dns_test.bro

redef exit_only_after_terminate = T;

event test()
	{
    local src = 1.2.3.4;
    local dst = 8.8.8.8;
    local output = "";
	if ( T )
		{
		when ( local src_name = lookup_addr(src) )
			{
                if (src_name != "<???>") {
                    print "src fail!", src_name;
                }
			}
		}
	if ( T )
		{
		when ( local dst_name = lookup_addr(dst) )
			{
                if (dst_name != "google-public-dns-a.google.com") {
                    print "dst fail!", dst_name;
                }
			}
		}

    schedule .1sec { test() };
	}

event bro_init() {
    schedule 0sec { test() };
}