diff --git a/testing/btest/Baseline/scripts.policy.misc.capture-loss/capture_loss.log b/testing/btest/Baseline/scripts.policy.misc.capture-loss/capture_loss.log new file mode 100644 index 0000000000..ef5dca2f4b --- /dev/null +++ b/testing/btest/Baseline/scripts.policy.misc.capture-loss/capture_loss.log @@ -0,0 +1,10 @@ +#separator \x09 +#set_separator , +#empty_field (empty) +#unset_field - +#path capture_loss +#open 2020-10-08-16-33-05 +#fields ts ts_delta peer gaps acks percent_lost +#types time interval string count count double +964953086.310131 0.000000 zeek 0 0 0.0 +#close 2020-10-08-16-33-05 diff --git a/testing/btest/Baseline/scripts.policy.misc.capture-loss/notice.log b/testing/btest/Baseline/scripts.policy.misc.capture-loss/notice.log new file mode 100644 index 0000000000..7c585c0301 --- /dev/null +++ b/testing/btest/Baseline/scripts.policy.misc.capture-loss/notice.log @@ -0,0 +1,10 @@ +#separator \x09 +#set_separator , +#empty_field (empty) +#unset_field - +#path notice +#open 2020-10-08-16-33-05 +#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p fuid file_mime_type file_desc proto note msg sub src dst p n peer_descr actions suppress_for remote_location.country_code remote_location.region remote_location.city remote_location.latitude remote_location.longitude +#types time string addr port addr port string string string enum enum string string addr addr port count string set[enum] interval string string string double double +964953086.310131 - - - - - - - - - CaptureLoss::Too_Little_Traffic The worker only observed 0 ACKs and was expecting at least 1. - - - - - - Notice::ACTION_LOG 3600.000000 - - - - - +#close 2020-10-08-16-33-05 diff --git a/testing/btest/scripts/policy/misc/capture-loss.zeek b/testing/btest/scripts/policy/misc/capture-loss.zeek new file mode 100644 index 0000000000..d51576a5b4 --- /dev/null +++ b/testing/btest/scripts/policy/misc/capture-loss.zeek @@ -0,0 +1,12 @@ +# @TEST-EXEC: zeek -b -r $TRACES/dns53.pcap %INPUT +# @TEST-EXEC: btest-diff capture_loss.log +# @TEST-EXEC: btest-diff notice.log + +@load misc/capture-loss + +module CaptureLoss; + +event zeek_init() + { + event take_measurement(network_time(), 0, 0); + }