### BTest baseline data generated by btest-diff. Do not edit. Use "btest -U/-u" to update. Requires BTest >= 0.63. #separator \x09 #set_separator , #empty_field (empty) #unset_field - #path weird #open XXXX-XX-XX-XX-XX-XX #fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p name addl notice peer source #types time string addr port addr port string string bool string string XXXXXXXXXX.XXXXXX - - - - - truncated_IP - F zeek IP #close XXXX-XX-XX-XX-XX-XX #separator \x09 #set_separator , #empty_field (empty) #unset_field - #path weird #open XXXX-XX-XX-XX-XX-XX #fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p name addl notice peer source #types time string addr port addr port string string bool string string XXXXXXXXXX.XXXXXX - - - - - truncated_IP - F zeek IP #close XXXX-XX-XX-XX-XX-XX #separator \x09 #set_separator , #empty_field (empty) #unset_field - #path weird #open XXXX-XX-XX-XX-XX-XX #fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p name addl notice peer source #types time string addr port addr port string string bool string string XXXXXXXXXX.XXXXXX - - - - - truncated_IP_len - F zeek IP #close XXXX-XX-XX-XX-XX-XX #separator \x09 #set_separator , #empty_field (empty) #unset_field - #path weird #open XXXX-XX-XX-XX-XX-XX #fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p name addl notice peer source #types time string addr port addr port string string bool string string XXXXXXXXXX.XXXXXX - 10.0.0.1 0 192.0.43.10 0 internally_truncated_header - F zeek ICMP XXXXXXXXXX.XXXXXX - 192.0.43.10 0 10.0.0.1 0 internally_truncated_header - F zeek ICMP #close XXXX-XX-XX-XX-XX-XX #separator \x09 #set_separator , #empty_field (empty) #unset_field - #path weird #open XXXX-XX-XX-XX-XX-XX #fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p name addl notice peer source #types time string addr port addr port string string bool string string XXXXXXXXXX.XXXXXX - - - - - truncated_ethernet_frame - F zeek ETHERNET #close XXXX-XX-XX-XX-XX-XX #separator \x09 #set_separator , #empty_field (empty) #unset_field - #path weird #open XXXX-XX-XX-XX-XX-XX #fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p name addl notice peer source #types time string addr port addr port string string bool string string XXXXXXXXXX.XXXXXX - - - - - invalid_IP_header_size - F zeek IP #close XXXX-XX-XX-XX-XX-XX #separator \x09 #set_separator , #empty_field (empty) #unset_field - #path weird #open XXXX-XX-XX-XX-XX-XX #fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p name addl notice peer source #types time string addr port addr port string string bool string string XXXXXXXXXX.XXXXXX - - - - - internally_truncated_header - F zeek IP #close XXXX-XX-XX-XX-XX-XX #separator \x09 #set_separator , #empty_field (empty) #unset_field - #path weird #open XXXX-XX-XX-XX-XX-XX #fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p name addl notice peer source #types time string addr port addr port string string bool string string XXXXXXXXXX.XXXXXX - - - - - invalid_IP_header_size_in_tunnel - F zeek IP #close XXXX-XX-XX-XX-XX-XX