mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 14:48:21 +00:00
7967a5b0aa
- Use `-b` most everywhere, it will save time. - Start some intel tests upon the input file being fully read instead of at an arbitrary time. - Improve termination condition for some sumstats/cluster tests. - Filter uninteresting output from some supervisor tests. - Test for `notice_policy.log` is no longer needed.
32 lines
733 B
Text
32 lines
733 B
Text
# @TEST-EXEC: zeek -b %INPUT 2>&1 | grep -v termination | sort | uniq | wc -l | awk '{print $1}' >output
|
|
# @TEST-EXEC: btest-diff output
|
|
|
|
# In old version, the event would keep triggering endlessely, with the network
|
|
# time not moving forward and Zeek not terminating.
|
|
#
|
|
# Note that the output will not be 20 because we still execute two rounds
|
|
# of events every time we drain and also at startup several (currently 3)
|
|
# rounds of events drain with the same network_time.
|
|
|
|
redef exit_only_after_terminate=T;
|
|
|
|
global c = 0;
|
|
|
|
event test()
|
|
{
|
|
c += 1;
|
|
|
|
if ( c == 20 )
|
|
{
|
|
terminate();
|
|
return;
|
|
}
|
|
|
|
print network_time();
|
|
event test();
|
|
}
|
|
|
|
event zeek_init()
|
|
{
|
|
event test();
|
|
}
|