zeek/testing/btest/core/skip_analyzer.zeek
2020-09-23 11:13:29 -07:00

14 lines
447 B
Text

# @TEST-EXEC: zeek -b -C -r $TRACES/tunnels/gre-sample.pcap %INPUT
# @TEST-EXEC: btest-diff conn.log
# @TEST-EXEC: test ! -e tunnel.log
# Test the skip analyzer by skipping everything outside the GRE tunnel.
@load base/protocols/conn
@load base/frameworks/tunnels
redef PacketAnalyzer::ROOT::dispatch_map += {
[1] = PacketAnalyzer::DispatchEntry($analyzer=PacketAnalyzer::ANALYZER_SKIP)
};
redef PacketAnalyzer::SKIP::skip_bytes: count = 38;