mirror of
https://github.com/zeek/zeek.git
synced 2025-10-08 17:48:21 +00:00
Merge remote-tracking branch 'origin/master' into topic/seth/unified2-analyzer
Conflicts: testing/btest/Baseline/coverage.bare-load-baseline/canonified_loaded_scripts.log testing/btest/Baseline/coverage.default-load-baseline/canonified_loaded_scripts.log
This commit is contained in:
commit
efca3c0840
93 changed files with 8029 additions and 71 deletions
|
@ -3,8 +3,8 @@
|
|||
#empty_field (empty)
|
||||
#unset_field -
|
||||
#path conn
|
||||
#open 2013-07-18-00-18-33
|
||||
#open 2013-08-12-18-24-50
|
||||
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p proto service duration orig_bytes resp_bytes conn_state local_orig missed_bytes history orig_pkts orig_ip_bytes resp_pkts resp_ip_bytes tunnel_parents
|
||||
#types time string addr port addr port enum string interval count count string bool count string count count count count table[string]
|
||||
1278600802.069419 UWkUyAuUGXf 10.20.80.1 50343 10.0.0.15 80 tcp - 0.004152 9 3429 SF - 0 ShADadfF 7 381 7 3801 (empty)
|
||||
#close 2013-07-18-00-18-33
|
||||
#close 2013-08-12-18-24-50
|
||||
|
|
|
@ -3,28 +3,28 @@
|
|||
#empty_field (empty)
|
||||
#unset_field -
|
||||
#path packet_filter
|
||||
#open 2013-07-19-02-54-13
|
||||
#open 2013-08-12-18-24-49
|
||||
#fields ts node filter init success
|
||||
#types time string string bool bool
|
||||
1374202453.158981 - ip or not ip T T
|
||||
#close 2013-07-19-02-54-13
|
||||
1376331889.617206 - ip or not ip T T
|
||||
#close 2013-08-12-18-24-49
|
||||
#separator \x09
|
||||
#set_separator ,
|
||||
#empty_field (empty)
|
||||
#unset_field -
|
||||
#path packet_filter
|
||||
#open 2013-07-19-02-54-13
|
||||
#open 2013-08-12-18-24-49
|
||||
#fields ts node filter init success
|
||||
#types time string string bool bool
|
||||
1374202453.437816 - port 42 T T
|
||||
#close 2013-07-19-02-54-13
|
||||
1376331889.904944 - port 42 T T
|
||||
#close 2013-08-12-18-24-49
|
||||
#separator \x09
|
||||
#set_separator ,
|
||||
#empty_field (empty)
|
||||
#unset_field -
|
||||
#path packet_filter
|
||||
#open 2013-07-19-02-54-13
|
||||
#open 2013-08-12-18-24-50
|
||||
#fields ts node filter init success
|
||||
#types time string string bool bool
|
||||
1374202453.715717 - (vlan) and (ip or not ip) T T
|
||||
#close 2013-07-19-02-54-13
|
||||
1376331890.192875 - (vlan) and (ip or not ip) T T
|
||||
#close 2013-08-12-18-24-50
|
||||
|
|
|
@ -1,5 +1,6 @@
|
|||
2 1080
|
||||
1 137
|
||||
1 20000
|
||||
1 21
|
||||
1 2123
|
||||
1 2152
|
||||
|
@ -38,8 +39,8 @@
|
|||
1 992
|
||||
1 993
|
||||
1 995
|
||||
42 and
|
||||
41 or
|
||||
42 port
|
||||
31 tcp
|
||||
43 and
|
||||
42 or
|
||||
43 port
|
||||
32 tcp
|
||||
11 udp
|
||||
|
|
|
@ -3,7 +3,7 @@
|
|||
#empty_field (empty)
|
||||
#unset_field -
|
||||
#path loaded_scripts
|
||||
#open 2013-08-12-19-04-42
|
||||
#open 2013-08-12-18-22-48
|
||||
#fields name
|
||||
#types string
|
||||
scripts/base/init-bare.bro
|
||||
|
@ -22,6 +22,7 @@ scripts/base/init-bare.bro
|
|||
build/scripts/base/bif/plugins/Bro_ConnSize.events.bif.bro
|
||||
build/scripts/base/bif/plugins/Bro_DCE_RPC.events.bif.bro
|
||||
build/scripts/base/bif/plugins/Bro_DHCP.events.bif.bro
|
||||
build/scripts/base/bif/plugins/Bro_DNP3.events.bif.bro
|
||||
build/scripts/base/bif/plugins/Bro_DNS.events.bif.bro
|
||||
build/scripts/base/bif/plugins/Bro_File.events.bif.bro
|
||||
build/scripts/base/bif/plugins/Bro_FileHash.events.bif.bro
|
||||
|
@ -96,4 +97,4 @@ scripts/base/init-bare.bro
|
|||
build/scripts/base/bif/top-k.bif.bro
|
||||
scripts/policy/misc/loaded-scripts.bro
|
||||
scripts/base/utils/paths.bro
|
||||
#close 2013-08-12-19-04-42
|
||||
#close 2013-08-12-18-22-48
|
||||
|
|
|
@ -3,7 +3,7 @@
|
|||
#empty_field (empty)
|
||||
#unset_field -
|
||||
#path loaded_scripts
|
||||
#open 2013-08-12-19-05-30
|
||||
#open 2013-08-12-18-22-49
|
||||
#fields name
|
||||
#types string
|
||||
scripts/base/init-bare.bro
|
||||
|
@ -22,6 +22,7 @@ scripts/base/init-bare.bro
|
|||
build/scripts/base/bif/plugins/Bro_ConnSize.events.bif.bro
|
||||
build/scripts/base/bif/plugins/Bro_DCE_RPC.events.bif.bro
|
||||
build/scripts/base/bif/plugins/Bro_DHCP.events.bif.bro
|
||||
build/scripts/base/bif/plugins/Bro_DNP3.events.bif.bro
|
||||
build/scripts/base/bif/plugins/Bro_DNS.events.bif.bro
|
||||
build/scripts/base/bif/plugins/Bro_File.events.bif.bro
|
||||
build/scripts/base/bif/plugins/Bro_FileHash.events.bif.bro
|
||||
|
@ -164,6 +165,9 @@ scripts/base/init-default.bro
|
|||
scripts/base/protocols/dhcp/consts.bro
|
||||
scripts/base/protocols/dhcp/main.bro
|
||||
scripts/base/protocols/dhcp/utils.bro
|
||||
scripts/base/protocols/dnp3/__load__.bro
|
||||
scripts/base/protocols/dnp3/main.bro
|
||||
scripts/base/protocols/dnp3/consts.bro
|
||||
scripts/base/protocols/dns/__load__.bro
|
||||
scripts/base/protocols/dns/consts.bro
|
||||
scripts/base/protocols/dns/main.bro
|
||||
|
@ -212,4 +216,4 @@ scripts/base/init-default.bro
|
|||
scripts/base/files/unified2/main.bro
|
||||
scripts/base/misc/find-checksum-offloading.bro
|
||||
scripts/policy/misc/loaded-scripts.bro
|
||||
#close 2013-08-12-19-05-30
|
||||
#close 2013-08-12-18-22-49
|
||||
|
|
|
@ -3,8 +3,8 @@
|
|||
#empty_field (empty)
|
||||
#unset_field -
|
||||
#path intel
|
||||
#open 2013-07-19-17-05-48
|
||||
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p seen.indicator seen.indicator_type seen.where sources
|
||||
#types time string addr port addr port string enum enum table[string]
|
||||
1374253548.038580 - - - - - 123.123.123.123 Intel::ADDR Intel::IN_ANYWHERE worker-1
|
||||
#close 2013-07-19-17-05-57
|
||||
#open 2013-08-14-03-46-32
|
||||
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p fuid file_mime_type file_desc seen.indicator seen.indicator_type seen.where sources
|
||||
#types time string addr port addr port string string string string enum enum table[string]
|
||||
1376451992.872806 - - - - - - - - 123.123.123.123 Intel::ADDR Intel::IN_ANYWHERE worker-1
|
||||
#close 2013-08-14-03-46-42
|
||||
|
|
|
@ -3,9 +3,9 @@
|
|||
#empty_field (empty)
|
||||
#unset_field -
|
||||
#path intel
|
||||
#open 2013-07-19-17-04-26
|
||||
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p seen.indicator seen.indicator_type seen.where sources
|
||||
#types time string addr port addr port string enum enum table[string]
|
||||
1374253466.857185 - - - - - e@mail.com Intel::EMAIL SOMEWHERE source1
|
||||
1374253466.857185 - - - - - 1.2.3.4 Intel::ADDR SOMEWHERE source1
|
||||
#close 2013-07-19-17-04-26
|
||||
#open 2013-08-14-03-47-03
|
||||
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p fuid file_mime_type file_desc seen.indicator seen.indicator_type seen.where sources
|
||||
#types time string addr port addr port string string string string enum enum table[string]
|
||||
1376452023.137179 - - - - - - - - e@mail.com Intel::EMAIL SOMEWHERE source1
|
||||
1376452023.137179 - - - - - - - - 1.2.3.4 Intel::ADDR SOMEWHERE source1
|
||||
#close 2013-08-14-03-47-03
|
||||
|
|
|
@ -3,11 +3,11 @@
|
|||
#empty_field (empty)
|
||||
#unset_field -
|
||||
#path intel
|
||||
#open 2013-07-19-17-06-57
|
||||
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p seen.indicator seen.indicator_type seen.where sources
|
||||
#types time string addr port addr port string enum enum table[string]
|
||||
1374253617.312158 - - - - - 1.2.3.4 Intel::ADDR Intel::IN_A_TEST source1
|
||||
1374253617.312158 - - - - - e@mail.com Intel::EMAIL Intel::IN_A_TEST source1
|
||||
1374253618.332565 - - - - - 1.2.3.4 Intel::ADDR Intel::IN_A_TEST source1
|
||||
1374253618.332565 - - - - - e@mail.com Intel::EMAIL Intel::IN_A_TEST source1
|
||||
#close 2013-07-19-17-07-06
|
||||
#open 2013-08-14-03-47-23
|
||||
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p fuid file_mime_type file_desc seen.indicator seen.indicator_type seen.where sources
|
||||
#types time string addr port addr port string string string string enum enum table[string]
|
||||
1376452043.835810 - - - - - - - - 1.2.3.4 Intel::ADDR Intel::IN_A_TEST source1
|
||||
1376452043.835810 - - - - - - - - e@mail.com Intel::EMAIL Intel::IN_A_TEST source1
|
||||
1376452044.855238 - - - - - - - - 1.2.3.4 Intel::ADDR Intel::IN_A_TEST source1
|
||||
1376452044.855238 - - - - - - - - e@mail.com Intel::EMAIL Intel::IN_A_TEST source1
|
||||
#close 2013-08-14-03-47-32
|
||||
|
|
|
@ -0,0 +1 @@
|
|||
6 of 51 events triggered by trace
|
|
@ -0,0 +1,10 @@
|
|||
#separator \x09
|
||||
#set_separator ,
|
||||
#empty_field (empty)
|
||||
#unset_field -
|
||||
#path dnp3
|
||||
#open 2013-08-12-18-23-58
|
||||
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p fc_request fc_reply iin
|
||||
#types time string addr port addr port string string count
|
||||
1324503054.884183 UWkUyAuUGXf 130.126.142.250 49413 130.126.140.229 20000 DELAY_MEASURE RESPONSE 0
|
||||
#close 2013-08-12-18-23-58
|
|
@ -0,0 +1,7 @@
|
|||
dnp3_header_block, T, 25605, 8, 196, 2, 3
|
||||
dnp3_application_request_header, T, 23
|
||||
dnp3_header_block, F, 25605, 16, 68, 3, 2
|
||||
dnp3_application_response_header, F, 129, 0
|
||||
dnp3_object_header, F, 13314, 7, 1, 1, 0
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_response_data_object, F, 255
|
|
@ -0,0 +1 @@
|
|||
4 of 51 events triggered by trace
|
|
@ -0,0 +1,10 @@
|
|||
#separator \x09
|
||||
#set_separator ,
|
||||
#empty_field (empty)
|
||||
#unset_field -
|
||||
#path dnp3
|
||||
#open 2013-08-12-18-23-59
|
||||
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p fc_request fc_reply iin
|
||||
#types time string addr port addr port string string count
|
||||
1324916729.150101 UWkUyAuUGXf 130.126.142.250 50059 130.126.140.229 20000 ENABLE_UNSOLICITED RESPONSE 0
|
||||
#close 2013-08-12-18-23-59
|
|
@ -0,0 +1,7 @@
|
|||
dnp3_header_block, T, 25605, 17, 196, 2, 3
|
||||
dnp3_application_request_header, T, 20
|
||||
dnp3_object_header, T, 15362, 6, 0, 65535, 65535
|
||||
dnp3_object_header, T, 15363, 6, 0, 65535, 65535
|
||||
dnp3_object_header, T, 15364, 6, 0, 65535, 65535
|
||||
dnp3_header_block, F, 25605, 10, 68, 3, 2
|
||||
dnp3_application_response_header, F, 129, 0
|
|
@ -0,0 +1 @@
|
|||
6 of 51 events triggered by trace
|
|
@ -0,0 +1,10 @@
|
|||
#separator \x09
|
||||
#set_separator ,
|
||||
#empty_field (empty)
|
||||
#unset_field -
|
||||
#path dnp3
|
||||
#open 2013-08-12-18-23-59
|
||||
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p fc_request fc_reply iin
|
||||
#types time string addr port addr port string string count
|
||||
1325044377.992570 UWkUyAuUGXf 130.126.142.250 50301 130.126.140.229 20000 DELETE_FILE RESPONSE 0
|
||||
#close 2013-08-12-18-23-59
|
|
@ -0,0 +1,9 @@
|
|||
dnp3_header_block, T, 25605, 99, 196, 4, 3
|
||||
dnp3_application_request_header, T, 27
|
||||
dnp3_object_header, T, 17923, 91, 1, 1, 0
|
||||
dnp3_object_prefix, T, 85
|
||||
dnp3_header_block, F, 25605, 29, 68, 3, 4
|
||||
dnp3_application_response_header, F, 129, 0
|
||||
dnp3_object_header, F, 17924, 91, 1, 1, 0
|
||||
dnp3_object_prefix, F, 13
|
||||
dnp3_response_data_object, F, 255
|
|
@ -0,0 +1 @@
|
|||
9 of 51 events triggered by trace
|
|
@ -0,0 +1,14 @@
|
|||
#separator \x09
|
||||
#set_separator ,
|
||||
#empty_field (empty)
|
||||
#unset_field -
|
||||
#path dnp3
|
||||
#open 2013-08-12-18-24-00
|
||||
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p fc_request fc_reply iin
|
||||
#types time string addr port addr port string string count
|
||||
1325036012.621691 UWkUyAuUGXf 130.126.142.250 50276 130.126.140.229 20000 OPEN_FILE RESPONSE 4096
|
||||
1325036016.729050 UWkUyAuUGXf 130.126.142.250 50276 130.126.140.229 20000 READ RESPONSE 4096
|
||||
1325036019.765502 UWkUyAuUGXf 130.126.142.250 50276 130.126.140.229 20000 WRITE RESPONSE 0
|
||||
1325036022.292689 UWkUyAuUGXf 130.126.142.250 50276 130.126.140.229 20000 WRITE RESPONSE 0
|
||||
1325036024.820857 UWkUyAuUGXf 130.126.142.250 50276 130.126.140.229 20000 CLOSE_FILE RESPONSE 0
|
||||
#close 2013-08-12-18-24-00
|
|
@ -0,0 +1,45 @@
|
|||
dnp3_header_block, T, 25605, 50, 196, 4, 3
|
||||
dnp3_application_request_header, T, 25
|
||||
dnp3_object_header, T, 17923, 91, 1, 1, 0
|
||||
dnp3_object_prefix, T, 36
|
||||
dnp3_header_block, F, 25605, 29, 68, 3, 4
|
||||
dnp3_application_response_header, F, 129, 4096
|
||||
dnp3_object_header, F, 17924, 91, 1, 1, 0
|
||||
dnp3_object_prefix, F, 13
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_header_block, T, 25605, 22, 196, 4, 3
|
||||
dnp3_application_request_header, T, 1
|
||||
dnp3_object_header, T, 17925, 91, 1, 1, 0
|
||||
dnp3_object_prefix, T, 8
|
||||
dnp3_file_transport, T, 305419896, 0
|
||||
^J
|
||||
dnp3_header_block, F, 25605, 255, 68, 3, 4
|
||||
dnp3_application_response_header, F, 129, 4096
|
||||
dnp3_object_header, F, 17925, 91, 1, 1, 0
|
||||
dnp3_object_prefix, F, 838
|
||||
dnp3_file_transport, F, 305419896, 2147483648
|
||||
0000 ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e ...<?xml version^J0010 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d ="1.0" e ncoding=^J0020 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 3f 78 6d 6c "utf-8"? >..<?xml^J0030 2d 73 74 79 6c 65 73 68 65 65 74 20 74 79 70 65 -stylesh eet type^J0040 3d 27 74 65 78 74 2f 78 73 6c 27 20 68 72 65 66 ='text/x sl' href^J0050 3d 27 44 4e 50 33 44 65 76 69 63 65 50 72 6f 66 ='DNP3De viceProf^J0060 69 6c 65 4a 61 6e 32 30 31 30 2e 78 73 6c 74 27 ileJan20 10.xslt'^J0070 20 6d 65 64 69 61 3d 27 73 63 72 65 65 6e 27 3f media=' screen'?^J0080 3e 0d 0a 3c 44 4e 50 33 44 65 76 69 63 65 50 72 >..<DNP3 DevicePr^J0090 6f 66 69 6c 65 44 6f 63 75 6d 65 6e 74 20 78 6d ofileDoc ument xm^J00a0 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f lns:xsi= "http://^J00b0 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f www.w3.o rg/2001/^J00c0 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e XMLSchem a-instan^J00d0 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 ce" xmln s:xsd="h^J00e0 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 ttp://ww w.w3.org^J00f0 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 /2001/XM LSchema"^J0100 20 73 63 68 65 6d 61 56 65 72 73 69 6f 6e 3d 22 schemaV ersion="^J0110 32 2e 30 37 2e 30 30 22 20 78 6d 6c 6e 73 3d 22 2.07.00" xmlns="^J0120 68 74 74 70 3a 2f 2f 77 77 77 2e 64 6e 70 33 2e http://w ww.dnp3.^J0130 6f 72 67 2f 44 4e 50 33 2f 44 65 76 69 63 65 50 org/DNP3 /DeviceP^J0140 72 6f 66 69 6c 65 2f 4a 61 6e 32 30 31 30 22 3e rofile/J an2010">^J0150 0d 0a 20 20 3c 21 2d 2d 44 6f 63 75 6d 65 6e 74 .. <!-- Document^J0160 20 48 65 61 64 65 72 2d 2d 3e 0d 0a 20 20 3c 64 Header- ->.. <d^J0170 6f 63 75 6d 65 6e 74 48 65 61 64 65 72 3e 0d 0a ocumentH eader>..^J0180 20 20 20 20 3c 64 6f 63 75 6d 65 6e 74 4e 61 6d <doc umentNam^J0190 65 3e 41 20 44 4e 50 33 20 58 4d 4c 20 46 69 6c e>A DNP3 XML Fil^J01a0 65 3c 2f 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3e e</docum entName>^J01b0 0d 0a 20 20 20 20 3c 64 6f 63 75 6d 65 6e 74 44 .. <d ocumentD^J01c0 65 73 63 72 69 70 74 69 6f 6e 3e 54 68 69 73 20 escripti on>This ^J01d0 69 73 20 61 20 44 4e 50 33 20 43 6f 6d 70 6c 65 is a DNP 3 Comple^J01e0 74 65 20 44 65 76 69 63 65 20 50 72 6f 66 69 6c te Devic e Profil^J01f0 65 20 66 6f 72 20 44 4e 50 20 4f 75 74 73 74 61 e for DN P Outsta^J0200 74 69 6f 6e 20 69 6e 20 74 68 65 20 54 4d 57 20 tion in the TMW ^J0210 43 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 20 50 72 Communic ation Pr^J0220 6f 74 6f 63 6f 6c 20 54 65 73 74 20 48 61 72 6e otocol T est Harn^J0230 65 73 73 3c 2f 64 6f 63 75 6d 65 6e 74 44 65 73 ess</doc umentDes^J0240 63 72 69 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 3c cription >.. <^J0250 72 65 76 69 73 69 6f 6e 48 69 73 74 6f 72 79 20 revision History ^J0260 76 65 72 73 69 6f 6e 3d 22 32 22 3e 0d 0a 20 20 version= "2">.. ^J0270 20 20 20 20 3c 64 61 74 65 3e 32 30 31 30 2d 31 <dat e>2010-1^J0280 32 2d 30 31 3c 2f 64 61 74 65 3e 0d 0a 20 20 20 2-01</da te>.. ^J0290 20 20 20 3c 61 75 74 68 6f 72 3e 53 74 65 76 65 <auth or>Steve^J02a0 20 4d 63 43 6f 79 3c 2f 61 75 74 68 6f 72 3e 0d McCoy</ author>.^J02b0 0a 20 20 20 20 20 20 3c 72 65 61 73 6f 6e 3e 44 . < reason>D^J02c0 6f 63 75 6d 65 6e 74 65 64 20 54 65 73 74 20 48 ocumente d Test H^J02d0 61 72 6e 65 73 73 20 53 44 4e 50 20 44 65 76 69 arness S DNP Devi^J02e0 63 65 20 50 72 6f 66 69 6c 65 3c 2f 72 65 61 73 ce Profi le</reas^J02f0 6f 6e 3e 0d 0a 20 20 20 20 3c 2f 72 65 76 69 73 on>.. </revis^J0300 69 6f 6e 48 69 73 74 6f 72 79 3e 0d 0a 20 20 3c ionHisto ry>.. <^J0310 2f 64 6f 63 75 6d 65 6e 74 48 65 61 64 65 72 3e /documen tHeader>^J0320 0d 0a 3c 2f 44 4e 50 33 44 65 76 69 63 65 50 72 ..</DNP3 DevicePr^J0330 6f 66 69 6c 65 44 6f 63 75 6d 65 6e 74 3e ofileDoc ument>^J
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_header_block, T, 25605, 8, 196, 4, 3
|
||||
dnp3_application_request_header, T, 0
|
||||
dnp3_header_block, T, 25605, 18, 196, 4, 3
|
||||
dnp3_application_request_header, T, 2
|
||||
dnp3_object_header, T, 12801, 7, 1, 1, 0
|
||||
dnp3_object_prefix, T, 0
|
||||
dnp3_header_block, F, 25605, 10, 68, 3, 4
|
||||
dnp3_application_response_header, F, 129, 0
|
||||
dnp3_header_block, T, 25605, 18, 196, 4, 3
|
||||
dnp3_application_request_header, T, 2
|
||||
dnp3_object_header, T, 12801, 7, 1, 1, 0
|
||||
dnp3_object_prefix, T, 0
|
||||
dnp3_header_block, F, 25605, 10, 68, 3, 4
|
||||
dnp3_application_response_header, F, 129, 0
|
||||
dnp3_header_block, T, 25605, 27, 196, 4, 3
|
||||
dnp3_application_request_header, T, 26
|
||||
dnp3_object_header, T, 17924, 91, 1, 1, 0
|
||||
dnp3_object_prefix, T, 13
|
||||
dnp3_header_block, F, 25605, 29, 68, 3, 4
|
||||
dnp3_application_response_header, F, 129, 0
|
||||
dnp3_object_header, F, 17924, 91, 1, 1, 0
|
||||
dnp3_object_prefix, F, 13
|
||||
dnp3_response_data_object, F, 255
|
|
@ -0,0 +1 @@
|
|||
8 of 51 events triggered by trace
|
|
@ -0,0 +1,12 @@
|
|||
#separator \x09
|
||||
#set_separator ,
|
||||
#empty_field (empty)
|
||||
#unset_field -
|
||||
#path dnp3
|
||||
#open 2013-08-12-18-24-00
|
||||
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p fc_request fc_reply iin
|
||||
#types time string addr port addr port string string count
|
||||
1325043635.216629 UWkUyAuUGXf 130.126.142.250 50300 130.126.140.229 20000 OPEN_FILE RESPONSE 0
|
||||
1325043637.790287 UWkUyAuUGXf 130.126.142.250 50300 130.126.140.229 20000 WRITE RESPONSE 0
|
||||
1325043638.820071 UWkUyAuUGXf 130.126.142.250 50300 130.126.140.229 20000 CLOSE_FILE RESPONSE 0
|
||||
#close 2013-08-12-18-24-00
|
|
@ -0,0 +1,29 @@
|
|||
dnp3_header_block, T, 25605, 99, 196, 4, 3
|
||||
dnp3_application_request_header, T, 25
|
||||
dnp3_object_header, T, 17923, 91, 1, 1, 0
|
||||
dnp3_object_prefix, T, 85
|
||||
dnp3_header_block, F, 25605, 29, 68, 3, 4
|
||||
dnp3_application_response_header, F, 129, 0
|
||||
dnp3_object_header, F, 17924, 91, 1, 1, 0
|
||||
dnp3_object_prefix, F, 13
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_header_block, T, 25605, 255, 196, 4, 3
|
||||
dnp3_application_request_header, T, 2
|
||||
dnp3_object_header, T, 17925, 91, 1, 1, 0
|
||||
dnp3_object_prefix, T, 838
|
||||
dnp3_file_transport, T, 305419896, 2147483648
|
||||
0000 ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e ...<?xml version^J0010 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d ="1.0" e ncoding=^J0020 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 3f 78 6d 6c "utf-8"? >..<?xml^J0030 2d 73 74 79 6c 65 73 68 65 65 74 20 74 79 70 65 -stylesh eet type^J0040 3d 27 74 65 78 74 2f 78 73 6c 27 20 68 72 65 66 ='text/x sl' href^J0050 3d 27 44 4e 50 33 44 65 76 69 63 65 50 72 6f 66 ='DNP3De viceProf^J0060 69 6c 65 4a 61 6e 32 30 31 30 2e 78 73 6c 74 27 ileJan20 10.xslt'^J0070 20 6d 65 64 69 61 3d 27 73 63 72 65 65 6e 27 3f media=' screen'?^J0080 3e 0d 0a 3c 44 4e 50 33 44 65 76 69 63 65 50 72 >..<DNP3 DevicePr^J0090 6f 66 69 6c 65 44 6f 63 75 6d 65 6e 74 20 78 6d ofileDoc ument xm^J00a0 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f lns:xsi= "http://^J00b0 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f www.w3.o rg/2001/^J00c0 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e XMLSchem a-instan^J00d0 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 ce" xmln s:xsd="h^J00e0 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 ttp://ww w.w3.org^J00f0 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 /2001/XM LSchema"^J0100 20 73 63 68 65 6d 61 56 65 72 73 69 6f 6e 3d 22 schemaV ersion="^J0110 32 2e 30 37 2e 30 30 22 20 78 6d 6c 6e 73 3d 22 2.07.00" xmlns="^J0120 68 74 74 70 3a 2f 2f 77 77 77 2e 64 6e 70 33 2e http://w ww.dnp3.^J0130 6f 72 67 2f 44 4e 50 33 2f 44 65 76 69 63 65 50 org/DNP3 /DeviceP^J0140 72 6f 66 69 6c 65 2f 4a 61 6e 32 30 31 30 22 3e rofile/J an2010">^J0150 0d 0a 20 20 3c 21 2d 2d 44 6f 63 75 6d 65 6e 74 .. <!-- Document^J0160 20 48 65 61 64 65 72 2d 2d 3e 0d 0a 20 20 3c 64 Header- ->.. <d^J0170 6f 63 75 6d 65 6e 74 48 65 61 64 65 72 3e 0d 0a ocumentH eader>..^J0180 20 20 20 20 3c 64 6f 63 75 6d 65 6e 74 4e 61 6d <doc umentNam^J0190 65 3e 41 20 44 4e 50 33 20 58 4d 4c 20 46 69 6c e>A DNP3 XML Fil^J01a0 65 3c 2f 64 6f 63 75 6d 65 6e 74 4e 61 6d 65 3e e</docum entName>^J01b0 0d 0a 20 20 20 20 3c 64 6f 63 75 6d 65 6e 74 44 .. <d ocumentD^J01c0 65 73 63 72 69 70 74 69 6f 6e 3e 54 68 69 73 20 escripti on>This ^J01d0 69 73 20 61 20 44 4e 50 33 20 43 6f 6d 70 6c 65 is a DNP 3 Comple^J01e0 74 65 20 44 65 76 69 63 65 20 50 72 6f 66 69 6c te Devic e Profil^J01f0 65 20 66 6f 72 20 44 4e 50 20 4f 75 74 73 74 61 e for DN P Outsta^J0200 74 69 6f 6e 20 69 6e 20 74 68 65 20 54 4d 57 20 tion in the TMW ^J0210 43 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 20 50 72 Communic ation Pr^J0220 6f 74 6f 63 6f 6c 20 54 65 73 74 20 48 61 72 6e otocol T est Harn^J0230 65 73 73 3c 2f 64 6f 63 75 6d 65 6e 74 44 65 73 ess</doc umentDes^J0240 63 72 69 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 3c cription >.. <^J0250 72 65 76 69 73 69 6f 6e 48 69 73 74 6f 72 79 20 revision History ^J0260 76 65 72 73 69 6f 6e 3d 22 32 22 3e 0d 0a 20 20 version= "2">.. ^J0270 20 20 20 20 3c 64 61 74 65 3e 32 30 31 30 2d 31 <dat e>2010-1^J0280 32 2d 30 31 3c 2f 64 61 74 65 3e 0d 0a 20 20 20 2-01</da te>.. ^J0290 20 20 20 3c 61 75 74 68 6f 72 3e 53 74 65 76 65 <auth or>Steve^J02a0 20 4d 63 43 6f 79 3c 2f 61 75 74 68 6f 72 3e 0d McCoy</ author>.^J02b0 0a 20 20 20 20 20 20 3c 72 65 61 73 6f 6e 3e 44 . < reason>D^J02c0 6f 63 75 6d 65 6e 74 65 64 20 54 65 73 74 20 48 ocumente d Test H^J02d0 61 72 6e 65 73 73 20 53 44 4e 50 20 44 65 76 69 arness S DNP Devi^J02e0 63 65 20 50 72 6f 66 69 6c 65 3c 2f 72 65 61 73 ce Profi le</reas^J02f0 6f 6e 3e 0d 0a 20 20 20 20 3c 2f 72 65 76 69 73 on>.. </revis^J0300 69 6f 6e 48 69 73 74 6f 72 79 3e 0d 0a 20 20 3c ionHisto ry>.. <^J0310 2f 64 6f 63 75 6d 65 6e 74 48 65 61 64 65 72 3e /documen tHeader>^J0320 0d 0a 3c 2f 44 4e 50 33 44 65 76 69 63 65 50 72 ..</DNP3 DevicePr^J0330 6f 66 69 6c 65 44 6f 63 75 6d 65 6e 74 3e ofileDoc ument>^J
|
||||
dnp3_header_block, F, 25605, 25, 68, 3, 4
|
||||
dnp3_application_response_header, F, 129, 0
|
||||
dnp3_object_header, F, 17926, 91, 1, 1, 0
|
||||
dnp3_object_prefix, F, 9
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_header_block, T, 25605, 27, 196, 4, 3
|
||||
dnp3_application_request_header, T, 26
|
||||
dnp3_object_header, T, 17924, 91, 1, 1, 0
|
||||
dnp3_object_prefix, T, 13
|
||||
dnp3_header_block, F, 25605, 29, 68, 3, 4
|
||||
dnp3_application_response_header, F, 129, 0
|
||||
dnp3_object_header, F, 17924, 91, 1, 1, 0
|
||||
dnp3_object_prefix, F, 13
|
||||
dnp3_response_data_object, F, 255
|
|
@ -0,0 +1 @@
|
|||
6 of 51 events triggered by trace
|
File diff suppressed because it is too large
Load diff
|
@ -0,0 +1 @@
|
|||
7 of 51 events triggered by trace
|
|
@ -0,0 +1,10 @@
|
|||
#separator \x09
|
||||
#set_separator ,
|
||||
#empty_field (empty)
|
||||
#unset_field -
|
||||
#path dnp3
|
||||
#open 2013-08-12-18-24-01
|
||||
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p fc_request fc_reply iin
|
||||
#types time string addr port addr port string string count
|
||||
1324327256.650425 UWkUyAuUGXf 130.126.142.250 51006 130.126.140.229 20000 READ RESPONSE 0
|
||||
#close 2013-08-12-18-24-01
|
|
@ -0,0 +1,88 @@
|
|||
dnp3_header_block, T, 25605, 20, 196, 2, 3
|
||||
dnp3_application_request_header, T, 1
|
||||
dnp3_object_header, T, 15362, 6, 0, 65535, 65535
|
||||
dnp3_object_header, T, 15363, 6, 0, 65535, 65535
|
||||
dnp3_object_header, T, 15364, 6, 0, 65535, 65535
|
||||
dnp3_object_header, T, 15361, 6, 0, 65535, 65535
|
||||
dnp3_header_block, F, 25605, 116, 68, 3, 2
|
||||
dnp3_application_response_header, F, 129, 0
|
||||
dnp3_object_header, F, 258, 0, 9, 0, 8
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_response_data_object, F, 129
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_response_data_object, F, 1
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_response_data_object, F, 129
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_response_data_object, F, 1
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_response_data_object, F, 1
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_response_data_object, F, 1
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_response_data_object, F, 1
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_response_data_object, F, 1
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_response_data_object, F, 1
|
||||
dnp3_object_header, F, 2562, 0, 7, 0, 6
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_response_data_object, F, 0
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_response_data_object, F, 0
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_response_data_object, F, 0
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_response_data_object, F, 0
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_response_data_object, F, 0
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_response_data_object, F, 0
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_response_data_object, F, 1
|
||||
dnp3_object_header, F, 7681, 0, 15, 0, 14
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_analog_input_32wFlag, F, 1, 1007
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_analog_input_32wFlag, F, 1, 3
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_analog_input_32wFlag, F, 1, 1005
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_analog_input_32wFlag, F, 1, 18446744073709539627
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_analog_input_32wFlag, F, 1, 1005
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_analog_input_32wFlag, F, 1, 12006
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_analog_input_32wFlag, F, 1, 134423
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_analog_input_32wFlag, F, 0, 0
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_analog_input_32wFlag, F, 1, 134325
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_analog_input_32wFlag, F, 0, 0
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_analog_input_32wFlag, F, 1, 134538
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_analog_input_32wFlag, F, 0, 0
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_analog_input_32wFlag, F, 0, 0
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_analog_input_32wFlag, F, 0, 0
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_analog_input_32wFlag, F, 0, 0
|
||||
dnp3_response_data_object, F, 255
|
|
@ -0,0 +1 @@
|
|||
3 of 51 events triggered by trace
|
|
@ -0,0 +1,10 @@
|
|||
#separator \x09
|
||||
#set_separator ,
|
||||
#empty_field (empty)
|
||||
#unset_field -
|
||||
#path dnp3
|
||||
#open 2013-08-12-18-24-02
|
||||
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p fc_request fc_reply iin
|
||||
#types time string addr port addr port string string count
|
||||
1324502980.465157 UWkUyAuUGXf 130.126.142.250 49412 130.126.140.229 20000 RECORD_CURRENT_TIME RESPONSE 0
|
||||
#close 2013-08-12-18-24-02
|
|
@ -0,0 +1,4 @@
|
|||
dnp3_header_block, T, 25605, 8, 196, 2, 3
|
||||
dnp3_application_request_header, T, 24
|
||||
dnp3_header_block, F, 25605, 10, 68, 3, 2
|
||||
dnp3_application_response_header, F, 129, 0
|
|
@ -0,0 +1 @@
|
|||
7 of 51 events triggered by trace
|
|
@ -0,0 +1,11 @@
|
|||
#separator \x09
|
||||
#set_separator ,
|
||||
#empty_field (empty)
|
||||
#unset_field -
|
||||
#path dnp3
|
||||
#open 2013-08-12-18-24-02
|
||||
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p fc_request fc_reply iin
|
||||
#types time string addr port addr port string string count
|
||||
1324501739.752598 UWkUyAuUGXf 130.126.142.250 49404 130.126.140.229 20000 SELECT RESPONSE 0
|
||||
1324501743.758738 UWkUyAuUGXf 130.126.142.250 49404 130.126.140.229 20000 OPERATE RESPONSE 0
|
||||
#close 2013-08-12-18-24-02
|
|
@ -0,0 +1,22 @@
|
|||
dnp3_header_block, T, 25605, 26, 196, 2, 3
|
||||
dnp3_application_request_header, T, 3
|
||||
dnp3_object_header, T, 3073, 40, 1, 256, 0
|
||||
dnp3_object_prefix, T, 1
|
||||
dnp3_crob, T, 3, 1, 100, 100, 0
|
||||
dnp3_header_block, F, 25605, 28, 68, 3, 2
|
||||
dnp3_application_response_header, F, 129, 0
|
||||
dnp3_object_header, F, 3073, 40, 1, 256, 0
|
||||
dnp3_object_prefix, F, 1
|
||||
dnp3_crob, F, 3, 1, 100, 100, 0
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_header_block, T, 25605, 26, 196, 2, 3
|
||||
dnp3_application_request_header, T, 4
|
||||
dnp3_object_header, T, 3073, 40, 1, 256, 0
|
||||
dnp3_object_prefix, T, 1
|
||||
dnp3_crob, T, 3, 1, 100, 100, 0
|
||||
dnp3_header_block, F, 25605, 28, 68, 3, 2
|
||||
dnp3_application_response_header, F, 129, 0
|
||||
dnp3_object_header, F, 3073, 40, 1, 256, 0
|
||||
dnp3_object_prefix, F, 1
|
||||
dnp3_crob, F, 3, 1, 100, 100, 0
|
||||
dnp3_response_data_object, F, 255
|
|
@ -0,0 +1 @@
|
|||
5 of 51 events triggered by trace
|
|
@ -0,0 +1,10 @@
|
|||
#separator \x09
|
||||
#set_separator ,
|
||||
#empty_field (empty)
|
||||
#unset_field -
|
||||
#path dnp3
|
||||
#open 2013-08-12-18-24-03
|
||||
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p fc_request fc_reply iin
|
||||
#types time string addr port addr port string string count
|
||||
1324502912.898449 UWkUyAuUGXf 130.126.142.250 49411 130.126.140.229 20000 WRITE RESPONSE 0
|
||||
#close 2013-08-12-18-24-03
|
|
@ -0,0 +1,6 @@
|
|||
dnp3_header_block, T, 25605, 18, 196, 2, 3
|
||||
dnp3_application_request_header, T, 2
|
||||
dnp3_object_header, T, 12801, 7, 1, 1, 0
|
||||
dnp3_object_prefix, T, 0
|
||||
dnp3_header_block, F, 25605, 10, 68, 3, 2
|
||||
dnp3_application_response_header, F, 129, 0
|
|
@ -0,0 +1 @@
|
|||
9 of 51 events triggered by trace
|
|
@ -0,0 +1,75 @@
|
|||
#separator \x09
|
||||
#set_separator ,
|
||||
#empty_field (empty)
|
||||
#unset_field -
|
||||
#path dnp3
|
||||
#open 2013-08-12-18-24-03
|
||||
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p fc_request fc_reply iin
|
||||
#types time string addr port addr port string string count
|
||||
1097501938.504844 UWkUyAuUGXf 10.0.0.8 2789 10.0.0.3 20000 - UNSOLICITED_RESPONSE 4096
|
||||
1097501941.569134 UWkUyAuUGXf 10.0.0.8 2789 10.0.0.3 20000 WRITE RESPONSE 0
|
||||
1097502061.912093 UWkUyAuUGXf 10.0.0.8 2789 10.0.0.3 20000 DISABLE_UNSOLICITED RESPONSE 0
|
||||
1097502623.047417 arKYeMETxOg 10.0.0.8 2803 10.0.0.3 20000 - UNSOLICITED_RESPONSE 0
|
||||
1097504102.257400 k6kgXLOoSKl 10.0.0.8 2828 10.0.0.3 20000 - UNSOLICITED_RESPONSE 4096
|
||||
1097504103.409070 k6kgXLOoSKl 10.0.0.8 2828 10.0.0.3 20000 WRITE RESPONSE 0
|
||||
1097504186.667107 k6kgXLOoSKl 10.0.0.8 2828 10.0.0.3 20000 ENABLE_UNSOLICITED RESPONSE 0
|
||||
1097504195.106257 k6kgXLOoSKl 10.0.0.8 2828 10.0.0.3 20000 - UNSOLICITED_RESPONSE 0
|
||||
1097504196.566493 k6kgXLOoSKl 10.0.0.8 2828 10.0.0.3 20000 CONFIRM UNSOLICITED_RESPONSE 0
|
||||
1097504197.887726 k6kgXLOoSKl 10.0.0.8 2828 10.0.0.3 20000 CONFIRM UNSOLICITED_RESPONSE 0
|
||||
1097504199.597084 k6kgXLOoSKl 10.0.0.8 2828 10.0.0.3 20000 CONFIRM UNSOLICITED_RESPONSE 0
|
||||
1097504200.719510 k6kgXLOoSKl 10.0.0.8 2828 10.0.0.3 20000 CONFIRM UNSOLICITED_RESPONSE 0
|
||||
1097504202.513608 k6kgXLOoSKl 10.0.0.8 2828 10.0.0.3 20000 CONFIRM UNSOLICITED_RESPONSE 0
|
||||
1097504203.324245 k6kgXLOoSKl 10.0.0.8 2828 10.0.0.3 20000 CONFIRM UNSOLICITED_RESPONSE 0
|
||||
1097504204.663060 k6kgXLOoSKl 10.0.0.8 2828 10.0.0.3 20000 CONFIRM UNSOLICITED_RESPONSE 0
|
||||
1097504205.750705 k6kgXLOoSKl 10.0.0.8 2828 10.0.0.3 20000 CONFIRM UNSOLICITED_RESPONSE 0
|
||||
1097504210.792443 k6kgXLOoSKl 10.0.0.8 2828 10.0.0.3 20000 CONFIRM UNSOLICITED_RESPONSE 0
|
||||
1097504223.905294 k6kgXLOoSKl 10.0.0.8 2828 10.0.0.3 20000 COLD_RESTART RESPONSE 0
|
||||
1097505719.083365 nQcgTWjvg4c 10.0.0.9 1080 10.0.0.3 20000 COLD_RESTART UNSOLICITED_RESPONSE 0
|
||||
1097505719.083898 nQcgTWjvg4c 10.0.0.9 1080 10.0.0.3 20000 - UNSOLICITED_RESPONSE 0
|
||||
1097505719.084451 nQcgTWjvg4c 10.0.0.9 1080 10.0.0.3 20000 - RESPONSE 0
|
||||
1097505754.654239 nQcgTWjvg4c 10.0.0.9 1080 10.0.0.3 20000 READ RESPONSE 32768
|
||||
1097505754.654731 nQcgTWjvg4c 10.0.0.9 1080 10.0.0.3 20000 - UNSOLICITED_RESPONSE 32768
|
||||
1097505754.756391 nQcgTWjvg4c 10.0.0.9 1080 10.0.0.3 20000 DISABLE_UNSOLICITED RESPONSE 32768
|
||||
1097505754.864882 nQcgTWjvg4c 10.0.0.9 1080 10.0.0.3 20000 WRITE RESPONSE 0
|
||||
1097505754.977534 nQcgTWjvg4c 10.0.0.9 1080 10.0.0.3 20000 READ RESPONSE 0
|
||||
1097505769.716268 nQcgTWjvg4c 10.0.0.9 1080 10.0.0.3 20000 - UNSOLICITED_RESPONSE 0
|
||||
1097505784.797836 nQcgTWjvg4c 10.0.0.9 1080 10.0.0.3 20000 - UNSOLICITED_RESPONSE 0
|
||||
1097505799.908753 nQcgTWjvg4c 10.0.0.9 1080 10.0.0.3 20000 - UNSOLICITED_RESPONSE 0
|
||||
1097505839.916865 nQcgTWjvg4c 10.0.0.9 1080 10.0.0.3 20000 - UNSOLICITED_RESPONSE 0
|
||||
1097505880.043946 nQcgTWjvg4c 10.0.0.9 1080 10.0.0.3 20000 - UNSOLICITED_RESPONSE 0
|
||||
1097505920.204187 nQcgTWjvg4c 10.0.0.9 1080 10.0.0.3 20000 - UNSOLICITED_RESPONSE 0
|
||||
1097505960.308661 nQcgTWjvg4c 10.0.0.9 1080 10.0.0.3 20000 - UNSOLICITED_RESPONSE 0
|
||||
1097506000.396024 nQcgTWjvg4c 10.0.0.9 1080 10.0.0.3 20000 - UNSOLICITED_RESPONSE 0
|
||||
1097506013.373353 nQcgTWjvg4c 10.0.0.9 1080 10.0.0.3 20000 ENABLE_UNSOLICITED RESPONSE 0
|
||||
1097506013.373850 nQcgTWjvg4c 10.0.0.9 1080 10.0.0.3 20000 - UNSOLICITED_RESPONSE 0
|
||||
1097506020.703162 nQcgTWjvg4c 10.0.0.9 1080 10.0.0.3 20000 ENABLE_UNSOLICITED RESPONSE 0
|
||||
1097506028.446245 nQcgTWjvg4c 10.0.0.9 1080 10.0.0.3 20000 - UNSOLICITED_RESPONSE 0
|
||||
1097507785.885063 j4u32Pc5bif 10.0.0.8 1086 10.0.0.3 20000 - UNSOLICITED_RESPONSE 36864
|
||||
1097507788.624309 j4u32Pc5bif 10.0.0.8 1086 10.0.0.3 20000 DISABLE_UNSOLICITED RESPONSE 36864
|
||||
1097507788.834395 j4u32Pc5bif 10.0.0.8 1086 10.0.0.3 20000 WRITE RESPONSE 32768
|
||||
1097507788.944297 j4u32Pc5bif 10.0.0.8 1086 10.0.0.3 20000 DISABLE_UNSOLICITED RESPONSE 32768
|
||||
1097507789.167700 j4u32Pc5bif 10.0.0.8 1086 10.0.0.3 20000 WRITE RESPONSE 32768
|
||||
1097507789.274806 j4u32Pc5bif 10.0.0.8 1086 10.0.0.3 20000 DISABLE_UNSOLICITED RESPONSE 32768
|
||||
1097507789.484975 j4u32Pc5bif 10.0.0.8 1086 10.0.0.3 20000 WRITE RESPONSE 0
|
||||
1097507789.797226 j4u32Pc5bif 10.0.0.8 1086 10.0.0.3 20000 READ RESPONSE 0
|
||||
1097507835.030339 j4u32Pc5bif 10.0.0.8 1086 10.0.0.3 20000 WARM_RESTART RESPONSE 0
|
||||
1097507856.091024 j4u32Pc5bif 10.0.0.8 1086 10.0.0.3 20000 WARM_RESTART RESPONSE 0
|
||||
1097510947.094289 TEfuqmmG4bh 10.0.0.8 1159 10.0.0.3 20000 - UNSOLICITED_RESPONSE 256
|
||||
1097510959.359091 TEfuqmmG4bh 10.0.0.8 1159 10.0.0.3 20000 DISABLE_UNSOLICITED - -
|
||||
1097512255.236054 FrJExwHcSal 10.0.0.8 1184 10.0.0.3 20000 - UNSOLICITED_RESPONSE 4096
|
||||
1097512264.723894 FrJExwHcSal 10.0.0.8 1184 10.0.0.3 20000 STOP_APPL RESPONSE 4097
|
||||
1097512267.537969 FrJExwHcSal 10.0.0.8 1184 10.0.0.3 20000 STOP_APPL RESPONSE 4097
|
||||
1097513177.297272 5OKnoww6xl4 10.0.0.9 1084 10.0.0.3 20000 - UNSOLICITED_RESPONSE 38145
|
||||
1097513182.837583 5OKnoww6xl4 10.0.0.9 1084 10.0.0.3 20000 STOP_APPL - -
|
||||
1178205958.184068 3PKsZ2Uye21 192.168.66.33 1167 192.168.66.34 20000 READ RESPONSE 0
|
||||
1178205982.425227 3PKsZ2Uye21 192.168.66.33 1167 192.168.66.34 20000 SELECT RESPONSE 4
|
||||
1178205984.486492 3PKsZ2Uye21 192.168.66.33 1167 192.168.66.34 20000 SELECT RESPONSE 4
|
||||
1178205985.311235 3PKsZ2Uye21 192.168.66.33 1167 192.168.66.34 20000 SELECT RESPONSE 4
|
||||
1178205986.029976 3PKsZ2Uye21 192.168.66.33 1167 192.168.66.34 20000 SELECT RESPONSE 4
|
||||
1178205986.556099 3PKsZ2Uye21 192.168.66.33 1167 192.168.66.34 20000 SELECT RESPONSE 4
|
||||
1178206042.953163 3PKsZ2Uye21 192.168.66.33 1167 192.168.66.34 20000 READ RESPONSE 6
|
||||
1178206044.500956 3PKsZ2Uye21 192.168.66.33 1167 192.168.66.34 20000 READ RESPONSE 6
|
||||
1178206045.032815 3PKsZ2Uye21 192.168.66.33 1167 192.168.66.34 20000 READ RESPONSE 6
|
||||
1178206045.557097 3PKsZ2Uye21 192.168.66.33 1167 192.168.66.34 20000 READ RESPONSE 6
|
||||
1178206046.086403 3PKsZ2Uye21 192.168.66.33 1167 192.168.66.34 20000 READ RESPONSE 6
|
||||
#close 2013-08-12-18-24-03
|
574
testing/btest/Baseline/scripts.base.protocols.dnp3.events/output
Normal file
574
testing/btest/Baseline/scripts.base.protocols.dnp3.events/output
Normal file
|
@ -0,0 +1,574 @@
|
|||
dnp3_header_block, F, 25605, 10, 68, 3, 4
|
||||
dnp3_application_response_header, F, 130, 4096
|
||||
dnp3_header_block, T, 25605, 8, 196, 4, 3
|
||||
dnp3_application_request_header, T, 0
|
||||
dnp3_header_block, T, 25605, 18, 196, 4, 3
|
||||
dnp3_application_request_header, T, 2
|
||||
dnp3_object_header, T, 12801, 7, 1, 1, 0
|
||||
dnp3_object_prefix, T, 0
|
||||
dnp3_header_block, F, 25605, 10, 68, 3, 4
|
||||
dnp3_application_response_header, F, 129, 0
|
||||
dnp3_header_block, T, 25605, 17, 196, 4, 3
|
||||
dnp3_application_request_header, T, 21
|
||||
dnp3_object_header, T, 15362, 6, 0, 65535, 65535
|
||||
dnp3_object_header, T, 15363, 6, 0, 65535, 65535
|
||||
dnp3_object_header, T, 15364, 6, 0, 65535, 65535
|
||||
dnp3_header_block, F, 25605, 10, 68, 3, 4
|
||||
dnp3_application_response_header, F, 129, 0
|
||||
dnp3_header_block, F, 25605, 10, 68, 3, 4
|
||||
dnp3_application_response_header, F, 130, 0
|
||||
dnp3_header_block, F, 25605, 10, 68, 3, 4
|
||||
dnp3_application_response_header, F, 130, 4096
|
||||
dnp3_header_block, T, 25605, 8, 196, 4, 3
|
||||
dnp3_application_request_header, T, 0
|
||||
dnp3_header_block, T, 25605, 18, 196, 4, 3
|
||||
dnp3_application_request_header, T, 2
|
||||
dnp3_object_header, T, 12801, 7, 1, 1, 0
|
||||
dnp3_object_prefix, T, 0
|
||||
dnp3_header_block, F, 25605, 10, 68, 3, 4
|
||||
dnp3_application_response_header, F, 129, 0
|
||||
dnp3_header_block, T, 25605, 17, 196, 4, 3
|
||||
dnp3_application_request_header, T, 20
|
||||
dnp3_object_header, T, 15362, 6, 0, 65535, 65535
|
||||
dnp3_object_header, T, 15363, 6, 0, 65535, 65535
|
||||
dnp3_object_header, T, 15364, 6, 0, 65535, 65535
|
||||
dnp3_header_block, F, 25605, 10, 68, 3, 4
|
||||
dnp3_application_response_header, F, 129, 0
|
||||
dnp3_header_block, F, 25605, 76, 68, 3, 4
|
||||
dnp3_application_response_header, F, 130, 0
|
||||
dnp3_object_header, F, 13057, 7, 1, 1, 0
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_header, F, 515, 40, 5, 1280, 0
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 1
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 2
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 1
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_header, F, 8193, 40, 3, 768, 0
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_analog_input_event_32woTime, F, 1, 0
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 1
|
||||
dnp3_analog_input_event_32woTime, F, 1, 0
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 2
|
||||
dnp3_analog_input_event_32woTime, F, 1, 0
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_header_block, T, 25605, 8, 196, 4, 3
|
||||
dnp3_application_request_header, T, 0
|
||||
dnp3_header_block, F, 25605, 71, 68, 3, 4
|
||||
dnp3_application_response_header, F, 130, 0
|
||||
dnp3_object_header, F, 13057, 7, 1, 1, 0
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_header, F, 515, 40, 4, 1024, 0
|
||||
dnp3_object_prefix, F, 2
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 1
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 2
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_header, F, 8193, 40, 3, 768, 0
|
||||
dnp3_object_prefix, F, 2
|
||||
dnp3_analog_input_event_32woTime, F, 1, 198
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_analog_input_event_32woTime, F, 1, 0
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 1
|
||||
dnp3_analog_input_event_32woTime, F, 1, 0
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_header_block, T, 25605, 8, 196, 4, 3
|
||||
dnp3_application_request_header, T, 0
|
||||
dnp3_header_block, F, 25605, 76, 68, 3, 4
|
||||
dnp3_application_response_header, F, 130, 0
|
||||
dnp3_object_header, F, 13057, 7, 1, 1, 0
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_header, F, 515, 40, 5, 1280, 0
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 1
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 2
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 1
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_header, F, 8193, 40, 3, 768, 0
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_analog_input_event_32woTime, F, 1, 198
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 1
|
||||
dnp3_analog_input_event_32woTime, F, 1, 202
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 2
|
||||
dnp3_analog_input_event_32woTime, F, 1, 198
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_header_block, T, 25605, 8, 196, 4, 3
|
||||
dnp3_application_request_header, T, 0
|
||||
dnp3_header_block, F, 25605, 71, 68, 3, 4
|
||||
dnp3_application_response_header, F, 130, 0
|
||||
dnp3_object_header, F, 13057, 7, 1, 1, 0
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_header, F, 515, 40, 4, 1024, 0
|
||||
dnp3_object_prefix, F, 2
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 1
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 2
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_header, F, 8193, 40, 3, 768, 0
|
||||
dnp3_object_prefix, F, 2
|
||||
dnp3_analog_input_event_32woTime, F, 1, 0
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_analog_input_event_32woTime, F, 1, 202
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 1
|
||||
dnp3_analog_input_event_32woTime, F, 1, 200
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_header_block, T, 25605, 8, 196, 4, 3
|
||||
dnp3_application_request_header, T, 0
|
||||
dnp3_header_block, F, 25605, 76, 68, 3, 4
|
||||
dnp3_application_response_header, F, 130, 0
|
||||
dnp3_object_header, F, 13057, 7, 1, 1, 0
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_header, F, 515, 40, 5, 1280, 0
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 1
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 2
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 1
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_header, F, 8193, 40, 3, 768, 0
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_analog_input_event_32woTime, F, 1, 0
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 1
|
||||
dnp3_analog_input_event_32woTime, F, 1, 0
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 2
|
||||
dnp3_analog_input_event_32woTime, F, 1, 0
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_header_block, T, 25605, 8, 196, 4, 3
|
||||
dnp3_application_request_header, T, 0
|
||||
dnp3_header_block, F, 25605, 50, 68, 3, 4
|
||||
dnp3_application_response_header, F, 130, 0
|
||||
dnp3_object_header, F, 13057, 7, 1, 1, 0
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_header, F, 515, 40, 5, 1280, 0
|
||||
dnp3_object_prefix, F, 2
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 1
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 2
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_header_block, T, 25605, 8, 196, 4, 3
|
||||
dnp3_application_request_header, T, 0
|
||||
dnp3_header_block, F, 25605, 76, 68, 3, 4
|
||||
dnp3_application_response_header, F, 130, 0
|
||||
dnp3_object_header, F, 13057, 7, 1, 1, 0
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_header, F, 515, 40, 5, 1280, 0
|
||||
dnp3_object_prefix, F, 1
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 2
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 1
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 2
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_header, F, 8193, 40, 3, 768, 0
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_analog_input_event_32woTime, F, 1, 198
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 1
|
||||
dnp3_analog_input_event_32woTime, F, 1, 199
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 2
|
||||
dnp3_analog_input_event_32woTime, F, 1, 199
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_header_block, T, 25605, 8, 196, 4, 3
|
||||
dnp3_application_request_header, T, 0
|
||||
dnp3_header_block, F, 25605, 66, 68, 3, 4
|
||||
dnp3_application_response_header, F, 130, 0
|
||||
dnp3_object_header, F, 13057, 7, 1, 1, 0
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_header, F, 515, 40, 3, 768, 0
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 1
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 2
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_header, F, 8193, 40, 3, 768, 0
|
||||
dnp3_object_prefix, F, 2
|
||||
dnp3_analog_input_event_32woTime, F, 1, 0
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_analog_input_event_32woTime, F, 1, 202
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 1
|
||||
dnp3_analog_input_event_32woTime, F, 1, 200
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_header_block, T, 25605, 8, 196, 4, 3
|
||||
dnp3_application_request_header, T, 0
|
||||
dnp3_header_block, F, 25605, 76, 68, 3, 4
|
||||
dnp3_application_response_header, F, 130, 0
|
||||
dnp3_object_header, F, 13057, 7, 1, 1, 0
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_header, F, 515, 40, 5, 1280, 0
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 1
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 2
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 1
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_header, F, 8193, 40, 3, 768, 0
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_analog_input_event_32woTime, F, 1, 0
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 1
|
||||
dnp3_analog_input_event_32woTime, F, 1, 0
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 2
|
||||
dnp3_analog_input_event_32woTime, F, 1, 0
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_header_block, T, 25605, 8, 196, 4, 3
|
||||
dnp3_application_request_header, T, 0
|
||||
dnp3_header_block, F, 25605, 56, 68, 3, 4
|
||||
dnp3_application_response_header, F, 130, 0
|
||||
dnp3_object_header, F, 13057, 7, 1, 1, 0
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_header, F, 515, 40, 1, 256, 0
|
||||
dnp3_object_prefix, F, 2
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_header, F, 8193, 40, 3, 768, 0
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_analog_input_event_32woTime, F, 1, 203
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 1
|
||||
dnp3_analog_input_event_32woTime, F, 1, 202
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_object_prefix, F, 2
|
||||
dnp3_analog_input_event_32woTime, F, 1, 199
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_header_block, T, 25605, 8, 196, 4, 3
|
||||
dnp3_application_request_header, T, 0
|
||||
dnp3_header_block, T, 25605, 8, 196, 4, 3
|
||||
dnp3_application_request_header, T, 13
|
||||
dnp3_header_block, F, 25605, 16, 68, 3, 4
|
||||
dnp3_application_response_header, F, 129, 0
|
||||
dnp3_object_header, F, 13314, 7, 1, 1, 0
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_header_block, T, 25605, 8, 196, 4, 3
|
||||
dnp3_application_request_header, T, 13
|
||||
dnp3_header_block, F, 25605, 10, 68, 6, 4
|
||||
dnp3_application_response_header, F, 130, 0
|
||||
dnp3_header_block, F, 25605, 10, 68, 6, 4
|
||||
dnp3_application_response_header, F, 130, 0
|
||||
dnp3_header_block, F, 25605, 16, 68, 3, 4
|
||||
dnp3_application_response_header, F, 129, 0
|
||||
dnp3_object_header, F, 13314, 7, 1, 1, 0
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_header_block, T, 25605, 11, 196, 4, 3
|
||||
dnp3_application_request_header, T, 1
|
||||
dnp3_object_header, T, 512, 6, 0, 65535, 65535
|
||||
dnp3_header_block, F, 25605, 10, 68, 3, 4
|
||||
dnp3_application_response_header, F, 129, 32768
|
||||
dnp3_header_block, F, 25605, 10, 68, 6, 4
|
||||
dnp3_application_response_header, F, 130, 32768
|
||||
dnp3_header_block, T, 25605, 17, 196, 4, 3
|
||||
dnp3_application_request_header, T, 21
|
||||
dnp3_object_header, T, 15362, 6, 0, 65535, 65535
|
||||
dnp3_object_header, T, 15363, 6, 0, 65535, 65535
|
||||
dnp3_object_header, T, 15364, 6, 0, 65535, 65535
|
||||
dnp3_header_block, F, 25605, 10, 68, 3, 4
|
||||
dnp3_application_response_header, F, 129, 32768
|
||||
dnp3_header_block, T, 25605, 14, 196, 4, 3
|
||||
dnp3_application_request_header, T, 2
|
||||
dnp3_object_header, T, 20481, 0, 1, 7, 7
|
||||
dnp3_object_prefix, T, 0
|
||||
dnp3_header_block, F, 25605, 10, 68, 3, 4
|
||||
dnp3_application_response_header, F, 129, 0
|
||||
dnp3_header_block, T, 25605, 20, 196, 4, 3
|
||||
dnp3_application_request_header, T, 1
|
||||
dnp3_object_header, T, 15362, 6, 0, 65535, 65535
|
||||
dnp3_object_header, T, 15363, 6, 0, 65535, 65535
|
||||
dnp3_object_header, T, 15364, 6, 0, 65535, 65535
|
||||
dnp3_object_header, T, 15361, 6, 0, 65535, 65535
|
||||
dnp3_header_block, F, 25605, 78, 68, 3, 4
|
||||
dnp3_application_response_header, F, 129, 0
|
||||
dnp3_object_header, F, 257, 0, 6, 0, 5
|
||||
dnp3_object_header, F, 522, 2, 4294705410, 17104896, 16843009
|
||||
dnp3_object_header, F, 276, 5, 0, 0, 21
|
||||
dnp3_object_header, F, 2304, 0, 1, 0, 0
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_debug_byte, F, \0\0\0\x1e^C\0\0^F\xc5\0\0\0\xc7\0\0\0\xc8\0\0\0^A\0\0\0%\x1c\0\0^N\x1c\0\0^P\x1c\0\0
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_header_block, F, 25605, 10, 68, 6, 4
|
||||
dnp3_application_response_header, F, 130, 0
|
||||
dnp3_header_block, F, 25605, 10, 68, 6, 4
|
||||
dnp3_application_response_header, F, 130, 0
|
||||
dnp3_header_block, F, 25605, 10, 68, 6, 4
|
||||
dnp3_application_response_header, F, 130, 0
|
||||
dnp3_header_block, F, 25605, 10, 68, 6, 4
|
||||
dnp3_application_response_header, F, 130, 0
|
||||
dnp3_header_block, F, 25605, 10, 68, 6, 4
|
||||
dnp3_application_response_header, F, 130, 0
|
||||
dnp3_header_block, F, 25605, 10, 68, 6, 4
|
||||
dnp3_application_response_header, F, 130, 0
|
||||
dnp3_header_block, F, 25605, 10, 68, 6, 4
|
||||
dnp3_application_response_header, F, 130, 0
|
||||
dnp3_header_block, F, 25605, 10, 68, 6, 4
|
||||
dnp3_application_response_header, F, 130, 0
|
||||
dnp3_header_block, T, 25605, 17, 196, 4, 3
|
||||
dnp3_application_request_header, T, 20
|
||||
dnp3_object_header, T, 15362, 6, 0, 65535, 65535
|
||||
dnp3_object_header, T, 15363, 6, 0, 65535, 65535
|
||||
dnp3_object_header, T, 15364, 6, 0, 65535, 65535
|
||||
dnp3_header_block, F, 25605, 10, 68, 3, 4
|
||||
dnp3_application_response_header, F, 129, 0
|
||||
dnp3_header_block, F, 25605, 10, 68, 6, 4
|
||||
dnp3_application_response_header, F, 130, 0
|
||||
dnp3_header_block, T, 25605, 17, 196, 4, 3
|
||||
dnp3_application_request_header, T, 20
|
||||
dnp3_object_header, T, 15362, 6, 0, 65535, 65535
|
||||
dnp3_object_header, T, 15363, 6, 0, 65535, 65535
|
||||
dnp3_object_header, T, 15364, 6, 0, 65535, 65535
|
||||
dnp3_header_block, F, 25605, 10, 68, 3, 4
|
||||
dnp3_application_response_header, F, 129, 0
|
||||
dnp3_header_block, F, 25605, 10, 68, 6, 4
|
||||
dnp3_application_response_header, F, 130, 0
|
||||
dnp3_header_block, F, 25605, 10, 68, 3, 4
|
||||
dnp3_application_response_header, F, 130, 36864
|
||||
dnp3_header_block, T, 25605, 8, 196, 4, 3
|
||||
dnp3_application_request_header, T, 0
|
||||
dnp3_header_block, T, 25605, 17, 196, 4, 3
|
||||
dnp3_application_request_header, T, 21
|
||||
dnp3_object_header, T, 15362, 6, 0, 65535, 65535
|
||||
dnp3_object_header, T, 15363, 6, 0, 65535, 65535
|
||||
dnp3_object_header, T, 15364, 6, 0, 65535, 65535
|
||||
dnp3_header_block, F, 25605, 10, 68, 3, 4
|
||||
dnp3_application_response_header, F, 129, 36864
|
||||
dnp3_header_block, T, 25605, 18, 196, 4, 3
|
||||
dnp3_application_request_header, T, 2
|
||||
dnp3_object_header, T, 12801, 7, 1, 1, 0
|
||||
dnp3_object_prefix, T, 0
|
||||
dnp3_header_block, F, 25605, 10, 68, 3, 4
|
||||
dnp3_application_response_header, F, 129, 32768
|
||||
dnp3_header_block, T, 25605, 17, 196, 4, 3
|
||||
dnp3_application_request_header, T, 21
|
||||
dnp3_object_header, T, 15362, 6, 0, 65535, 65535
|
||||
dnp3_object_header, T, 15363, 6, 0, 65535, 65535
|
||||
dnp3_object_header, T, 15364, 6, 0, 65535, 65535
|
||||
dnp3_header_block, F, 25605, 10, 68, 3, 4
|
||||
dnp3_application_response_header, F, 129, 32768
|
||||
dnp3_header_block, T, 25605, 18, 196, 4, 3
|
||||
dnp3_application_request_header, T, 2
|
||||
dnp3_object_header, T, 12801, 7, 1, 1, 0
|
||||
dnp3_object_prefix, T, 0
|
||||
dnp3_header_block, F, 25605, 10, 68, 3, 4
|
||||
dnp3_application_response_header, F, 129, 32768
|
||||
dnp3_header_block, T, 25605, 17, 196, 4, 3
|
||||
dnp3_application_request_header, T, 21
|
||||
dnp3_object_header, T, 15362, 6, 0, 65535, 65535
|
||||
dnp3_object_header, T, 15363, 6, 0, 65535, 65535
|
||||
dnp3_object_header, T, 15364, 6, 0, 65535, 65535
|
||||
dnp3_header_block, F, 25605, 10, 68, 3, 4
|
||||
dnp3_application_response_header, F, 129, 32768
|
||||
dnp3_header_block, T, 25605, 14, 196, 4, 3
|
||||
dnp3_application_request_header, T, 2
|
||||
dnp3_object_header, T, 20481, 0, 1, 7, 7
|
||||
dnp3_object_prefix, T, 0
|
||||
dnp3_header_block, F, 25605, 10, 68, 3, 4
|
||||
dnp3_application_response_header, F, 129, 0
|
||||
dnp3_header_block, T, 25605, 20, 196, 4, 3
|
||||
dnp3_application_request_header, T, 1
|
||||
dnp3_object_header, T, 15362, 6, 0, 65535, 65535
|
||||
dnp3_object_header, T, 15363, 6, 0, 65535, 65535
|
||||
dnp3_object_header, T, 15364, 6, 0, 65535, 65535
|
||||
dnp3_object_header, T, 15361, 6, 0, 65535, 65535
|
||||
dnp3_header_block, F, 25605, 78, 68, 3, 4
|
||||
dnp3_application_response_header, F, 129, 0
|
||||
dnp3_object_header, F, 257, 0, 6, 0, 5
|
||||
dnp3_object_header, F, 6410, 2, 2155643138, 2164588544, 25264385
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_debug_byte, F, ^A^T^E\0\0\0 \0\0\0^U^I\0\0\0\0\0\0\0\x1e^C\0\0^F\xca\0\0\0\xcb\0\0\0\xc9\0\0\0\xff\xff\xff\xfff!\0\0Y!\0\0K!\0\0
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_header_block, T, 25605, 8, 196, 4, 3
|
||||
dnp3_application_request_header, T, 14
|
||||
dnp3_header_block, F, 25605, 16, 68, 3, 4
|
||||
dnp3_application_response_header, F, 129, 0
|
||||
dnp3_object_header, F, 13314, 7, 1, 1, 0
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_header_block, T, 25605, 8, 196, 4, 3
|
||||
dnp3_application_request_header, T, 14
|
||||
dnp3_header_block, F, 25605, 16, 68, 3, 4
|
||||
dnp3_application_response_header, F, 129, 0
|
||||
dnp3_object_header, F, 13314, 7, 1, 1, 0
|
||||
dnp3_object_prefix, F, 0
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_header_block, F, 25605, 10, 68, 3, 4
|
||||
dnp3_application_response_header, F, 130, 256
|
||||
dnp3_header_block, T, 25605, 17, 196, 65535, 3
|
||||
dnp3_application_request_header, T, 21
|
||||
dnp3_object_header, T, 15362, 6, 0, 65535, 65535
|
||||
dnp3_object_header, T, 15363, 6, 0, 65535, 65535
|
||||
dnp3_object_header, T, 15364, 237, 0, 0, 0
|
||||
dnp3_header_block, T, 25605, 17, 196, 65535, 3
|
||||
dnp3_application_request_header, T, 21
|
||||
dnp3_object_header, T, 15362, 6, 0, 65535, 65535
|
||||
dnp3_object_header, T, 15363, 6, 0, 65535, 65535
|
||||
dnp3_object_header, T, 15364, 237, 0, 0, 0
|
||||
dnp3_header_block, F, 25605, 10, 68, 3, 4
|
||||
dnp3_application_response_header, F, 130, 4096
|
||||
dnp3_header_block, T, 25605, 17, 196, 4, 3
|
||||
dnp3_application_request_header, T, 18
|
||||
dnp3_object_header, T, 15362, 6, 0, 65535, 65535
|
||||
dnp3_object_header, T, 263, 6, 0, 65535, 65535
|
||||
dnp3_object_header, T, 15364, 237, 0, 0, 0
|
||||
dnp3_header_block, F, 25605, 10, 68, 3, 4
|
||||
dnp3_application_response_header, F, 129, 4097
|
||||
dnp3_header_block, T, 25605, 17, 196, 4, 3
|
||||
dnp3_application_request_header, T, 18
|
||||
dnp3_object_header, T, 15362, 6, 0, 65535, 65535
|
||||
dnp3_object_header, T, 263, 6, 0, 65535, 65535
|
||||
dnp3_object_header, T, 15364, 237, 0, 0, 0
|
||||
dnp3_header_block, F, 25605, 10, 68, 3, 4
|
||||
dnp3_application_response_header, F, 129, 4097
|
||||
dnp3_header_block, F, 25605, 10, 68, 3, 6
|
||||
dnp3_application_response_header, F, 130, 38145
|
||||
dnp3_header_block, T, 25605, 17, 196, 65535, 3
|
||||
dnp3_application_request_header, T, 18
|
||||
dnp3_object_header, T, 15362, 6, 0, 65535, 65535
|
||||
dnp3_object_header, T, 263, 6, 0, 65535, 65535
|
||||
dnp3_object_header, T, 15364, 237, 0, 0, 0
|
||||
dnp3_header_block, T, 25605, 17, 196, 65535, 3
|
||||
dnp3_application_request_header, T, 18
|
||||
dnp3_object_header, T, 15362, 6, 0, 65535, 65535
|
||||
dnp3_object_header, T, 263, 6, 0, 65535, 65535
|
||||
dnp3_object_header, T, 15364, 237, 0, 0, 0
|
||||
dnp3_header_block, T, 25605, 17, 196, 4, 3
|
||||
dnp3_application_request_header, T, 1
|
||||
dnp3_object_header, T, 15362, 6, 0, 65535, 65535
|
||||
dnp3_object_header, T, 15363, 6, 0, 65535, 65535
|
||||
dnp3_object_header, T, 15364, 6, 0, 65535, 65535
|
||||
dnp3_header_block, F, 25605, 10, 68, 3, 4
|
||||
dnp3_application_response_header, F, 129, 0
|
||||
dnp3_header_block, T, 25605, 26, 196, 4, 3
|
||||
dnp3_application_request_header, T, 3
|
||||
dnp3_object_header, T, 3073, 40, 1, 256, 0
|
||||
dnp3_object_prefix, T, 34463
|
||||
dnp3_crob, T, 3, 1, 100, 100, 0
|
||||
dnp3_header_block, F, 25605, 28, 68, 3, 4
|
||||
dnp3_application_response_header, F, 129, 4
|
||||
dnp3_object_header, F, 3073, 40, 1, 256, 0
|
||||
dnp3_object_prefix, F, 34463
|
||||
dnp3_crob, F, 3, 1, 100, 100, 4
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_header_block, T, 25605, 26, 196, 4, 3
|
||||
dnp3_application_request_header, T, 3
|
||||
dnp3_object_header, T, 3073, 40, 1, 256, 0
|
||||
dnp3_object_prefix, T, 34463
|
||||
dnp3_crob, T, 3, 1, 100, 100, 0
|
||||
dnp3_header_block, F, 25605, 28, 68, 3, 4
|
||||
dnp3_application_response_header, F, 129, 4
|
||||
dnp3_object_header, F, 3073, 40, 1, 256, 0
|
||||
dnp3_object_prefix, F, 34463
|
||||
dnp3_crob, F, 3, 1, 100, 100, 4
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_header_block, T, 25605, 26, 196, 4, 3
|
||||
dnp3_application_request_header, T, 3
|
||||
dnp3_object_header, T, 3073, 40, 1, 256, 0
|
||||
dnp3_object_prefix, T, 34463
|
||||
dnp3_crob, T, 3, 1, 100, 100, 0
|
||||
dnp3_header_block, F, 25605, 28, 68, 3, 4
|
||||
dnp3_application_response_header, F, 129, 4
|
||||
dnp3_object_header, F, 3073, 40, 1, 256, 0
|
||||
dnp3_object_prefix, F, 34463
|
||||
dnp3_crob, F, 3, 1, 100, 100, 4
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_header_block, T, 25605, 26, 196, 4, 3
|
||||
dnp3_application_request_header, T, 3
|
||||
dnp3_object_header, T, 3073, 40, 1, 256, 0
|
||||
dnp3_object_prefix, T, 34463
|
||||
dnp3_crob, T, 3, 1, 100, 100, 0
|
||||
dnp3_header_block, F, 25605, 28, 68, 3, 4
|
||||
dnp3_application_response_header, F, 129, 4
|
||||
dnp3_object_header, F, 3073, 40, 1, 256, 0
|
||||
dnp3_object_prefix, F, 34463
|
||||
dnp3_crob, F, 3, 1, 100, 100, 4
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_header_block, T, 25605, 26, 196, 4, 3
|
||||
dnp3_application_request_header, T, 3
|
||||
dnp3_object_header, T, 3073, 40, 1, 256, 0
|
||||
dnp3_object_prefix, T, 34463
|
||||
dnp3_crob, T, 3, 1, 100, 100, 0
|
||||
dnp3_header_block, F, 25605, 28, 68, 3, 4
|
||||
dnp3_application_response_header, F, 129, 4
|
||||
dnp3_object_header, F, 3073, 40, 1, 256, 0
|
||||
dnp3_object_prefix, F, 34463
|
||||
dnp3_crob, F, 3, 1, 100, 100, 4
|
||||
dnp3_response_data_object, F, 255
|
||||
dnp3_header_block, T, 25605, 11, 196, 4, 3
|
||||
dnp3_application_request_header, T, 1
|
||||
dnp3_object_header, T, 65280, 6, 0, 65535, 65535
|
||||
dnp3_header_block, F, 25605, 10, 68, 3, 4
|
||||
dnp3_application_response_header, F, 129, 6
|
||||
dnp3_header_block, T, 25605, 11, 196, 4, 3
|
||||
dnp3_application_request_header, T, 1
|
||||
dnp3_object_header, T, 65280, 6, 0, 65535, 65535
|
||||
dnp3_header_block, F, 25605, 10, 68, 3, 4
|
||||
dnp3_application_response_header, F, 129, 6
|
||||
dnp3_header_block, T, 25605, 11, 196, 4, 3
|
||||
dnp3_application_request_header, T, 1
|
||||
dnp3_object_header, T, 65280, 6, 0, 65535, 65535
|
||||
dnp3_header_block, F, 25605, 10, 68, 3, 4
|
||||
dnp3_application_response_header, F, 129, 6
|
||||
dnp3_header_block, T, 25605, 11, 196, 4, 3
|
||||
dnp3_application_request_header, T, 1
|
||||
dnp3_object_header, T, 65280, 6, 0, 65535, 65535
|
||||
dnp3_header_block, F, 25605, 10, 68, 3, 4
|
||||
dnp3_application_response_header, F, 129, 6
|
||||
dnp3_header_block, T, 25605, 11, 196, 4, 3
|
||||
dnp3_application_request_header, T, 1
|
||||
dnp3_object_header, T, 65280, 6, 0, 65535, 65535
|
||||
dnp3_header_block, F, 25605, 10, 68, 3, 4
|
||||
dnp3_application_response_header, F, 129, 6
|
BIN
testing/btest/Traces/dnp3/dnp3.trace
Normal file
BIN
testing/btest/Traces/dnp3/dnp3.trace
Normal file
Binary file not shown.
BIN
testing/btest/Traces/dnp3/dnp3_del_measure.pcap
Normal file
BIN
testing/btest/Traces/dnp3/dnp3_del_measure.pcap
Normal file
Binary file not shown.
BIN
testing/btest/Traces/dnp3/dnp3_en_spon.pcap
Normal file
BIN
testing/btest/Traces/dnp3/dnp3_en_spon.pcap
Normal file
Binary file not shown.
BIN
testing/btest/Traces/dnp3/dnp3_file_del.pcap
Normal file
BIN
testing/btest/Traces/dnp3/dnp3_file_del.pcap
Normal file
Binary file not shown.
BIN
testing/btest/Traces/dnp3/dnp3_file_read.pcap
Normal file
BIN
testing/btest/Traces/dnp3/dnp3_file_read.pcap
Normal file
Binary file not shown.
BIN
testing/btest/Traces/dnp3/dnp3_file_write.pcap
Normal file
BIN
testing/btest/Traces/dnp3/dnp3_file_write.pcap
Normal file
Binary file not shown.
BIN
testing/btest/Traces/dnp3/dnp3_link_only.pcap
Executable file
BIN
testing/btest/Traces/dnp3/dnp3_link_only.pcap
Executable file
Binary file not shown.
BIN
testing/btest/Traces/dnp3/dnp3_read.pcap
Normal file
BIN
testing/btest/Traces/dnp3/dnp3_read.pcap
Normal file
Binary file not shown.
BIN
testing/btest/Traces/dnp3/dnp3_read_p20001.pcap
Normal file
BIN
testing/btest/Traces/dnp3/dnp3_read_p20001.pcap
Normal file
Binary file not shown.
BIN
testing/btest/Traces/dnp3/dnp3_rec_time.pcap
Normal file
BIN
testing/btest/Traces/dnp3/dnp3_rec_time.pcap
Normal file
Binary file not shown.
BIN
testing/btest/Traces/dnp3/dnp3_select_operate.pcap
Normal file
BIN
testing/btest/Traces/dnp3/dnp3_select_operate.pcap
Normal file
Binary file not shown.
BIN
testing/btest/Traces/dnp3/dnp3_write.pcap
Normal file
BIN
testing/btest/Traces/dnp3/dnp3_write.pcap
Normal file
Binary file not shown.
|
@ -0,0 +1,9 @@
|
|||
#
|
||||
# @TEST-EXEC: bro -r $TRACES/dnp3/dnp3_del_measure.pcap %DIR/events.bro >output
|
||||
# @TEST-EXEC: btest-diff output
|
||||
# @TEST-EXEC: cat output | awk '{print $1}' | sort | uniq | wc -l >covered
|
||||
# @TEST-EXEC: cat ${DIST}/src/analyzer/protocol/dnp3/events.bif | grep "^event dnp3_" | wc -l >total
|
||||
# @TEST-EXEC: echo `cat covered` of `cat total` events triggered by trace >coverage
|
||||
# @TEST-EXEC: btest-diff coverage
|
||||
# @TEST-EXEC: btest-diff dnp3.log
|
||||
#
|
|
@ -0,0 +1,9 @@
|
|||
#
|
||||
# @TEST-EXEC: bro -r $TRACES/dnp3/dnp3_en_spon.pcap %DIR/events.bro >output
|
||||
# @TEST-EXEC: btest-diff output
|
||||
# @TEST-EXEC: cat output | awk '{print $1}' | sort | uniq | wc -l >covered
|
||||
# @TEST-EXEC: cat ${DIST}/src/analyzer/protocol/dnp3/events.bif | grep "^event dnp3_" | wc -l >total
|
||||
# @TEST-EXEC: echo `cat covered` of `cat total` events triggered by trace >coverage
|
||||
# @TEST-EXEC: btest-diff coverage
|
||||
# @TEST-EXEC: btest-diff dnp3.log
|
||||
#
|
|
@ -0,0 +1,9 @@
|
|||
#
|
||||
# @TEST-EXEC: bro -r $TRACES/dnp3/dnp3_file_del.pcap %DIR/events.bro >output
|
||||
# @TEST-EXEC: btest-diff output
|
||||
# @TEST-EXEC: cat output | awk '{print $1}' | sort | uniq | wc -l >covered
|
||||
# @TEST-EXEC: cat ${DIST}/src/analyzer/protocol/dnp3/events.bif | grep "^event dnp3_" | wc -l >total
|
||||
# @TEST-EXEC: echo `cat covered` of `cat total` events triggered by trace >coverage
|
||||
# @TEST-EXEC: btest-diff coverage
|
||||
# @TEST-EXEC: btest-diff dnp3.log
|
||||
#
|
|
@ -0,0 +1,9 @@
|
|||
#
|
||||
# @TEST-EXEC: bro -r $TRACES/dnp3/dnp3_file_read.pcap %DIR/events.bro >output
|
||||
# @TEST-EXEC: btest-diff output
|
||||
# @TEST-EXEC: cat output | awk '{print $1}' | sort | uniq | wc -l >covered
|
||||
# @TEST-EXEC: cat ${DIST}/src/analyzer/protocol/dnp3/events.bif | grep "^event dnp3_" | wc -l >total
|
||||
# @TEST-EXEC: echo `cat covered` of `cat total` events triggered by trace >coverage
|
||||
# @TEST-EXEC: btest-diff coverage
|
||||
# @TEST-EXEC: btest-diff dnp3.log
|
||||
#
|
|
@ -0,0 +1,9 @@
|
|||
#
|
||||
# @TEST-EXEC: bro -r $TRACES/dnp3/dnp3_file_write.pcap %DIR/events.bro >output
|
||||
# @TEST-EXEC: btest-diff output
|
||||
# @TEST-EXEC: cat output | awk '{print $1}' | sort | uniq | wc -l >covered
|
||||
# @TEST-EXEC: cat ${DIST}/src/analyzer/protocol/dnp3/events.bif | grep "^event dnp3_" | wc -l >total
|
||||
# @TEST-EXEC: echo `cat covered` of `cat total` events triggered by trace >coverage
|
||||
# @TEST-EXEC: btest-diff coverage
|
||||
# @TEST-EXEC: btest-diff dnp3.log
|
||||
#
|
|
@ -0,0 +1,8 @@
|
|||
#
|
||||
# @TEST-EXEC: bro -r $TRACES/dnp3/dnp3_link_only.pcap %DIR/events.bro >output
|
||||
# @TEST-EXEC: btest-diff output
|
||||
# @TEST-EXEC: cat output | awk '{print $1}' | sort | uniq | wc -l >covered
|
||||
# @TEST-EXEC: cat ${DIST}/src/analyzer/protocol/dnp3/events.bif | grep "^event dnp3_" | wc -l >total
|
||||
# @TEST-EXEC: echo `cat covered` of `cat total` events triggered by trace >coverage
|
||||
# @TEST-EXEC: btest-diff coverage
|
||||
#
|
9
testing/btest/scripts/base/protocols/dnp3/dnp3_read.bro
Normal file
9
testing/btest/scripts/base/protocols/dnp3/dnp3_read.bro
Normal file
|
@ -0,0 +1,9 @@
|
|||
#
|
||||
# @TEST-EXEC: bro -r $TRACES/dnp3/dnp3_read.pcap %DIR/events.bro >output
|
||||
# @TEST-EXEC: btest-diff output
|
||||
# @TEST-EXEC: cat output | awk '{print $1}' | sort | uniq | wc -l >covered
|
||||
# @TEST-EXEC: cat ${DIST}/src/analyzer/protocol/dnp3/events.bif | grep "^event dnp3_" | wc -l >total
|
||||
# @TEST-EXEC: echo `cat covered` of `cat total` events triggered by trace >coverage
|
||||
# @TEST-EXEC: btest-diff coverage
|
||||
# @TEST-EXEC: btest-diff dnp3.log
|
||||
#
|
|
@ -0,0 +1,9 @@
|
|||
#
|
||||
# @TEST-EXEC: bro -r $TRACES/dnp3/dnp3_rec_time.pcap %DIR/events.bro >output
|
||||
# @TEST-EXEC: btest-diff output
|
||||
# @TEST-EXEC: cat output | awk '{print $1}' | sort | uniq | wc -l >covered
|
||||
# @TEST-EXEC: cat ${DIST}/src/analyzer/protocol/dnp3/events.bif | grep "^event dnp3_" | wc -l >total
|
||||
# @TEST-EXEC: echo `cat covered` of `cat total` events triggered by trace >coverage
|
||||
# @TEST-EXEC: btest-diff coverage
|
||||
# @TEST-EXEC: btest-diff dnp3.log
|
||||
#
|
|
@ -0,0 +1,9 @@
|
|||
#
|
||||
# @TEST-EXEC: bro -r $TRACES/dnp3/dnp3_select_operate.pcap %DIR/events.bro >output
|
||||
# @TEST-EXEC: btest-diff output
|
||||
# @TEST-EXEC: cat output | awk '{print $1}' | sort | uniq | wc -l >covered
|
||||
# @TEST-EXEC: cat ${DIST}/src/analyzer/protocol/dnp3/events.bif | grep "^event dnp3_" | wc -l >total
|
||||
# @TEST-EXEC: echo `cat covered` of `cat total` events triggered by trace >coverage
|
||||
# @TEST-EXEC: btest-diff coverage
|
||||
# @TEST-EXEC: btest-diff dnp3.log
|
||||
#
|
9
testing/btest/scripts/base/protocols/dnp3/dnp3_write.bro
Normal file
9
testing/btest/scripts/base/protocols/dnp3/dnp3_write.bro
Normal file
|
@ -0,0 +1,9 @@
|
|||
#
|
||||
# @TEST-EXEC: bro -r $TRACES/dnp3/dnp3_write.pcap %DIR/events.bro >output
|
||||
# @TEST-EXEC: btest-diff output
|
||||
# @TEST-EXEC: cat output | awk '{print $1}' | sort | uniq | wc -l >covered
|
||||
# @TEST-EXEC: cat ${DIST}/src/analyzer/protocol/dnp3/events.bif | grep "^event dnp3_" | wc -l >total
|
||||
# @TEST-EXEC: echo `cat covered` of `cat total` events triggered by trace >coverage
|
||||
# @TEST-EXEC: btest-diff coverage
|
||||
# @TEST-EXEC: btest-diff dnp3.log
|
||||
#
|
266
testing/btest/scripts/base/protocols/dnp3/events.bro
Normal file
266
testing/btest/scripts/base/protocols/dnp3/events.bro
Normal file
|
@ -0,0 +1,266 @@
|
|||
#
|
||||
# @TEST-EXEC: bro -r $TRACES/dnp3/dnp3.trace %INPUT >output
|
||||
# @TEST-EXEC: btest-diff output
|
||||
# @TEST-EXEC: cat output | awk '{print $1}' | sort | uniq | wc -l >covered
|
||||
# @TEST-EXEC: cat ${DIST}/src/analyzer/protocol/dnp3/events.bif | grep "^event dnp3_" | wc -l >total
|
||||
# @TEST-EXEC: echo `cat covered` of `cat total` events triggered by trace >coverage
|
||||
# @TEST-EXEC: btest-diff coverage
|
||||
# @TEST-EXEC: btest-diff dnp3.log
|
||||
#
|
||||
event dnp3_application_request_header(c: connection, is_orig: bool, fc: count)
|
||||
{
|
||||
print "dnp3_application_request_header", is_orig, fc;
|
||||
}
|
||||
|
||||
event dnp3_application_response_header(c: connection, is_orig: bool, fc: count, iin: count)
|
||||
{
|
||||
print "dnp3_application_response_header", is_orig, fc, iin;
|
||||
}
|
||||
|
||||
event dnp3_object_header(c: connection, is_orig: bool, obj_type: count, qua_field: count, number: count, rf_low: count, rf_high: count)
|
||||
{
|
||||
print "dnp3_object_header", is_orig, obj_type, qua_field, number, rf_low, rf_high;
|
||||
}
|
||||
|
||||
event dnp3_object_prefix(c: connection, is_orig: bool, prefix_value: count)
|
||||
{
|
||||
print "dnp3_object_prefix", is_orig, prefix_value;
|
||||
}
|
||||
|
||||
event dnp3_header_block(c: connection, is_orig: bool, start: count, len: count, ctrl: count, dest_addr: count, src_addr: count)
|
||||
{
|
||||
print "dnp3_header_block", is_orig, start, len, ctrl, dest_addr, src_addr;
|
||||
}
|
||||
|
||||
event dnp3_response_data_object(c: connection, is_orig: bool, data_value: count)
|
||||
{
|
||||
print "dnp3_response_data_object", is_orig, data_value;
|
||||
}
|
||||
|
||||
event dnp3_attribute_common(c: connection, is_orig: bool, data_type_code: count, leng: count, attribute_obj: string)
|
||||
{
|
||||
print "dnp3_attribute_common", is_orig, data_type_code, leng, attribute_obj;
|
||||
}
|
||||
|
||||
event dnp3_crob(c: connection, is_orig: bool, control_code: count, count8: count, on_time: count, off_time: count, status_code: count)
|
||||
{
|
||||
print "dnp3_crob", is_orig, control_code, count8, on_time, off_time, status_code;
|
||||
}
|
||||
|
||||
event dnp3_pcb(c: connection, is_orig: bool, control_code: count, count8: count, on_time: count, off_time: count, status_code: count)
|
||||
{
|
||||
print "dnp3_pcb", is_orig, control_code, count8, on_time, off_time, status_code;
|
||||
}
|
||||
|
||||
event dnp3_counter_32wFlag(c: connection, is_orig: bool, flag: count, count_value: count)
|
||||
{
|
||||
print "dnp3_counter_32wFlag", is_orig, flag, count_value;
|
||||
}
|
||||
|
||||
event dnp3_counter_16wFlag(c: connection, is_orig: bool, flag: count, count_value: count)
|
||||
{
|
||||
print "dnp3_counter_16wFlag", is_orig, flag, count_value;
|
||||
}
|
||||
|
||||
event dnp3_counter_32woFlag(c: connection, is_orig: bool, count_value: count)
|
||||
{
|
||||
print "dnp3_counter_32woFlag", is_orig, count_value;
|
||||
}
|
||||
|
||||
event dnp3_counter_16woFlag(c: connection, is_orig: bool, count_value: count)
|
||||
{
|
||||
print "dnp3_counter_16woFlag", is_orig, count_value;
|
||||
}
|
||||
|
||||
event dnp3_frozen_counter_32wFlag(c: connection, is_orig: bool, flag:count, count_value: count)
|
||||
{
|
||||
print "dnp3_frozen_counter_32wFlag", is_orig, flag;
|
||||
}
|
||||
|
||||
event dnp3_frozen_counter_16wFlag(c: connection, is_orig: bool, flag:count, count_value: count)
|
||||
{
|
||||
print "dnp3_frozen_counter_16wFlag", is_orig, flag;
|
||||
}
|
||||
|
||||
event dnp3_frozen_counter_32wFlagTime(c: connection, is_orig: bool, flag:count, count_value: count, time48: string)
|
||||
{
|
||||
print "dnp3_frozen_counter_32wFlagTime", is_orig, flag;
|
||||
}
|
||||
|
||||
event dnp3_frozen_counter_16wFlagTime(c: connection, is_orig: bool, flag:count, count_value: count, time48: string)
|
||||
{
|
||||
print "dnp3_frozen_counter_16wFlagTime", is_orig, flag;
|
||||
}
|
||||
|
||||
event dnp3_frozen_counter_32woFlag(c: connection, is_orig: bool, count_value: count)
|
||||
{
|
||||
print "dnp3_frozen_counter_32woFlag", is_orig, count_value;
|
||||
}
|
||||
|
||||
event dnp3_frozen_counter_16woFlag(c: connection, is_orig: bool, count_value: count)
|
||||
{
|
||||
print "dnp3_frozen_counter_16woFlag", is_orig, count_value;
|
||||
}
|
||||
|
||||
event dnp3_analog_input_32wFlag(c: connection, is_orig: bool, flag: count, value: count)
|
||||
{
|
||||
print "dnp3_analog_input_32wFlag", is_orig, flag, value;
|
||||
}
|
||||
|
||||
event dnp3_analog_input_16wFlag(c: connection, is_orig: bool, flag: count, value: count)
|
||||
{
|
||||
print "dnp3_analog_input_16wFlag", is_orig, flag, value;
|
||||
}
|
||||
|
||||
event dnp3_analog_input_32woFlag(c: connection, is_orig: bool, value: count)
|
||||
{
|
||||
print "dnp3_analog_input_32woFlag", is_orig, value;
|
||||
}
|
||||
|
||||
event dnp3_analog_input_16woFlag(c: connection, is_orig: bool, value: count)
|
||||
{
|
||||
print "dnp3_analog_input_16woFlag", is_orig, value;
|
||||
}
|
||||
|
||||
event dnp3_analog_input_SPwFlag(c: connection, is_orig: bool, flag: count, value: count)
|
||||
{
|
||||
print "dnp3_analog_input_SPwFlag", is_orig, flag, value;
|
||||
}
|
||||
|
||||
event dnp3_analog_input_DPwFlag(c: connection, is_orig: bool, flag: count, value_low: count, value_high: count)
|
||||
{
|
||||
print "dnp3_analog_input_DPwFlag", is_orig, flag, value_low, value_high;
|
||||
}
|
||||
|
||||
event dnp3_frozen_analog_input_32wFlag(c: connection, is_orig: bool, flag: count, frozen_value: count)
|
||||
{
|
||||
print "dnp3_frozen_analog_input_32wFlag", is_orig, flag, frozen_value;
|
||||
}
|
||||
|
||||
event dnp3_frozen_analog_input_16wFlag(c: connection, is_orig: bool, flag: count, frozen_value: count)
|
||||
{
|
||||
print "dnp3_frozen_analog_input_16wFlag", is_orig, flag, frozen_value;
|
||||
}
|
||||
|
||||
event dnp3_frozen_analog_input_32wTime(c: connection, is_orig: bool, flag: count, frozen_value: count, time48: string)
|
||||
{
|
||||
print "dnp3_frozen_analog_input_32wTime", is_orig, flag, frozen_value, time48;
|
||||
}
|
||||
|
||||
event dnp3_frozen_analog_input_16wTime(c: connection, is_orig: bool, flag: count, frozen_value: count, time48: string)
|
||||
{
|
||||
print "dnp3_frozen_analog_input_16wTime", is_orig, flag, frozen_value, time48;
|
||||
}
|
||||
|
||||
event dnp3_frozen_analog_input_32woFlag(c: connection, is_orig: bool, frozen_value: count)
|
||||
{
|
||||
print "dnp3_frozen_analog_input_32woFlag", is_orig, frozen_value;
|
||||
}
|
||||
|
||||
event dnp3_frozen_analog_input_16woFlag(c: connection, is_orig: bool, frozen_value: count)
|
||||
{
|
||||
print "dnp3_frozen_analog_input_16woFlag", is_orig, frozen_value;
|
||||
}
|
||||
|
||||
event dnp3_frozen_analog_input_SPwFlag(c: connection, is_orig: bool, flag: count, frozen_value: count)
|
||||
{
|
||||
print "dnp3_frozen_analog_input_SPwFlag", is_orig, flag, frozen_value;
|
||||
}
|
||||
|
||||
event dnp3_frozen_analog_input_DPwFlag(c: connection, is_orig: bool, flag: count, frozen_value_low: count, frozen_value_high: count)
|
||||
{
|
||||
print "dnp3_frozen_analog_input_DPwFlag", is_orig, flag, frozen_value_low, frozen_value_high;
|
||||
}
|
||||
|
||||
event dnp3_analog_input_event_32woTime(c: connection, is_orig: bool, flag: count, value: count)
|
||||
{
|
||||
print "dnp3_analog_input_event_32woTime", is_orig, flag, value;
|
||||
}
|
||||
|
||||
event dnp3_analog_input_event_16woTime(c: connection, is_orig: bool, flag: count, value: count)
|
||||
{
|
||||
print "dnp3_analog_input_event_16woTime", is_orig, flag, value;
|
||||
}
|
||||
|
||||
event dnp3_analog_input_event_32wTime(c: connection, is_orig: bool, flag: count, value: count, time48: string)
|
||||
{
|
||||
print "dnp3_analog_input_event_32wTime", is_orig, flag, value, time48;
|
||||
}
|
||||
|
||||
event dnp3_analog_input_16wTime(c: connection, is_orig: bool, flag: count, value: count, time48: string)
|
||||
{
|
||||
print "dnp3_analog_input_event_16wTime", is_orig, flag, value, time48;
|
||||
}
|
||||
|
||||
event dnp3_analog_inputSP_woTime(c: connection, is_orig: bool, flag: count, value: count)
|
||||
{
|
||||
print "dnp3_analog_input_event_SPwoTime", is_orig, flag, value;
|
||||
}
|
||||
|
||||
event dnp3_analog_inputDP_woTime(c: connection, is_orig: bool, flag: count, value_low: count, value_high: count)
|
||||
{
|
||||
print "dnp3_analog_input_event_DPwoTime", is_orig, flag, value_low, value_high;
|
||||
}
|
||||
|
||||
event dnp3_analog_inputSP_wTime(c: connection, is_orig: bool, flag: count, value: count, time48: string)
|
||||
{
|
||||
print "dnp3_analog_input_event_SPwTime", is_orig, flag, value, time48;
|
||||
}
|
||||
|
||||
event dnp3_analog_inputDP_wTime(c: connection, is_orig: bool, flag: count, value_low: count, value_high: count, time48: string)
|
||||
{
|
||||
print "dnp3_analog_input_event_DPwTime", is_orig, flag, value_low, value_high, time48;
|
||||
}
|
||||
|
||||
event dnp3_frozen_analog_input_event_32woTime(c: connection, is_orig: bool, flag: count, frozen_value: count)
|
||||
{
|
||||
print "dnp3_frozen_analog_input_event_32woTime", is_orig, flag, frozen_value;
|
||||
}
|
||||
|
||||
event dnp3_frozen_analog_input_event_16woTime(c: connection, is_orig: bool, flag: count, frozen_value: count)
|
||||
{
|
||||
print "dnp3_frozen_analog_input_event_16woTime", is_orig, flag, frozen_value;
|
||||
}
|
||||
|
||||
event dnp3_frozen_analog_input_event_32wTime(c: connection, is_orig: bool, flag: count, frozen_value: count, time48: string)
|
||||
{
|
||||
print "dnp3_frozen_analog_input_event_32wTime", is_orig, flag, frozen_value, time48;
|
||||
}
|
||||
|
||||
event dnp3_frozen_analog_input_event_16wTime(c: connection, is_orig: bool, flag: count, frozen_value: count, time48: string)
|
||||
{
|
||||
print "dnp3_frozen_analog_input_event_16wTime", is_orig, flag, frozen_value, time48;
|
||||
}
|
||||
|
||||
event dnp3_frozen_analog_input_event_SPwoTime(c: connection, is_orig: bool, flag: count, frozen_value: count)
|
||||
{
|
||||
print "dnp3_frozen_analog_input_event_SPwoTime", is_orig, flag, frozen_value;
|
||||
}
|
||||
|
||||
event dnp3_frozen_analog_input_event_DPwoTime(c: connection, is_orig: bool, flag: count, frozen_value_low: count, frozen_value_high: count)
|
||||
{
|
||||
print "dnp3_frozen_analog_input_event_DPwoTime", is_orig, flag, frozen_value_low, frozen_value_high;
|
||||
}
|
||||
|
||||
event dnp3_frozen_analog_input_event_SPwTime(c: connection, is_orig: bool, flag: count, frozen_value: count, time48: string)
|
||||
{
|
||||
print "dnp3_frozen_analog_inputeventSP_wTime", is_orig, flag, frozen_value, time48;
|
||||
}
|
||||
|
||||
event dnp3_frozen_analog_input_event_DPwTime(c: connection, is_orig: bool, flag: count, frozen_value_low: count, frozen_value_high: count, time48: string)
|
||||
{
|
||||
print "dnp3_frozen_analog_inputeventDP_wTime", is_orig, flag, frozen_value_low, frozen_value_high, time48;
|
||||
}
|
||||
|
||||
event dnp3_file_transport(c: connection, is_orig: bool, file_handle: count, block_num: count, file_data: string)
|
||||
{
|
||||
print "dnp3_file_transport", is_orig, file_handle, block_num;
|
||||
print hexdump(file_data);
|
||||
}
|
||||
|
||||
event dnp3_debug_byte(c: connection, is_orig: bool, debug: string)
|
||||
{
|
||||
print "dnp3_debug_byte", is_orig, debug;
|
||||
}
|
||||
|
||||
|
Loading…
Add table
Add a link
Reference in a new issue