FileAnalysis: add unit tests covering current protocol integration.

And had to make various fixes/refinements after scrutinizing results.
This commit is contained in:
Jon Siwek 2013-03-19 15:50:05 -05:00
parent b30211c178
commit 59ed5c75f1
72 changed files with 2605 additions and 53 deletions

View file

@ -0,0 +1,14 @@
FileAnalysis::TRIGGER_NEW
uj9AtyGOiZ8, 0, 0
FileAnalysis::TRIGGER_DONE
uj9AtyGOiZ8, 555523, 0
{
UWkUyAuUGXf,
arKYeMETxOg
}
{
[orig_h=10.101.84.70, orig_p=10978/tcp, resp_h=129.174.93.161, resp_p=80/tcp],
[orig_h=10.101.84.70, orig_p=10977/tcp, resp_h=129.174.93.161, resp_p=80/tcp]
}
total bytes: 555523
source: HTTP

View file

@ -0,0 +1 @@
555523 uj9AtyGOiZ8-file0

View file

@ -0,0 +1,25 @@
FileAnalysis::TRIGGER_NEW
ns7As4DOZcj, 0, 0
FileAnalysis::TRIGGER_DONE
ns7As4DOZcj, 1022920, 0
{
UWkUyAuUGXf
}
{
[orig_h=192.168.72.14, orig_p=3254/tcp, resp_h=65.54.95.206, resp_p=80/tcp]
}
total bytes: 1022920
source: HTTP
FileAnalysis::TRIGGER_NEW
ns7As4DOZcj, 0, 0
FileAnalysis::TRIGGER_TIMEOUT
FileAnalysis::TRIGGER_EOF
ns7As4DOZcj, 206024, 0
{
arKYeMETxOg
}
{
[orig_h=192.168.72.14, orig_p=3257/tcp, resp_h=65.54.95.14, resp_p=80/tcp]
}
total bytes: 1022920
source: HTTP

View file

@ -0,0 +1 @@
1022920 ns7As4DOZcj-file0

View file

@ -0,0 +1,14 @@
FileAnalysis::TRIGGER_NEW
MHMkq2nFxej, 0, 0
FileAnalysis::TRIGGER_DONE
MHMkq2nFxej, 498702, 0
{
UWkUyAuUGXf,
arKYeMETxOg
}
{
[orig_h=10.45.179.94, orig_p=19950/tcp, resp_h=129.174.93.170, resp_p=80/tcp],
[orig_h=10.45.179.94, orig_p=19953/tcp, resp_h=129.174.93.170, resp_p=80/tcp]
}
total bytes: 498668
source: HTTP

View file

@ -0,0 +1 @@
498668 MHMkq2nFxej-file0