# # @TEST-EXEC: zeek -b %INPUT # @TEST-EXEC: btest-diff ssh.log module SSH; export { redef enum Log::ID += { LOG }; type Info: record { data: string; data2: string; } &log; } redef LogAscii::separator = "|"; event zeek_init() { Log::create_stream(SSH::LOG, [$columns=Info]); Log::write(SSH::LOG, [$data="abc\n\xffdef", $data2="DATA2"]); Log::write(SSH::LOG, [$data="abc|\xffdef", $data2="DATA2"]); Log::write(SSH::LOG, [$data="abc\xff|def", $data2="DATA2"]); }