mirror of
https://github.com/zeek/zeek.git
synced 2025-10-09 10:08:20 +00:00
17d0ade26a
By default this only logs all the violations, regardless of the confirmation state (for which there's still dpd.log). It includes packet, protocol and file analyzers. This uses options, change handlers and event groups for toggling the functionality at runtime. Closes #2031
11 lines
480 B
Text
11 lines
480 B
Text
# @TEST-EXEC: zeek -b -r ${TRACES}/wikipedia.trace %INPUT
|
|
# @TEST-EXEC: mv analyzer.log analyzer.log-no-confirmations
|
|
# @TEST-EXEC: btest-diff analyzer.log-no-confirmations
|
|
|
|
# @TEST-EXEC: zeek -b -r ${TRACES}/wikipedia.trace %INPUT Analyzer::Logging::include_confirmations=T
|
|
# @TEST-EXEC: mv analyzer.log analyzer.log-include-confirmations
|
|
# @TEST-EXEC: btest-diff analyzer.log-include-confirmations
|
|
|
|
@load base/protocols/conn
|
|
@load base/protocols/dns
|
|
@load base/protocols/http
|