mirror of
https://github.com/zeek/zeek.git
synced 2025-10-07 09:08:20 +00:00
11 lines
321 B
Text
11 lines
321 B
Text
# @TEST-EXEC: bro -C -b -r $TRACES/wikipedia.trace %INPUT >>output
|
|
# @TEST-EXEC: bro -C -b -r $TRACES/radiotap.pcap %INPUT >>output
|
|
# @TEST-EXEC: btest-diff output
|
|
|
|
event new_connection(c: connection)
|
|
{
|
|
if ( c$orig?$l2_addr && c$resp?$l2_addr )
|
|
print c$orig$l2_addr, c$resp$l2_addr;
|
|
else
|
|
print "-", "-";
|
|
}
|