mirror of
https://github.com/zeek/zeek.git
synced 2025-10-01 22:28:20 +00:00
d7ba381d12
This updates Baselines, changes paths to scripts and log files, adds TEST-DOC annotations, and various other cleanups that make the zeek-aux tests more like the rest of the zeek tests.
38 lines
1.8 KiB
Text
38 lines
1.8 KiB
Text
# @TEST-DOC: Test zeek-cut with the -n option.
|
|
#
|
|
|
|
# Show all columns but one.
|
|
# @TEST-EXEC: cat ${ZEEK_AUX_LOGS}/test.log | zeek-cut -n uid > not-one
|
|
# @TEST-EXEC: TEST_DIFF_CANONIFIER= btest-diff not-one
|
|
|
|
# Show all columns but two (and specify them in swapped order).
|
|
# @TEST-EXEC: cat ${ZEEK_AUX_LOGS}/test.log | zeek-cut -n id.resp_h uid > not-two-swapped
|
|
# @TEST-EXEC: TEST_DIFF_CANONIFIER= btest-diff not-two-swapped
|
|
|
|
# Show all columns but one, but specify the same column twice.
|
|
# @TEST-EXEC: cat ${ZEEK_AUX_LOGS}/test.log | zeek-cut -n uid uid > not-one-twice
|
|
# @TEST-EXEC: TEST_DIFF_CANONIFIER= btest-diff not-one-twice
|
|
|
|
# Column order changes between two log files.
|
|
# @TEST-EXEC: cat ${ZEEK_AUX_LOGS}/conn.log ${ZEEK_AUX_LOGS}/conntimelast.log | zeek-cut -n ts uid > different-col-order
|
|
# @TEST-EXEC: TEST_DIFF_CANONIFIER= btest-diff different-col-order
|
|
|
|
# Don't show any columns.
|
|
# @TEST-EXEC: cat ${ZEEK_AUX_LOGS}/test.log | zeek-cut -n ts uid id.orig_h id.orig_p id.resp_h > not-all
|
|
# @TEST-EXEC: TEST_DIFF_CANONIFIER= btest-diff not-all
|
|
|
|
# Don't show the only column in the log.
|
|
# @TEST-EXEC: cat ${ZEEK_AUX_LOGS}/onecolumn.log | zeek-cut -n id.orig_h > not-only
|
|
# @TEST-EXEC: TEST_DIFF_CANONIFIER= btest-diff not-only
|
|
|
|
# Don't exclude any columns.
|
|
# @TEST-EXEC: cat ${ZEEK_AUX_LOGS}/test.log | zeek-cut -n > not-none
|
|
# @TEST-EXEC: TEST_DIFF_CANONIFIER= btest-diff not-none
|
|
|
|
# Show all columns but one, and also specify a nonexistent column name.
|
|
# @TEST-EXEC: cat ${ZEEK_AUX_LOGS}/test.log | zeek-cut -n uid proto > not-one-nonexistent
|
|
# @TEST-EXEC: TEST_DIFF_CANONIFIER= btest-diff not-one-nonexistent
|
|
|
|
# Show that the -n option also affects the header.
|
|
# @TEST-EXEC: cat ${ZEEK_AUX_LOGS}/test.log | zeek-cut -c -n uid > not-one-show-header
|
|
# @TEST-EXEC: TEST_DIFF_CANONIFIER= btest-diff not-one-show-header
|