You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@metron.apache.org by GitBox <gi...@apache.org> on 2019/01/09 15:38:26 UTC

[GitHub] ottobackwards edited a comment on issue #21: METRON-1911 Docker setup for testing bro plugin

ottobackwards edited a comment on issue #21: METRON-1911 Docker setup for testing bro plugin
URL: https://github.com/apache/metron-bro-plugin-kafka/pull/21#issuecomment-452740378
 
 
   So with the recent changes:
   
   1.  everything get's output together in the test_output directory ( see the readme )
   2. there is the main kafka-output.log as well as a $LOGNAME.kafka.log for each log
   3. there is a results.csv per pcap as well that has the line counts for kafka and bro per log
   4. the script prints out the results:
   
   ```bash
   --> /Users/ottofowler/src/apache/forks/metron-bro-plugin-kafka/docker/test_output/Wed_Jan__9_10_28_09_EST_2019/ssh_pcap/results.csv
   LOG           BRO_COUNT  KAFKA_COUNT
   capture_loss         1         58
   notice               1         53
   software             4        987
   ssh                 40         40
   stats                2        162
   ========================================================
   
   --> /Users/ottofowler/src/apache/forks/metron-bro-plugin-kafka/docker/test_output/Wed_Jan__9_10_28_09_EST_2019/radius_localhost_pcapng/results.csv
   LOG           BRO_COUNT  KAFKA_COUNT
   capture_loss         1         56
   radius               7          7
   stats                2        159
   ========================================================
   ```
   
   So with the csv etc I think everything is setup now to adapt this for more specific tests etc.
   
   > NOTE: The numbers for the the non-protocol logs don't match up well.  I think there may be output in the log that doesn't go into kafka.  I already try to escape lines that start with `#`, but there may be more
   
   Please have a look @nickwallen @JonZeolla 

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services