zeek/testing/btest/scripts/base/frameworks/file-analysis/log-files-event-flattening.zeek
Patrick Kelley 8fd444092b initial
2025-05-07 15:35:15 -04:00

12 lines
349 B
Plaintext

# @TEST-DOC: Implement Files::log_files and verify it is seeing unique File::Info records.
# @TEST-EXEC: zeek -b -r $TRACES/http/concurrent-range-requests.pcap %INPUT >out
# @TEST-EXEC: btest-diff out
@load base/frameworks/files
@load base/protocols/http
event Files::log_files(rec: Files::Info)
{
print rec$uid, rec$id;
}