mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 14:48:21 +00:00
15 lines
452 B
Text
15 lines
452 B
Text
# @TEST-EXEC: zeek -b -C -r $TRACES/tunnels/gre-sample.pcap %INPUT
|
|
# @TEST-EXEC: btest-diff conn.log
|
|
# @TEST-EXEC: test ! -e tunnel.log
|
|
|
|
# Test the skip analyzer by skipping everything outside the GRE tunnel.
|
|
|
|
@load base/protocols/conn
|
|
@load base/frameworks/tunnels
|
|
|
|
redef PacketAnalyzer::SKIP::skip_bytes: count = 38;
|
|
|
|
event zeek_init()
|
|
{
|
|
PacketAnalyzer::register_packet_analyzer(PacketAnalyzer::ANALYZER_ROOT, 1, PacketAnalyzer::ANALYZER_SKIP);
|
|
}
|