98 lines
3.1 KiB
Go
98 lines
3.1 KiB
Go
|
package audit_test
|
||
|
|
||
|
import (
|
||
|
"bytes"
|
||
|
"encoding/binary"
|
||
|
"encoding/hex"
|
||
|
"io"
|
||
|
"testing"
|
||
|
|
||
|
"gitlab.com/inetmock/inetmock/pkg/audit"
|
||
|
"google.golang.org/protobuf/proto"
|
||
|
)
|
||
|
|
||
|
var (
|
||
|
//nolint:lll
|
||
|
httpPayloadBytesLittleEndian = `dd000000120b088092b8c398feffffff011801200248d8fc0150505a3308041224544c535f45434448455f45434453415f574954485f4145535f3235365f4342435f5348411a096c6f63616c686f73746282010a34747970652e676f6f676c65617069732e636f6d2f696e65746d6f636b2e61756469742e4854545044657461696c73456e74697479124a12096c6f63616c686f73741a15687474703a2f2f6c6f63616c686f73742f6173646622084854545020312e312a1c0a0641636365707412120a106170706c69636174696f6e2f6a736f6e28818080f80738818080f807`
|
||
|
//nolint:lll
|
||
|
httpPayloadBytesBigEndian = `000000dd120b088092b8c398feffffff011801200248d8fc0150505a3308041224544c535f45434448455f45434453415f574954485f4145535f3235365f4342435f5348411a096c6f63616c686f73746282010a34747970652e676f6f676c65617069732e636f6d2f696e65746d6f636b2e61756469742e4854545044657461696c73456e74697479124a12096c6f63616c686f73741a15687474703a2f2f6c6f63616c686f73742f6173646622084854545020312e312a1c0a0641636365707412120a106170706c69636174696f6e2f6a736f6e28818080f80738818080f807`
|
||
|
dnsPayloadBytesLittleEndian = `1b000000120b088092b8c398feffffff011801200148d8fc01505030014001`
|
||
|
dnsPayloadBytesBigEndian = `0000001b120b088092b8c398feffffff011801200148d8fc01505030014001`
|
||
|
)
|
||
|
|
||
|
func mustDecodeHex(hexBytes string) io.Reader {
|
||
|
b, err := hex.DecodeString(hexBytes)
|
||
|
if err != nil {
|
||
|
panic(err)
|
||
|
}
|
||
|
return bytes.NewReader(b)
|
||
|
}
|
||
|
|
||
|
func Test_eventReader_Read(t *testing.T) {
|
||
|
type fields struct {
|
||
|
source io.Reader
|
||
|
order binary.ByteOrder
|
||
|
}
|
||
|
type testCase struct {
|
||
|
name string
|
||
|
fields fields
|
||
|
wantEv audit.Event
|
||
|
wantErr bool
|
||
|
}
|
||
|
tests := []testCase{
|
||
|
{
|
||
|
name: "Read HTTP payload - little endian",
|
||
|
fields: fields{
|
||
|
source: mustDecodeHex(httpPayloadBytesLittleEndian),
|
||
|
order: binary.LittleEndian,
|
||
|
},
|
||
|
wantEv: testEvents[0],
|
||
|
wantErr: false,
|
||
|
},
|
||
|
{
|
||
|
name: "Read HTTP payload - big endian",
|
||
|
fields: fields{
|
||
|
source: mustDecodeHex(httpPayloadBytesBigEndian),
|
||
|
order: binary.BigEndian,
|
||
|
},
|
||
|
wantEv: testEvents[0],
|
||
|
wantErr: false,
|
||
|
},
|
||
|
{
|
||
|
name: "Read DNS payload - little endian",
|
||
|
fields: fields{
|
||
|
source: mustDecodeHex(dnsPayloadBytesLittleEndian),
|
||
|
order: binary.LittleEndian,
|
||
|
},
|
||
|
wantEv: testEvents[1],
|
||
|
wantErr: false,
|
||
|
},
|
||
|
{
|
||
|
name: "Read DNS payload - big endian",
|
||
|
fields: fields{
|
||
|
source: mustDecodeHex(dnsPayloadBytesBigEndian),
|
||
|
order: binary.BigEndian,
|
||
|
},
|
||
|
wantEv: testEvents[1],
|
||
|
wantErr: false,
|
||
|
},
|
||
|
}
|
||
|
scenario := func(tt testCase) func(t *testing.T) {
|
||
|
return func(t *testing.T) {
|
||
|
e := audit.NewEventReader(tt.fields.source, audit.WithReaderByteOrder(tt.fields.order))
|
||
|
gotEv, err := e.Read()
|
||
|
if (err != nil) != tt.wantErr {
|
||
|
t.Errorf("Read() error = %v, wantErr %v", err, tt.wantErr)
|
||
|
return
|
||
|
}
|
||
|
|
||
|
if err == nil && !proto.Equal(gotEv.ProtoMessage(), tt.wantEv.ProtoMessage()) {
|
||
|
t.Errorf("Read() gotEv = %v, want %v", gotEv, tt.wantEv)
|
||
|
}
|
||
|
}
|
||
|
}
|
||
|
for _, tt := range tests {
|
||
|
t.Run(tt.name, scenario(tt))
|
||
|
}
|
||
|
}
|