ottobackwards commented on issue #21: METRON-1911 Docker setup for testing bro 
plugin
URL: 
https://github.com/apache/metron-bro-plugin-kafka/pull/21#issuecomment-452740378
 
 
   So with the recent changes:
   
   1.  everything get's output together in the test_output directory ( see the 
readme )
   2. there is the main kafka-output.log as well as a $LOGNAME.kafka.log for 
each log
   3. there is a results.csv per pcap as well that has the line counts for 
kafka and bro per log
   4 the script prints out the results:
   
   ```bash
   --> 
/Users/ottofowler/src/apache/forks/metron-bro-plugin-kafka/docker/test_output/Wed_Jan__9_10_28_09_EST_2019/ssh_pcap/results.csv
   LOG           BRO_COUNT  KAFKA_COUNT
   capture_loss         1         58
   notice               1         53
   software             4        987
   ssh                 40         40
   stats                2        162
   ========================================================
   
   --> 
/Users/ottofowler/src/apache/forks/metron-bro-plugin-kafka/docker/test_output/Wed_Jan__9_10_28_09_EST_2019/radius_localhost_pcapng/results.csv
   LOG           BRO_COUNT  KAFKA_COUNT
   capture_loss         1         56
   radius               7          7
   stats                2        159
   ========================================================
   ```
   
   So with the csv etc I think everything is setup now to adapt this for more 
specific tests etc.
   
   > NOTE: The numbers for the the non-protocol logs don't match up well.  I 
think there may be output in the log that doesn't go into kafka.  I already try 
to escape lines that start with `#`, but there may be more
   
   Please have a look @nickwallen @JonZeolla 

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
[email protected]


With regards,
Apache Git Services

Reply via email to