zeek/testing/btest/zeek-aux/zeek-cut/bad-logs.test
Tim Wojtulewicz d7ba381d12 Adapt zeek-aux btests to zeek structure
This updates Baselines, changes paths to scripts and log files, adds TEST-DOC
annotations, and various other cleanups that make the zeek-aux tests more like
the rest of the zeek tests.
2025-09-11 13:00:53 -07:00

30 lines
1.3 KiB
Text

# @TEST-DOC: Test zeek-cut with invalid log files.
#
# The "#separator" log header line is missing.
# @TEST-EXEC: grep -v '^#separator' ${ZEEK_AUX_LOGS}/conn.log | zeek-cut uid proto > missing-sep-header
# @TEST-EXEC: btest-diff missing-sep-header
# The "#fields" log header line is missing (show header).
# @TEST-EXEC-FAIL: grep -v '^#fields' ${ZEEK_AUX_LOGS}/conn.log | zeek-cut -C 2> missing-fields-header
# @TEST-EXEC: btest-diff missing-fields-header
# All log header lines are missing (show header).
# @TEST-EXEC: grep -v '^#' ${ZEEK_AUX_LOGS}/conn.log | zeek-cut -c > no-header-show
# @TEST-EXEC: btest-diff no-header-show
# All log header lines are missing (select column to show).
# @TEST-EXEC: grep -v '^#' ${ZEEK_AUX_LOGS}/conn.log | zeek-cut uid > no-header-column
# @TEST-EXEC: btest-diff no-header-column
# All log header lines are missing (select column to not show).
# @TEST-EXEC: grep -v '^#' ${ZEEK_AUX_LOGS}/conn.log | zeek-cut -n uid > no-header-not-column
# @TEST-EXEC: btest-diff no-header-not-column
# Separator is missing
# @TEST-EXEC-FAIL: cat ${ZEEK_AUX_LOGS}/missing-separator.log | zeek-cut 2> missing-separator
# @TEST-EXEC: btest-diff missing-separator
# Separator is \x00
# @TEST-EXEC-FAIL: cat ${ZEEK_AUX_LOGS}/null-separator.log | zeek-cut 2> null-separator
# @TEST-EXEC: btest-diff null-separator