mirror of
https://github.com/zeek/zeek.git
synced 2025-10-10 02:28:21 +00:00
0e48fda6ff
Generally tried to make them more reliable and execute quicker. They all now load the listen script as a trick to make sure input sources are fully read, but also terminate() at appropriate times so that they don't take more time than needed. They're also all serialized with the 'comm' group so listening on a port doesn't interfere with the communication tests.
120 lines
2.5 KiB
Text
120 lines
2.5 KiB
Text
[source=../input.log, reader=Input::READER_RAW, mode=Input::STREAM, name=input, fields=<no value description>, want_record=F, ev=line
|
|
{
|
|
print outfile, A::description;
|
|
print outfile, A::tpe;
|
|
print outfile, A::s;
|
|
try = try + 1;
|
|
if (8 == try)
|
|
{
|
|
close(outfile);
|
|
terminate();
|
|
}
|
|
|
|
}]
|
|
Input::EVENT_NEW
|
|
sdfkh:KH;fdkncv;ISEUp34:Fkdj;YVpIODhfDF
|
|
[source=../input.log, reader=Input::READER_RAW, mode=Input::STREAM, name=input, fields=<no value description>, want_record=F, ev=line
|
|
{
|
|
print outfile, A::description;
|
|
print outfile, A::tpe;
|
|
print outfile, A::s;
|
|
try = try + 1;
|
|
if (8 == try)
|
|
{
|
|
close(outfile);
|
|
terminate();
|
|
}
|
|
|
|
}]
|
|
Input::EVENT_NEW
|
|
DSF"DFKJ"SDFKLh304yrsdkfj@#(*U$34jfDJup3UF
|
|
[source=../input.log, reader=Input::READER_RAW, mode=Input::STREAM, name=input, fields=<no value description>, want_record=F, ev=line
|
|
{
|
|
print outfile, A::description;
|
|
print outfile, A::tpe;
|
|
print outfile, A::s;
|
|
try = try + 1;
|
|
if (8 == try)
|
|
{
|
|
close(outfile);
|
|
terminate();
|
|
}
|
|
|
|
}]
|
|
Input::EVENT_NEW
|
|
q3r3057fdf
|
|
[source=../input.log, reader=Input::READER_RAW, mode=Input::STREAM, name=input, fields=<no value description>, want_record=F, ev=line
|
|
{
|
|
print outfile, A::description;
|
|
print outfile, A::tpe;
|
|
print outfile, A::s;
|
|
try = try + 1;
|
|
if (8 == try)
|
|
{
|
|
close(outfile);
|
|
terminate();
|
|
}
|
|
|
|
}]
|
|
Input::EVENT_NEW
|
|
sdfs\d
|
|
[source=../input.log, reader=Input::READER_RAW, mode=Input::STREAM, name=input, fields=<no value description>, want_record=F, ev=line
|
|
{
|
|
print outfile, A::description;
|
|
print outfile, A::tpe;
|
|
print outfile, A::s;
|
|
try = try + 1;
|
|
if (8 == try)
|
|
{
|
|
close(outfile);
|
|
terminate();
|
|
}
|
|
|
|
}]
|
|
Input::EVENT_NEW
|
|
|
|
[source=../input.log, reader=Input::READER_RAW, mode=Input::STREAM, name=input, fields=<no value description>, want_record=F, ev=line
|
|
{
|
|
print outfile, A::description;
|
|
print outfile, A::tpe;
|
|
print outfile, A::s;
|
|
try = try + 1;
|
|
if (8 == try)
|
|
{
|
|
close(outfile);
|
|
terminate();
|
|
}
|
|
|
|
}]
|
|
Input::EVENT_NEW
|
|
dfsdf
|
|
[source=../input.log, reader=Input::READER_RAW, mode=Input::STREAM, name=input, fields=<no value description>, want_record=F, ev=line
|
|
{
|
|
print outfile, A::description;
|
|
print outfile, A::tpe;
|
|
print outfile, A::s;
|
|
try = try + 1;
|
|
if (8 == try)
|
|
{
|
|
close(outfile);
|
|
terminate();
|
|
}
|
|
|
|
}]
|
|
Input::EVENT_NEW
|
|
sdf
|
|
[source=../input.log, reader=Input::READER_RAW, mode=Input::STREAM, name=input, fields=<no value description>, want_record=F, ev=line
|
|
{
|
|
print outfile, A::description;
|
|
print outfile, A::tpe;
|
|
print outfile, A::s;
|
|
try = try + 1;
|
|
if (8 == try)
|
|
{
|
|
close(outfile);
|
|
terminate();
|
|
}
|
|
|
|
}]
|
|
Input::EVENT_NEW
|
|
3rw43wRRERLlL#RWERERERE.
|