Summary
As a Tester/User,
I want to be able to not only use PCAP but also CSV files to test Hamstring,
so that I have more test data selection choices for testing the whole pipeline
Extra Infos
Ingesting data into Zeek via PCAPs normally filters traffic based on the protocols activated. When ingesting a CSV, this must be emulated. Either, every line need to be parsed using the Zeek scripting language to determine the protocol or assume it by the file name or similar.
Summary
As a Tester/User,
I want to be able to not only use PCAP but also CSV files to test Hamstring,
so that I have more test data selection choices for testing the whole pipeline
Extra Infos
Ingesting data into Zeek via PCAPs normally filters traffic based on the protocols activated. When ingesting a CSV, this must be emulated. Either, every line need to be parsed using the Zeek scripting language to determine the protocol or assume it by the file name or similar.