Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 06:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Improve an Intel framework btest

Browse source 
Relying on non-atomic `cp` operation may not cooperate well with the
Input framework file re-reading logic.
This commit is contained in:
Jon Siwek 2020-08-25 14:32:47 -07:00
parent 80a573d2b2
commit 8d3c07b62a
3 changed files with 11 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

7
CHANGES
View file

@ -1,4 +1,11 @@
3.3.0-dev.195 | 2020-08-25 14:32:47 -0700
* Improve an Intel framework btest (Jon Siwek, Corelight)
Relying on non-atomic `cp` operation may not cooperate well with the
Input framework file re-reading logic.
3.3.0-dev.194 | 2020-08-24 19:20:29 -0700
* Mark Continuation.h and PacketDumper.h as deprecated (Tim Wojtulewicz, Corelight)

2
VERSION
View file

@ -1 +1 @@
3.3.0-dev.194
3.3.0-dev.195

6
testing/btest/scripts/base/frameworks/intel/updated-match.zeek
View file

@ -1,9 +1,9 @@
# @TEST-EXEC: cp intel1.dat intel.dat
# @TEST-EXEC: mv intel1.dat intel.dat
# @TEST-EXEC: btest-bg-run zeekproc zeek -b %INPUT
# @TEST-EXEC: $SCRIPTS/wait-for-file zeekproc/got1 15 || (btest-bg-wait -k 1 && false)
# @TEST-EXEC: cp intel2.dat intel.dat
# @TEST-EXEC: mv intel2.dat intel.dat
# @TEST-EXEC: $SCRIPTS/wait-for-file zeekproc/got2 15 || (btest-bg-wait -k 1 && false)
# @TEST-EXEC: cp intel3.dat intel.dat
# @TEST-EXEC: mv intel3.dat intel.dat
# @TEST-EXEC: btest-bg-wait 30
# @TEST-EXEC: cat zeekproc/intel.log > output
# @TEST-EXEC: cat zeekproc/notice.log >> output