Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-09 18:18:19 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Tests updates for recent open/close log change.

Browse source
This commit is contained in:
Robin Sommer 2012-07-27 12:30:40 -07:00
parent c66c6d7c46
commit 767a792148
4 changed files with 9 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

12
testing/btest/Baseline/scripts.base.frameworks.logging.ascii-escape/ssh.log
View file

@ -3,12 +3,10 @@
#empty_field||(empty)
#unset_field||-
#path||ssh
#open||2012-07-27-19-14-35
#fields||t||id.orig_h||id.orig_p||id.resp_h||id.resp_p||status||country
#types||time||addr||port||addr||port||string||string
1343416475.837726||1.2.3.4||1234||2.3.4.5||80||success||unknown
1343416475.837726||1.2.3.4||1234||2.3.4.5||80||failure||US
1343416475.837726||1.2.3.4||1234||2.3.4.5||80||fa\x7c\x7cure||UK
1343416475.837726||1.2.3.4||1234||2.3.4.5||80||su\x7c\x7cess||BR
1343416475.837726||1.2.3.4||1234||2.3.4.5||80||failure||MX
#close||2012-07-27-19-14-35
1343417536.767956||1.2.3.4||1234||2.3.4.5||80||success||unknown
1343417536.767956||1.2.3.4||1234||2.3.4.5||80||failure||US
1343417536.767956||1.2.3.4||1234||2.3.4.5||80||fa\x7c\x7cure||UK
1343417536.767956||1.2.3.4||1234||2.3.4.5||80||su\x7c\x7cess||BR
1343417536.767956||1.2.3.4||1234||2.3.4.5||80||failure||MX

2
testing/btest/scripts/base/frameworks/input/binary.bro
View file

@ -16,7 +16,7 @@ redef InputAscii::unset_field = "-";
#empty_field|(empty)
#unset_field|-
#path|ssh
#start|2012-07-20-01-49-19
#open|2012-07-20-01-49-19
#fields|data|data2
#types|string|string
abc\x0a\xffdef|DATA2

2
testing/btest/scripts/base/frameworks/logging/ascii-escape.bro
View file

@ -1,6 +1,6 @@
#
# @TEST-EXEC: bro -b %INPUT
# @TEST-EXEC: cat ssh.log | egrep -v '#start|#end' >ssh.log.tmp && mv ssh.log.tmp ssh.log
# @TEST-EXEC: cat ssh.log | egrep -v '#open|#close' >ssh.log.tmp && mv ssh.log.tmp ssh.log
# @TEST-EXEC: btest-diff ssh.log
redef LogAscii::separator = "||";

4
testing/btest/scripts/base/frameworks/logging/remote-types.bro
View file

@ -4,8 +4,8 @@
# @TEST-EXEC: btest-bg-run receiver bro -B threading,logging --pseudo-realtime %INPUT ../receiver.bro
# @TEST-EXEC: btest-bg-wait -k 10
# @TEST-EXEC: btest-diff receiver/test.log
# @TEST-EXEC: cat receiver/test.log | egrep -v '#start|#end' >r.log
# @TEST-EXEC: cat sender/test.log | egrep -v '#start|#end' >s.log
# @TEST-EXEC: cat receiver/test.log | egrep -v '#open|#close' >r.log
# @TEST-EXEC: cat sender/test.log | egrep -v '#open|#close' >s.log
# @TEST-EXEC: cmp r.log s.log
# Remote version testing all types.