Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-04 15:48:19 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Add Pcap::file_done event

Browse source 
It signals when a pcap file is done being processed.
This commit is contained in:
Jon Siwek 2020-02-03 19:35:10 -08:00
parent 4fbcca04e8
commit 7c124881cd
4 changed files with 18 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
testing/btest/Baseline/core.pcap_file_done/out Normal file
View file

@ -0,0 +1 @@
pcap file done, /home/jon/pro/zeek/zeek/testing/btest/Traces/http/get.trace

7
testing/btest/core/pcap_file_done.zeek Normal file
View file

@ -0,0 +1,7 @@
# @TEST-EXEC: zeek -b -r $TRACES/http/get.trace %INPUT >out
# @TEST-EXEC: TEST_DIFF_CANONIFIER=$SCRIPTS/diff-remove-abspath btest-diff out
event Pcap::file_done(path: string)
{
print "pcap file done", path;
}