mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 14:48:21 +00:00
f89874b9e9
* 'patch-4' of https://github.com/aeppert/bro: (BIT-1545) Add "disable_analyzer_after_detection" en lieu of "skip_processing_after_detection" I also removed the old disable_analyzer_after_detection option completely - if someone wants that, they can just catch the event themselves and call skip_further_processing. I also adjusted the ssh test case to contain conn.log to prevent re-addition of this problem in the future. BIT-1545 #merged
5 lines
172 B
Text
5 lines
172 B
Text
# This tests some SSH connections and the output log.
|
|
|
|
# @TEST-EXEC: bro -r $TRACES/ssh/ssh.trace %INPUT
|
|
# @TEST-EXEC: btest-diff ssh.log
|
|
# @TEST-EXEC: btest-diff conn.log
|