365 tests/results-public-samples
View file
@@ -104,3 +104,368 @@ passive_top_addr_not_distinct_count = 32
passive_ipinfo_short_count = 55
passive_iphost_count = 80
passive_iphost_count_com = 35
utils_bro_btest_Baseline_bifs_decode_base64_conn_weird_count = 3
utils_bro_btest_Baseline_broker_remote_log_recv_test_count = 6
utils_bro_btest_Baseline_broker_remote_log_send_test_count = 6
utils_bro_btest_Baseline_broker_remote_log_types_recv_test_count = 1
utils_bro_btest_Baseline_broker_remote_log_types_send_test_count = 1
utils_bro_btest_Baseline_core_disable_mobile_ipv6_weird_count = 1
utils_bro_btest_Baseline_core_erspan_tunnel_count = 1
utils_bro_btest_Baseline_core_expr_exception_reporter_count = 9
utils_bro_btest_Baseline_core_history_flip_conn_count = 1
utils_bro_btest_Baseline_core_ipv6_frag_dns_count = 3
utils_bro_btest_Baseline_core_leaks_basic_cluster_manager_1_metrics_count = 3
utils_bro_btest_Baseline_core_leaks_broker_remote_log_recv_test_count = 6
utils_bro_btest_Baseline_core_leaks_broker_remote_log_send_test_count = 6
utils_bro_btest_Baseline_core_leaks_remote_sender_test_count = 5
utils_bro_btest_Baseline_core_leaks_remote_sender_test_failure_count = 3
utils_bro_btest_Baseline_core_leaks_remote_sender_test_success_count = 2
utils_bro_btest_Baseline_core_mpls_in_vlan_conn_count = 3
utils_bro_btest_Baseline_core_negative_time_weird_count = 1
utils_bro_btest_Baseline_core_pcap_dynamic_filter_conn_count = 16
utils_bro_btest_Baseline_core_pcap_read_trace_with_filter_conn_count = 1
utils_bro_btest_Baseline_core_pcap_read_trace_with_filter_packet_filter_count = 1
utils_bro_btest_Baseline_core_pppoe_conn_count = 7
utils_bro_btest_Baseline_core_print_bpf_filters_conn_count = 1
utils_bro_btest_Baseline_core_q_in_q_conn_count = 2
utils_bro_btest_Baseline_core_radiotap_conn_count = 2
utils_bro_btest_Baseline_core_reporter_logger_test_count = 6
utils_bro_btest_Baseline_core_tcp_large_file_reassembly_conn_count = 3
utils_bro_btest_Baseline_core_tcp_large_file_reassembly_files_count = 2
utils_bro_btest_Baseline_core_tcp_miss_end_data_conn_count = 1
utils_bro_btest_Baseline_core_tcp_missing_syn_conn_count = 1
utils_bro_btest_Baseline_core_tcp_rxmit_history_conn_1_count = 1
utils_bro_btest_Baseline_core_tcp_rxmit_history_conn_2_count = 34
utils_bro_btest_Baseline_core_tunnels_ayiya_conn_count = 8
utils_bro_btest_Baseline_core_tunnels_ayiya_http_count = 3
utils_bro_btest_Baseline_core_tunnels_ayiya_tunnel_count = 4
utils_bro_btest_Baseline_core_tunnels_gre_conn_count = 7
utils_bro_btest_Baseline_core_tunnels_gre_dns_count = 2
utils_bro_btest_Baseline_core_tunnels_gre_in_gre_conn_count = 3
utils_bro_btest_Baseline_core_tunnels_gre_in_gre_tunnel_count = 2
utils_bro_btest_Baseline_core_tunnels_gre_ssh_count = 1
utils_bro_btest_Baseline_core_tunnels_gre_tunnel_count = 1
utils_bro_btest_Baseline_core_tunnels_gtp_different_dl_and_ul_conn_count = 3
utils_bro_btest_Baseline_core_tunnels_gtp_different_dl_and_ul_http_count = 2
utils_bro_btest_Baseline_core_tunnels_gtp_different_dl_and_ul_tunnel_count = 4
utils_bro_btest_Baseline_core_tunnels_gtp_false_gtp_conn_count = 1
utils_bro_btest_Baseline_core_tunnels_gtp_false_gtp_dns_count = 1
utils_bro_btest_Baseline_core_tunnels_gtp_inner_ipv6_conn_count = 3
utils_bro_btest_Baseline_core_tunnels_gtp_inner_ipv6_tunnel_count = 2
utils_bro_btest_Baseline_core_tunnels_gtp_inner_teredo_conn_count = 17
utils_bro_btest_Baseline_core_tunnels_gtp_inner_teredo_tunnel_count = 18
utils_bro_btest_Baseline_core_tunnels_gtp_not_user_plane_data_conn_count = 2
utils_bro_btest_Baseline_core_tunnels_gtp_opt_header_conn_count = 2
utils_bro_btest_Baseline_core_tunnels_gtp_opt_header_tunnel_count = 2
utils_bro_btest_Baseline_core_tunnels_gtp_outer_ip_frag_conn_count = 2
utils_bro_btest_Baseline_core_tunnels_gtp_outer_ip_frag_http_count = 1
utils_bro_btest_Baseline_core_tunnels_gtp_outer_ip_frag_tunnel_count = 2
utils_bro_btest_Baseline_core_tunnels_gtp_unknown_or_too_short_dpd_count = 1
utils_bro_btest_Baseline_core_tunnels_gtp_unknown_or_too_short_tunnel_count = 2
utils_bro_btest_Baseline_core_tunnels_teredo_bubble_with_payload_conn_count = 7
utils_bro_btest_Baseline_core_tunnels_teredo_bubble_with_payload_http_count = 2
utils_bro_btest_Baseline_core_tunnels_teredo_bubble_with_payload_tunnel_count = 6
utils_bro_btest_Baseline_core_tunnels_teredo_bubble_with_payload_weird_count = 2
utils_bro_btest_Baseline_core_tunnels_teredo_conn_count = 21
utils_bro_btest_Baseline_core_tunnels_teredo_http_count = 4
utils_bro_btest_Baseline_core_tunnels_teredo_tunnel_count = 6
utils_bro_btest_Baseline_core_vlan_mpls_conn_count = 3
utils_bro_btest_Baseline_coverage_bare_load_baseline_canonified_loaded_scripts_count = 161
utils_bro_btest_Baseline_coverage_default_load_baseline_canonified_loaded_scripts_count = 349
utils_bro_btest_Baseline_doc_manual_framework_logging_factorial_02_factor_count = 10
utils_bro_btest_Baseline_doc_manual_framework_logging_factorial_03_factor_mod5_count = 6
utils_bro_btest_Baseline_doc_manual_framework_logging_factorial_03_factor_non5_count = 4
utils_bro_btest_Baseline_doc_manual_framework_logging_factorial_04_factor_mod5_count = 6
utils_bro_btest_Baseline_doc_manual_framework_logging_factorial_04_factor_non5_count = 4
utils_bro_btest_Baseline_doc_manual_using_bro_sandbox_01_conn_count = 34
utils_bro_btest_Baseline_doc_manual_using_bro_sandbox_01_http_count = 14
utils_bro_btest_Baseline_doc_manual_using_bro_sandbox_02_conn_count = 6
utils_bro_btest_Baseline_doc_manual_using_bro_sandbox_02_http_count = 17
utils_bro_btest_Baseline_istate_base_receiver_conn_count = 1
utils_bro_btest_Baseline_istate_base_receiver_http_count = 18
utils_bro_btest_Baseline_istate_base_sender_conn_count = 2
utils_bro_btest_Baseline_istate_base_sender_http_count = 18
utils_bro_btest_Baseline_istate_broccoli_broccoli_count = 3
utils_bro_btest_Baseline_istate_broccoli_bro_count = 3
utils_bro_btest_Baseline_istate_events_events_rec_count = 32
utils_bro_btest_Baseline_istate_events_events_snd_count = 32
utils_bro_btest_Baseline_istate_events_receiver_http_count = 1
utils_bro_btest_Baseline_istate_events_sender_http_count = 1
utils_bro_btest_Baseline_istate_events_ssl_events_rec_count = 32
utils_bro_btest_Baseline_istate_events_ssl_events_snd_count = 32
utils_bro_btest_Baseline_istate_events_ssl_receiver_http_count = 1
utils_bro_btest_Baseline_istate_events_ssl_sender_http_count = 1
utils_bro_btest_Baseline_istate_opaque_expected_count = 4
utils_bro_btest_Baseline_istate_opaque_output_count = 4
utils_bro_btest_Baseline_istate_persistence_vars_read_count = 32
utils_bro_btest_Baseline_istate_persistence_vars_write_count = 32
utils_bro_btest_Baseline_istate_sync_receiver_vars_count = 34
utils_bro_btest_Baseline_istate_sync_sender_vars_count = 34
utils_bro_btest_Baseline_language_init_in_anon_function_http_count = 14
utils_bro_btest_Baseline_plugins_logging_hooks_ssh_count = 2
utils_bro_btest_Baseline_plugins_pktsrc_conn_count = 1
utils_bro_btest_Baseline_scripts_base_files_extract_limit_files_count = 1
utils_bro_btest_Baseline_scripts_base_files_pe_basic_pe_count = 4
utils_bro_btest_Baseline_scripts_base_files_unified2_alert_unified2_count = 2
utils_bro_btest_Baseline_scripts_base_files_x509_1999_x509_count = 3
utils_bro_btest_Baseline_scripts_base_frameworks_communication_communication_log_baseline_send_count = 15
utils_bro_btest_Baseline_scripts_base_frameworks_file_analysis_bifs_register_mime_type_files_count = 1
utils_bro_btest_Baseline_scripts_base_frameworks_file_analysis_big_bof_buffer_files_count = 1
utils_bro_btest_Baseline_scripts_base_frameworks_file_analysis_byteranges_files_count = 1
utils_bro_btest_Baseline_scripts_base_frameworks_file_analysis_logging_files_count = 1
utils_bro_btest_Baseline_scripts_base_frameworks_intel_cluster_transparency_manager_1_intel_count = 1
utils_bro_btest_Baseline_scripts_base_frameworks_intel_input_and_match_broproc_intel_count = 2
utils_bro_btest_Baseline_scripts_base_frameworks_intel_read_file_dist_cluster_manager_1_intel_count = 4
utils_bro_btest_Baseline_scripts_base_frameworks_intel_remove_item_cluster_manager_1_intel_count = 1
utils_bro_btest_Baseline_scripts_base_frameworks_logging_adapt_filter_ssh_new_default_count = 2
utils_bro_btest_Baseline_scripts_base_frameworks_logging_ascii_binary_ssh_count = 3
utils_bro_btest_Baseline_scripts_base_frameworks_logging_ascii_double_test_count = 8
utils_bro_btest_Baseline_scripts_base_frameworks_logging_ascii_empty_ssh_filtered_count = 12
utils_bro_btest_Baseline_scripts_base_frameworks_logging_ascii_escape_binary_test_count = 11
utils_bro_btest_Baseline_scripts_base_frameworks_logging_ascii_escape_empty_str_test_count = 1
utils_bro_btest_Baseline_scripts_base_frameworks_logging_ascii_escape_notset_str_test_count = 1
utils_bro_btest_Baseline_scripts_base_frameworks_logging_ascii_escape_odd_url_http_count = 1
utils_bro_btest_Baseline_scripts_base_frameworks_logging_ascii_escape_set_separator_test_count = 1
utils_bro_btest_Baseline_scripts_base_frameworks_logging_ascii_escape_ssh_count = 5
utils_bro_btest_Baseline_scripts_base_frameworks_logging_ascii_json_iso_timestamps_ssh_count = 2
utils_bro_btest_Baseline_scripts_base_frameworks_logging_ascii_json_optional_testing_count = 1
utils_bro_btest_Baseline_scripts_base_frameworks_logging_ascii_json_ssh_count = 1
utils_bro_btest_Baseline_scripts_base_frameworks_logging_ascii_line_like_comment_test_count = 3
utils_bro_btest_Baseline_scripts_base_frameworks_logging_ascii_options_ssh_count = 5
utils_bro_btest_Baseline_scripts_base_frameworks_logging_ascii_timestamps_test_count = 8
utils_bro_btest_Baseline_scripts_base_frameworks_logging_ascii_tsv_ssh_filtered_count = 6
utils_bro_btest_Baseline_scripts_base_frameworks_logging_attr_extend_ssh_count = 1
utils_bro_btest_Baseline_scripts_base_frameworks_logging_attr_ssh_count = 5
utils_bro_btest_Baseline_scripts_base_frameworks_logging_empty_event_ssh_count = 5
utils_bro_btest_Baseline_scripts_base_frameworks_logging_exclude_ssh_count = 5
utils_bro_btest_Baseline_scripts_base_frameworks_logging_field_extension_cluster_error_manager_1_reporter_count = 4
utils_bro_btest_Baseline_scripts_base_frameworks_logging_field_extension_cluster_manager_1_http_count = 14
utils_bro_btest_Baseline_scripts_base_frameworks_logging_field_extension_complex_conn_count = 34
utils_bro_btest_Baseline_scripts_base_frameworks_logging_field_extension_conn_count = 34
utils_bro_btest_Baseline_scripts_base_frameworks_logging_field_extension_invalid_conn_count = 1
utils_bro_btest_Baseline_scripts_base_frameworks_logging_field_extension_optional_conn_count = 34
utils_bro_btest_Baseline_scripts_base_frameworks_logging_field_name_map_conn_count = 34
utils_bro_btest_Baseline_scripts_base_frameworks_logging_file_ssh_count = 1
utils_bro_btest_Baseline_scripts_base_frameworks_logging_include_ssh_count = 5
utils_bro_btest_Baseline_scripts_base_frameworks_logging_path_func_column_demote_local_count = 30
utils_bro_btest_Baseline_scripts_base_frameworks_logging_path_func_column_demote_remote_count = 4
utils_bro_btest_Baseline_scripts_base_frameworks_logging_pred_test_failure_count = 1
utils_bro_btest_Baseline_scripts_base_frameworks_logging_pred_test_success_count = 1
utils_bro_btest_Baseline_scripts_base_frameworks_logging_remote_config_sender_test_count = 5
utils_bro_btest_Baseline_scripts_base_frameworks_logging_remote_config_sender_test_failure_count = 4
utils_bro_btest_Baseline_scripts_base_frameworks_logging_remote_config_sender_test_success_count = 2
utils_bro_btest_Baseline_scripts_base_frameworks_logging_remote_sender_test_count = 5
utils_bro_btest_Baseline_scripts_base_frameworks_logging_remote_sender_test_failure_count = 3
utils_bro_btest_Baseline_scripts_base_frameworks_logging_remote_sender_test_success_count = 2
utils_bro_btest_Baseline_scripts_base_frameworks_logging_remote_types_receiver_test_count = 1
utils_bro_btest_Baseline_scripts_base_frameworks_logging_remove_ssh_count = 3
utils_bro_btest_Baseline_scripts_base_frameworks_logging_remove_ssh_failure_count = 2
utils_bro_btest_Baseline_scripts_base_frameworks_logging_scope_sep_and_field_name_map_conn_count = 34
utils_bro_btest_Baseline_scripts_base_frameworks_logging_scope_sep_conn_count = 34
utils_bro_btest_Baseline_scripts_base_frameworks_logging_test_logging_ssh_count = 5
utils_bro_btest_Baseline_scripts_base_frameworks_logging_types_ssh_count = 1
utils_bro_btest_Baseline_scripts_base_frameworks_logging_unset_record_testing_count = 2
utils_bro_btest_Baseline_scripts_base_frameworks_logging_vec_ssh_count = 1
utils_bro_btest_Baseline_scripts_base_frameworks_logging_writer_path_conflict_http_2_2_count = 14
utils_bro_btest_Baseline_scripts_base_frameworks_logging_writer_path_conflict_http_2_count = 14
utils_bro_btest_Baseline_scripts_base_frameworks_logging_writer_path_conflict_http_3_count = 14
utils_bro_btest_Baseline_scripts_base_frameworks_logging_writer_path_conflict_http_count = 14
utils_bro_btest_Baseline_scripts_base_frameworks_logging_writer_path_conflict_reporter_count = 3
utils_bro_btest_Baseline_scripts_base_frameworks_netcontrol_acld_send_netcontrol_count = 16
utils_bro_btest_Baseline_scripts_base_frameworks_netcontrol_basic_cluster_manager_1_netcontrol_count = 17
utils_bro_btest_Baseline_scripts_base_frameworks_netcontrol_basic_netcontrol_count = 23
utils_bro_btest_Baseline_scripts_base_frameworks_netcontrol_basic_netcontrol_drop_count = 1
utils_bro_btest_Baseline_scripts_base_frameworks_netcontrol_basic_netcontrol_shunt_count = 1
utils_bro_btest_Baseline_scripts_base_frameworks_netcontrol_broker_send_netcontrol_count = 11
utils_bro_btest_Baseline_scripts_base_frameworks_netcontrol_catch_and_release_2_netcontrol_catch_release_count = 6
utils_bro_btest_Baseline_scripts_base_frameworks_netcontrol_catch_and_release_2_netcontrol_count = 11
utils_bro_btest_Baseline_scripts_base_frameworks_netcontrol_catch_and_release_forgotten_netcontrol_catch_release_count = 4
utils_bro_btest_Baseline_scripts_base_frameworks_netcontrol_catch_and_release_netcontrol_catch_release_count = 13
utils_bro_btest_Baseline_scripts_base_frameworks_netcontrol_catch_and_release_netcontrol_count = 20
utils_bro_btest_Baseline_scripts_base_frameworks_netcontrol_duplicate_netcontrol_count = 6
utils_bro_btest_Baseline_scripts_base_frameworks_netcontrol_hook_netcontrol_count = 7
utils_bro_btest_Baseline_scripts_base_frameworks_netcontrol_multiple_netcontrol_count = 39
utils_bro_btest_Baseline_scripts_base_frameworks_netcontrol_multiple_openflow_count = 12
utils_bro_btest_Baseline_scripts_base_frameworks_netcontrol_openflow_netcontrol_count = 15
utils_bro_btest_Baseline_scripts_base_frameworks_netcontrol_openflow_openflow_count = 9
utils_bro_btest_Baseline_scripts_base_frameworks_netcontrol_packetfilter_conn_count = 6
utils_bro_btest_Baseline_scripts_base_frameworks_netcontrol_quarantine_openflow_netcontrol_count = 11
utils_bro_btest_Baseline_scripts_base_frameworks_netcontrol_quarantine_openflow_openflow_count = 4
utils_bro_btest_Baseline_scripts_base_frameworks_netcontrol_timeout_netcontrol_count = 8
utils_bro_btest_Baseline_scripts_base_frameworks_notice_cluster_manager_1_notice_count = 1
utils_bro_btest_Baseline_scripts_base_frameworks_notice_suppression_cluster_manager_1_notice_count = 1
utils_bro_btest_Baseline_scripts_base_frameworks_notice_suppression_notice_count = 1
utils_bro_btest_Baseline_scripts_base_frameworks_openflow_log_basic_openflow_count = 7
utils_bro_btest_Baseline_scripts_base_frameworks_openflow_log_cluster_manager_1_openflow_count = 2
utils_bro_btest_Baseline_scripts_base_frameworks_reporter_disable_stderr_reporter_count = 1
utils_bro_btest_Baseline_scripts_base_frameworks_reporter_stderr_reporter_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_dce_rpc_mapi_dce_rpc_count = 12
utils_bro_btest_Baseline_scripts_base_protocols_dce_rpc_mapi_ntlm_count = 2
utils_bro_btest_Baseline_scripts_base_protocols_dhcp_dhcp_all_msg_types_dhcp_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_dhcp_inform_dhcp_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_dnp3_dnp3_del_measure_dnp3_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_dnp3_dnp3_en_spon_dnp3_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_dnp3_dnp3_file_del_dnp3_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_dnp3_dnp3_file_read_dnp3_count = 5
utils_bro_btest_Baseline_scripts_base_protocols_dnp3_dnp3_file_write_dnp3_count = 3
utils_bro_btest_Baseline_scripts_base_protocols_dnp3_dnp3_read_dnp3_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_dnp3_dnp3_rec_time_dnp3_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_dnp3_dnp3_select_operate_dnp3_count = 2
utils_bro_btest_Baseline_scripts_base_protocols_dnp3_dnp3_udp_en_spon_dnp3_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_dnp3_dnp3_udp_read_dnp3_count = 2
utils_bro_btest_Baseline_scripts_base_protocols_dnp3_dnp3_udp_select_operate_dnp3_count = 3
utils_bro_btest_Baseline_scripts_base_protocols_dnp3_dnp3_udp_write_dnp3_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_dnp3_dnp3_write_dnp3_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_dnp3_events_dnp3_count = 66
utils_bro_btest_Baseline_scripts_base_protocols_dns_dns_key_dns_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_dns_duplicate_reponses_dns_count = 2
utils_bro_btest_Baseline_scripts_base_protocols_dns_duplicate_reponses_weird_count = 3
utils_bro_btest_Baseline_scripts_base_protocols_dns_flip_dns_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_dns_multiple_txt_strings_dns_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_dns_zero_responses_dns_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_ftp_cwd_navigation_conn_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_ftp_cwd_navigation_ftp_count = 1375
utils_bro_btest_Baseline_scripts_base_protocols_ftp_cwd_navigation_output_count = 4147
utils_bro_btest_Baseline_scripts_base_protocols_ftp_ftp_get_file_size_ftp_count = 6
utils_bro_btest_Baseline_scripts_base_protocols_ftp_ftp_ipv4_conn_count = 5
utils_bro_btest_Baseline_scripts_base_protocols_ftp_ftp_ipv4_ftp_count = 6
utils_bro_btest_Baseline_scripts_base_protocols_ftp_ftp_ipv6_conn_count = 6
utils_bro_btest_Baseline_scripts_base_protocols_ftp_ftp_ipv6_ftp_count = 7
utils_bro_btest_Baseline_scripts_base_protocols_ftp_gridftp_conn_count = 2
utils_bro_btest_Baseline_scripts_base_protocols_ftp_gridftp_notice_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_ftp_gridftp_ssl_count = 2
utils_bro_btest_Baseline_scripts_base_protocols_ftp_gridftp_x509_count = 12
utils_bro_btest_Baseline_scripts_base_protocols_http_100_continue_http_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_http_http_bad_request_with_version_http_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_http_http_bad_request_with_version_weird_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_http_http_connect_conn_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_http_http_connect_http_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_http_http_connect_smtp_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_http_http_connect_tunnel_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_http_http_connect_with_header_conn_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_http_http_connect_with_header_http_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_http_http_connect_with_header_tunnel_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_http_http_filename_http_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_http_http_methods_http_count = 49
utils_bro_btest_Baseline_scripts_base_protocols_http_http_methods_weird_count = 27
utils_bro_btest_Baseline_scripts_base_protocols_http_http_pipelining_http_count = 5
utils_bro_btest_Baseline_scripts_base_protocols_http_missing_zlib_header_http_count = 2
utils_bro_btest_Baseline_scripts_base_protocols_http_multipart_extract_http_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_http_no_uri_http_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_http_no_uri_weird_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_http_no_version_http_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_imap_starttls_conn_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_imap_starttls_ssl_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_imap_starttls_x509_count = 3
utils_bro_btest_Baseline_scripts_base_protocols_irc_basic_conn_count = 2
utils_bro_btest_Baseline_scripts_base_protocols_irc_basic_irc_count = 4
utils_bro_btest_Baseline_scripts_base_protocols_irc_starttls_conn_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_irc_starttls_ssl_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_irc_starttls_x509_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_krb_kinit_kerberos_count = 85
utils_bro_btest_Baseline_scripts_base_protocols_krb_tgs_kerberos_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_modbus_events_conn_count = 9
utils_bro_btest_Baseline_scripts_base_protocols_modbus_exception_handling_modbus_count = 6
utils_bro_btest_Baseline_scripts_base_protocols_modbus_exception_handling_weird_count = 4
utils_bro_btest_Baseline_scripts_base_protocols_modbus_policy_known_modbus_count = 8
utils_bro_btest_Baseline_scripts_base_protocols_modbus_policy_modbus_count = 19981
utils_bro_btest_Baseline_scripts_base_protocols_modbus_policy_modbus_register_change_count = 40
utils_bro_btest_Baseline_scripts_base_protocols_modbus_register_parsing_modbus_count = 3
utils_bro_btest_Baseline_scripts_base_protocols_mysql_auth_mysql_count = 12
utils_bro_btest_Baseline_scripts_base_protocols_mysql_wireshark_mysql_count = 18
utils_bro_btest_Baseline_scripts_base_protocols_pop3_starttls_conn_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_pop3_starttls_ssl_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_pop3_starttls_x509_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_radius_auth_radius_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_radius_radius_multiple_attempts_radius_count = 7
utils_bro_btest_Baseline_scripts_base_protocols_rdp_rdp_proprietary_encryption_rdp_count = 2
utils_bro_btest_Baseline_scripts_base_protocols_rdp_rdp_to_ssl_rdp_count = 2
utils_bro_btest_Baseline_scripts_base_protocols_rdp_rdp_to_ssl_ssl_count = 2
utils_bro_btest_Baseline_scripts_base_protocols_rdp_rdp_x509_rdp_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_rdp_rdp_x509_x509_count = 2
utils_bro_btest_Baseline_scripts_base_protocols_rfb_rfb_apple_remote_desktop_rfb_count = 3
utils_bro_btest_Baseline_scripts_base_protocols_rfb_vnc_mac_to_linux_rfb_count = 3
utils_bro_btest_Baseline_scripts_base_protocols_sip_wireshark_sip_count = 36
utils_bro_btest_Baseline_scripts_base_protocols_smb_smb1_smb_files_count = 3
utils_bro_btest_Baseline_scripts_base_protocols_smb_smb1_transaction_dcerpc_dce_rpc_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_smb_smb2_files_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_smb_smb2_smb_files_count = 3
utils_bro_btest_Baseline_scripts_base_protocols_smb_smb2_smb_mapping_count = 2
utils_bro_btest_Baseline_scripts_base_protocols_smtp_attachment_files_count = 4
utils_bro_btest_Baseline_scripts_base_protocols_smtp_attachment_smtp_count = 2
utils_bro_btest_Baseline_scripts_base_protocols_smtp_basic_smtp_count = 2
utils_bro_btest_Baseline_scripts_base_protocols_smtp_one_side_smtp_count = 2
utils_bro_btest_Baseline_scripts_base_protocols_smtp_starttls_smtp_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_smtp_starttls_ssl_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_smtp_starttls_x509_count = 3
utils_bro_btest_Baseline_scripts_base_protocols_socks_socks_auth_socks_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_socks_socks_auth_tunnel_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_socks_trace1_socks_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_socks_trace1_tunnel_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_socks_trace2_socks_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_socks_trace2_tunnel_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_socks_trace3_tunnel_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_ssh_basic_conn_count = 25
utils_bro_btest_Baseline_scripts_base_protocols_ssh_basic_ssh_count = 22
utils_bro_btest_Baseline_scripts_base_protocols_ssl_basic_ssl_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_ssl_basic_x509_count = 2
utils_bro_btest_Baseline_scripts_base_protocols_ssl_cve_2015_3194_ssl_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_ssl_dhe_ssl_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_ssl_dtls_ssl_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_ssl_dtls_stun_dpd_dpd_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_ssl_dtls_stun_dpd_ssl_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_ssl_dtls_x509_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_ssl_ecdhe_ssl_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_ssl_ecdhe_x509_count = 3
utils_bro_btest_Baseline_scripts_base_protocols_ssl_ecdsa_ssl_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_ssl_ecdsa_x509_count = 2
utils_bro_btest_Baseline_scripts_base_protocols_ssl_fragment_ssl_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_ssl_tls_1_2_handshake_failure_ssl_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_ssl_tls_1_2_ssl_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_ssl_tls_1_2_x509_count = 3
utils_bro_btest_Baseline_scripts_base_protocols_ssl_tls13_ssl_out_count = 8
utils_bro_btest_Baseline_scripts_base_protocols_syslog_trace_syslog_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_xmpp_client_dpd_ssl_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_xmpp_server_dialback_dpd_ssl_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_xmpp_starttls_conn_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_xmpp_starttls_ssl_count = 1
utils_bro_btest_Baseline_scripts_base_protocols_xmpp_starttls_x509_count = 2
utils_bro_btest_Baseline_scripts_policy_frameworks_intel_seen_certs_intel_all_count = 7
utils_bro_btest_Baseline_scripts_policy_frameworks_intel_seen_smtp_intel_count = 7
utils_bro_btest_Baseline_scripts_policy_frameworks_intel_whitelisting_intel_count = 20
utils_bro_btest_Baseline_scripts_policy_frameworks_software_vulnerable_notice_count = 2
utils_bro_btest_Baseline_scripts_policy_misc_dump_events_all_events_count = 1028
utils_bro_btest_Baseline_scripts_policy_misc_dump_events_all_events_no_args_count = 223
utils_bro_btest_Baseline_scripts_policy_misc_dump_events_smtp_events_count = 320
utils_bro_btest_Baseline_scripts_policy_protocols_conn_known_hosts_knownhosts_all_count = 4
utils_bro_btest_Baseline_scripts_policy_protocols_conn_known_hosts_knownhosts_local_count = 1
utils_bro_btest_Baseline_scripts_policy_protocols_conn_known_hosts_knownhosts_remote_count = 3
utils_bro_btest_Baseline_scripts_policy_protocols_conn_known_services_knownservices_all_count = 5
utils_bro_btest_Baseline_scripts_policy_protocols_conn_known_services_knownservices_local_count = 3
utils_bro_btest_Baseline_scripts_policy_protocols_conn_known_services_knownservices_remote_count = 2
utils_bro_btest_Baseline_scripts_policy_protocols_conn_mac_logging_conn1_count = 34
utils_bro_btest_Baseline_scripts_policy_protocols_conn_mac_logging_conn2_count = 2
utils_bro_btest_Baseline_scripts_policy_protocols_conn_mac_logging_conn3_count = 1333
utils_bro_btest_Baseline_scripts_policy_protocols_conn_vlan_logging_conn_count = 2
utils_bro_btest_Baseline_scripts_policy_protocols_dhcp_known_devices_and_hostnames_basic_known_devices_count = 2
utils_bro_btest_Baseline_scripts_policy_protocols_http_flash_version_software_count = 3
utils_bro_btest_Baseline_scripts_policy_protocols_http_header_names_http_count = 14
utils_bro_btest_Baseline_scripts_policy_protocols_krb_ticket_logging_kerberos_count = 1
utils_bro_btest_Baseline_scripts_policy_protocols_ssh_detect_bruteforcing_notice_count = 1
utils_bro_btest_Baseline_scripts_policy_protocols_ssl_expiring_certs_notice_count = 2
utils_bro_btest_Baseline_scripts_policy_protocols_ssl_heartbleed_notice_encrypted_count = 1
utils_bro_btest_Baseline_scripts_policy_protocols_ssl_heartbleed_notice_encrypted_short_count = 3
utils_bro_btest_Baseline_scripts_policy_protocols_ssl_heartbleed_notice_encrypted_success_count = 3
utils_bro_btest_Baseline_scripts_policy_protocols_ssl_heartbleed_notice_heartbleed_count = 1
utils_bro_btest_Baseline_scripts_policy_protocols_ssl_heartbleed_notice_heartbleed_success_count = 2
utils_bro_btest_Baseline_scripts_policy_protocols_ssl_known_certs_known_certs_count = 1
utils_bro_btest_Baseline_scripts_policy_protocols_ssl_known_certs_ssl_count = 2
utils_bro_btest_Baseline_scripts_policy_protocols_ssl_known_certs_x509_count = 6
utils_bro_btest_Baseline_scripts_policy_protocols_ssl_log_hostcerts_only_x509_count = 2
utils_bro_btest_Baseline_scripts_policy_protocols_ssl_validate_certs_no_cache_ssl_count = 3
utils_bro_btest_Baseline_scripts_policy_protocols_ssl_validate_certs_ssl_all_count = 5
utils_bro_btest_Baseline_scripts_policy_protocols_ssl_validate_ocsp_ssl_count = 1
utils_bro_btest_Baseline_scripts_policy_protocols_ssl_validate_ocsp_ssl_digicert_count = 1
utils_bro_btest_Baseline_scripts_policy_protocols_ssl_validate_ocsp_ssl_twimg_count = 1
utils_bro_btest_Baseline_scripts_policy_protocols_ssl_weak_keys_notice_out_count = 6
utils_bro_btest_Baseline_signatures_eval_condition_conn_count = 5
26 tests/tests.py
View file
@@ -1529,6 +1529,29 @@ def is_prime(n):
self.assertTrue(all(is_prime(x) for x in factors))
self.assertEqual(reduce(lambda x, y: x * y, factors), nbr)

# Bro logs
basepath = os.getenv('BRO_SAMPLES')
badchars = re.compile('[%s]' % ''.join(
re.escape(char) for char in [os.path.sep, '-', '.']
))
if basepath:
for dirname, _, fnames in os.walk(basepath):
for fname in fnames:
if not fname.endswith('.log'):
continue
fname = os.path.join(dirname, fname)
brofd = ivre.parser.bro.BroFile(fname)
i = 0
for i, record in enumerate(brofd):
json.dumps(record, default=ivre.utils.serialize)
self.check_value(
'utils_bro_%s_count' % badchars.sub(
'_',
fname[len(basepath):-4].lstrip('/'),
),
i + 1,
)

def test_scans(self):
"Run scans, with and without agents"

@@ -1830,9 +1853,10 @@ def parse_env():
parse_env()
import ivre.config
import ivre.db
import ivre.utils
import ivre.mathutils
import ivre.parser.bro
import ivre.passive
import ivre.utils
if not ivre.config.DEBUG:
sys.stderr.write("You *must* have the DEBUG config value set to "
"True to run the tests.\n")