mirror of
https://github.com/zeek/zeek.git
synced 2025-10-07 17:18:20 +00:00
23f04835c6
These functions are now deprecated in favor of alternative versions that return a vector of strings rather than a table of strings. Deprecated functions: - split: use split_string instead. - split1: use split_string1 instead. - split_all: use split_string_all instead. - split_n: use split_string_n instead. - cat_string_array: see join_string_vec instead. - cat_string_array_n: see join_string_vec instead. - join_string_array: see join_string_vec instead. - sort_string_array: use sort instead instead. - find_ip_addresses: use extract_ip_addresses instead. Changed functions: - has_valid_octets: uses a string_vec parameter instead of string_array. Addresses BIT-924, BIT-757.
36 lines
951 B
Text
36 lines
951 B
Text
#
|
|
# @TEST-EXEC: bro -b %INPUT >out
|
|
# @TEST-EXEC: btest-diff out
|
|
|
|
function print_string_vector(v: string_vec)
|
|
{
|
|
for ( i in v )
|
|
print v[i];
|
|
}
|
|
|
|
event bro_init()
|
|
{
|
|
local a = "this is a test";
|
|
local pat = /hi|es/;
|
|
local idx = vector( 3, 6, 13);
|
|
|
|
print_string_vector(split_string(a, pat));
|
|
print "---------------------";
|
|
print_string_vector(split_string1(a, pat));
|
|
print "---------------------";
|
|
print_string_vector(split_string_all(a, pat));
|
|
print "---------------------";
|
|
print_string_vector(split_string_n(a, pat, F, 1));
|
|
print "---------------------";
|
|
print_string_vector(split_string_n(a, pat, T, 1));
|
|
print "---------------------";
|
|
print str_split(a, idx);
|
|
print "---------------------";
|
|
a = "X-Mailer: Testing Test (http://www.example.com)";
|
|
pat = /:[[:blank:]]*/;
|
|
print_string_vector(split_string1(a, pat));
|
|
print "---------------------";
|
|
a = "A = B = C = D";
|
|
pat = /=/;
|
|
print_string_vector(split_string_all(a, pat));
|
|
}
|