21 lines
713 B
Plaintext
21 lines
713 B
Plaintext
# This test verifies that specifying an Input::path_prefix
|
|
# also affects the Intel framework since it relies on the
|
|
# former for loading data. (Note that this also tests the
|
|
# Input::REREAD ingestion mode.)
|
|
#
|
|
# @TEST-EXEC: mkdir -p alternative
|
|
# @TEST-EXEC: ZEEKPATH=$ZEEKPATH:$TEST_BASE/scripts/base/frameworks/intel/path-prefix zeek -b %INPUT >output
|
|
# @TEST-EXEC: btest-diff output
|
|
|
|
# @TEST-START-FILE alternative/test.data
|
|
#fields indicator indicator_type meta.source
|
|
127.0.0.1 Intel::ADDR this btest
|
|
127.0.0.2 Intel::ADDR this btest
|
|
127.0.0.3 Intel::ADDR this btest
|
|
# @TEST-END-FILE
|
|
|
|
@load path-prefix-common.zeek
|
|
|
|
redef Intel::read_files += { "test.data" };
|
|
redef InputAscii::path_prefix = "alternative";
|