Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-15 13:08:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Add basic testing for Geneve protocol analyzer

Browse source 
The added pcap file was downloaded from an attachment to
https://gitlab.com/wireshark/wireshark/-/issues/10193 without explicit
license.
This commit is contained in:
Benjamin Bannier 2021-04-21 15:42:08 +02:00
parent 5b2bf374fd
commit 83ecbeea6d
6 changed files with 33 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

13
testing/btest/core/tunnels/geneve.zeek Normal file
View file

@ -0,0 +1,13 @@
# @TEST-EXEC: zeek -b -r $TRACES/tunnels/geneve.pcap %INPUT >out
# @TEST-EXEC: btest-diff out
# @TEST-EXEC: btest-diff conn.log
# @TEST-EXEC: btest-diff tunnel.log
@load base/frameworks/tunnels
@load base/frameworks/dpd
@load base/protocols/conn
event geneve_packet(c: connection, inner: pkt_hdr, vni: count)
{
print "geneve_packet", c$id, inner, vni;
}