Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-04 07:38:19 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Add btests for has_valid_octets() and normalize_mac()

Browse source 
These functions reside in base/utils/addrs.zeek and were not tested. We don't
use has_valid_octets() anywhere right now, normalize_mac() is used in the RADIUS
analyzer, and addr_to_uri() is used in the signatures/dpd.zeek tests.
This commit is contained in:
Christian Kreibich 2025-03-18 17:45:24 -07:00
parent cb5e3d0054
commit 7ba9609992
2 changed files with 26 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

12
testing/btest/Baseline/scripts.base.utils.addrs/output
View file

@ -61,3 +61,15 @@ F
[1.1.1.1]
[1.1.1.1]
[6:1:2::3:4:5:6]
============ test has_valid_octets()
T
T
T
F
F
============ test normalize_mac()
aa:bb:cc:dd:ee:ff
aa:bb:cc:dd:ee:ff
aa:bb:cc:dd:ee:ff
00:11:aa:bb:cc:dd:ee:ff

14
testing/btest/scripts/base/utils/addrs.test
View file

@ -149,4 +149,18 @@ event zeek_init()
# by a person trying to parse such a string, but that's just what's going
# to happen; it's on them to deal).
print extract_ip_addresses("IPv6:1:2::3:4:5:6:7");
print "============ test has_valid_octets()";
print has_valid_octets(vector("1", "1", "1", "1"));
print has_valid_octets(vector("0", "0", "0", "0"));
print has_valid_octets(vector("255", "255", "255", "255"));
print has_valid_octets(vector("256", "255", "255", "255")); # F
print has_valid_octets(vector("65535", "255", "255", "255")); # F
print "============ test normalize_mac()";
print normalize_mac("aabbccddeeff");
print normalize_mac("this is aa:bb:cc:dd:ee:ff");
print normalize_mac("this is aa bb cc dd ee ff");
print normalize_mac("this is 00:11:aa:bb:cc:dd:ee:ff");
print normalize_mac("this is nothing mac-related");
}