mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 06:38:20 +00:00

Otherwise the `unknown_protocol` event cannot be used independently from `policy/mic/unknown-protocols.zeek`.
6 lines
241 B
Text
6 lines
241 B
Text
# @TEST-EXEC: zeek -b -r $TRACES/lldp.pcap %INPUT >out
|
|
# @TEST-EXEC: btest-diff out
|
|
|
|
event unknown_protocol(analyzer_name: string, protocol: count, first_bytes: string)
|
|
{ print analyzer_name, protocol, bytestring_to_hexstr(first_bytes); }
|
|
|