zeek/testing/btest/bifs/disable_analyzer-tcp-packet-children.zeek
Patrick Kelley 8fd444092b initial
2025-05-07 15:35:15 -04:00

17 lines
492 B
Plaintext

# @TEST-EXEC: zeek -b -r $TRACES/http/pipelined-requests.trace %INPUT >out
# @TEST-EXEC: btest-diff out
@load base/protocols/http
event connection_established(c: connection)
{
set_current_conn_packets_threshold(c$id, 1, T);
}
event conn_packets_threshold_crossed(c: connection, threshold: count, is_orig: bool)
{
print "triggered packets", c$id, threshold, is_orig;
set_current_conn_packets_threshold(c$id, threshold + 1, T);
print disable_analyzer(c$id, current_analyzer(), T);
}