[Bro-Dev] tests and libmagic (Re: Updating testing/external)
Robin Sommer
robin at icir.org
Fri Sep 9 07:49:51 PDT 2011
One problem I'm running into is that different libmagic setups
classify data in different ways. For example, I see a number of HTTP
entities classified as text/html on one machine yet as text/plain on
another.
Not sure how to deal with that for test baselines. I'm thinking to
preprocess logs to just have a boolean flag indicating whether there
is a mime type at all before diffing but otherwise make the
comparision oblivious to the actual value.
Better ideas?
Robin
--
Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL * Fax +1 (510) 666-2956 * www.icir.org
More information about the bro-dev
mailing list