zeek/testing
Seth Hall d89ee3cee0 Change the meaning of some email fields.
We now extract email addresses in the fields that one would expect
to contain addresses.  This makes further downstream processing of
these fields easier like log analysis or using these fields in the
Intel framework.  The primary downside is that any other content
in these fields is no longer available such as full name and any
group information.  I believe the simplification of the content in
these fields is worth the change.

Added "cc" to the script that feeds information from SMTP into the
Intel framework.

A new script for email handling utility functions has been created
as a side effect of these changes.
2016-06-15 10:32:06 -04:00
..
btest Change the meaning of some email fields. 2016-06-15 10:32:06 -04:00
external Change one forgotten bro-ids.org to bro.org 2015-12-14 15:58:16 -08:00
scripts Adding usage guard to canonifier script. 2015-12-18 12:59:26 -08:00
.gitignore Test coverage integration for external tests and complete suite. 2012-01-12 11:58:13 -06:00
Makefile Add/invoke "distclean" for testing directories. 2014-12-01 10:43:41 -06:00
README Cleaning up some testing stuff. 2011-07-05 18:47:08 -07:00

This directory contains suites for testing for Bro's correct
operation:

    btest/
        An ever-growing set of small unit tests testing Bro's
        functionality.

    external/
        A framework for downloading additional test sets that run more
        complex Bro configuration on larger traces files. Due to their
        size, these are not included directly. See the README for more
        information. 

    scripts/
        Helpers scripts used by some tests.