zeek/testing/btest/core/pcap/dumper.zeek
Patrick Kelley 8fd444092b initial
2025-05-07 15:35:15 -04:00

13 lines
545 B
Plaintext

# @TEST-REQUIRES: which hexdump
# @TEST-EXEC: zeek -b -r $TRACES/workshop_2011_browse.trace -w dump
# @TEST-EXEC: hexdump -C $TRACES/workshop_2011_browse.trace >1
# @TEST-EXEC: hexdump -C dump >2
# @TEST-EXEC: diff -U3 1 2 >diff.output || true
# Remove first two lines of diff since they may contain timestamps
# @TEST-EXEC: awk 'NR>2' diff.output >output
# Note that we're diff'ing the diff because there is an expected
# difference in the pcaps: namely, the snaplen setting stored in the
# global pcap header.
# @TEST-EXEC: btest-diff output