mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 14:48:21 +00:00
0c875220e9
In the past, we used a default canonifier, which removes everything that looks like a timestamp from log files. The goal of this is to prevent logs from changing, e.g., due to local system times ending up in log files. This, however, also has the side-effect of removing information that is parsed from protocols which probably should be part of our tests. There is at least one test (1999 certificates) where the entire test output was essentially removed by the canonifier. GH-4521 was similarly masked by this. This commit changes the default canonifier, so that only the first timestamp in a line is removed. This should skip timestamps that are likely to change while keeping timestamps that are parsed from protocol information. A pass has been made over the tests, with some additional adjustments for cases which require the old canonifier. There are some cases in which we probably could go further and not remove timestamps at all - that, however, seems like a follow-up project.
21 lines
2.2 KiB
Text
21 lines
2.2 KiB
Text
### BTest baseline data generated by btest-diff. Do not edit. Use "btest -U/-u" to update. Requires BTest >= 0.63.
|
|
#separator \x09
|
|
#set_separator ,
|
|
#empty_field (empty)
|
|
#unset_field -
|
|
#path kerberos
|
|
#open XXXX-XX-XX-XX-XX-XX
|
|
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p request_type client service success error_msg from till cipher forwardable renewable client_cert_subject client_cert_fuid server_cert_subject server_cert_fuid
|
|
#types time string addr port addr port string string string bool string time time string bool bool string string string string
|
|
XXXXXXXXXX.XXXXXX ClEkJM2Vm5giqnMf4h 172.16.0.211 49812 172.16.0.100 88 AS administrator/TEST.LOCAL krbtgt/TEST.LOCAL F KDC_ERR_PREAUTH_REQUIRED - 2136422885.000000 - T T - - - -
|
|
XXXXXXXXXX.XXXXXX C4J4Th3PJpwUYZZ6gc 172.16.0.211 49813 172.16.0.100 88 AS administrator/TEST.LOCAL krbtgt/TEST.LOCAL T - - 2136422885.000000 aes256-cts-hmac-sha1-96 T T - - - -
|
|
XXXXXXXXXX.XXXXXX CtPZjS20MLrsMUOJi2 172.16.0.211 49814 172.16.0.100 88 TGS Administrator/TEST.LOCAL cifs/win7.test.local T - - 2136422885.000000 aes256-cts-hmac-sha1-96 T T - - - -
|
|
XXXXXXXXXX.XXXXXX CHhAvVGS1DHFjwGM9 172.16.0.211 49811 172.16.0.5 445 - - - - - - - - - - - - - -
|
|
XXXXXXXXXX.XXXXXX CUM0KZ3MLUfNB0cl11 172.16.0.211 49815 172.16.0.100 445 - - - - - - - - - - - - - -
|
|
XXXXXXXXXX.XXXXXX CP5puj4I8PtEU4qzYg 172.16.0.211 49822 172.16.0.100 88 TGS DESKTOP-RBDMVVA$/TEST.LOCAL cifs/WIN-R5NF6DMLDVH T - - 2136422885.000000 aes256-cts-hmac-sha1-96 T T - - - -
|
|
XXXXXXXXXX.XXXXXX CmES5u32sYpV7JYN 172.16.0.211 49821 172.16.0.100 445 - - - - - - - - - - - - - -
|
|
XXXXXXXXXX.XXXXXX C3eiCBGOLw3VtHfOj 172.16.0.211 49828 172.16.0.100 88 AS administrator/TEST.LOCAL krbtgt/TEST.LOCAL F KDC_ERR_PREAUTH_REQUIRED - 2136422885.000000 - T T - - - -
|
|
XXXXXXXXXX.XXXXXX CwjjYJ2WqgTbAqiHl6 172.16.0.211 49829 172.16.0.100 88 AS administrator/TEST.LOCAL krbtgt/TEST.LOCAL T - - 2136422885.000000 aes256-cts-hmac-sha1-96 T T - - - -
|
|
XXXXXXXXXX.XXXXXX C0LAHyvtKSQHyJxIl 172.16.0.211 49830 172.16.0.100 88 TGS Administrator/TEST.LOCAL cifs/win7.test.local T - - 2136422885.000000 aes256-cts-hmac-sha1-96 T T - - - -
|
|
XXXXXXXXXX.XXXXXX C37jN32gN3y3AZzyf6 172.16.0.211 49827 172.16.0.5 445 - - - - - - - - - - - - - -
|
|
#close XXXX-XX-XX-XX-XX-XX
|