mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 14:48:21 +00:00

* send end_of_data event for all kind of streams * send process_finished event containing exit code of child process for executed programs * move raw-tests to separate directory * expose name of input stream to readers * better handling of some error cases in raw reader * new force_kill option for raw reader which SIGKILLs progesses on exit The ordering of events how they arrive in the main loop is a bit peculiar at the moment. The process_finished event arrives in scriptland before all of the other events, even though it should be sent last. I have not yet fully figured that out.
136 lines
2.6 KiB
Text
136 lines
2.6 KiB
Text
[source=../input.log, reader=Input::READER_RAW, mode=Input::STREAM, name=input, fields=<no value description>, want_record=F, ev=line
|
|
{
|
|
print outfile, A::description;
|
|
print outfile, A::tpe;
|
|
print outfile, A::s;
|
|
try = try + 1;
|
|
if (8 == try)
|
|
{
|
|
close(outfile);
|
|
terminate();
|
|
}
|
|
|
|
}, config={
|
|
|
|
}]
|
|
Input::EVENT_NEW
|
|
sdfkh:KH;fdkncv;ISEUp34:Fkdj;YVpIODhfDF
|
|
[source=../input.log, reader=Input::READER_RAW, mode=Input::STREAM, name=input, fields=<no value description>, want_record=F, ev=line
|
|
{
|
|
print outfile, A::description;
|
|
print outfile, A::tpe;
|
|
print outfile, A::s;
|
|
try = try + 1;
|
|
if (8 == try)
|
|
{
|
|
close(outfile);
|
|
terminate();
|
|
}
|
|
|
|
}, config={
|
|
|
|
}]
|
|
Input::EVENT_NEW
|
|
DSF"DFKJ"SDFKLh304yrsdkfj@#(*U$34jfDJup3UF
|
|
[source=../input.log, reader=Input::READER_RAW, mode=Input::STREAM, name=input, fields=<no value description>, want_record=F, ev=line
|
|
{
|
|
print outfile, A::description;
|
|
print outfile, A::tpe;
|
|
print outfile, A::s;
|
|
try = try + 1;
|
|
if (8 == try)
|
|
{
|
|
close(outfile);
|
|
terminate();
|
|
}
|
|
|
|
}, config={
|
|
|
|
}]
|
|
Input::EVENT_NEW
|
|
q3r3057fdf
|
|
[source=../input.log, reader=Input::READER_RAW, mode=Input::STREAM, name=input, fields=<no value description>, want_record=F, ev=line
|
|
{
|
|
print outfile, A::description;
|
|
print outfile, A::tpe;
|
|
print outfile, A::s;
|
|
try = try + 1;
|
|
if (8 == try)
|
|
{
|
|
close(outfile);
|
|
terminate();
|
|
}
|
|
|
|
}, config={
|
|
|
|
}]
|
|
Input::EVENT_NEW
|
|
sdfs\d
|
|
[source=../input.log, reader=Input::READER_RAW, mode=Input::STREAM, name=input, fields=<no value description>, want_record=F, ev=line
|
|
{
|
|
print outfile, A::description;
|
|
print outfile, A::tpe;
|
|
print outfile, A::s;
|
|
try = try + 1;
|
|
if (8 == try)
|
|
{
|
|
close(outfile);
|
|
terminate();
|
|
}
|
|
|
|
}, config={
|
|
|
|
}]
|
|
Input::EVENT_NEW
|
|
|
|
[source=../input.log, reader=Input::READER_RAW, mode=Input::STREAM, name=input, fields=<no value description>, want_record=F, ev=line
|
|
{
|
|
print outfile, A::description;
|
|
print outfile, A::tpe;
|
|
print outfile, A::s;
|
|
try = try + 1;
|
|
if (8 == try)
|
|
{
|
|
close(outfile);
|
|
terminate();
|
|
}
|
|
|
|
}, config={
|
|
|
|
}]
|
|
Input::EVENT_NEW
|
|
dfsdf
|
|
[source=../input.log, reader=Input::READER_RAW, mode=Input::STREAM, name=input, fields=<no value description>, want_record=F, ev=line
|
|
{
|
|
print outfile, A::description;
|
|
print outfile, A::tpe;
|
|
print outfile, A::s;
|
|
try = try + 1;
|
|
if (8 == try)
|
|
{
|
|
close(outfile);
|
|
terminate();
|
|
}
|
|
|
|
}, config={
|
|
|
|
}]
|
|
Input::EVENT_NEW
|
|
sdf
|
|
[source=../input.log, reader=Input::READER_RAW, mode=Input::STREAM, name=input, fields=<no value description>, want_record=F, ev=line
|
|
{
|
|
print outfile, A::description;
|
|
print outfile, A::tpe;
|
|
print outfile, A::s;
|
|
try = try + 1;
|
|
if (8 == try)
|
|
{
|
|
close(outfile);
|
|
terminate();
|
|
}
|
|
|
|
}, config={
|
|
|
|
}]
|
|
Input::EVENT_NEW
|
|
3rw43wRRERLlL#RWERERERE.
|