mirror of
https://github.com/zeek/zeek.git
synced 2025-10-05 16:18:19 +00:00
bd9855a380
If 'use_conn_size_analyzer' is true, the event engine tracks number of packets and raw IP bytes per connection. If report_conn_size_analyzer is true, these values are included as four new columns into conn.log I changed conn.bro so that the value of report_conn_size_analyzer follows that of use_conn_size_analyzer. For the new conn.log, we probably want to get rid of report_conn_size_analyzer anyway.
2 lines
125 B
Text
2 lines
125 B
Text
# @TEST-EXEC: bro -C -r ${TRACES}/conn-size.trace tcp udp icmp report_conn_size_analyzer=T
|
|
# @TEST-EXEC: btest-diff conn.log
|