33 lines
857 B
Plaintext
33 lines
857 B
Plaintext
# @TEST-GROUP: dns_mgr
|
|
#
|
|
# @TEST-REQUIRES: dnsmasq --version
|
|
# @TEST-PORT: DNSMASQ_PORT
|
|
|
|
# @TEST-EXEC: btest-bg-run dnsmasq run-dnsmasq 127.0.0.1 ${DNSMASQ_PORT%/tcp}
|
|
# @TEST-EXEC: unset ZEEK_DNS_FAKE; ZEEK_DNS_RESOLVER=127.0.0.1:${DNSMASQ_PORT%/tcp} zeek -b %INPUT >out
|
|
# @TEST-EXEC: btest-bg-wait -k 0
|
|
|
|
# @TEST-EXEC: btest-diff out
|
|
|
|
redef exit_only_after_terminate = T;
|
|
|
|
event zeek_init()
|
|
{
|
|
when ( local txt = lookup_hostname_txt("example.com") )
|
|
{
|
|
# www.example.com has much more TXT entries, we
|
|
# only return "more-network-monitor", however.
|
|
#
|
|
# ;; ANSWER SECTION:
|
|
# www.example.com. 0 IN TXT "more-network-monitor" "bro"
|
|
# www.example.com. 0 IN TXT "network-monitor" "open-source" "zeek"
|
|
print "TXT", txt;
|
|
terminate();
|
|
}
|
|
timeout 5sec
|
|
{
|
|
print "ERROR timeout";
|
|
terminate();
|
|
}
|
|
}
|