zeek/testing/btest/Baseline/scripts.base.frameworks.logging.ascii-escape/ssh.log
Robin Sommer 3220bbce55 Merge remote branch 'origin/topic/jsiwek/log-escaping'
* origin/topic/jsiwek/log-escaping:
  Add missing ascii writer options to log header.
  Escape the ASCII log's set separator (addresses #712)
  Rewrite ODesc character escaping functionality. (addresses #681)

Closes #712.
2011-12-19 06:37:54 -08:00

12 lines
527 B
Text

#separator \x7c\x7c
#set_separator||\x2c
#empty_field||\x2d
#unset_field||\x2d
#path||ssh
#fields||t||id.orig_h||id.orig_p||id.resp_h||id.resp_p||status||country
#types||time||addr||port||addr||port||string||string
1323275761.036351||1.2.3.4||1234||2.3.4.5||80||success||unknown
1323275761.036351||1.2.3.4||1234||2.3.4.5||80||failure||US
1323275761.036351||1.2.3.4||1234||2.3.4.5||80||fa\x7c\x7cure||UK
1323275761.036351||1.2.3.4||1234||2.3.4.5||80||su\x7c\x7cess||BR
1323275761.036351||1.2.3.4||1234||2.3.4.5||80||failure||MX