10 lines
314 B
Plaintext
10 lines
314 B
Plaintext
# @TEST-EXEC: zeek -b -r $TRACES/tcp/truncated-header.pcap %INPUT >out
|
|
# @TEST-EXEC: btest-diff out
|
|
|
|
event tcp_packet(c: connection, is_orig: bool, flags: string, seq: count, ack: count, len: count, payload: string)
|
|
{
|
|
# Just having this handler used to crash Zeek on this trace.
|
|
print network_time(), c$id;
|
|
}
|
|
|