Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 14:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

update tests

Browse source
This commit is contained in:
Mauro Palumbo 2019-07-30 17:03:52 +02:00
parent 9e1e177621
commit b4ac0b54fe
10 changed files with 21 additions and 21 deletions
Download patch file Download diff file Expand all files Collapse all files

4
testing/btest/Baseline/scripts.policy.protocols.conn.known-hosts/knownhosts-all.log
View file

@ -3,11 +3,11 @@
#empty_field (empty) #empty_field (empty)
#unset_field - #unset_field -
#path known_hosts #path known_hosts
#open 2016-07-13-16-17-24 #open 2019-07-30-14-59-50
#fields ts host #fields ts host
#types time addr #types time addr
1300475168.783842 208.80.152.118 1300475168.783842 208.80.152.118
1300475168.783842 141.142.220.118 1300475168.783842 141.142.220.118
1300475168.915940 208.80.152.3 1300475168.915940 208.80.152.3
1300475168.962628 208.80.152.2 1300475168.962628 208.80.152.2
#close 2016-07-13-16-17-24 #close 2019-07-30-14-59-50

4
testing/btest/Baseline/scripts.policy.protocols.conn.known-hosts/knownhosts-local.log
View file

@ -3,8 +3,8 @@
#empty_field (empty) #empty_field (empty)
#unset_field - #unset_field -
#path known_hosts #path known_hosts
#open 2016-07-13-16-17-22 #open 2019-07-30-14-59-48
#fields ts host #fields ts host
#types time addr #types time addr
1300475168.783842 141.142.220.118 1300475168.783842 141.142.220.118
#close 2016-07-13-16-17-22 #close 2019-07-30-14-59-48

4
testing/btest/Baseline/scripts.policy.protocols.conn.known-hosts/knownhosts-remote.log
View file

@ -3,10 +3,10 @@
#empty_field (empty) #empty_field (empty)
#unset_field - #unset_field -
#path known_hosts #path known_hosts
#open 2016-07-13-16-17-23 #open 2019-07-30-14-59-49
#fields ts host #fields ts host
#types time addr #types time addr
1300475168.783842 208.80.152.118 1300475168.783842 208.80.152.118
1300475168.915940 208.80.152.3 1300475168.915940 208.80.152.3
1300475168.962628 208.80.152.2 1300475168.962628 208.80.152.2
#close 2016-07-13-16-17-23 #close 2019-07-30-14-59-49

4
testing/btest/Baseline/scripts.policy.protocols.conn.known-services/knownservices-all.log
View file

@ -3,7 +3,7 @@
#empty_field (empty) #empty_field (empty)
#unset_field - #unset_field -
#path known_services #path known_services
#open 2019-06-15-23-46-49 #open 2019-07-31-13-46-10
#fields ts host port_num port_proto service #fields ts host port_num port_proto service
#types time addr port enum set[string] #types time addr port enum set[string]
1308930691.089263 172.16.238.131 22 tcp SSH 1308930691.089263 172.16.238.131 22 tcp SSH
@ -12,4 +12,4 @@
1308930718.361665 172.16.238.131 21 tcp FTP 1308930718.361665 172.16.238.131 21 tcp FTP
1308930726.889624 141.142.192.39 22 tcp SSH 1308930726.889624 141.142.192.39 22 tcp SSH
1308930727.236071 69.50.219.51 123 udp NTP 1308930727.236071 69.50.219.51 123 udp NTP
#close 2019-06-15-23-46-49 #close 2019-07-31-13-46-10

6
testing/btest/Baseline/scripts.policy.protocols.conn.known-services/knownservices-local.log
View file

@ -3,10 +3,10 @@
#empty_field (empty) #empty_field (empty)
#unset_field - #unset_field -
#path known_services #path known_services
#open 2014-04-01-23-16-20 #open 2019-07-31-13-46-08
#fields ts host port_num port_proto service #fields ts host port_num port_proto service
#types time addr port enum set[string] #types time addr port enum set[string]
1308930691.049431 172.16.238.131 22 tcp SSH 1308930691.089263 172.16.238.131 22 tcp SSH
1308930694.550308 172.16.238.131 80 tcp HTTP 1308930694.550308 172.16.238.131 80 tcp HTTP
1308930718.361665 172.16.238.131 21 tcp FTP 1308930718.361665 172.16.238.131 21 tcp FTP
#close 2014-04-01-23-16-20 #close 2019-07-31-13-46-08

4
testing/btest/Baseline/scripts.policy.protocols.conn.known-services/knownservices-remote.log
View file

@ -3,10 +3,10 @@
#empty_field (empty) #empty_field (empty)
#unset_field - #unset_field -
#path known_services #path known_services
#open 2019-06-15-23-44-01 #open 2019-07-31-13-46-09
#fields ts host port_num port_proto service #fields ts host port_num port_proto service
#types time addr port enum set[string] #types time addr port enum set[string]
1308930716.462556 74.125.225.81 80 tcp HTTP 1308930716.462556 74.125.225.81 80 tcp HTTP
1308930726.889624 141.142.192.39 22 tcp SSH 1308930726.889624 141.142.192.39 22 tcp SSH
1308930727.236071 69.50.219.51 123 udp NTP 1308930727.236071 69.50.219.51 123 udp NTP
#close 2019-06-15-23-44-01 #close 2019-07-31-13-46-09

4
testing/btest/Baseline/scripts.policy.protocols.conn.mac-logging/conn1.log
View file

@ -3,7 +3,7 @@
#empty_field (empty) #empty_field (empty)
#unset_field - #unset_field -
#path conn #path conn
#open 2018-01-12-21-44-59 #open 2019-07-30-14-59-56
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p proto service duration orig_bytes resp_bytes conn_state local_orig local_resp missed_bytes history orig_pkts orig_ip_bytes resp_pkts resp_ip_bytes tunnel_parents orig_l2_addr resp_l2_addr #fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p proto service duration orig_bytes resp_bytes conn_state local_orig local_resp missed_bytes history orig_pkts orig_ip_bytes resp_pkts resp_ip_bytes tunnel_parents orig_l2_addr resp_l2_addr
#types time string addr port addr port enum string interval count count string bool bool count string count count count count set[string] string string #types time string addr port addr port enum string interval count count string bool bool count string count count count count set[string] string string
1300475169.780331 C3eiCBGOLw3VtHfOj 173.192.163.128 80 141.142.220.235 6705 tcp - - - - OTH - - 0 H 1 48 0 0 - 00:13:7f:be:8c:ff 00:e0:db:01:cf:4b 1300475169.780331 C3eiCBGOLw3VtHfOj 173.192.163.128 80 141.142.220.235 6705 tcp - - - - OTH - - 0 H 1 48 0 0 - 00:13:7f:be:8c:ff 00:e0:db:01:cf:4b
@ -40,4 +40,4 @@
1300475168.893988 C8rquZ3DjgNW06JGLl 141.142.220.118 45000 141.142.2.2 53 udp - 0.000384 38 89 SF - - 0 Dd 1 66 1 117 - 00:24:7e:e0:1d:b5 00:13:7f:be:8c:ff 1300475168.893988 C8rquZ3DjgNW06JGLl 141.142.220.118 45000 141.142.2.2 53 udp - 0.000384 38 89 SF - - 0 Dd 1 66 1 117 - 00:24:7e:e0:1d:b5 00:13:7f:be:8c:ff
1300475168.857956 CzrZOtXqhwwndQva3 141.142.220.118 32902 141.142.2.2 53 udp - 0.000317 38 89 SF - - 0 Dd 1 66 1 117 - 00:24:7e:e0:1d:b5 00:13:7f:be:8c:ff 1300475168.857956 CzrZOtXqhwwndQva3 141.142.220.118 32902 141.142.2.2 53 udp - 0.000317 38 89 SF - - 0 Dd 1 66 1 117 - 00:24:7e:e0:1d:b5 00:13:7f:be:8c:ff
1300475168.891644 CaGCc13FffXe6RkQl9 141.142.220.118 58206 141.142.2.2 53 udp - 0.000339 38 89 SF - - 0 Dd 1 66 1 117 - 00:24:7e:e0:1d:b5 00:13:7f:be:8c:ff 1300475168.891644 CaGCc13FffXe6RkQl9 141.142.220.118 58206 141.142.2.2 53 udp - 0.000339 38 89 SF - - 0 Dd 1 66 1 117 - 00:24:7e:e0:1d:b5 00:13:7f:be:8c:ff
#close 2018-01-12-21-44-59 #close 2019-07-30-14-59-56

4
testing/btest/Baseline/scripts.policy.protocols.conn.mac-logging/conn2.log
View file

@ -3,9 +3,9 @@
#empty_field (empty) #empty_field (empty)
#unset_field - #unset_field -
#path conn #path conn
#open 2018-01-12-21-45-00 #open 2019-07-30-14-59-56
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p proto service duration orig_bytes resp_bytes conn_state local_orig local_resp missed_bytes history orig_pkts orig_ip_bytes resp_pkts resp_ip_bytes tunnel_parents orig_l2_addr resp_l2_addr #fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p proto service duration orig_bytes resp_bytes conn_state local_orig local_resp missed_bytes history orig_pkts orig_ip_bytes resp_pkts resp_ip_bytes tunnel_parents orig_l2_addr resp_l2_addr
#types time string addr port addr port enum string interval count count string bool bool count string count count count count set[string] string string #types time string addr port addr port enum string interval count count string bool bool count string count count count count set[string] string string
1439902891.705224 CHhAvVGS1DHFjwGM9 172.17.156.76 61738 208.67.220.220 53 udp - 0.041654 35 128 SF - - 0 Dd 1 63 1 156 - 90:72:40:97:b6:f5 44:2b:03:aa:ab:8d 1439902891.705224 CHhAvVGS1DHFjwGM9 172.17.156.76 61738 208.67.220.220 53 udp - 0.041654 35 128 SF - - 0 Dd 1 63 1 156 - 90:72:40:97:b6:f5 44:2b:03:aa:ab:8d
1439903050.580632 ClEkJM2Vm5giqnMf4h fe80::a667:6ff:fef7:ec54 5353 ff02::fb 5353 udp - - - - S0 - - 0 D 1 328 0 0 - a4:67:06:f7:ec:54 33:33:00:00:00:fb 1439903050.580632 ClEkJM2Vm5giqnMf4h fe80::a667:6ff:fef7:ec54 5353 ff02::fb 5353 udp - - - - S0 - - 0 D 1 328 0 0 - a4:67:06:f7:ec:54 33:33:00:00:00:fb
#close 2018-01-12-21-45-00 #close 2019-07-30-14-59-56

4
testing/btest/Baseline/scripts.policy.protocols.conn.mac-logging/conn3.log
View file

@ -3,7 +3,7 @@
#empty_field (empty) #empty_field (empty)
#unset_field - #unset_field -
#path conn #path conn
#open 2018-01-12-21-45-00 #open 2019-07-30-14-59-56
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p proto service duration orig_bytes resp_bytes conn_state local_orig local_resp missed_bytes history orig_pkts orig_ip_bytes resp_pkts resp_ip_bytes tunnel_parents orig_l2_addr resp_l2_addr #fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p proto service duration orig_bytes resp_bytes conn_state local_orig local_resp missed_bytes history orig_pkts orig_ip_bytes resp_pkts resp_ip_bytes tunnel_parents orig_l2_addr resp_l2_addr
#types time string addr port addr port enum string interval count count string bool bool count string count count count count set[string] string string #types time string addr port addr port enum string interval count count string bool bool count string count count count count set[string] string string
826191058.128321 CHhAvVGS1DHFjwGM9 128.3.140.132 2035 194.140.136.34 80 tcp - - - - RSTOS0 - - 0 R 1 40 0 0 - - - 826191058.128321 CHhAvVGS1DHFjwGM9 128.3.140.132 2035 194.140.136.34 80 tcp - - - - RSTOS0 - - 0 R 1 40 0 0 - - -
@ -1339,4 +1339,4 @@
826277279.235554 CBP3Hu4RKc79x58Y2 128.3.140.132 2035 194.140.136.34 80 tcp - - - - RSTOS0 - - 0 R 1 40 0 0 - - - 826277279.235554 CBP3Hu4RKc79x58Y2 128.3.140.132 2035 194.140.136.34 80 tcp - - - - RSTOS0 - - 0 R 1 40 0 0 - - -
826277339.221727 CUbAnm2k9C1iEtTmgd 128.3.140.132 2035 194.140.136.34 80 tcp - - - - RSTOS0 - - 0 R 1 40 0 0 - - - 826277339.221727 CUbAnm2k9C1iEtTmgd 128.3.140.132 2035 194.140.136.34 80 tcp - - - - RSTOS0 - - 0 R 1 40 0 0 - - -
826277399.202051 CkWokd3nscpygp5lIc 128.3.140.132 2035 194.140.136.34 80 tcp - - - - RSTOS0 - - 0 R 1 40 0 0 - - - 826277399.202051 CkWokd3nscpygp5lIc 128.3.140.132 2035 194.140.136.34 80 tcp - - - - RSTOS0 - - 0 R 1 40 0 0 - - -
#close 2018-01-12-21-45-00 #close 2019-07-30-14-59-57

4
testing/btest/Baseline/scripts.policy.protocols.conn.vlan-logging/conn.log
View file

@ -3,9 +3,9 @@
#empty_field (empty) #empty_field (empty)
#unset_field - #unset_field -
#path conn #path conn
#open 2016-07-13-16-17-26 #open 2019-07-30-14-59-58
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p proto service duration orig_bytes resp_bytes conn_state local_orig local_resp missed_bytes history orig_pkts orig_ip_bytes resp_pkts resp_ip_bytes tunnel_parents vlan inner_vlan #fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p proto service duration orig_bytes resp_bytes conn_state local_orig local_resp missed_bytes history orig_pkts orig_ip_bytes resp_pkts resp_ip_bytes tunnel_parents vlan inner_vlan
#types time string addr port addr port enum string interval count count string bool bool count string count count count count set[string] int int #types time string addr port addr port enum string interval count count string bool bool count string count count count count set[string] int int
1363900699.548138 CHhAvVGS1DHFjwGM9 172.19.51.37 47808 172.19.51.63 47808 udp - 0.000100 36 0 S0 - - 0 D 2 92 0 0 - 13 10 1363900699.548138 CHhAvVGS1DHFjwGM9 172.19.51.37 47808 172.19.51.63 47808 udp - 0.000100 36 0 S0 - - 0 D 2 92 0 0 - 13 10
1363900699.549647 ClEkJM2Vm5giqnMf4h 193.1.186.60 9875 224.2.127.254 9875 udp - 0.000139 552 0 S0 - - 0 D 2 608 0 0 - 13 10 1363900699.549647 ClEkJM2Vm5giqnMf4h 193.1.186.60 9875 224.2.127.254 9875 udp - 0.000139 552 0 S0 - - 0 D 2 608 0 0 - 13 10
#close 2016-07-13-16-17-26 #close 2019-07-30-14-59-58