mirror of
https://github.com/zeek/zeek.git
synced 2025-10-04 23:58:20 +00:00
f4864c69af
Adjust twotables testcase - now it is faster. Shorten the output -- because of threading, the results did not always come out in the same order (it depends on which thread manages to sneak in the results into the queue earlier).
172 lines
2.7 KiB
Text
172 lines
2.7 KiB
Text
============PREDICATE============
|
|
Input::EVENT_NEW
|
|
[i=-42]
|
|
[b=T, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=1315801931.273616, iv=100.0, s=hurz, sc={
|
|
2,
|
|
4,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
============PREDICATE 2============
|
|
Input::EVENT_NEW
|
|
[i=-43]
|
|
[b=T, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=1315801931.273616, iv=100.0, s=hurz, sc={
|
|
2,
|
|
4,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
============EVENT============
|
|
==========SERVERS============
|
|
{
|
|
[-43] = [b=T, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=1315801931.273616, iv=100.0, s=hurz, sc={
|
|
2,
|
|
4,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]],
|
|
[-42] = [b=T, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=1315801931.273616, iv=100.0, s=hurz, sc={
|
|
2,
|
|
4,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
}
|
|
============EVENT============
|
|
==========SERVERS============
|
|
{
|
|
[-43] = [b=T, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=1315801931.273616, iv=100.0, s=hurz, sc={
|
|
2,
|
|
4,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]],
|
|
[-42] = [b=T, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=1315801931.273616, iv=100.0, s=hurz, sc={
|
|
2,
|
|
4,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
}
|
|
============PREDICATE============
|
|
Input::EVENT_NEW
|
|
[i=-44]
|
|
[b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=1315801931.273616, iv=100.0, s=hurz, sc={
|
|
2,
|
|
4,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
============PREDICATE============
|
|
Input::EVENT_REMOVED
|
|
[i=-42]
|
|
[b=T, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=1315801931.273616, iv=100.0, s=hurz, sc={
|
|
2,
|
|
4,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
============EVENT============
|
|
============EVENT============
|
|
==========SERVERS============
|
|
{
|
|
[-43] = [b=T, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=1315801931.273616, iv=100.0, s=hurz, sc={
|
|
2,
|
|
4,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]],
|
|
[-44] = [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=1315801931.273616, iv=100.0, s=hurz, sc={
|
|
2,
|
|
4,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
}
|
|
done
|
|
{
|
|
[-43] = [b=T, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=1315801931.273616, iv=100.0, s=hurz, sc={
|
|
2,
|
|
4,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]],
|
|
[-44] = [b=F, e=SSH::LOG, c=21, p=123/unknown, sn=10.0.0.0/24, a=1.2.3.4, d=3.14, t=1315801931.273616, iv=100.0, s=hurz, sc={
|
|
2,
|
|
4,
|
|
1,
|
|
3
|
|
}, ss={
|
|
CC,
|
|
AA,
|
|
BB
|
|
}, se={
|
|
|
|
}, vc=[10, 20, 30], ve=[]]
|
|
}
|