zeek/testing/btest/Baseline/scripts.policy.frameworks.intel.removal/zeekproc.intel.log
Jon Siwek 94aee910d5 Update btests/baselines for OpenDict compat
Haven't checked different build configurations yet, but all except
a few SumStats tests are stable for me now.  The external tests
are also completely failing, but haven't looked at those yet.
2020-08-11 11:26:21 -07:00

12 lines
667 B
Text

#separator \x09
#set_separator ,
#empty_field (empty)
#unset_field -
#path intel
#open 2020-08-06-03-32-56
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p seen.indicator seen.indicator_type seen.where seen.node matched sources fuid file_mime_type file_desc
#types time string addr port addr port string enum enum string set[enum] set[string] string string string
1596684776.963259 - - - - - 10.0.0.1 Intel::ADDR SOMEWHERE zeek Intel::ADDR source1 - - -
1596684776.963259 - - - - - 10.0.0.2 Intel::ADDR SOMEWHERE zeek Intel::ADDR source1 - - -
1596684776.969496 - - - - - 10.0.0.2 Intel::ADDR SOMEWHERE zeek Intel::ADDR source1 - - -
#close 2020-08-06-03-32-57