zeek/testing/btest/scripts/base/frameworks/analyzer/disable-analyzer.bro

14 lines
338 B
Text

#
# @TEST-EXEC: bro -r ${TRACES}/var-services-std-ports.trace %INPUT
# @TEST-EXEC: cat conn.log | bro-cut service | grep -vq dns
# @TEST-EXEC: cat conn.log | bro-cut service | grep -vq ssh
#
redef Analyzer::disabled_analyzers += { Analyzer::ANALYZER_SSH };
event zeek_init()
{
Analyzer::disable_analyzer(Analyzer::ANALYZER_DNS);
}