Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 14:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Merge remote-tracking branch 'origin/topic/johanna/jq-guard'

Browse source 
* origin/topic/johanna/jq-guard:
  Add TEST-REQUIRES: which jq to two new tests that are using jq
This commit is contained in:
Tim Wojtulewicz 2024-11-27 12:31:40 -07:00
commit 8d625715ca
4 changed files with 11 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

8
CHANGES
View file

@ -1,3 +1,11 @@
7.1.0-dev.639 | 2024-11-27 12:31:40 -0700
* Add TEST-REQUIRES: which jq to two new tests that are using jq (Johanna Amann, Corelight)
* Explain why modbus test does not work with the Spicy SSL analyzer (Johanna Amann, Corelight)
This took a _long_ time to figure out.
7.1.0-dev.635 | 2024-11-27 08:29:19 +0000 7.1.0-dev.635 | 2024-11-27 08:29:19 +0000
* Support setting the synchronous flag and the journal_mode for the SQLite log writer. * Support setting the synchronous flag and the journal_mode for the SQLite log writer.

2
VERSION
View file

@ -1 +1 @@
7.1.0-dev.635 7.1.0-dev.639

1
testing/btest/scripts/policy/protocols/conn/disable-unknown-ip-proto-support.zeek
View file

@ -1,3 +1,4 @@
# @TEST-REQUIRES: which jq
# @TEST-DOC: Test the policy for removing the unknown IP protocol field and connections from conn.log # @TEST-DOC: Test the policy for removing the unknown IP protocol field and connections from conn.log
# @TEST-EXEC: zeek -r $TRACES/cisco-fabric-path.pcap %INPUT # @TEST-EXEC: zeek -r $TRACES/cisco-fabric-path.pcap %INPUT
# @TEST-EXEC: test $(head -1 conn.log | jq 'has("ip_proto")') = "false" # @TEST-EXEC: test $(head -1 conn.log | jq 'has("ip_proto")') = "false"

1
testing/btest/scripts/policy/protocols/conn/ip-proto-name-logging.zeek
View file

@ -1,3 +1,4 @@
# @TEST-REQUIRES: which jq
# @TEST-DOC: Tests the ip-proto-name-logging policy file # @TEST-DOC: Tests the ip-proto-name-logging policy file
# @TEST-EXEC: zeek -r $TRACES/cisco-fabric-path.pcap %INPUT > out # @TEST-EXEC: zeek -r $TRACES/cisco-fabric-path.pcap %INPUT > out