mirror of
https://github.com/zeek/zeek.git
synced 2025-10-04 15:48:19 +00:00
2ad609cbbb
This started with reverting commit 52cd02173d
and then rewriting it to be per handler rather than handler identifier
and adding support for hooks as well as adding implicit module groups.
50 lines
733 B
Text
50 lines
733 B
Text
# @TEST-DOC: Enabling/disabling groups at runtime driven by ticks.
|
|
# @TEST-EXEC: zeek %INPUT > output
|
|
# @TEST-EXEC: btest-diff output
|
|
|
|
event e1(c: count) {
|
|
print c, "e1-no-group";
|
|
}
|
|
event e2(c: count) {
|
|
print c, "e2-no-group";
|
|
}
|
|
|
|
event e1(c: count) &group="group1" {
|
|
print c, "e1-group1";
|
|
}
|
|
event e2(c: count) &group="group1" {
|
|
print c, "e2-group1";
|
|
}
|
|
|
|
event e3(c: count) &group="group2" {
|
|
print c, "e3-group2";
|
|
}
|
|
|
|
event tick(c: count)
|
|
{
|
|
event e1(c);
|
|
event e2(c);
|
|
event e3(c);
|
|
|
|
if ( c == 4 )
|
|
{
|
|
print "disable group1";
|
|
disable_event_group("group1");
|
|
}
|
|
|
|
if ( c == 1 )
|
|
{
|
|
print "enable group1";
|
|
enable_event_group("group1");
|
|
}
|
|
|
|
--c;
|
|
if ( c > 0 )
|
|
event tick(c);
|
|
|
|
}
|
|
|
|
event zeek_init()
|
|
{
|
|
event tick(5);
|
|
}
|