mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 06:38:20 +00:00
120f061bcd
Not sure it's the best place to put, but we don't have packet analysis stats bif and also num_packets is already there, so seems reasonable to put the num_packets_unprocessed into
15 lines
363 B
Text
15 lines
363 B
Text
# @TEST-EXEC: zeek -b -r $TRACES/smtp.trace %INPUT
|
|
# @TEST-EXEC: zeek -b -r $TRACES/dns-edns-ecs.pcap %INPUT
|
|
# @TEST-EXEC: zeek -b -r $TRACES/contentline-irc-5k-line.pcap %INPUT
|
|
#
|
|
# @TEST-EXEC: btest-diff .stdout
|
|
|
|
event zeek_init()
|
|
{
|
|
print fmt("pcap %s", split_string(packet_source()$path, /\//)[-1]);
|
|
}
|
|
|
|
event net_done(t: time)
|
|
{
|
|
print get_conn_stats();
|
|
}
|