diff --git a/testing/btest/Baseline/core.unknown-protocol-event/out b/testing/btest/Baseline/core.unknown-protocol-event/out index 0cdfa29213..7f9b60fb5d 100644 --- a/testing/btest/Baseline/core.unknown-protocol-event/out +++ b/testing/btest/Baseline/core.unknown-protocol-event/out @@ -1,2 +1,2 @@ ### BTest baseline data generated by btest-diff. Do not edit. Use "btest -U/-u" to update. Requires BTest >= 0.63. -ETHERNET, 35020, 02070400222d81db1004 +ETHERNET, 35020, 02070400222d81db1004, [ETHERNET] diff --git a/testing/btest/Baseline/core.vntag/unknown_protocols.log b/testing/btest/Baseline/core.vntag/unknown_protocols.log index c7ddb819f3..e0e8fa8956 100644 --- a/testing/btest/Baseline/core.vntag/unknown_protocols.log +++ b/testing/btest/Baseline/core.vntag/unknown_protocols.log @@ -5,9 +5,9 @@ #unset_field - #path unknown_protocols #open XXXX-XX-XX-XX-XX-XX -#fields ts analyzer protocol_id first_bytes -#types time string string string -XXXXXXXXXX.XXXXXX IP 0xfd 1b794b175fac06aba658 -XXXXXXXXXX.XXXXXX IP 0xfd 9d6c1f9e20274bb66385 -XXXXXXXXXX.XXXXXX IP 0xfd 06ffb64ded001f65f818 +#fields ts analyzer protocol_id first_bytes analyzer_history +#types time string string string vector[string] +XXXXXXXXXX.XXXXXX IP 0xfd 1b794b175fac06aba658 ETHERNET,VNTAG,VLAN,IP +XXXXXXXXXX.XXXXXX IP 0xfd 9d6c1f9e20274bb66385 ETHERNET,VNTAG,VLAN,IP +XXXXXXXXXX.XXXXXX IP 0xfd 06ffb64ded001f65f818 ETHERNET,VNTAG,VLAN,IP #close XXXX-XX-XX-XX-XX-XX diff --git a/testing/btest/Baseline/plugins.packet-protocol/output_orig b/testing/btest/Baseline/plugins.packet-protocol/output_orig index 7a832e4072..b60ee2f067 100644 --- a/testing/btest/Baseline/plugins.packet-protocol/output_orig +++ b/testing/btest/Baseline/plugins.packet-protocol/output_orig @@ -5,7 +5,7 @@ #unset_field - #path unknown_protocols #open XXXX-XX-XX-XX-XX-XX -#fields ts analyzer protocol_id first_bytes -#types time string string string -XXXXXXXXXX.XXXXXX ETHERNET 0x88b5 4920616d20656e636170 +#fields ts analyzer protocol_id first_bytes analyzer_history +#types time string string string vector[string] +XXXXXXXXXX.XXXXXX ETHERNET 0x88b5 4920616d20656e636170 ETHERNET #close XXXX-XX-XX-XX-XX-XX diff --git a/testing/btest/core/unknown-protocol-event.zeek b/testing/btest/core/unknown-protocol-event.zeek index c043217da4..ba49a28c16 100644 --- a/testing/btest/core/unknown-protocol-event.zeek +++ b/testing/btest/core/unknown-protocol-event.zeek @@ -1,6 +1,9 @@ # @TEST-EXEC: zeek -b -r $TRACES/lldp.pcap %INPUT >out # @TEST-EXEC: btest-diff out -event unknown_protocol(analyzer_name: string, protocol: count, first_bytes: string) - { print analyzer_name, protocol, bytestring_to_hexstr(first_bytes); } - +event unknown_protocol(analyzer_name: string, protocol: count, first_bytes: string, + analyzer_history: string_vec) + { + print analyzer_name, protocol, bytestring_to_hexstr(first_bytes), + analyzer_history; + }