mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 14:48:21 +00:00
1509 lines
28 KiB
Text
1509 lines
28 KiB
Text
### BTest baseline data generated by btest-diff. Do not edit. Use "btest -U/-u" to update. Requires BTest >= 0.63.
|
|
============PREDICATE============
|
|
Input::EVENT_NEW
|
|
[i=-42]
|
|
[b=T, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
============EVENT============
|
|
Description
|
|
[source=../input.log, reader=Input::READER_ASCII, mode=Input::REREAD, name=ssh, destination={
|
|
[-42] = [b=T, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
}, idx=A::Idx, val=A::Val, want_record=T, ev=line
|
|
{
|
|
print A::outfile, ============EVENT============;
|
|
print A::outfile, Description;
|
|
print A::outfile, A::description;
|
|
print A::outfile, Type;
|
|
print A::outfile, A::tpe;
|
|
print A::outfile, Left;
|
|
print A::outfile, A::left;
|
|
print A::outfile, Right;
|
|
print A::outfile, A::right;
|
|
}, pred=lambda_<15300389792509487762>
|
|
{
|
|
print A::outfile, ============PREDICATE============;
|
|
print A::outfile, A::typ;
|
|
print A::outfile, A::left;
|
|
print A::outfile, A::right;
|
|
return (T);
|
|
}, error_ev=<uninitialized>, config={
|
|
|
|
}]
|
|
Type
|
|
Input::EVENT_NEW
|
|
Left
|
|
[i=-42]
|
|
Right
|
|
[b=T, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
==========SERVERS============
|
|
{
|
|
[-42] = [b=T, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
}
|
|
============PREDICATE============
|
|
Input::EVENT_NEW
|
|
[i=-43]
|
|
[b=T, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
============EVENT============
|
|
Description
|
|
[source=../input.log, reader=Input::READER_ASCII, mode=Input::REREAD, name=ssh, destination={
|
|
[-43] = [b=T, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]],
|
|
[-42] = [b=T, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
}, idx=A::Idx, val=A::Val, want_record=T, ev=line
|
|
{
|
|
print A::outfile, ============EVENT============;
|
|
print A::outfile, Description;
|
|
print A::outfile, A::description;
|
|
print A::outfile, Type;
|
|
print A::outfile, A::tpe;
|
|
print A::outfile, Left;
|
|
print A::outfile, A::left;
|
|
print A::outfile, Right;
|
|
print A::outfile, A::right;
|
|
}, pred=lambda_<15300389792509487762>
|
|
{
|
|
print A::outfile, ============PREDICATE============;
|
|
print A::outfile, A::typ;
|
|
print A::outfile, A::left;
|
|
print A::outfile, A::right;
|
|
return (T);
|
|
}, error_ev=<uninitialized>, config={
|
|
|
|
}]
|
|
Type
|
|
Input::EVENT_NEW
|
|
Left
|
|
[i=-43]
|
|
Right
|
|
[b=T, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
==========SERVERS============
|
|
{
|
|
[-43] = [b=T, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]],
|
|
[-42] = [b=T, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
}
|
|
============PREDICATE============
|
|
Input::EVENT_CHANGED
|
|
[i=-43]
|
|
[b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
============EVENT============
|
|
Description
|
|
[source=../input.log, reader=Input::READER_ASCII, mode=Input::REREAD, name=ssh, destination={
|
|
[-43] = [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]],
|
|
[-42] = [b=T, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
}, idx=A::Idx, val=A::Val, want_record=T, ev=line
|
|
{
|
|
print A::outfile, ============EVENT============;
|
|
print A::outfile, Description;
|
|
print A::outfile, A::description;
|
|
print A::outfile, Type;
|
|
print A::outfile, A::tpe;
|
|
print A::outfile, Left;
|
|
print A::outfile, A::left;
|
|
print A::outfile, Right;
|
|
print A::outfile, A::right;
|
|
}, pred=lambda_<15300389792509487762>
|
|
{
|
|
print A::outfile, ============PREDICATE============;
|
|
print A::outfile, A::typ;
|
|
print A::outfile, A::left;
|
|
print A::outfile, A::right;
|
|
return (T);
|
|
}, error_ev=<uninitialized>, config={
|
|
|
|
}]
|
|
Type
|
|
Input::EVENT_CHANGED
|
|
Left
|
|
[i=-43]
|
|
Right
|
|
[b=T, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
==========SERVERS============
|
|
{
|
|
[-43] = [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]],
|
|
[-42] = [b=T, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
}
|
|
============PREDICATE============
|
|
Input::EVENT_NEW
|
|
[i=-44]
|
|
[b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
============PREDICATE============
|
|
Input::EVENT_NEW
|
|
[i=-45]
|
|
[b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
============PREDICATE============
|
|
Input::EVENT_NEW
|
|
[i=-46]
|
|
[b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
============PREDICATE============
|
|
Input::EVENT_NEW
|
|
[i=-47]
|
|
[b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
============PREDICATE============
|
|
Input::EVENT_NEW
|
|
[i=-48]
|
|
[b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
============EVENT============
|
|
Description
|
|
[source=../input.log, reader=Input::READER_ASCII, mode=Input::REREAD, name=ssh, destination={
|
|
[-46] = [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]],
|
|
[-42] = [b=T, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]],
|
|
[-44] = [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]],
|
|
[-45] = [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]],
|
|
[-48] = [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]],
|
|
[-43] = [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]],
|
|
[-47] = [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
}, idx=A::Idx, val=A::Val, want_record=T, ev=line
|
|
{
|
|
print A::outfile, ============EVENT============;
|
|
print A::outfile, Description;
|
|
print A::outfile, A::description;
|
|
print A::outfile, Type;
|
|
print A::outfile, A::tpe;
|
|
print A::outfile, Left;
|
|
print A::outfile, A::left;
|
|
print A::outfile, Right;
|
|
print A::outfile, A::right;
|
|
}, pred=lambda_<15300389792509487762>
|
|
{
|
|
print A::outfile, ============PREDICATE============;
|
|
print A::outfile, A::typ;
|
|
print A::outfile, A::left;
|
|
print A::outfile, A::right;
|
|
return (T);
|
|
}, error_ev=<uninitialized>, config={
|
|
|
|
}]
|
|
Type
|
|
Input::EVENT_NEW
|
|
Left
|
|
[i=-44]
|
|
Right
|
|
[b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
============EVENT============
|
|
Description
|
|
[source=../input.log, reader=Input::READER_ASCII, mode=Input::REREAD, name=ssh, destination={
|
|
[-46] = [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]],
|
|
[-42] = [b=T, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]],
|
|
[-44] = [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]],
|
|
[-45] = [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]],
|
|
[-48] = [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]],
|
|
[-43] = [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]],
|
|
[-47] = [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
}, idx=A::Idx, val=A::Val, want_record=T, ev=line
|
|
{
|
|
print A::outfile, ============EVENT============;
|
|
print A::outfile, Description;
|
|
print A::outfile, A::description;
|
|
print A::outfile, Type;
|
|
print A::outfile, A::tpe;
|
|
print A::outfile, Left;
|
|
print A::outfile, A::left;
|
|
print A::outfile, Right;
|
|
print A::outfile, A::right;
|
|
}, pred=lambda_<15300389792509487762>
|
|
{
|
|
print A::outfile, ============PREDICATE============;
|
|
print A::outfile, A::typ;
|
|
print A::outfile, A::left;
|
|
print A::outfile, A::right;
|
|
return (T);
|
|
}, error_ev=<uninitialized>, config={
|
|
|
|
}]
|
|
Type
|
|
Input::EVENT_NEW
|
|
Left
|
|
[i=-45]
|
|
Right
|
|
[b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
============EVENT============
|
|
Description
|
|
[source=../input.log, reader=Input::READER_ASCII, mode=Input::REREAD, name=ssh, destination={
|
|
[-46] = [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]],
|
|
[-42] = [b=T, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]],
|
|
[-44] = [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]],
|
|
[-45] = [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]],
|
|
[-48] = [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]],
|
|
[-43] = [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]],
|
|
[-47] = [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
}, idx=A::Idx, val=A::Val, want_record=T, ev=line
|
|
{
|
|
print A::outfile, ============EVENT============;
|
|
print A::outfile, Description;
|
|
print A::outfile, A::description;
|
|
print A::outfile, Type;
|
|
print A::outfile, A::tpe;
|
|
print A::outfile, Left;
|
|
print A::outfile, A::left;
|
|
print A::outfile, Right;
|
|
print A::outfile, A::right;
|
|
}, pred=lambda_<15300389792509487762>
|
|
{
|
|
print A::outfile, ============PREDICATE============;
|
|
print A::outfile, A::typ;
|
|
print A::outfile, A::left;
|
|
print A::outfile, A::right;
|
|
return (T);
|
|
}, error_ev=<uninitialized>, config={
|
|
|
|
}]
|
|
Type
|
|
Input::EVENT_NEW
|
|
Left
|
|
[i=-46]
|
|
Right
|
|
[b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
============EVENT============
|
|
Description
|
|
[source=../input.log, reader=Input::READER_ASCII, mode=Input::REREAD, name=ssh, destination={
|
|
[-46] = [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]],
|
|
[-42] = [b=T, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]],
|
|
[-44] = [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]],
|
|
[-45] = [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]],
|
|
[-48] = [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]],
|
|
[-43] = [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]],
|
|
[-47] = [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
}, idx=A::Idx, val=A::Val, want_record=T, ev=line
|
|
{
|
|
print A::outfile, ============EVENT============;
|
|
print A::outfile, Description;
|
|
print A::outfile, A::description;
|
|
print A::outfile, Type;
|
|
print A::outfile, A::tpe;
|
|
print A::outfile, Left;
|
|
print A::outfile, A::left;
|
|
print A::outfile, Right;
|
|
print A::outfile, A::right;
|
|
}, pred=lambda_<15300389792509487762>
|
|
{
|
|
print A::outfile, ============PREDICATE============;
|
|
print A::outfile, A::typ;
|
|
print A::outfile, A::left;
|
|
print A::outfile, A::right;
|
|
return (T);
|
|
}, error_ev=<uninitialized>, config={
|
|
|
|
}]
|
|
Type
|
|
Input::EVENT_NEW
|
|
Left
|
|
[i=-47]
|
|
Right
|
|
[b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
============EVENT============
|
|
Description
|
|
[source=../input.log, reader=Input::READER_ASCII, mode=Input::REREAD, name=ssh, destination={
|
|
[-46] = [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]],
|
|
[-42] = [b=T, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]],
|
|
[-44] = [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]],
|
|
[-45] = [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]],
|
|
[-48] = [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]],
|
|
[-43] = [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]],
|
|
[-47] = [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
}, idx=A::Idx, val=A::Val, want_record=T, ev=line
|
|
{
|
|
print A::outfile, ============EVENT============;
|
|
print A::outfile, Description;
|
|
print A::outfile, A::description;
|
|
print A::outfile, Type;
|
|
print A::outfile, A::tpe;
|
|
print A::outfile, Left;
|
|
print A::outfile, A::left;
|
|
print A::outfile, Right;
|
|
print A::outfile, A::right;
|
|
}, pred=lambda_<15300389792509487762>
|
|
{
|
|
print A::outfile, ============PREDICATE============;
|
|
print A::outfile, A::typ;
|
|
print A::outfile, A::left;
|
|
print A::outfile, A::right;
|
|
return (T);
|
|
}, error_ev=<uninitialized>, config={
|
|
|
|
}]
|
|
Type
|
|
Input::EVENT_NEW
|
|
Left
|
|
[i=-48]
|
|
Right
|
|
[b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
==========SERVERS============
|
|
{
|
|
[-46] = [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]],
|
|
[-42] = [b=T, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]],
|
|
[-44] = [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]],
|
|
[-45] = [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]],
|
|
[-48] = [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]],
|
|
[-43] = [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]],
|
|
[-47] = [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
}
|
|
============PREDICATE============
|
|
Input::EVENT_REMOVED
|
|
[i=-42]
|
|
[b=T, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
============PREDICATE============
|
|
Input::EVENT_REMOVED
|
|
[i=-43]
|
|
[b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
============PREDICATE============
|
|
Input::EVENT_REMOVED
|
|
[i=-45]
|
|
[b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
============PREDICATE============
|
|
Input::EVENT_REMOVED
|
|
[i=-46]
|
|
[b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
============PREDICATE============
|
|
Input::EVENT_REMOVED
|
|
[i=-44]
|
|
[b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
============PREDICATE============
|
|
Input::EVENT_REMOVED
|
|
[i=-47]
|
|
[b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
============EVENT============
|
|
Description
|
|
[source=../input.log, reader=Input::READER_ASCII, mode=Input::REREAD, name=ssh, destination={
|
|
[-48] = [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
}, idx=A::Idx, val=A::Val, want_record=T, ev=line
|
|
{
|
|
print A::outfile, ============EVENT============;
|
|
print A::outfile, Description;
|
|
print A::outfile, A::description;
|
|
print A::outfile, Type;
|
|
print A::outfile, A::tpe;
|
|
print A::outfile, Left;
|
|
print A::outfile, A::left;
|
|
print A::outfile, Right;
|
|
print A::outfile, A::right;
|
|
}, pred=lambda_<15300389792509487762>
|
|
{
|
|
print A::outfile, ============PREDICATE============;
|
|
print A::outfile, A::typ;
|
|
print A::outfile, A::left;
|
|
print A::outfile, A::right;
|
|
return (T);
|
|
}, error_ev=<uninitialized>, config={
|
|
|
|
}]
|
|
Type
|
|
Input::EVENT_REMOVED
|
|
Left
|
|
[i=-42]
|
|
Right
|
|
[b=T, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
============EVENT============
|
|
Description
|
|
[source=../input.log, reader=Input::READER_ASCII, mode=Input::REREAD, name=ssh, destination={
|
|
[-48] = [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
}, idx=A::Idx, val=A::Val, want_record=T, ev=line
|
|
{
|
|
print A::outfile, ============EVENT============;
|
|
print A::outfile, Description;
|
|
print A::outfile, A::description;
|
|
print A::outfile, Type;
|
|
print A::outfile, A::tpe;
|
|
print A::outfile, Left;
|
|
print A::outfile, A::left;
|
|
print A::outfile, Right;
|
|
print A::outfile, A::right;
|
|
}, pred=lambda_<15300389792509487762>
|
|
{
|
|
print A::outfile, ============PREDICATE============;
|
|
print A::outfile, A::typ;
|
|
print A::outfile, A::left;
|
|
print A::outfile, A::right;
|
|
return (T);
|
|
}, error_ev=<uninitialized>, config={
|
|
|
|
}]
|
|
Type
|
|
Input::EVENT_REMOVED
|
|
Left
|
|
[i=-43]
|
|
Right
|
|
[b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
============EVENT============
|
|
Description
|
|
[source=../input.log, reader=Input::READER_ASCII, mode=Input::REREAD, name=ssh, destination={
|
|
[-48] = [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
}, idx=A::Idx, val=A::Val, want_record=T, ev=line
|
|
{
|
|
print A::outfile, ============EVENT============;
|
|
print A::outfile, Description;
|
|
print A::outfile, A::description;
|
|
print A::outfile, Type;
|
|
print A::outfile, A::tpe;
|
|
print A::outfile, Left;
|
|
print A::outfile, A::left;
|
|
print A::outfile, Right;
|
|
print A::outfile, A::right;
|
|
}, pred=lambda_<15300389792509487762>
|
|
{
|
|
print A::outfile, ============PREDICATE============;
|
|
print A::outfile, A::typ;
|
|
print A::outfile, A::left;
|
|
print A::outfile, A::right;
|
|
return (T);
|
|
}, error_ev=<uninitialized>, config={
|
|
|
|
}]
|
|
Type
|
|
Input::EVENT_REMOVED
|
|
Left
|
|
[i=-45]
|
|
Right
|
|
[b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
============EVENT============
|
|
Description
|
|
[source=../input.log, reader=Input::READER_ASCII, mode=Input::REREAD, name=ssh, destination={
|
|
[-48] = [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
}, idx=A::Idx, val=A::Val, want_record=T, ev=line
|
|
{
|
|
print A::outfile, ============EVENT============;
|
|
print A::outfile, Description;
|
|
print A::outfile, A::description;
|
|
print A::outfile, Type;
|
|
print A::outfile, A::tpe;
|
|
print A::outfile, Left;
|
|
print A::outfile, A::left;
|
|
print A::outfile, Right;
|
|
print A::outfile, A::right;
|
|
}, pred=lambda_<15300389792509487762>
|
|
{
|
|
print A::outfile, ============PREDICATE============;
|
|
print A::outfile, A::typ;
|
|
print A::outfile, A::left;
|
|
print A::outfile, A::right;
|
|
return (T);
|
|
}, error_ev=<uninitialized>, config={
|
|
|
|
}]
|
|
Type
|
|
Input::EVENT_REMOVED
|
|
Left
|
|
[i=-46]
|
|
Right
|
|
[b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
============EVENT============
|
|
Description
|
|
[source=../input.log, reader=Input::READER_ASCII, mode=Input::REREAD, name=ssh, destination={
|
|
[-48] = [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
}, idx=A::Idx, val=A::Val, want_record=T, ev=line
|
|
{
|
|
print A::outfile, ============EVENT============;
|
|
print A::outfile, Description;
|
|
print A::outfile, A::description;
|
|
print A::outfile, Type;
|
|
print A::outfile, A::tpe;
|
|
print A::outfile, Left;
|
|
print A::outfile, A::left;
|
|
print A::outfile, Right;
|
|
print A::outfile, A::right;
|
|
}, pred=lambda_<15300389792509487762>
|
|
{
|
|
print A::outfile, ============PREDICATE============;
|
|
print A::outfile, A::typ;
|
|
print A::outfile, A::left;
|
|
print A::outfile, A::right;
|
|
return (T);
|
|
}, error_ev=<uninitialized>, config={
|
|
|
|
}]
|
|
Type
|
|
Input::EVENT_REMOVED
|
|
Left
|
|
[i=-44]
|
|
Right
|
|
[b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
============EVENT============
|
|
Description
|
|
[source=../input.log, reader=Input::READER_ASCII, mode=Input::REREAD, name=ssh, destination={
|
|
[-48] = [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
}, idx=A::Idx, val=A::Val, want_record=T, ev=line
|
|
{
|
|
print A::outfile, ============EVENT============;
|
|
print A::outfile, Description;
|
|
print A::outfile, A::description;
|
|
print A::outfile, Type;
|
|
print A::outfile, A::tpe;
|
|
print A::outfile, Left;
|
|
print A::outfile, A::left;
|
|
print A::outfile, Right;
|
|
print A::outfile, A::right;
|
|
}, pred=lambda_<15300389792509487762>
|
|
{
|
|
print A::outfile, ============PREDICATE============;
|
|
print A::outfile, A::typ;
|
|
print A::outfile, A::left;
|
|
print A::outfile, A::right;
|
|
return (T);
|
|
}, error_ev=<uninitialized>, config={
|
|
|
|
}]
|
|
Type
|
|
Input::EVENT_REMOVED
|
|
Left
|
|
[i=-47]
|
|
Right
|
|
[b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
==========SERVERS============
|
|
{
|
|
[-48] = [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
}
|
|
done
|