From 6977c07a2530fc658e159c49809c49059480176e Mon Sep 17 00:00:00 2001 From: Jan Grashoefer Date: Mon, 26 Aug 2024 12:43:14 +0200 Subject: [PATCH] Add btest for get_current_packet_ts() --- .../Baseline/core.network_time.packet_ts/output | 5 +++++ testing/btest/core/network_time/packet_ts.zeek | 17 +++++++++++++++++ 2 files changed, 22 insertions(+) create mode 100644 testing/btest/Baseline/core.network_time.packet_ts/output create mode 100644 testing/btest/core/network_time/packet_ts.zeek diff --git a/testing/btest/Baseline/core.network_time.packet_ts/output b/testing/btest/Baseline/core.network_time.packet_ts/output new file mode 100644 index 0000000000..cda26603e4 --- /dev/null +++ b/testing/btest/Baseline/core.network_time.packet_ts/output @@ -0,0 +1,5 @@ +### BTest baseline data generated by btest-diff. Do not edit. Use "btest -U/-u" to update. Requires BTest >= 0.63. +network_time_init network time: 1362692526.869344 +network_time_init packet ts: 1362692526.869344 +conn_state_remove network time: 1362692527.080972 +conn_state_remove packet ts: 0.0 diff --git a/testing/btest/core/network_time/packet_ts.zeek b/testing/btest/core/network_time/packet_ts.zeek new file mode 100644 index 0000000000..602e668d64 --- /dev/null +++ b/testing/btest/core/network_time/packet_ts.zeek @@ -0,0 +1,17 @@ +# @TEST-DOC: Test get_current_packet_ts() in comparison with network_time(). +# @TEST-EXEC: zeek -b -r $TRACES/http/get.trace %INPUT > output +# @TEST-EXEC: TEST_DIFF_CANONIFIER= btest-diff output + +event network_time_init() + { + print fmt("network_time_init network time: %s", network_time()); + print fmt("network_time_init packet ts: %s", get_current_packet_ts()); + } + +# Note: Gracefully closed connections will be actually removed after +# tcp_close_delay (default 5 secs). +event connection_state_remove(c: connection) + { + print fmt("conn_state_remove network time: %s", network_time()); + print fmt("conn_state_remove packet ts: %s", get_current_packet_ts()); + }