mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 14:48:21 +00:00

without a final \0 - which means that strings read by the input framework are unusable by basically all internal functions (like to_count). the basic test now also checks this. Thanks at Sheharbano for noticing this.
15 lines
210 B
Text
15 lines
210 B
Text
{
|
|
[-42] = [b=T, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=1315801931.273616, iv=100.0, s=hurz, ns=4242, sc={
|
|
2,
|
|
4,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
}
|
|
4242
|