mirror of
https://github.com/zeek/zeek.git
synced 2025-10-03 23:28:20 +00:00
0e48fda6ff
Generally tried to make them more reliable and execute quicker. They all now load the listen script as a trick to make sure input sources are fully read, but also terminate() at appropriate times so that they don't take more time than needed. They're also all serialized with the 'comm' group so listening on a port doesn't interfere with the communication tests.
79 lines
1.6 KiB
Text
79 lines
1.6 KiB
Text
# (uses listen.bro just to ensure input sources are more reliably fully-read).
|
|
# @TEST-SERIALIZE: comm
|
|
#
|
|
# @TEST-EXEC: btest-bg-run bro bro -b %INPUT
|
|
# @TEST-EXEC: btest-bg-wait -k 5
|
|
# @TEST-EXEC: btest-diff out
|
|
#
|
|
# only difference from predicate.bro is, that this one uses a stream source.
|
|
# the reason is, that the code-paths are quite different, because then the
|
|
# ascii reader uses the put and not the sendevent interface
|
|
|
|
@TEST-START-FILE input.log
|
|
#separator \x09
|
|
#path ssh
|
|
#fields i b
|
|
#types int bool
|
|
1 T
|
|
2 T
|
|
3 F
|
|
4 F
|
|
5 F
|
|
6 F
|
|
7 T
|
|
@TEST-END-FILE
|
|
|
|
@load frameworks/communication/listen
|
|
|
|
global outfile: file;
|
|
|
|
redef InputAscii::empty_field = "EMPTY";
|
|
|
|
module A;
|
|
|
|
type Idx: record {
|
|
i: int;
|
|
};
|
|
|
|
type Val: record {
|
|
b: bool;
|
|
};
|
|
|
|
global servers: table[int] of Val = table();
|
|
global ct: int;
|
|
|
|
event line(description: Input::TableDescription, tpe: Input::Event, left: Idx, right: bool)
|
|
{
|
|
ct = ct + 1;
|
|
if ( ct < 3 )
|
|
return;
|
|
|
|
if ( 1 in servers )
|
|
print outfile, "VALID";
|
|
if ( 2 in servers )
|
|
print outfile, "VALID";
|
|
if ( !(3 in servers) )
|
|
print outfile, "VALID";
|
|
if ( !(4 in servers) )
|
|
print outfile, "VALID";
|
|
if ( !(5 in servers) )
|
|
print outfile, "VALID";
|
|
if ( !(6 in servers) )
|
|
print outfile, "VALID";
|
|
if ( 7 in servers )
|
|
print outfile, "VALID";
|
|
close(outfile);
|
|
terminate();
|
|
}
|
|
|
|
event bro_init()
|
|
{
|
|
outfile = open("../out");
|
|
ct = 0;
|
|
# first read in the old stuff into the table...
|
|
Input::add_table([$source="../input.log", $mode=Input::STREAM, $name="input", $idx=Idx, $val=Val, $destination=servers, $want_record=F, $ev=line,
|
|
$pred(typ: Input::Event, left: Idx, right: bool) = { return right; }
|
|
]);
|
|
Input::remove("input");
|
|
}
|
|
|