mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 06:38:20 +00:00
43e54c7930
Logs that got sent sparsely or burstily would get buffered for long periods of time since the logic to flush them only does so on the next log write. In the worst case, a subsequent log write could never happen and cause a log entry to be indefinitely buffered. This fix introduces a recurring event/timer to simply flush all pending logs at frequency of Broker::log_batch_interval.
103 lines
2.5 KiB
Text
103 lines
2.5 KiB
Text
# @TEST-PORT: BROKER_PORT
|
|
#
|
|
# @TEST-EXEC: btest-bg-run recv "zeek -B broker -b ../recv.zeek >recv.out"
|
|
# @TEST-EXEC: btest-bg-run send "zeek -B broker -b ../send.zeek >send.out"
|
|
#
|
|
# @TEST-EXEC: btest-bg-wait 45
|
|
# @TEST-EXEC: btest-diff recv/recv.out
|
|
# @TEST-EXEC: btest-diff send/send.out
|
|
|
|
@TEST-START-FILE send.zeek
|
|
|
|
redef exit_only_after_terminate = T;
|
|
|
|
global event_count = 0;
|
|
|
|
global ping: event(msg: string, c: count);
|
|
|
|
event zeek_init()
|
|
{
|
|
Broker::subscribe("zeek/event/my_topic");
|
|
Broker::peer("127.0.0.1", to_port(getenv("BROKER_PORT")));
|
|
print "is_remote should be F, and is", is_remote_event();
|
|
}
|
|
|
|
function send_event()
|
|
{
|
|
++event_count;
|
|
local e = Broker::make_event(ping, "my-message", event_count);
|
|
Broker::publish("zeek/event/my_topic", e);
|
|
}
|
|
|
|
event Broker::peer_added(endpoint: Broker::EndpointInfo, msg: string)
|
|
{
|
|
print fmt("sender added peer: endpoint=%s msg=%s",
|
|
endpoint$network$address, msg);
|
|
send_event();
|
|
}
|
|
|
|
event Broker::peer_lost(endpoint: Broker::EndpointInfo, msg: string)
|
|
{
|
|
print fmt("sender lost peer: endpoint=%s msg=%s",
|
|
endpoint$network$address, msg);
|
|
terminate();
|
|
}
|
|
|
|
event pong(msg: string, n: count)
|
|
{
|
|
print "is_remote should be T, and is", is_remote_event();
|
|
print fmt("sender got pong: %s, %s", msg, n);
|
|
send_event();
|
|
}
|
|
|
|
@TEST-END-FILE
|
|
|
|
|
|
@TEST-START-FILE recv.zeek
|
|
|
|
redef exit_only_after_terminate = T;
|
|
|
|
const events_to_recv = 5;
|
|
|
|
global handler: event(msg: string, c: count);
|
|
global auto_handler: event(msg: string, c: count);
|
|
|
|
global pong: event(msg: string, c: count);
|
|
|
|
event zeek_init()
|
|
{
|
|
Broker::subscribe("zeek/event/my_topic");
|
|
Broker::listen("127.0.0.1", to_port(getenv("BROKER_PORT")));
|
|
}
|
|
|
|
event Broker::peer_added(endpoint: Broker::EndpointInfo, msg: string)
|
|
{
|
|
print fmt("receiver added peer: endpoint=%s msg=%s", endpoint$network$address, msg);
|
|
}
|
|
|
|
event Broker::peer_lost(endpoint: Broker::EndpointInfo, msg: string)
|
|
{
|
|
print fmt("receiver lost peer: endpoint=%s msg=%s", endpoint$network$address, msg);
|
|
}
|
|
|
|
event ping(msg: string, n: count)
|
|
{
|
|
print "is_remote should be T, and is", is_remote_event();
|
|
print fmt("receiver got ping: %s, %s", msg, n);
|
|
|
|
if ( n == events_to_recv )
|
|
{
|
|
terminate();
|
|
return;
|
|
}
|
|
|
|
local e = Broker::make_event(pong, msg, n);
|
|
Broker::publish("zeek/event/my_topic", e);
|
|
}
|
|
|
|
event zeek_done()
|
|
{
|
|
print get_broker_stats();
|
|
}
|
|
|
|
@TEST-END-FILE
|