zeek/testing/btest/zeek-aux/zeek-cut/ofs.test
Tim Wojtulewicz d7ba381d12 Adapt zeek-aux btests to zeek structure
This updates Baselines, changes paths to scripts and log files, adds TEST-DOC
annotations, and various other cleanups that make the zeek-aux tests more like
the rest of the zeek tests.
2025-09-11 13:00:53 -07:00

18 lines
903 B
Text

# @TEST-DOC: Test zeek-cut with -F option.
#
# Use a different field separator on two columns.
# @TEST-EXEC: cat ${ZEEK_AUX_LOGS}/conn.log | zeek-cut -F , uid ts > some-columns
# @TEST-EXEC: TEST_DIFF_CANONIFIER= btest-diff some-columns
# Show that -F option is used even when field separator in log files changes.
# @TEST-EXEC: cat ${ZEEK_AUX_LOGS}/conn.log ${ZEEK_AUX_LOGS}/conncomma.log | zeek-cut -F : proto uid > nondefault-separator
# @TEST-EXEC: TEST_DIFF_CANONIFIER= btest-diff nondefault-separator
# Field separator is not relevant because log has only one column.
# @TEST-EXEC: cat ${ZEEK_AUX_LOGS}/onecolumn.log | zeek-cut -F , > only-column
# @TEST-EXEC: TEST_DIFF_CANONIFIER= btest-diff only-column
# Show header and use a different field separator.
# @TEST-EXEC: cat ${ZEEK_AUX_LOGS}/conn.log | zeek-cut -F . -c > show-header
# @TEST-EXEC: TEST_DIFF_CANONIFIER= btest-diff show-header