22 lines
843 B
Plaintext
22 lines
843 B
Plaintext
# This tests whether the HTTP analyzer handles HTTP keyword in lower case correctly or not.
|
|
#
|
|
# @TEST-EXEC: zeek -C -b -r $TRACES/http/http-lower-case.pcap %INPUT
|
|
# @TEST-EXEC: ! test -f dpd.log
|
|
# @TEST-EXEC: ! test -f analyzer.log
|
|
# @TEST-EXEC: zeek-cut uid name < weird.log > weird.log.standard
|
|
# @TEST-EXEC: btest-diff weird.log.standard
|
|
# @TEST-EXEC: mv http.log http.log.standard
|
|
# @TEST-EXEC: btest-diff http.log.standard
|
|
|
|
# @TEST-EXEC: rm *.log
|
|
|
|
# @TEST-EXEC: zeek -C -b -r $TRACES/http/http-lower-case-nonstandard-port.pcap %INPUT
|
|
# @TEST-EXEC: ! test -f dpd.log
|
|
# @TEST-EXEC: ! test -f analyzer.log
|
|
# @TEST-EXEC: zeek-cut uid name < weird.log > weird.log.nonstandard
|
|
# @TEST-EXEC: btest-diff weird.log.nonstandard
|
|
# @TEST-EXEC: mv http.log http.log.nonstandard
|
|
# @TEST-EXEC: btest-diff http.log.nonstandard
|
|
|
|
@load base/protocols/http
|