mirror of
https://github.com/zeek/zeek.git
synced 2025-10-17 14:08:20 +00:00
ddaa553418
* origin/topic/robin/gh-3157-export-switch:
[Spicy] Support `switch` fields when exporting Spicy types to Zeek.
(cherry picked from commit cd2c193cb2)
31 lines
705 B
Text
31 lines
705 B
Text
# @TEST-REQUIRES: have-spicy
|
|
#
|
|
# @TEST-EXEC: spicyz -do test.hlto test.spicy test.evt
|
|
# @TEST-EXEC: zeek -Cr ${TRACES}/udp-packet.pcap test.hlto %INPUT >output 2>&1
|
|
# @TEST-EXEC: btest-diff output
|
|
#
|
|
# @TEST-DOC: Test exporting units with switches.
|
|
|
|
event TEST_ZEEK::MessageEvt(message: TEST::Message)
|
|
{ print message; }
|
|
|
|
# @TEST-START-FILE test.spicy
|
|
module TEST;
|
|
|
|
public type Message = unit {
|
|
switch (1) {
|
|
* -> foo: bytes &eod;
|
|
};
|
|
};
|
|
# @TEST-END-FILE
|
|
|
|
# @TEST-START-FILE test.evt
|
|
import TEST;
|
|
protocol analyzer spicy::Test over UDP:
|
|
port 0/udp - 42000/udp,
|
|
parse with TEST::Message;
|
|
|
|
export TEST::Message;
|
|
|
|
on TEST::Message -> event TEST_ZEEK::MessageEvt(self);
|
|
# @TEST-END-FILE
|