mirror of
https://github.com/zeek/zeek.git
synced 2025-10-03 23:28:20 +00:00

- policy/ renamed to scripts/ - By default BROPATH now contains: - scripts/ - scripts/policy - scripts/site - *Nearly* all tests pass. - All of scripts/base/ is loaded by main.cc - Can be disabled by setting $BRO_NO_BASE_SCRIPTS - Scripts in scripts/base/ don't use relative path loading to ease use of BRO_NO_BASE_SCRIPTS (to copy and paste that script). - The scripts in scripts/base/protocols/ only (or soon will only) do logging and state building. - The scripts in scripts/base/frameworks/ add functionality without causing any additional overhead. - All "detection" activity happens through scripts in scripts/policy/. - Communications framework modified temporarily to need an environment variable to actually enable (ENABLE_COMMUNICATION=1) - This is so the communications framework can be loaded as part of the base without causing trouble when it's not needed. - This will be removed once a resolution to ticket #540 is reached.
29 lines
770 B
Text
29 lines
770 B
Text
# @TEST-EXEC: bro %INPUT >output
|
|
# @TEST-EXEC: btest-diff output
|
|
|
|
# This is loaded by default.
|
|
#@load base/utils/thresholds
|
|
|
|
redef default_notice_thresholds = { 2, 4, 6, 8, 10 };
|
|
const my_thresholds: vector of count = { 2, 4, 6, 8, 10 };
|
|
const loop_v: vector of count = { 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10 };
|
|
global track_count: TrackCount;
|
|
|
|
for ( i in loop_v )
|
|
{
|
|
print fmt("Iteration: %s, threshold check: %s", i,
|
|
check_threshold(my_thresholds, track_count));
|
|
print track_count;
|
|
++track_count$n;
|
|
}
|
|
|
|
track_count$n = 0; track_count$index = 0;
|
|
|
|
print "====================================";
|
|
for ( i in loop_v )
|
|
{
|
|
print fmt("Iteration: %s, threshold check: %s", i,
|
|
default_check_threshold(track_count));
|
|
print track_count;
|
|
++track_count$n;
|
|
}
|