[Bro-Dev] tests and libmagic (Re: Updating testing/external)

Robin Sommer robin at icir.org
Fri Sep 9 07:49:51 PDT 2011


One problem I'm running into is that different libmagic setups
classify data in different ways. For example, I see a number of HTTP
entities classified as text/html on one machine yet as text/plain on
another.

Not sure how to deal with that for test baselines. I'm thinking to
preprocess logs to just have a boolean flag indicating whether there
is a mime type at all before diffing but otherwise make the
comparision oblivious to the actual value.

Better ideas?

Robin

-- 
Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org


More information about the bro-dev mailing list