zeek/testing/btest/core/unknown-protocol-event.zeek
Jon Siwek 89af6f2004 Move UnknownProtocol options to init-bare.zeek
Otherwise the `unknown_protocol` event cannot be used independently
from `policy/mic/unknown-protocols.zeek`.
2020-11-11 12:58:38 -08:00

6 lines
241 B
Text

# @TEST-EXEC: zeek -b -r $TRACES/lldp.pcap %INPUT >out
# @TEST-EXEC: btest-diff out
event unknown_protocol(analyzer_name: string, protocol: count, first_bytes: string)
{ print analyzer_name, protocol, bytestring_to_hexstr(first_bytes); }