diff --git a/testing/btest/Baseline/policy.protocols.irc.basic/irc.log b/testing/btest/Baseline/policy.protocols.irc.basic/irc.log new file mode 100644 index 0000000000..033ddd5bf3 --- /dev/null +++ b/testing/btest/Baseline/policy.protocols.irc.basic/irc.log @@ -0,0 +1,5 @@ +# ts uid id.orig_h id.orig_p id.resp_h id.resp_p nick user channels command value addl tags dcc_file_name dcc_file_size dcc_mime_type extraction_file +1311189164.11944 UWkUyAuUGXf 192.168.1.77 57640 66.198.80.67 6667 - - - NICK bloed - - - - - - +1311189164.11944 UWkUyAuUGXf 192.168.1.77 57640 66.198.80.67 6667 bloed - - USER sdkfje sdkfje Montreal.QC.CA.Undernet.org dkdkrwq - - - - - +1311189174.47413 UWkUyAuUGXf 192.168.1.77 57640 66.198.80.67 6667 bloed sdkfje - JOIN #easymovies - - - - - - +1311189316.32603 UWkUyAuUGXf 192.168.1.77 57640 66.198.80.67 6667 bloed sdkfje - DCC #easymovies - - ladyvampress-default(2011-07-07)-OS.zip 42208 application/zip; charset=binary - diff --git a/testing/btest/Baseline/policy.protocols.irc.dcc-extract/irc-dcc-item_192.168.1.77:57655-209.197.168.151:1024_1.dat b/testing/btest/Baseline/policy.protocols.irc.dcc-extract/irc-dcc-item_192.168.1.77:57655-209.197.168.151:1024_1.dat new file mode 100644 index 0000000000..d4ec9e374b Binary files /dev/null and b/testing/btest/Baseline/policy.protocols.irc.dcc-extract/irc-dcc-item_192.168.1.77:57655-209.197.168.151:1024_1.dat differ diff --git a/testing/btest/Baseline/policy.protocols.irc.dcc-extract/irc.log b/testing/btest/Baseline/policy.protocols.irc.dcc-extract/irc.log new file mode 100644 index 0000000000..5e72f1e11f --- /dev/null +++ b/testing/btest/Baseline/policy.protocols.irc.dcc-extract/irc.log @@ -0,0 +1,5 @@ +# ts uid id.orig_h id.orig_p id.resp_h id.resp_p nick user channels command value addl tags dcc_file_name dcc_file_size dcc_mime_type extraction_file +1311189164.11944 UWkUyAuUGXf 192.168.1.77 57640 66.198.80.67 6667 - - - NICK bloed - - - - - - +1311189164.11944 UWkUyAuUGXf 192.168.1.77 57640 66.198.80.67 6667 bloed - - USER sdkfje sdkfje Montreal.QC.CA.Undernet.org dkdkrwq - - - - - +1311189174.47413 UWkUyAuUGXf 192.168.1.77 57640 66.198.80.67 6667 bloed sdkfje - JOIN #easymovies - - - - - - +1311189316.32603 UWkUyAuUGXf 192.168.1.77 57640 66.198.80.67 6667 bloed sdkfje - DCC #easymovies - IRC::EXTRACTED_FILE ladyvampress-default(2011-07-07)-OS.zip 42208 application/zip; charset=binary irc-dcc-item_192.168.1.77:57655-209.197.168.151:1024_1.dat diff --git a/testing/btest/Traces/irc-dcc-send.trace b/testing/btest/Traces/irc-dcc-send.trace new file mode 100644 index 0000000000..88735b92c3 Binary files /dev/null and b/testing/btest/Traces/irc-dcc-send.trace differ diff --git a/testing/btest/policy/protocols/irc/basic.test b/testing/btest/policy/protocols/irc/basic.test new file mode 100644 index 0000000000..63c238a012 --- /dev/null +++ b/testing/btest/policy/protocols/irc/basic.test @@ -0,0 +1,5 @@ +# This tests that basic IRC commands (NICK, USER, JOIN, DCC SEND) +# are logged for a client. + +# @TEST-EXEC: bro protocols/irc -r $TRACES/irc-dcc-send.trace +# @TEST-EXEC: btest-diff irc.log diff --git a/testing/btest/policy/protocols/irc/dcc-extract.test b/testing/btest/policy/protocols/irc/dcc-extract.test new file mode 100644 index 0000000000..37bbd77f8c --- /dev/null +++ b/testing/btest/policy/protocols/irc/dcc-extract.test @@ -0,0 +1,8 @@ +# This tests that the contents of a DCC transfer negotiated with IRC can be +# correctly extracted + +# @TEST-EXEC: bro protocols/irc -r $TRACES/irc-dcc-send.trace IRC::extract_file_types=/application.*/ +# @TEST-EXEC: btest-diff irc.log +# @TEST-EXEC: btest-diff irc-dcc-item_192.168.1.77:57655-209.197.168.151:1024_1.dat +# @TEST-EXEC: bro protocols/irc -r $TRACES/irc-dcc-send.trace IRC::extract_file_types=/application.*/ IRC::extraction_prefix="test" +# @TEST-EXEC: test -e test_192.168.1.77:57655-209.197.168.151:1024_1.dat