mirror of
https://github.com/zeek/zeek.git
synced 2025-10-01 22:28:20 +00:00
d7ba381d12
This updates Baselines, changes paths to scripts and log files, adds TEST-DOC annotations, and various other cleanups that make the zeek-aux tests more like the rest of the zeek tests.
34 lines
1.6 KiB
Text
34 lines
1.6 KiB
Text
# @TEST-DOC: Test zeek-cut with column names, but no other options.
|
|
#
|
|
|
|
# Select one column.
|
|
# @TEST-EXEC: cat ${ZEEK_AUX_LOGS}/conn.log | zeek-cut uid > one
|
|
# @TEST-EXEC: TEST_DIFF_CANONIFIER= btest-diff one
|
|
|
|
# Log file has only one column.
|
|
# @TEST-EXEC: cat ${ZEEK_AUX_LOGS}/onecolumn.log | zeek-cut id.orig_h > only
|
|
# @TEST-EXEC: TEST_DIFF_CANONIFIER= btest-diff only
|
|
|
|
# Swap the order of two columns.
|
|
# @TEST-EXEC: cat ${ZEEK_AUX_LOGS}/conn.log | zeek-cut proto uid > swap-order
|
|
# @TEST-EXEC: TEST_DIFF_CANONIFIER= btest-diff swap-order
|
|
|
|
# Specify all columns in the log file.
|
|
# @TEST-EXEC: cat ${ZEEK_AUX_LOGS}/test.log | zeek-cut ts uid id.orig_h id.orig_p id.resp_h > all
|
|
# @TEST-EXEC: TEST_DIFF_CANONIFIER= btest-diff all
|
|
|
|
# Log files use different field separators.
|
|
# @TEST-EXEC: cat ${ZEEK_AUX_LOGS}/conn.log ${ZEEK_AUX_LOGS}/conncomma.log | zeek-cut proto uid > nondefault-separator
|
|
# @TEST-EXEC: TEST_DIFF_CANONIFIER= btest-diff nondefault-separator
|
|
|
|
# Column order changes between two log files.
|
|
# @TEST-EXEC: cat ${ZEEK_AUX_LOGS}/conn.log ${ZEEK_AUX_LOGS}/conntimelast.log | zeek-cut ts uid > different-col-order
|
|
# @TEST-EXEC: TEST_DIFF_CANONIFIER= btest-diff different-col-order
|
|
|
|
# Specify a column name that exists only in the first log file.
|
|
# @TEST-EXEC: cat ${ZEEK_AUX_LOGS}/conn.log ${ZEEK_AUX_LOGS}/test.log | zeek-cut uid proto > one-nonexistent-1
|
|
# @TEST-EXEC: TEST_DIFF_CANONIFIER= btest-diff one-nonexistent-1
|
|
|
|
# Specify a column name that exists only in the second log file.
|
|
# @TEST-EXEC: cat ${ZEEK_AUX_LOGS}/test.log ${ZEEK_AUX_LOGS}/conn.log | zeek-cut uid proto > one-nonexistent-2
|
|
# @TEST-EXEC: TEST_DIFF_CANONIFIER= btest-diff one-nonexistent-2
|