diff --git a/testing/btest/Baseline/scripts.base.protocols.sip.wireshark/sip.log b/testing/btest/Baseline/scripts.base.protocols.sip.wireshark/sip.log new file mode 100644 index 0000000000..e9c18b5682 --- /dev/null +++ b/testing/btest/Baseline/scripts.base.protocols.sip.wireshark/sip.log @@ -0,0 +1,44 @@ +#separator \x09 +#set_separator , +#empty_field (empty) +#unset_field - +#path sip +#open 2015-04-20-02-24-18 +#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p trans_depth method uri date from to reply_to call_id seq subject path user_agent status_code status_msg warning request_body_len response_body_len content_type +#types time string addr port addr port count string string string string string string string string string vector[string] string count string string string string string +1120469572.844249 CXWv6p3arKYeMETxOg 192.168.1.2 5060 212.242.33.35 5060 0 REGISTER sip:sip.cybercity.dk - - 578222729-4665d775@578222732-4665d772 68 REGISTER - SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 401 Unauthorized - 0 0 - +1120469590.259876 CXWv6p3arKYeMETxOg 192.168.1.2 5060 212.242.33.35 5060 0 REGISTER sip:sip.cybercity.dk - - 578222729-4665d775@578222732-4665d772 69 REGISTER - SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 100 Trying - 0 0 - +1120469590.259876 CXWv6p3arKYeMETxOg 192.168.1.2 5060 212.242.33.35 5060 0 REGISTER sip:sip.cybercity.dk - - 578222729-4665d775@578222732-4665d772 69 REGISTER - SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 403 Wrong password - 0 0 - +1120469680.188467 CjhGID4nQcgTWjvg4c 192.168.1.2 5060 212.242.33.35 5060 0 REGISTER sip:sip.cybercity.dk - - 578222729-4665d775@578222732-4665d772 70 REGISTER - SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 401 Unauthorized - 0 0 - +1120469697.469146 CjhGID4nQcgTWjvg4c 192.168.1.2 5060 212.242.33.35 5060 0 REGISTER sip:sip.cybercity.dk - - 578222729-4665d775@578222732-4665d772 71 REGISTER - SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 401 nonce has changed - 0 0 - +1120469847.669186 CCvvfg3TEfuqmmG4bh 192.168.1.2 5060 212.242.33.35 5060 0 REGISTER sip:sip.cybercity.dk - - 578222729-4665d775@578222732-4665d772 72 REGISTER - SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 401 Unauthorized - 0 0 - +1120469864.994366 CCvvfg3TEfuqmmG4bh 192.168.1.2 5060 212.242.33.35 5060 0 REGISTER sip:sip.cybercity.dk - - 578222729-4665d775@578222732-4665d772 73 REGISTER - SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 401 nonce has changed - 0 0 - +1120469938.910409 CsRx2w45OKnoww6xl4 192.168.1.2 5060 212.242.33.35 5060 0 REGISTER sip:sip.cybercity.dk - - 578222729-4665d775@578222732-4665d772 74 REGISTER - SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 401 Unauthorized - 0 0 - +1120469956.235447 CsRx2w45OKnoww6xl4 192.168.1.2 5060 212.242.33.35 5060 0 REGISTER sip:sip.cybercity.dk - - 578222729-4665d775@578222732-4665d772 75 REGISTER - SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 100 Trying - 0 0 - +1120469956.235447 CsRx2w45OKnoww6xl4 192.168.1.2 5060 212.242.33.35 5060 0 REGISTER sip:sip.cybercity.dk - - 578222729-4665d775@578222732-4665d772 75 REGISTER - SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 200 OK - 0 0 - +1120470049.188993 CRJuHdVW0XPVINV8a 192.168.1.2 5060 200.68.120.81 5060 0 INVITE sip:97239287044@voip.brujula.net - "arik" - 105090259-446faf7a@192.168.1.2 1 INVITE - SIP/2.0/UDP 192.168.1.2:5060,SIP/2.0/UDP 192.168.1.2:5060,SIP/2.0/UDP 192.168.1.2:5060 Nero SIPPS IP Phone Version 2.0.51.16 100 trying -- your call is important to us 392 200.68.120.81:5060 "Noisy feedback tells: pid=32642 req_src_ip=80.230.219.70 req_src_port=5060 in_uri=sip:97239287044@voip.brujula.net out_uri=sip:97239287044@voip.brujula.net via_cnt==1" 272 0 - +1120470049.188993 CRJuHdVW0XPVINV8a 192.168.1.2 5060 200.68.120.81 5060 0 CANCEL sip:97239287044@voip.brujula.net - "arik" - 105090259-446faf7a@192.168.1.2 1 CANCEL - SIP/2.0/UDP 192.168.1.2:5060,SIP/2.0/UDP 192.168.1.2:5060,SIP/2.0/UDP 192.168.1.2:5060,SIP/2.0/UDP 192.168.1.2,SIP/2.0/UDP 192.168.1.2,SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 408 Request Timeout 392 200.68.120.81:5060 "Noisy feedback tells: pid=32753 req_src_ip=80.230.219.70 req_src_port=5060 in_uri=sip:97239287044@voip.brujula.net out_uri=sip:97239287044@voip.brujula.net via_cnt==0" 0 0 - +1120470085.969731 CRJuHdVW0XPVINV8a 192.168.1.2 5060 200.68.120.81 5060 0 CANCEL sip:97239287044@voip.brujula.net - "arik" - 105090259-446faf7a@192.168.1.2 1 CANCEL - SIP/2.0/UDP 192.168.1.2:5060,SIP/2.0/UDP 192.168.1.2,SIP/2.0/UDP 192.168.1.2,SIP/2.0/UDP 192.168.1.2,SIP/2.0/UDP 192.168.1.2,SIP/2.0/UDP 192.168.1.2,SIP/2.0/UDP 192.168.1.2,SIP/2.0/UDP 192.168.1.2,SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 408 Request Timeout 392 200.68.120.81:5060 "Noisy feedback tells: pid=32753 req_src_ip=80.230.219.70 req_src_port=5060 in_uri=sip:97239287044@voip.brujula.net out_uri=sip:97239287044@voip.brujula.net via_cnt==0" 0 0 - +1120470233.794463 CPbrpk1qSsw6ESzHV4 192.168.1.2 5060 212.242.33.35 5060 0 INVITE sip:0097239287044@sip.cybercity.dk - "arik" - 85216695-42dcdb1d@192.168.1.2 1 INVITE - SIP/2.0/UDP 192.168.1.2:5060,SIP/2.0/UDP 192.168.1.2:5060,SIP/2.0/UDP 192.168.1.2:5060 Nero SIPPS IP Phone Version 2.0.51.16 407 authentication required - 270 0 - +1120470235.521078 CPbrpk1qSsw6ESzHV4 192.168.1.2 5060 212.242.33.35 5060 0 INVITE sip:0097239287044@sip.cybercity.dk Mon, 04 Jul 2005 09:43:55 GMT "arik" - 85216695-42dcdb1d@192.168.1.2 2 INVITE - SIP/2.0/UDP 192.168.1.2:5060,SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 403 Wrong password or domain - 270 0 - +1120470268.180956 CPbrpk1qSsw6ESzHV4 192.168.1.2 5060 212.242.33.35 5060 0 ACK sip:0097239287044@sip.cybercity.dk - "arik" ;tag=00-04071-1701b4ad-52a186e31 - 85216695-42dcdb1d@192.168.1.2 2 ACK - SIP/2.0/UDP 192.168.1.2 - - - - 0 - - +1120470456.154119 C6pKV8GSxOnSLghOa 192.168.1.2 5060 212.242.33.35 5060 0 REGISTER sip:sip.cybercity.dk - - 578222729-4665d775@578222732-4665d772 76 REGISTER - SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 401 Unauthorized - 0 0 - +1120470473.529233 C6pKV8GSxOnSLghOa 192.168.1.2 5060 212.242.33.35 5060 0 REGISTER sip:sip.cybercity.dk - - 578222729-4665d775@578222732-4665d772 77 REGISTER - SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 401 nonce has changed - 0 0 - +1120470490.643822 C6pKV8GSxOnSLghOa 192.168.1.2 5060 212.242.33.35 5060 0 REGISTER sip:sip.cybercity.dk - - 578222729-4665d775@578222732-4665d772 78 REGISTER - SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 401 Unauthorized - 0 0 - +1120470509.450894 C6pKV8GSxOnSLghOa 192.168.1.2 5060 212.242.33.35 5060 0 REGISTER sip:sip.cybercity.dk - - 578222729-4665d775@578222732-4665d772 79 REGISTER - SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 401 nonce has changed - 0 0 - +1120470796.804243 CIPOse170MGiRM1Qf4 192.168.1.2 5060 212.242.33.35 5060 0 REGISTER sip:sip.cybercity.dk - - 29858147-465b0752@29858051-465b07b2 1 REGISTER - SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 401 Unauthorized - 0 0 - +1120470814.189540 CIPOse170MGiRM1Qf4 192.168.1.2 5060 212.242.33.35 5060 0 REGISTER sip:sip.cybercity.dk - - 29858147-465b0752@29858051-465b07b2 2 REGISTER - SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 100 Trying - 0 0 - +1120470814.189540 CIPOse170MGiRM1Qf4 192.168.1.2 5060 212.242.33.35 5060 0 REGISTER sip:sip.cybercity.dk - - 29858147-465b0752@29858051-465b07b2 2 REGISTER - SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 200 OK - 0 0 - +1120470831.403943 CIPOse170MGiRM1Qf4 192.168.1.2 5060 212.242.33.35 5060 0 REGISTER sip:sip.cybercity.dk - - 29858147-465b0752@29858051-465b07b2 3 REGISTER - SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 401 Unauthorized - 0 0 - +1120470848.528833 CIPOse170MGiRM1Qf4 192.168.1.2 5060 212.242.33.35 5060 0 INVITE sip:0097239287044@sip.cybercity.dk - "arik" - 24487391-449bf2a0@192.168.1.2 1 INVITE - SIP/2.0/UDP 192.168.1.2:5060 Nero SIPPS IP Phone Version 2.0.51.16 407 authentication required - 270 0 - +1120470848.686860 CIPOse170MGiRM1Qf4 192.168.1.2 5060 212.242.33.35 5060 0 REGISTER sip:sip.cybercity.dk - - 29858147-465b0752@29858051-465b07b2 4 REGISTER - SIP/2.0/UDP 192.168.1.2:5060,SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 401 nonce has changed - 0 0 - +1120470899.862890 CIPOse170MGiRM1Qf4 192.168.1.2 5060 212.242.33.35 5060 0 INVITE sip:0097239287044@sip.cybercity.dk Mon, 04 Jul 2005 09:54:25 GMT "arik" - 24487391-449bf2a0@192.168.1.2 2 INVITE - SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 100 Trying - 270 0 - +1120470899.862890 CIPOse170MGiRM1Qf4 192.168.1.2 5060 212.242.33.35 5060 0 INVITE sip:0097239287044@sip.cybercity.dk Mon, 04 Jul 2005 09:54:25 GMT "arik" - 24487391-449bf2a0@192.168.1.2 2 INVITE - SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 403 Wrong password or domain - 270 0 - +1120470900.060556 CIPOse170MGiRM1Qf4 192.168.1.2 5060 212.242.33.35 5060 0 ACK sip:0097239287044@sip.cybercity.dk - "arik" ;tag=00-04083-1701ba17-57d493ef5 - 24487391-449bf2a0@192.168.1.2 2 ACK - SIP/2.0/UDP 192.168.1.2 - - - - 0 - - +1120470966.443914 C7XEbhP654jzLoe3a 192.168.1.2 5060 212.242.33.35 5060 0 INVITE sip:35104724@sip.cybercity.dk - "arik" - 11894297-4432a9f8@192.168.1.2 1 INVITE - SIP/2.0/UDP 192.168.1.2:5060 Nero SIPPS IP Phone Version 2.0.51.16 407 authentication required - 270 0 - +1120470966.606422 C7XEbhP654jzLoe3a 192.168.1.2 5060 212.242.33.35 5060 0 INVITE sip:35104724@sip.cybercity.dk Mon, 04 Jul 2005 09:56:06 GMT "arik" - 11894297-4432a9f8@192.168.1.2 2 INVITE - SIP/2.0/UDP 192.168.1.2:5060,SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 100 Trying - 270 0 - +1120470966.606422 C7XEbhP654jzLoe3a 192.168.1.2 5060 212.242.33.35 5060 0 INVITE sip:35104724@sip.cybercity.dk Mon, 04 Jul 2005 09:56:06 GMT "arik" - 11894297-4432a9f8@192.168.1.2 2 INVITE - SIP/2.0/UDP 192.168.1.2:5060,SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 480 Error - 270 0 application/sdp +1120470984.353086 C7XEbhP654jzLoe3a 192.168.1.2 5060 212.242.33.35 5060 0 REGISTER sip:sip.cybercity.dk - - 29858147-465b0752@29858051-465b07b2 5 REGISTER - SIP/2.0/UDP 192.168.1.2,SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 401 Unauthorized - 0 0 - +1120471018.723316 C7XEbhP654jzLoe3a 192.168.1.2 5060 212.242.33.35 5060 0 REGISTER sip:sip.cybercity.dk - - 29858147-465b0752@29858051-465b07b2 6 REGISTER - SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 100 Trying - 0 0 - +1120471018.723316 C7XEbhP654jzLoe3a 192.168.1.2 5060 212.242.33.35 5060 0 REGISTER sip:sip.cybercity.dk - - 29858147-465b0752@29858051-465b07b2 6 REGISTER - SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 200 OK - 0 0 - +#close 2015-04-20-02-24-18 diff --git a/testing/btest/Traces/sip/wireshark.trace b/testing/btest/Traces/sip/wireshark.trace new file mode 100644 index 0000000000..f91ab49b4a Binary files /dev/null and b/testing/btest/Traces/sip/wireshark.trace differ diff --git a/testing/btest/core/leaks/sip.test b/testing/btest/core/leaks/sip.test new file mode 100644 index 0000000000..1aac2b30e0 --- /dev/null +++ b/testing/btest/core/leaks/sip.test @@ -0,0 +1,10 @@ +# Needs perftools support. +# +# @TEST-REQUIRES: bro --help 2>&1 | grep -q mem-leaks +# +# @TEST-GROUP: leaks +# +# @TEST-EXEC: HEAP_CHECK_DUMP_DIRECTORY=. HEAPCHECK=local btest-bg-run bro bro -b -m -r $TRACES/sip/wireshark.trace %INPUT +# @TEST-EXEC: btest-bg-wait 60 + +@load base/protocols/sip diff --git a/testing/btest/scripts/base/protocols/sip/wireshark.test b/testing/btest/scripts/base/protocols/sip/wireshark.test new file mode 100644 index 0000000000..8c4611c880 --- /dev/null +++ b/testing/btest/scripts/base/protocols/sip/wireshark.test @@ -0,0 +1,6 @@ +# This tests a PCAP with a few SIP commands from the Wireshark samples. + +# @TEST-EXEC: bro -b -r $TRACES/sip/wireshark.trace %INPUT +# @TEST-EXEC: btest-diff sip.log + +@load base/protocols/sip \ No newline at end of file