zeek/testing/btest/core/analyzer-confirmation-violation-info-ftp.zeek

13 lines
524 B
Text

# @TEST-DOC: The FTP analyzer has a violation and passes informational data with it.
# @TEST-EXEC: zeek -r $TRACES/ftp/ipv6-violation.trace %INPUT
# @TEST-EXEC: btest-diff .stdout
event analyzer_confirmation_info(tag: AllAnalyzers::Tag, info: AnalyzerConfirmationInfo)
{
print "analyzer_confirmation_info", tag, info$c$id, info$aid;
}
event analyzer_violation_info(tag: AllAnalyzers::Tag, info: AnalyzerViolationInfo)
{
print "analyzer_violation_info", tag, info$reason, info$c$id, info$aid, fmt("%s", info$data);
}