Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-14 12:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Added plugin.unprocessed_packet_hook btest

Browse source
This commit is contained in:
Tim Wojtulewicz 2021-11-11 14:36:32 -07:00
parent d0f8c50417
commit 6e8dae316b
8 changed files with 540 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

10
testing/btest/plugins/unprocessed-packet-hook.zeek Normal file
View file

@ -0,0 +1,10 @@
# @TEST-EXEC: ${DIST}/auxil/zeek-aux/plugin-support/init-plugin -u . Demo Unprocessed_Packet
# @TEST-EXEC: cp -r %DIR/unprocessed-packet-hook-plugin/* .
# @TEST-EXEC: ./configure --zeek-dist=${DIST} && make
# @TEST-EXEC: ZEEK_PLUGIN_ACTIVATE="Demo::Unprocessed_Packet" ZEEK_PLUGIN_PATH=`pwd` zeek -c unprocessed.pcap -b -r $TRACES/cisco-fabric-path.pcap %INPUT 2>&1 > output
# @TEST-EXEC: btest-diff output
# @TEST-EXEC: hexdump -C unprocessed.pcap > unprocessed.pcap.hex
# @TEST-EXEC: btest-diff unprocessed.pcap.hex
@unload base/misc/version
@load base/init-default