zeek/testing/btest/scripts/base/protocols/ssh/basic.test
Robin Sommer 789cb376fd GH-239: Rename bro to zeek, bro-config to zeek-config, and bro-path-dev to zeek-path-dev.
This also installs symlinks from "zeek" and "bro-config" to a wrapper
script that prints a deprecation warning.

The btests pass, but this is still WIP. broctl renaming is still
missing.

#239
2019-05-01 21:43:45 +00:00

11 lines
338 B
Text

# This tests some SSH connections and the output log.
# @TEST-EXEC: zeek -r $TRACES/ssh/ssh.trace %INPUT
# @TEST-EXEC: btest-diff ssh.log
# @TEST-EXEC: btest-diff conn.log
# @TEST-EXEC: btest-diff .stdout
event ssh_auth_result(c: connection, result: bool, auth_attempts: count)
{
print "auth_result", c$uid, result, auth_attempts;
}