Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-06 16:48:19 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Handle removing non-existent intel items.

Browse source 
The intel framework raises a reporter info on removing non-existent
intel items. An according test case has been added.

Fixes #1679.
This commit is contained in:
Jan Grashoefer 2016-09-21 00:37:38 +02:00
parent cb53a930a2
commit 8c024ca094
3 changed files with 66 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

11
testing/btest/Baseline/scripts.base.frameworks.intel.remove-non-existing/output Normal file
View file

@ -0,0 +1,11 @@
#separator \x09
#set_separator ,
#empty_field (empty)
#unset_field -
#path reporter
#open 2016-09-20-22-35-58
#fields ts level message location
#types time enum string string
0.000000 Reporter::INFO Tried to remove non-existing item '192.168.1.1' (Intel::ADDR). /home/jgras/devel/bro/scripts/base/frameworks/intel/./main.bro, lines 506-507
0.000000 Reporter::INFO received termination signal (empty)
#close 2016-09-20-22-35-59