mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 14:48:21 +00:00
04a1ead978
As initial examples, this branch ports the Syslog and Finger analyzers over. We leave the old analyzers in place for now and activate them iff we compile without any Spicy. Needs `zeek-spicy-infra` branches in `spicy/`, `spicy-plugin/`, `CMake/`, and `zeek/zeek-testing-private`. Note that the analyzer events remain associated with the Spicy plugin for now: that's where they will show up with `-NN`, and also inside the Zeekygen documentation. We switch CMake over to linking the runtime library into the plugin, vs. at the top-level through object libraries.
30 lines
754 B
Bash
Executable file
30 lines
754 B
Bash
Executable file
#! /usr/bin/env bash
|
|
#
|
|
# Default canonifier used with the trace-based tests in testing/external/*.
|
|
|
|
if [ $# != 1 ]; then
|
|
echo "usage: $(basename $0) <filename>"
|
|
exit 1
|
|
fi
|
|
|
|
filename=$(basename $1)
|
|
|
|
addl="cat"
|
|
|
|
if [ "$filename" == "capture_loss.log" ]; then
|
|
addl="$(dirname $0)/diff-remove-fractions"
|
|
fi
|
|
|
|
if [ "$filename" == "ssh.log" ]; then
|
|
addl="$(dirname $0)/diff-remove-fields remote_location"
|
|
fi
|
|
|
|
$(dirname $0)/diff-remove-timestamps |
|
|
$(dirname $0)/diff-remove-uids |
|
|
$(dirname $0)/diff-remove-file-ids |
|
|
$(dirname $0)/diff-remove-x509-names |
|
|
$(dirname $0)/diff-sort-conn-service |
|
|
$(dirname $0)/diff-sort-set-elements |
|
|
$(dirname $0)/diff-remove-spicy-abspath |
|
|
$(dirname $0)/diff-sort |
|
|
eval $addl
|