Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-07 09:08:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Add subnet intel expiration to a test.

Browse source
This commit is contained in:
Seth Hall 2018-04-27 19:55:22 -04:00
parent e5e1037e91
commit c973375f1f
2 changed files with 9 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

1
testing/btest/scripts/base/frameworks/intel/expire-item.bro
View file

@ -7,6 +7,7 @@
# @TEST-START-FILE intel.dat
#fields indicator indicator_type meta.source meta.desc meta.url
1.2.3.4 Intel::ADDR source1 this host is bad http://some-data-distributor.com/1
192.168.0.0/16 Intel::SUBNET source1 this network is bad http://some-data-distributor.com/2
# @TEST-END-FILE
@load frameworks/intel/do_expire