mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 06:38:20 +00:00
136a9baa42
On FreeBSD, this test showed two problems: (1) reordering problems based on writing the predicate, event, and end-of-data updates into a single file, (2) a race condition based on printing the entirety of the table description argument in update events. The description contains the destination table, and its content at the time an update event gets processed isn't deterministic: depending on the number of updates the reader thread has sent, the table will contain a varying number of entries.
317 lines
5.8 KiB
Text
317 lines
5.8 KiB
Text
### BTest baseline data generated by btest-diff. Do not edit. Use "btest -U/-u" to update. Requires BTest >= 0.63.
|
|
============EVENT============
|
|
Description
|
|
source, ../input.log
|
|
reader, Input::READER_ASCII
|
|
mode, Input::REREAD
|
|
name, ssh
|
|
destination[left = -42], [b=T, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
idx, A::Idx
|
|
val, A::Val
|
|
want_record, T
|
|
Type, Input::EVENT_NEW
|
|
Left, [i=-42]
|
|
Right, [b=T, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
============EVENT============
|
|
Description
|
|
source, ../input.log
|
|
reader, Input::READER_ASCII
|
|
mode, Input::REREAD
|
|
name, ssh
|
|
destination[left = -43], [b=T, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
idx, A::Idx
|
|
val, A::Val
|
|
want_record, T
|
|
Type, Input::EVENT_NEW
|
|
Left, [i=-43]
|
|
Right, [b=T, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
============EVENT============
|
|
Description
|
|
source, ../input.log
|
|
reader, Input::READER_ASCII
|
|
mode, Input::REREAD
|
|
name, ssh
|
|
destination[left = -43], [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
idx, A::Idx
|
|
val, A::Val
|
|
want_record, T
|
|
Type, Input::EVENT_CHANGED
|
|
Left, [i=-43]
|
|
Right, [b=T, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
============EVENT============
|
|
Description
|
|
source, ../input.log
|
|
reader, Input::READER_ASCII
|
|
mode, Input::REREAD
|
|
name, ssh
|
|
destination[left = -44], [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
idx, A::Idx
|
|
val, A::Val
|
|
want_record, T
|
|
Type, Input::EVENT_NEW
|
|
Left, [i=-44]
|
|
Right, [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
============EVENT============
|
|
Description
|
|
source, ../input.log
|
|
reader, Input::READER_ASCII
|
|
mode, Input::REREAD
|
|
name, ssh
|
|
destination[left = -45], [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
idx, A::Idx
|
|
val, A::Val
|
|
want_record, T
|
|
Type, Input::EVENT_NEW
|
|
Left, [i=-45]
|
|
Right, [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
============EVENT============
|
|
Description
|
|
source, ../input.log
|
|
reader, Input::READER_ASCII
|
|
mode, Input::REREAD
|
|
name, ssh
|
|
destination[left = -46], [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
idx, A::Idx
|
|
val, A::Val
|
|
want_record, T
|
|
Type, Input::EVENT_NEW
|
|
Left, [i=-46]
|
|
Right, [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
============EVENT============
|
|
Description
|
|
source, ../input.log
|
|
reader, Input::READER_ASCII
|
|
mode, Input::REREAD
|
|
name, ssh
|
|
destination[left = -47], [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
idx, A::Idx
|
|
val, A::Val
|
|
want_record, T
|
|
Type, Input::EVENT_NEW
|
|
Left, [i=-47]
|
|
Right, [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
============EVENT============
|
|
Description
|
|
source, ../input.log
|
|
reader, Input::READER_ASCII
|
|
mode, Input::REREAD
|
|
name, ssh
|
|
destination[left = -48], [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
idx, A::Idx
|
|
val, A::Val
|
|
want_record, T
|
|
Type, Input::EVENT_NEW
|
|
Left, [i=-48]
|
|
Right, [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=XXXXXXXXXX.XXXXXX, iv=1.0 min 40.0 secs, s=hurz, sc={
|
|
4,
|
|
2,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
============EVENT============
|
|
Description
|
|
source, ../input.log
|
|
reader, Input::READER_ASCII
|
|
mode, Input::REREAD
|
|
name, ssh
|
|
============EVENT============
|
|
Description
|
|
source, ../input.log
|
|
reader, Input::READER_ASCII
|
|
mode, Input::REREAD
|
|
name, ssh
|
|
============EVENT============
|
|
Description
|
|
source, ../input.log
|
|
reader, Input::READER_ASCII
|
|
mode, Input::REREAD
|
|
name, ssh
|
|
============EVENT============
|
|
Description
|
|
source, ../input.log
|
|
reader, Input::READER_ASCII
|
|
mode, Input::REREAD
|
|
name, ssh
|
|
============EVENT============
|
|
Description
|
|
source, ../input.log
|
|
reader, Input::READER_ASCII
|
|
mode, Input::REREAD
|
|
name, ssh
|
|
============EVENT============
|
|
Description
|
|
source, ../input.log
|
|
reader, Input::READER_ASCII
|
|
mode, Input::REREAD
|
|
name, ssh
|