zeek/testing/scripts
Jon Siwek 3642ecc73e FileAnalysis: misc. tweaks/fixes.
- Add a timeout flag to file_analysis.log so it's easy to tell what
  has had at least one timeout trigger happen.

- Fix ftp-data service tag not being set for reused connections.

- Fix HTTP::Incorrect_File_Type because mime types returned by FAF have
  the charset still in them, but the HTTP::mime_types_extensions table
  does not and it requires an exact string match. (still ugly)

- Add TRIGGER_NEW_CONN to track files going over multiple connections.

- Add an initial file/mime type guess for non-linear file transfers.

- Fix a case where file/mime type detection would never be attempted
  if the start of the file was a content gap.

- Improve mime type tracking of HTTP byte-range/partial-content,
  even if the requests are pipelined or over multiple connections.

- I changed the modbus.events test because having the baseline output
  be 80+ MB is nuts and it was sensitive to connection record redefs.
2013-03-28 16:59:29 -05:00
..
coverage-calc Fix sorting of lines in Brofiler coverage.log 2012-01-30 17:35:19 -06:00
diff-canon-notice-policy Adding notice_policy.log canonification for external tests. 2012-04-04 17:46:13 -07:00
diff-canonifier FileAnalysis: unit test tweaks (portability, etc.) 2013-03-27 14:51:23 -05:00
diff-canonifier-external Adding notice_policy.log canonification for external tests. 2012-04-04 17:46:13 -07:00
diff-remove-abspath Cleaning up some testing stuff. 2011-07-05 18:47:08 -07:00
diff-remove-mime-types FileAnalysis: misc. tweaks/fixes. 2013-03-28 16:59:29 -05:00
diff-remove-timestamps Changing the start/end markers in logs to open/close now reflecting 2012-07-27 12:15:21 -07:00
diff-remove-uids Excluding log fields of name mime_type for comparision. 2011-09-09 11:41:03 -07:00
diff-remove-x509-names Enable GridFTP detection by default. Track/log SSL client certs. 2012-10-08 11:38:29 -05:00
diff-sort Sorting all output for the external tests. 2012-02-29 17:09:38 -08:00
file-analysis-test.bro FileAnalysis: unit test tweaks (portability, etc.) 2013-03-27 14:51:23 -05:00
has-writer Working on DataSeries support. 2012-04-09 17:46:56 -07:00