143c0add73ff431ed
|
||||
4592092e1061c7ea85af2aed194621cc17a2762bae33a79bf8ce33fd0168b801
|
16
testing/btest/Baseline/bifs.sort/out
Normal file
16
testing/btest/Baseline/bifs.sort/out
Normal file
|
@ -0,0 +1,16 @@
|
|||
[2, 3, 5, 8]
|
||||
[2, 3, 5, 8]
|
||||
[-7.0 mins, 1.0 sec, 5.0 hrs, 2.0 days]
|
||||
[-7.0 mins, 1.0 sec, 5.0 hrs, 2.0 days]
|
||||
[F, F, T, T]
|
||||
[F, F, T, T]
|
||||
[57/tcp, 123/tcp, 7/udp, 500/udp, 12/icmp]
|
||||
[57/tcp, 123/tcp, 7/udp, 500/udp, 12/icmp]
|
||||
[3.03, 3.01, 3.02, 3.015]
|
||||
[3.03, 3.01, 3.02, 3.015]
|
||||
[192.168.123.200, 10.0.0.157, 192.168.0.3]
|
||||
[192.168.123.200, 10.0.0.157, 192.168.0.3]
|
||||
[10.0.0.157, 192.168.0.3, 192.168.123.200]
|
||||
[10.0.0.157, 192.168.0.3, 192.168.123.200]
|
||||
[3.01, 3.015, 3.02, 3.03]
|
||||
[3.01, 3.015, 3.02, 3.03]
|
4
testing/btest/Baseline/bifs.sort_string_array/out
Normal file
4
testing/btest/Baseline/bifs.sort_string_array/out
Normal file
|
@ -0,0 +1,4 @@
|
|||
a
|
||||
is
|
||||
test
|
||||
this
|
32
testing/btest/Baseline/bifs.split/out
Normal file
32
testing/btest/Baseline/bifs.split/out
Normal file
|
@ -0,0 +1,32 @@
|
|||
t
|
||||
s is a t
|
||||
t
|
||||
---------------------
|
||||
t
|
||||
s is a test
|
||||
---------------------
|
||||
t
|
||||
hi
|
||||
s is a t
|
||||
es
|
||||
t
|
||||
---------------------
|
||||
t
|
||||
s is a test
|
||||
---------------------
|
||||
t
|
||||
hi
|
||||
s is a test
|
||||
---------------------
|
||||
[, thi, s i, s a tes, t]
|
||||
---------------------
|
||||
X-Mailer
|
||||
Testing Test (http://www.example.com)
|
||||
---------------------
|
||||
A
|
||||
=
|
||||
B
|
||||
=
|
||||
C
|
||||
=
|
||||
D
|
4
testing/btest/Baseline/bifs.str_shell_escape/out
Normal file
4
testing/btest/Baseline/bifs.str_shell_escape/out
Normal file
|
@ -0,0 +1,4 @@
|
|||
24
|
||||
echo ${TEST} > "my file"
|
||||
27
|
||||
echo \${TEST} > \"my file\"
|
3
testing/btest/Baseline/bifs.strcmp/out
Normal file
3
testing/btest/Baseline/bifs.strcmp/out
Normal file
|
@ -0,0 +1,3 @@
|
|||
T
|
||||
T
|
||||
T
|
4
testing/btest/Baseline/bifs.strftime/out
Normal file
4
testing/btest/Baseline/bifs.strftime/out
Normal file
|
@ -0,0 +1,4 @@
|
|||
1970-01-01 00:00:00
|
||||
000000 19700101
|
||||
1973-11-29 21:33:09
|
||||
213309 19731129
|
3
testing/btest/Baseline/bifs.string_fill/out
Normal file
3
testing/btest/Baseline/bifs.string_fill/out
Normal file
|
@ -0,0 +1,3 @@
|
|||
*\0* 1
|
||||
*t\0* 2
|
||||
*test test\0* 10
|
|
@ -1,13 +0,0 @@
|
|||
{
|
||||
[2] = Testing Test (http://www.example.com),
|
||||
[1] = X-Mailer
|
||||
}
|
||||
{
|
||||
[2] = =,
|
||||
[4] = =,
|
||||
[6] = =,
|
||||
[7] = D,
|
||||
[1] = A ,
|
||||
[5] = C ,
|
||||
[3] = B
|
||||
}
|
6
testing/btest/Baseline/bifs.string_to_pattern/out
Normal file
6
testing/btest/Baseline/bifs.string_to_pattern/out
Normal file
|
@ -0,0 +1,6 @@
|
|||
/^?(foo)$?/
|
||||
/^?()$?/
|
||||
/^?(b[a-z]+)$?/
|
||||
/^?(foo)$?/
|
||||
/^?()$?/
|
||||
/^?(b\[a\-z\]\+)$?/
|
6
testing/btest/Baseline/bifs.strip/out
Normal file
6
testing/btest/Baseline/bifs.strip/out
Normal file
|
@ -0,0 +1,6 @@
|
|||
* this is a test *
|
||||
*this is a test*
|
||||
**
|
||||
**
|
||||
* *
|
||||
**
|
2
testing/btest/Baseline/bifs.strstr/out
Normal file
2
testing/btest/Baseline/bifs.strstr/out
Normal file
|
@ -0,0 +1,2 @@
|
|||
2
|
||||
0
|
2
testing/btest/Baseline/bifs.sub/out
Normal file
2
testing/btest/Baseline/bifs.sub/out
Normal file
|
@ -0,0 +1,2 @@
|
|||
that is a test
|
||||
that at a test
|
1
testing/btest/Baseline/bifs.subst_string/out
Normal file
1
testing/btest/Baseline/bifs.subst_string/out
Normal file
|
@ -0,0 +1 @@
|
|||
that at another test
|
1
testing/btest/Baseline/bifs.system/out
Normal file
1
testing/btest/Baseline/bifs.system/out
Normal file
|
@ -0,0 +1 @@
|
|||
thistest
|
1
testing/btest/Baseline/bifs.system_env/testfile
Normal file
1
testing/btest/Baseline/bifs.system_env/testfile
Normal file
|
@ -0,0 +1 @@
|
|||
helloworld
|
9
testing/btest/Baseline/bifs.to_count/out
Normal file
9
testing/btest/Baseline/bifs.to_count/out
Normal file
|
@ -0,0 +1,9 @@
|
|||
0
|
||||
2
|
||||
3
|
||||
4
|
||||
7
|
||||
0
|
||||
18446744073709551611
|
||||
0
|
||||
123
|
6
testing/btest/Baseline/bifs.to_double/out
Normal file
6
testing/btest/Baseline/bifs.to_double/out
Normal file
|
@ -0,0 +1,6 @@
|
|||
0.000001
|
||||
1.0
|
||||
-60.0
|
||||
3600.0
|
||||
86400.0
|
||||
1342748947.655087
|
2
testing/btest/Baseline/bifs.to_double_from_string/error
Normal file
2
testing/btest/Baseline/bifs.to_double_from_string/error
Normal file
|
@ -0,0 +1,2 @@
|
|||
error in /da/home/robin/bro/master/testing/btest/.tmp/bifs.to_double_from_string/to_double_from_string.bro, line 7 and /da/home/robin/bro/master/testing/btest/.tmp/bifs.to_double_from_string/to_double_from_string.bro, line 15: bad conversion to double (to_double(d) and NotADouble)
|
||||
error in /da/home/robin/bro/master/testing/btest/.tmp/bifs.to_double_from_string/to_double_from_string.bro, line 7 and /da/home/robin/bro/master/testing/btest/.tmp/bifs.to_double_from_string/to_double_from_string.bro, line 16: bad conversion to double (to_double(d) and )
|
5
testing/btest/Baseline/bifs.to_double_from_string/output
Normal file
5
testing/btest/Baseline/bifs.to_double_from_string/output
Normal file
|
@ -0,0 +1,5 @@
|
|||
to_double(3.14) = 3.14 (SUCCESS)
|
||||
to_double(-3.14) = -3.14 (SUCCESS)
|
||||
to_double(0) = 0.0 (SUCCESS)
|
||||
to_double(NotADouble) = 0.0 (SUCCESS)
|
||||
to_double() = 0.0 (SUCCESS)
|
3
testing/btest/Baseline/bifs.to_int/out
Normal file
3
testing/btest/Baseline/bifs.to_int/out
Normal file
|
@ -0,0 +1,3 @@
|
|||
1
|
||||
-1
|
||||
0
|
2
testing/btest/Baseline/bifs.to_interval/out
Normal file
2
testing/btest/Baseline/bifs.to_interval/out
Normal file
|
@ -0,0 +1,2 @@
|
|||
1234563.14
|
||||
-1234563.14
|
7
testing/btest/Baseline/bifs.to_port/out
Normal file
7
testing/btest/Baseline/bifs.to_port/out
Normal file
|
@ -0,0 +1,7 @@
|
|||
123/tcp
|
||||
123/udp
|
||||
123/icmp
|
||||
0/unknown
|
||||
256/tcp
|
||||
256/udp
|
||||
256/icmp
|
2
testing/btest/Baseline/bifs.to_time/out
Normal file
2
testing/btest/Baseline/bifs.to_time/out
Normal file
|
@ -0,0 +1,2 @@
|
|||
1234563.14
|
||||
-1234563.14
|
26
testing/btest/Baseline/bifs.type_name/out
Normal file
26
testing/btest/Baseline/bifs.type_name/out
Normal file
|
@ -0,0 +1,26 @@
|
|||
string
|
||||
count
|
||||
int
|
||||
double
|
||||
bool
|
||||
time
|
||||
interval
|
||||
pattern
|
||||
enum
|
||||
port
|
||||
addr
|
||||
addr
|
||||
subnet
|
||||
subnet
|
||||
vector of count
|
||||
vector of table[count] of string
|
||||
set[count]
|
||||
set[port,string]
|
||||
table[count] of string
|
||||
table[string] of table[addr,port] of string
|
||||
record { c:count; s:string; }
|
||||
function(aa:int; bb:int;) : bool
|
||||
function() : any
|
||||
function() : void
|
||||
file of string
|
||||
event()
|
2
testing/btest/Baseline/bifs.uuid_to_string/out
Normal file
2
testing/btest/Baseline/bifs.uuid_to_string/out
Normal file
|
@ -0,0 +1,2 @@
|
|||
626180fe-6463-6665-6730-313233343536
|
||||
<Invalid UUID>
|
103
testing/btest/Baseline/core.checksums/bad.out
Normal file
103
testing/btest/Baseline/core.checksums/bad.out
Normal file
|
@ -0,0 +1,103 @@
|
|||
#separator \x09
|
||||
#set_separator ,
|
||||
#empty_field (empty)
|
||||
#unset_field -
|
||||
#path weird
|
||||
#open 2012-03-26-18-03-01
|
||||
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p name addl notice peer
|
||||
#types time string addr port addr port string string bool string
|
||||
1332784981.078396 - - - - - bad_IP_checksum - F bro
|
||||
#close 2012-03-26-18-03-01
|
||||
#separator \x09
|
||||
#set_separator ,
|
||||
#empty_field (empty)
|
||||
#unset_field -
|
||||
#path weird
|
||||
#open 2012-03-26-18-01-25
|
||||
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p name addl notice peer
|
||||
#types time string addr port addr port string string bool string
|
||||
1332784885.686428 UWkUyAuUGXf 127.0.0.1 30000 127.0.0.1 80 bad_TCP_checksum - F bro
|
||||
#close 2012-03-26-18-01-25
|
||||
#separator \x09
|
||||
#set_separator ,
|
||||
#empty_field (empty)
|
||||
#unset_field -
|
||||
#path weird
|
||||
#open 2012-03-26-18-02-13
|
||||
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p name addl notice peer
|
||||
#types time string addr port addr port string string bool string
|
||||
1332784933.501023 UWkUyAuUGXf 127.0.0.1 30000 127.0.0.1 13000 bad_UDP_checksum - F bro
|
||||
#close 2012-03-26-18-02-13
|
||||
#separator \x09
|
||||
#set_separator ,
|
||||
#empty_field (empty)
|
||||
#unset_field -
|
||||
#path weird
|
||||
#open 2012-04-10-16-29-23
|
||||
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p name addl notice peer
|
||||
#types time string addr port addr port string string bool string
|
||||
1334075363.536871 UWkUyAuUGXf 192.168.1.100 8 192.168.1.101 0 bad_ICMP_checksum - F bro
|
||||
#close 2012-04-10-16-29-23
|
||||
#separator \x09
|
||||
#set_separator ,
|
||||
#empty_field (empty)
|
||||
#unset_field -
|
||||
#path weird
|
||||
#open 2012-03-26-18-06-50
|
||||
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p name addl notice peer
|
||||
#types time string addr port addr port string string bool string
|
||||
1332785210.013051 - - - - - routing0_hdr - F bro
|
||||
1332785210.013051 UWkUyAuUGXf 2001:4f8:4:7:2e0:81ff:fe52:ffff 30000 2001:78:1:32::2 80 bad_TCP_checksum - F bro
|
||||
#close 2012-03-26-18-06-50
|
||||
#separator \x09
|
||||
#set_separator ,
|
||||
#empty_field (empty)
|
||||
#unset_field -
|
||||
#path weird
|
||||
#open 2012-03-26-17-23-00
|
||||
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p name addl notice peer
|
||||
#types time string addr port addr port string string bool string
|
||||
1332782580.798420 - - - - - routing0_hdr - F bro
|
||||
1332782580.798420 UWkUyAuUGXf 2001:4f8:4:7:2e0:81ff:fe52:ffff 30000 2001:78:1:32::2 13000 bad_UDP_checksum - F bro
|
||||
#close 2012-03-26-17-23-00
|
||||
#separator \x09
|
||||
#set_separator ,
|
||||
#empty_field (empty)
|
||||
#unset_field -
|
||||
#path weird
|
||||
#open 2012-04-10-16-25-11
|
||||
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p name addl notice peer
|
||||
#types time string addr port addr port string string bool string
|
||||
1334075111.800086 - - - - - routing0_hdr - F bro
|
||||
1334075111.800086 UWkUyAuUGXf 2001:4f8:4:7:2e0:81ff:fe52:ffff 128 2001:78:1:32::1 129 bad_ICMP_checksum - F bro
|
||||
#close 2012-04-10-16-25-11
|
||||
#separator \x09
|
||||
#set_separator ,
|
||||
#empty_field (empty)
|
||||
#unset_field -
|
||||
#path weird
|
||||
#open 2012-03-26-18-07-30
|
||||
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p name addl notice peer
|
||||
#types time string addr port addr port string string bool string
|
||||
1332785250.469132 UWkUyAuUGXf 2001:4f8:4:7:2e0:81ff:fe52:ffff 30000 2001:4f8:4:7:2e0:81ff:fe52:9a6b 80 bad_TCP_checksum - F bro
|
||||
#close 2012-03-26-18-07-30
|
||||
#separator \x09
|
||||
#set_separator ,
|
||||
#empty_field (empty)
|
||||
#unset_field -
|
||||
#path weird
|
||||
#open 2012-03-26-17-02-22
|
||||
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p name addl notice peer
|
||||
#types time string addr port addr port string string bool string
|
||||
1332781342.923813 UWkUyAuUGXf 2001:4f8:4:7:2e0:81ff:fe52:ffff 30000 2001:4f8:4:7:2e0:81ff:fe52:9a6b 13000 bad_UDP_checksum - F bro
|
||||
#close 2012-03-26-17-02-22
|
||||
#separator \x09
|
||||
#set_separator ,
|
||||
#empty_field (empty)
|
||||
#unset_field -
|
||||
#path weird
|
||||
#open 2012-04-10-16-22-19
|
||||
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p name addl notice peer
|
||||
#types time string addr port addr port string string bool string
|
||||
1334074939.467194 UWkUyAuUGXf 2001:4f8:4:7:2e0:81ff:fe52:ffff 128 2001:4f8:4:7:2e0:81ff:fe52:9a6b 129 bad_ICMP_checksum - F bro
|
||||
#close 2012-04-10-16-22-19
|
70
testing/btest/Baseline/core.checksums/good.out
Normal file
70
testing/btest/Baseline/core.checksums/good.out
Normal file
|
@ -0,0 +1,70 @@
|
|||
#separator \x09
|
||||
#set_separator ,
|
||||
#empty_field (empty)
|
||||
#unset_field -
|
||||
#path weird
|
||||
#open 2012-04-10-16-22-19
|
||||
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p name addl notice peer
|
||||
#types time string addr port addr port string string bool string
|
||||
1334074939.467194 UWkUyAuUGXf 2001:4f8:4:7:2e0:81ff:fe52:ffff 128 2001:4f8:4:7:2e0:81ff:fe52:9a6b 129 bad_ICMP_checksum - F bro
|
||||
#close 2012-04-10-16-22-19
|
||||
#separator \x09
|
||||
#set_separator ,
|
||||
#empty_field (empty)
|
||||
#unset_field -
|
||||
#path weird
|
||||
#open 2012-03-26-18-05-25
|
||||
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p name addl notice peer
|
||||
#types time string addr port addr port string string bool string
|
||||
1332785125.596793 - - - - - routing0_hdr - F bro
|
||||
#close 2012-03-26-18-05-25
|
||||
#separator \x09
|
||||
#set_separator ,
|
||||
#empty_field (empty)
|
||||
#unset_field -
|
||||
#path weird
|
||||
#open 2012-03-26-17-21-48
|
||||
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p name addl notice peer
|
||||
#types time string addr port addr port string string bool string
|
||||
1332782508.592037 - - - - - routing0_hdr - F bro
|
||||
#close 2012-03-26-17-21-48
|
||||
#separator \x09
|
||||
#set_separator ,
|
||||
#empty_field (empty)
|
||||
#unset_field -
|
||||
#path weird
|
||||
#open 2012-04-10-16-23-47
|
||||
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p name addl notice peer
|
||||
#types time string addr port addr port string string bool string
|
||||
1334075027.053380 - - - - - routing0_hdr - F bro
|
||||
#close 2012-04-10-16-23-47
|
||||
#separator \x09
|
||||
#set_separator ,
|
||||
#empty_field (empty)
|
||||
#unset_field -
|
||||
#path weird
|
||||
#open 2012-04-10-16-23-47
|
||||
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p name addl notice peer
|
||||
#types time string addr port addr port string string bool string
|
||||
1334075027.053380 - - - - - routing0_hdr - F bro
|
||||
#close 2012-04-10-16-23-47
|
||||
#separator \x09
|
||||
#set_separator ,
|
||||
#empty_field (empty)
|
||||
#unset_field -
|
||||
#path weird
|
||||
#open 2012-04-10-16-23-47
|
||||
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p name addl notice peer
|
||||
#types time string addr port addr port string string bool string
|
||||
1334075027.053380 - - - - - routing0_hdr - F bro
|
||||
#close 2012-04-10-16-23-47
|
||||
#separator \x09
|
||||
#set_separator ,
|
||||
#empty_field (empty)
|
||||
#unset_field -
|
||||
#path weird
|
||||
#open 2012-04-10-16-23-47
|
||||
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p name addl notice peer
|
||||
#types time string addr port addr port string string bool string
|
||||
1334075027.053380 - - - - - routing0_hdr - F bro
|
||||
#close 2012-04-10-16-23-47
|
10
testing/btest/Baseline/core.disable-mobile-ipv6/weird.log
Normal file
10
testing/btest/Baseline/core.disable-mobile-ipv6/weird.log
Normal file
|
@ -0,0 +1,10 @@
|
|||
#separator \x09
|
||||
#set_separator ,
|
||||
#empty_field (empty)
|
||||
#unset_field -
|
||||
#path weird
|
||||
#open 2012-04-05-21-56-51
|
||||
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p name addl notice peer
|
||||
#types time string addr port addr port string string bool string
|
||||
1333663011.602839 - - - - - unknown_protocol_135 - F bro
|
||||
#close 2012-04-05-21-56-51
|
24
testing/btest/Baseline/core.discarder/output
Normal file
24
testing/btest/Baseline/core.discarder/output
Normal file
|
@ -0,0 +1,24 @@
|
|||
################ IP Discarder ################
|
||||
[orig_h=141.142.220.118, orig_p=35634/tcp, resp_h=208.80.152.2, resp_p=80/tcp]
|
||||
[orig_h=141.142.220.118, orig_p=35634/tcp, resp_h=208.80.152.2, resp_p=80/tcp]
|
||||
[orig_h=141.142.220.118, orig_p=35642/tcp, resp_h=208.80.152.2, resp_p=80/tcp]
|
||||
[orig_h=141.142.220.118, orig_p=35642/tcp, resp_h=208.80.152.2, resp_p=80/tcp]
|
||||
[orig_h=141.142.220.118, orig_p=35642/tcp, resp_h=208.80.152.2, resp_p=80/tcp]
|
||||
[orig_h=141.142.220.118, orig_p=35642/tcp, resp_h=208.80.152.2, resp_p=80/tcp]
|
||||
################ TCP Discarder ################
|
||||
[orig_h=141.142.220.118, orig_p=48649/tcp, resp_h=208.80.152.118, resp_p=80/tcp]
|
||||
[orig_h=141.142.220.118, orig_p=49996/tcp, resp_h=208.80.152.3, resp_p=80/tcp]
|
||||
[orig_h=141.142.220.118, orig_p=49997/tcp, resp_h=208.80.152.3, resp_p=80/tcp]
|
||||
[orig_h=141.142.220.118, orig_p=49998/tcp, resp_h=208.80.152.3, resp_p=80/tcp]
|
||||
[orig_h=141.142.220.118, orig_p=49999/tcp, resp_h=208.80.152.3, resp_p=80/tcp]
|
||||
[orig_h=141.142.220.118, orig_p=50000/tcp, resp_h=208.80.152.3, resp_p=80/tcp]
|
||||
[orig_h=141.142.220.118, orig_p=50001/tcp, resp_h=208.80.152.3, resp_p=80/tcp]
|
||||
[orig_h=141.142.220.118, orig_p=35642/tcp, resp_h=208.80.152.2, resp_p=80/tcp]
|
||||
################ UDP Discarder ################
|
||||
[orig_h=fe80::217:f2ff:fed7:cf65, orig_p=5353/udp, resp_h=ff02::fb, resp_p=5353/udp]
|
||||
[orig_h=fe80::3074:17d5:2052:c324, orig_p=65373/udp, resp_h=ff02::1:3, resp_p=5355/udp]
|
||||
[orig_h=fe80::3074:17d5:2052:c324, orig_p=65373/udp, resp_h=ff02::1:3, resp_p=5355/udp]
|
||||
[orig_h=fe80::3074:17d5:2052:c324, orig_p=54213/udp, resp_h=ff02::1:3, resp_p=5355/udp]
|
||||
[orig_h=fe80::3074:17d5:2052:c324, orig_p=54213/udp, resp_h=ff02::1:3, resp_p=5355/udp]
|
||||
################ ICMP Discarder ################
|
||||
Discard icmp packet: [icmp_type=3]
|
18
testing/btest/Baseline/core.expr-exception/output
Normal file
18
testing/btest/Baseline/core.expr-exception/output
Normal file
|
@ -0,0 +1,18 @@
|
|||
ftp field missing
|
||||
[orig_h=141.142.220.118, orig_p=48649/tcp, resp_h=208.80.152.118, resp_p=80/tcp]
|
||||
ftp field missing
|
||||
[orig_h=141.142.220.118, orig_p=49997/tcp, resp_h=208.80.152.3, resp_p=80/tcp]
|
||||
ftp field missing
|
||||
[orig_h=141.142.220.118, orig_p=49996/tcp, resp_h=208.80.152.3, resp_p=80/tcp]
|
||||
ftp field missing
|
||||
[orig_h=141.142.220.118, orig_p=49998/tcp, resp_h=208.80.152.3, resp_p=80/tcp]
|
||||
ftp field missing
|
||||
[orig_h=141.142.220.118, orig_p=50000/tcp, resp_h=208.80.152.3, resp_p=80/tcp]
|
||||
ftp field missing
|
||||
[orig_h=141.142.220.118, orig_p=49999/tcp, resp_h=208.80.152.3, resp_p=80/tcp]
|
||||
ftp field missing
|
||||
[orig_h=141.142.220.118, orig_p=50001/tcp, resp_h=208.80.152.3, resp_p=80/tcp]
|
||||
ftp field missing
|
||||
[orig_h=141.142.220.118, orig_p=35642/tcp, resp_h=208.80.152.2, resp_p=80/tcp]
|
||||
ftp field missing
|
||||
[orig_h=141.142.220.235, orig_p=6705/tcp, resp_h=173.192.163.128, resp_p=80/tcp]
|
|
@ -3,14 +3,16 @@
|
|||
#empty_field (empty)
|
||||
#unset_field -
|
||||
#path reporter
|
||||
#open 2011-03-18-19-06-08
|
||||
#fields ts level message location
|
||||
#types time enum string string
|
||||
1300475168.783842 Reporter::ERROR field value missing [c$ftp] /Users/robin/bro/master/testing/btest/.tmp/core.expr-exception/expr-exception.bro, line 8
|
||||
1300475168.915940 Reporter::ERROR field value missing [c$ftp] /Users/robin/bro/master/testing/btest/.tmp/core.expr-exception/expr-exception.bro, line 8
|
||||
1300475168.916118 Reporter::ERROR field value missing [c$ftp] /Users/robin/bro/master/testing/btest/.tmp/core.expr-exception/expr-exception.bro, line 8
|
||||
1300475168.918295 Reporter::ERROR field value missing [c$ftp] /Users/robin/bro/master/testing/btest/.tmp/core.expr-exception/expr-exception.bro, line 8
|
||||
1300475168.952193 Reporter::ERROR field value missing [c$ftp] /Users/robin/bro/master/testing/btest/.tmp/core.expr-exception/expr-exception.bro, line 8
|
||||
1300475168.952228 Reporter::ERROR field value missing [c$ftp] /Users/robin/bro/master/testing/btest/.tmp/core.expr-exception/expr-exception.bro, line 8
|
||||
1300475168.954761 Reporter::ERROR field value missing [c$ftp] /Users/robin/bro/master/testing/btest/.tmp/core.expr-exception/expr-exception.bro, line 8
|
||||
1300475168.962628 Reporter::ERROR field value missing [c$ftp] /Users/robin/bro/master/testing/btest/.tmp/core.expr-exception/expr-exception.bro, line 8
|
||||
1300475169.780331 Reporter::ERROR field value missing [c$ftp] /Users/robin/bro/master/testing/btest/.tmp/core.expr-exception/expr-exception.bro, line 8
|
||||
1300475168.783842 Reporter::ERROR field value missing [c$ftp] /da/home/robin/bro/master/testing/btest/.tmp/core.expr-exception/expr-exception.bro, line 10
|
||||
1300475168.915940 Reporter::ERROR field value missing [c$ftp] /da/home/robin/bro/master/testing/btest/.tmp/core.expr-exception/expr-exception.bro, line 10
|
||||
1300475168.916118 Reporter::ERROR field value missing [c$ftp] /da/home/robin/bro/master/testing/btest/.tmp/core.expr-exception/expr-exception.bro, line 10
|
||||
1300475168.918295 Reporter::ERROR field value missing [c$ftp] /da/home/robin/bro/master/testing/btest/.tmp/core.expr-exception/expr-exception.bro, line 10
|
||||
1300475168.952193 Reporter::ERROR field value missing [c$ftp] /da/home/robin/bro/master/testing/btest/.tmp/core.expr-exception/expr-exception.bro, line 10
|
||||
1300475168.952228 Reporter::ERROR field value missing [c$ftp] /da/home/robin/bro/master/testing/btest/.tmp/core.expr-exception/expr-exception.bro, line 10
|
||||
1300475168.954761 Reporter::ERROR field value missing [c$ftp] /da/home/robin/bro/master/testing/btest/.tmp/core.expr-exception/expr-exception.bro, line 10
|
||||
1300475168.962628 Reporter::ERROR field value missing [c$ftp] /da/home/robin/bro/master/testing/btest/.tmp/core.expr-exception/expr-exception.bro, line 10
|
||||
1300475169.780331 Reporter::ERROR field value missing [c$ftp] /da/home/robin/bro/master/testing/btest/.tmp/core.expr-exception/expr-exception.bro, line 10
|
||||
#close 2011-03-18-19-06-13
|
||||
|
|
|
@ -0,0 +1,4 @@
|
|||
opened
|
||||
write 0
|
||||
write 3
|
||||
write 6
|
|
@ -0,0 +1,4 @@
|
|||
opened
|
||||
write 1
|
||||
write 4
|
||||
write 7
|
|
@ -0,0 +1,4 @@
|
|||
opened
|
||||
write 2
|
||||
write 5
|
||||
write 8
|
|
@ -0,0 +1,6 @@
|
|||
opened
|
||||
write 0
|
||||
opened
|
||||
write 3
|
||||
opened
|
||||
write 6
|
|
@ -0,0 +1,6 @@
|
|||
opened
|
||||
write 1
|
||||
opened
|
||||
write 4
|
||||
opened
|
||||
write 7
|
|
@ -0,0 +1,6 @@
|
|||
opened
|
||||
write 2
|
||||
opened
|
||||
write 5
|
||||
opened
|
||||
write 8
|
12
testing/btest/Baseline/core.icmp.icmp-context/output
Normal file
12
testing/btest/Baseline/core.icmp.icmp-context/output
Normal file
|
@ -0,0 +1,12 @@
|
|||
icmp_unreachable (code=0)
|
||||
conn_id: [orig_h=10.0.0.1, orig_p=3/icmp, resp_h=10.0.0.2, resp_p=0/icmp]
|
||||
icmp_conn: [orig_h=10.0.0.1, resp_h=10.0.0.2, itype=3, icode=0, len=0, hlim=64, v6=F]
|
||||
icmp_context: [id=[orig_h=::, orig_p=0/unknown, resp_h=::, resp_p=0/unknown], len=0, proto=0, frag_offset=0, bad_hdr_len=T, bad_checksum=F, MF=F, DF=F]
|
||||
icmp_unreachable (code=0)
|
||||
conn_id: [orig_h=10.0.0.1, orig_p=3/icmp, resp_h=10.0.0.2, resp_p=0/icmp]
|
||||
icmp_conn: [orig_h=10.0.0.1, resp_h=10.0.0.2, itype=3, icode=0, len=20, hlim=64, v6=F]
|
||||
icmp_context: [id=[orig_h=10.0.0.2, orig_p=0/unknown, resp_h=10.0.0.1, resp_p=0/unknown], len=20, proto=0, frag_offset=0, bad_hdr_len=T, bad_checksum=F, MF=F, DF=F]
|
||||
icmp_unreachable (code=3)
|
||||
conn_id: [orig_h=192.168.1.102, orig_p=3/icmp, resp_h=192.168.1.1, resp_p=3/icmp]
|
||||
icmp_conn: [orig_h=192.168.1.102, resp_h=192.168.1.1, itype=3, icode=3, len=148, hlim=128, v6=F]
|
||||
icmp_context: [id=[orig_h=192.168.1.1, orig_p=53/udp, resp_h=192.168.1.102, resp_p=59207/udp], len=163, proto=2, frag_offset=0, bad_hdr_len=F, bad_checksum=F, MF=F, DF=F]
|
20
testing/btest/Baseline/core.icmp.icmp-events/output
Normal file
20
testing/btest/Baseline/core.icmp.icmp-events/output
Normal file
|
@ -0,0 +1,20 @@
|
|||
icmp_unreachable (code=3)
|
||||
conn_id: [orig_h=192.168.1.102, orig_p=3/icmp, resp_h=192.168.1.1, resp_p=3/icmp]
|
||||
icmp_conn: [orig_h=192.168.1.102, resp_h=192.168.1.1, itype=3, icode=3, len=148, hlim=128, v6=F]
|
||||
icmp_context: [id=[orig_h=192.168.1.1, orig_p=53/udp, resp_h=192.168.1.102, resp_p=59207/udp], len=163, proto=2, frag_offset=0, bad_hdr_len=F, bad_checksum=F, MF=F, DF=F]
|
||||
icmp_time_exceeded (code=0)
|
||||
conn_id: [orig_h=10.0.0.1, orig_p=11/icmp, resp_h=10.0.0.2, resp_p=0/icmp]
|
||||
icmp_conn: [orig_h=10.0.0.1, resp_h=10.0.0.2, itype=11, icode=0, len=32, hlim=64, v6=F]
|
||||
icmp_context: [id=[orig_h=10.0.0.2, orig_p=30000/udp, resp_h=10.0.0.1, resp_p=13000/udp], len=32, proto=2, frag_offset=0, bad_hdr_len=F, bad_checksum=F, MF=F, DF=F]
|
||||
icmp_echo_request (id=34844, seq=0, payload=O\x85\xe0C\0^N\xeb\xff^H^I^J^K^L^M^N^O^P^Q^R^S^T^U^V^W^X^Y^Z\x1b\x1c\x1d\x1e\x1f !"#$%&'()*+,-./01234567)
|
||||
conn_id: [orig_h=10.0.0.1, orig_p=8/icmp, resp_h=74.125.225.99, resp_p=0/icmp]
|
||||
icmp_conn: [orig_h=10.0.0.1, resp_h=74.125.225.99, itype=8, icode=0, len=56, hlim=64, v6=F]
|
||||
icmp_echo_reply (id=34844, seq=0, payload=O\x85\xe0C\0^N\xeb\xff^H^I^J^K^L^M^N^O^P^Q^R^S^T^U^V^W^X^Y^Z\x1b\x1c\x1d\x1e\x1f !"#$%&'()*+,-./01234567)
|
||||
conn_id: [orig_h=10.0.0.1, orig_p=8/icmp, resp_h=74.125.225.99, resp_p=0/icmp]
|
||||
icmp_conn: [orig_h=10.0.0.1, resp_h=74.125.225.99, itype=8, icode=0, len=56, hlim=64, v6=F]
|
||||
icmp_echo_request (id=34844, seq=1, payload=O\x85\xe0D\0^N\xf0}^H^I^J^K^L^M^N^O^P^Q^R^S^T^U^V^W^X^Y^Z\x1b\x1c\x1d\x1e\x1f !"#$%&'()*+,-./01234567)
|
||||
conn_id: [orig_h=10.0.0.1, orig_p=8/icmp, resp_h=74.125.225.99, resp_p=0/icmp]
|
||||
icmp_conn: [orig_h=10.0.0.1, resp_h=74.125.225.99, itype=8, icode=0, len=56, hlim=64, v6=F]
|
||||
icmp_echo_reply (id=34844, seq=1, payload=O\x85\xe0D\0^N\xf0}^H^I^J^K^L^M^N^O^P^Q^R^S^T^U^V^W^X^Y^Z\x1b\x1c\x1d\x1e\x1f !"#$%&'()*+,-./01234567)
|
||||
conn_id: [orig_h=10.0.0.1, orig_p=8/icmp, resp_h=74.125.225.99, resp_p=0/icmp]
|
||||
icmp_conn: [orig_h=10.0.0.1, resp_h=74.125.225.99, itype=8, icode=0, len=56, hlim=64, v6=F]
|
16
testing/btest/Baseline/core.icmp.icmp6-context/output
Normal file
16
testing/btest/Baseline/core.icmp.icmp6-context/output
Normal file
|
@ -0,0 +1,16 @@
|
|||
icmp_unreachable (code=0)
|
||||
conn_id: [orig_h=fe80::dead, orig_p=1/icmp, resp_h=fe80::beef, resp_p=0/icmp]
|
||||
icmp_conn: [orig_h=fe80::dead, resp_h=fe80::beef, itype=1, icode=0, len=0, hlim=64, v6=T]
|
||||
icmp_context: [id=[orig_h=::, orig_p=0/unknown, resp_h=::, resp_p=0/unknown], len=0, proto=0, frag_offset=0, bad_hdr_len=T, bad_checksum=F, MF=F, DF=F]
|
||||
icmp_unreachable (code=0)
|
||||
conn_id: [orig_h=fe80::dead, orig_p=1/icmp, resp_h=fe80::beef, resp_p=0/icmp]
|
||||
icmp_conn: [orig_h=fe80::dead, resp_h=fe80::beef, itype=1, icode=0, len=40, hlim=64, v6=T]
|
||||
icmp_context: [id=[orig_h=fe80::beef, orig_p=0/unknown, resp_h=fe80::dead, resp_p=0/unknown], len=48, proto=0, frag_offset=0, bad_hdr_len=T, bad_checksum=F, MF=F, DF=F]
|
||||
icmp_unreachable (code=0)
|
||||
conn_id: [orig_h=fe80::dead, orig_p=1/icmp, resp_h=fe80::beef, resp_p=0/icmp]
|
||||
icmp_conn: [orig_h=fe80::dead, resp_h=fe80::beef, itype=1, icode=0, len=60, hlim=64, v6=T]
|
||||
icmp_context: [id=[orig_h=fe80::beef, orig_p=30000/udp, resp_h=fe80::dead, resp_p=13000/udp], len=60, proto=2, frag_offset=0, bad_hdr_len=F, bad_checksum=F, MF=F, DF=F]
|
||||
icmp_unreachable (code=0)
|
||||
conn_id: [orig_h=fe80::dead, orig_p=1/icmp, resp_h=fe80::beef, resp_p=0/icmp]
|
||||
icmp_conn: [orig_h=fe80::dead, resp_h=fe80::beef, itype=1, icode=0, len=48, hlim=64, v6=T]
|
||||
icmp_context: [id=[orig_h=fe80::beef, orig_p=0/unknown, resp_h=fe80::dead, resp_p=0/unknown], len=48, proto=0, frag_offset=0, bad_hdr_len=T, bad_checksum=F, MF=F, DF=F]
|
73
testing/btest/Baseline/core.icmp.icmp6-events/output
Normal file
73
testing/btest/Baseline/core.icmp.icmp6-events/output
Normal file
|
@ -0,0 +1,73 @@
|
|||
icmp_unreachable (code=0)
|
||||
conn_id: [orig_h=fe80::dead, orig_p=1/icmp, resp_h=fe80::beef, resp_p=0/icmp]
|
||||
icmp_conn: [orig_h=fe80::dead, resp_h=fe80::beef, itype=1, icode=0, len=60, hlim=64, v6=T]
|
||||
icmp_context: [id=[orig_h=fe80::beef, orig_p=30000/udp, resp_h=fe80::dead, resp_p=13000/udp], len=60, proto=2, frag_offset=0, bad_hdr_len=F, bad_checksum=F, MF=F, DF=F]
|
||||
icmp_packet_too_big (code=0)
|
||||
conn_id: [orig_h=fe80::dead, orig_p=2/icmp, resp_h=fe80::beef, resp_p=0/icmp]
|
||||
icmp_conn: [orig_h=fe80::dead, resp_h=fe80::beef, itype=2, icode=0, len=52, hlim=64, v6=T]
|
||||
icmp_context: [id=[orig_h=fe80::beef, orig_p=30000/udp, resp_h=fe80::dead, resp_p=13000/udp], len=52, proto=2, frag_offset=0, bad_hdr_len=F, bad_checksum=F, MF=F, DF=F]
|
||||
icmp_time_exceeded (code=0)
|
||||
conn_id: [orig_h=fe80::dead, orig_p=3/icmp, resp_h=fe80::beef, resp_p=0/icmp]
|
||||
icmp_conn: [orig_h=fe80::dead, resp_h=fe80::beef, itype=3, icode=0, len=52, hlim=64, v6=T]
|
||||
icmp_context: [id=[orig_h=fe80::beef, orig_p=30000/udp, resp_h=fe80::dead, resp_p=13000/udp], len=52, proto=2, frag_offset=0, bad_hdr_len=F, bad_checksum=F, MF=F, DF=F]
|
||||
icmp_parameter_problem (code=0)
|
||||
conn_id: [orig_h=fe80::dead, orig_p=4/icmp, resp_h=fe80::beef, resp_p=0/icmp]
|
||||
icmp_conn: [orig_h=fe80::dead, resp_h=fe80::beef, itype=4, icode=0, len=52, hlim=64, v6=T]
|
||||
icmp_context: [id=[orig_h=fe80::beef, orig_p=30000/udp, resp_h=fe80::dead, resp_p=13000/udp], len=52, proto=2, frag_offset=0, bad_hdr_len=F, bad_checksum=F, MF=F, DF=F]
|
||||
icmp_echo_request (id=1, seq=3, payload=abcdefghijklmnopqrstuvwabcdefghi)
|
||||
conn_id: [orig_h=2620:0:e00:400e:d1d:db37:beb:5aac, orig_p=128/icmp, resp_h=2001:4860:8006::63, resp_p=129/icmp]
|
||||
icmp_conn: [orig_h=2620:0:e00:400e:d1d:db37:beb:5aac, resp_h=2001:4860:8006::63, itype=128, icode=0, len=32, hlim=128, v6=T]
|
||||
icmp_echo_reply (id=1, seq=3, payload=abcdefghijklmnopqrstuvwabcdefghi)
|
||||
conn_id: [orig_h=2620:0:e00:400e:d1d:db37:beb:5aac, orig_p=128/icmp, resp_h=2001:4860:8006::63, resp_p=129/icmp]
|
||||
icmp_conn: [orig_h=2620:0:e00:400e:d1d:db37:beb:5aac, resp_h=2001:4860:8006::63, itype=128, icode=0, len=32, hlim=128, v6=T]
|
||||
icmp_echo_request (id=1, seq=4, payload=abcdefghijklmnopqrstuvwabcdefghi)
|
||||
conn_id: [orig_h=2620:0:e00:400e:d1d:db37:beb:5aac, orig_p=128/icmp, resp_h=2001:4860:8006::63, resp_p=129/icmp]
|
||||
icmp_conn: [orig_h=2620:0:e00:400e:d1d:db37:beb:5aac, resp_h=2001:4860:8006::63, itype=128, icode=0, len=32, hlim=128, v6=T]
|
||||
icmp_echo_reply (id=1, seq=4, payload=abcdefghijklmnopqrstuvwabcdefghi)
|
||||
conn_id: [orig_h=2620:0:e00:400e:d1d:db37:beb:5aac, orig_p=128/icmp, resp_h=2001:4860:8006::63, resp_p=129/icmp]
|
||||
icmp_conn: [orig_h=2620:0:e00:400e:d1d:db37:beb:5aac, resp_h=2001:4860:8006::63, itype=128, icode=0, len=32, hlim=128, v6=T]
|
||||
icmp_echo_request (id=1, seq=5, payload=abcdefghijklmnopqrstuvwabcdefghi)
|
||||
conn_id: [orig_h=2620:0:e00:400e:d1d:db37:beb:5aac, orig_p=128/icmp, resp_h=2001:4860:8006::63, resp_p=129/icmp]
|
||||
icmp_conn: [orig_h=2620:0:e00:400e:d1d:db37:beb:5aac, resp_h=2001:4860:8006::63, itype=128, icode=0, len=32, hlim=128, v6=T]
|
||||
icmp_echo_reply (id=1, seq=5, payload=abcdefghijklmnopqrstuvwabcdefghi)
|
||||
conn_id: [orig_h=2620:0:e00:400e:d1d:db37:beb:5aac, orig_p=128/icmp, resp_h=2001:4860:8006::63, resp_p=129/icmp]
|
||||
icmp_conn: [orig_h=2620:0:e00:400e:d1d:db37:beb:5aac, resp_h=2001:4860:8006::63, itype=128, icode=0, len=32, hlim=128, v6=T]
|
||||
icmp_echo_request (id=1, seq=6, payload=abcdefghijklmnopqrstuvwabcdefghi)
|
||||
conn_id: [orig_h=2620:0:e00:400e:d1d:db37:beb:5aac, orig_p=128/icmp, resp_h=2001:4860:8006::63, resp_p=129/icmp]
|
||||
icmp_conn: [orig_h=2620:0:e00:400e:d1d:db37:beb:5aac, resp_h=2001:4860:8006::63, itype=128, icode=0, len=32, hlim=128, v6=T]
|
||||
icmp_echo_reply (id=1, seq=6, payload=abcdefghijklmnopqrstuvwabcdefghi)
|
||||
conn_id: [orig_h=2620:0:e00:400e:d1d:db37:beb:5aac, orig_p=128/icmp, resp_h=2001:4860:8006::63, resp_p=129/icmp]
|
||||
icmp_conn: [orig_h=2620:0:e00:400e:d1d:db37:beb:5aac, resp_h=2001:4860:8006::63, itype=128, icode=0, len=32, hlim=128, v6=T]
|
||||
icmp_redirect (tgt=fe80::cafe, dest=fe80::babe)
|
||||
conn_id: [orig_h=fe80::dead, orig_p=137/icmp, resp_h=fe80::beef, resp_p=0/icmp]
|
||||
icmp_conn: [orig_h=fe80::dead, resp_h=fe80::beef, itype=137, icode=0, len=32, hlim=255, v6=T]
|
||||
options: []
|
||||
icmp_router_advertisement
|
||||
cur_hop_limit=13
|
||||
managed=T
|
||||
other=F
|
||||
home_agent=T
|
||||
pref=3
|
||||
proxy=F
|
||||
rsv=0
|
||||
router_lifetime=30.0 mins
|
||||
reachable_time=3.0 secs 700.0 msecs
|
||||
retrans_timer=1.0 sec 300.0 msecs
|
||||
conn_id: [orig_h=fe80::dead, orig_p=134/icmp, resp_h=fe80::beef, resp_p=133/icmp]
|
||||
icmp_conn: [orig_h=fe80::dead, resp_h=fe80::beef, itype=134, icode=0, len=8, hlim=255, v6=T]
|
||||
options: []
|
||||
icmp_neighbor_advertisement (tgt=fe80::babe)
|
||||
router=T
|
||||
solicited=F
|
||||
override=T
|
||||
conn_id: [orig_h=fe80::dead, orig_p=136/icmp, resp_h=fe80::beef, resp_p=135/icmp]
|
||||
icmp_conn: [orig_h=fe80::dead, resp_h=fe80::beef, itype=136, icode=0, len=16, hlim=255, v6=T]
|
||||
options: []
|
||||
icmp_router_solicitation
|
||||
conn_id: [orig_h=fe80::dead, orig_p=133/icmp, resp_h=fe80::beef, resp_p=134/icmp]
|
||||
icmp_conn: [orig_h=fe80::dead, resp_h=fe80::beef, itype=133, icode=0, len=0, hlim=255, v6=T]
|
||||
options: []
|
||||
icmp_neighbor_solicitation (tgt=fe80::babe)
|
||||
conn_id: [orig_h=fe80::dead, orig_p=135/icmp, resp_h=fe80::beef, resp_p=136/icmp]
|
||||
icmp_conn: [orig_h=fe80::dead, resp_h=fe80::beef, itype=135, icode=0, len=16, hlim=255, v6=T]
|
||||
options: []
|
Some files were not shown because too many files have changed in this diff Show more
Loading…
Add table
Add a link
Reference in a new issue