mirror of
https://github.com/zeek/zeek.git
synced 2025-10-11 11:08:20 +00:00
e0fb9eb2b2
This new flavor of function behaves like a "synchronous event". See documentation for more details on usage.
61 lines
1.9 KiB
Text
61 lines
1.9 KiB
Text
# @TEST-SERIALIZE: comm
|
|
#
|
|
# @TEST-EXEC: btest-bg-run sender bro -Bthreading,logging,comm -C -r $TRACES/web.trace --pseudo-realtime ../sender.bro
|
|
# @TEST-EXEC: btest-bg-run receiver bro -Bthreading,logging,comm ../receiver.bro
|
|
# @TEST-EXEC: btest-bg-wait 20
|
|
#
|
|
# @TEST-EXEC: btest-diff sender/http.log
|
|
# @TEST-EXEC: btest-diff receiver/http.log
|
|
#
|
|
# @TEST-EXEC: cat sender/http.log | $SCRIPTS/diff-remove-timestamps >sender.http.log
|
|
# @TEST-EXEC: cat receiver/http.log | $SCRIPTS/diff-remove-timestamps >receiver.http.log
|
|
# @TEST-EXEC: cmp sender.http.log receiver.http.log
|
|
#
|
|
# @TEST-EXEC: bro -x sender/events.bst | sed 's/^event \[[-0-9.]*\] //g' | grep '^http_' | grep -v http_stats | sed 's/(.*$//g' | $SCRIPTS/diff-remove-timestamps >events.snd.log
|
|
# @TEST-EXEC: bro -x receiver/events.bst | sed 's/^event \[[-0-9.]*\] //g' | grep '^http_' | grep -v http_stats | sed 's/(.*$//g' | $SCRIPTS/diff-remove-timestamps >events.rec.log
|
|
# @TEST-EXEC: btest-diff events.rec.log
|
|
# @TEST-EXEC: btest-diff events.snd.log
|
|
# @TEST-EXEC: cmp events.rec.log events.snd.log
|
|
#
|
|
# We don't compare the transmitted event paramerters anymore. With the dynamic
|
|
# state in there since 1.6, they don't match reliably.
|
|
|
|
@TEST-START-FILE sender.bro
|
|
|
|
@load frameworks/communication/listen
|
|
|
|
event bro_init()
|
|
{
|
|
capture_events("events.bst");
|
|
}
|
|
|
|
redef peer_description = "events-send";
|
|
|
|
# Make sure the HTTP connection really gets out.
|
|
# (We still miss one final connection event because we shutdown before
|
|
# it gets propagated but that's ok.)
|
|
redef tcp_close_delay = 0secs;
|
|
|
|
@TEST-END-FILE
|
|
|
|
#############
|
|
|
|
@TEST-START-FILE receiver.bro
|
|
|
|
event bro_init()
|
|
{
|
|
capture_events("events.bst");
|
|
}
|
|
|
|
redef peer_description = "events-rcv";
|
|
|
|
redef Communication::nodes += {
|
|
["foo"] = [$host = 127.0.0.1, $events = /http_.*|signature_match/, $connect=T, $retry=1sec]
|
|
};
|
|
|
|
event remote_connection_closed(p: event_peer)
|
|
{
|
|
terminate();
|
|
}
|
|
|
|
@TEST-END-FILE
|