mirror of
https://github.com/zeek/zeek.git
synced 2025-10-04 07:38:19 +00:00
18 lines
825 B
Text
18 lines
825 B
Text
# @TEST-EXEC: cat %INPUT >output && btest-diff output
|
|
|
|
mimestats.bro
|
|
|
|
SumStats::create([$name="mime-metrics",
|
|
$epoch=break_interval,
|
|
$reducers=set(r1, r2),
|
|
$epoch_result(ts: time, key: SumStats::Key, result: SumStats::Result) =
|
|
{
|
|
local l: Info;
|
|
l$ts = network_time();
|
|
l$ts_delta = break_interval;
|
|
l$mtype = key$str;
|
|
l$bytes = double_to_count(floor(result["mime.bytes"]$sum));
|
|
l$hits = result["mime.hits"]$num;
|
|
l$uniq_hosts = result["mime.hits"]$unique;
|
|
Log::write(MimeMetrics::LOG, l);
|
|
}]);
|