Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 06:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Add SIP btests.

Browse source
This commit is contained in:
Vlad Grigorescu 2015-04-19 22:25:37 -04:00
parent 11eb8a6371
commit d5ea6b8457
4 changed files with 60 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

44
testing/btest/Baseline/scripts.base.protocols.sip.wireshark/sip.log Normal file
View file

@ -0,0 +1,44 @@
#separator \x09
#set_separator ,
#empty_field (empty)
#unset_field -
#path sip
#open 2015-04-20-02-24-18
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p trans_depth method uri date from to reply_to call_id seq subject path user_agent status_code status_msg warning request_body_len response_body_len content_type
#types time string addr port addr port count string string string string string string string string string vector[string] string count string string string string string
1120469572.844249 CXWv6p3arKYeMETxOg 192.168.1.2 5060 212.242.33.35 5060 0 REGISTER sip:sip.cybercity.dk - <sip:voi18063@sip.cybercity.dk> <sip:voi18063@sip.cybercity.dk> - 578222729-4665d775@578222732-4665d772 68 REGISTER - SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 401 Unauthorized - 0 0 -
1120469590.259876 CXWv6p3arKYeMETxOg 192.168.1.2 5060 212.242.33.35 5060 0 REGISTER sip:sip.cybercity.dk - <sip:voi18063@sip.cybercity.dk> <sip:voi18063@sip.cybercity.dk> - 578222729-4665d775@578222732-4665d772 69 REGISTER - SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 100 Trying - 0 0 -
1120469590.259876 CXWv6p3arKYeMETxOg 192.168.1.2 5060 212.242.33.35 5060 0 REGISTER sip:sip.cybercity.dk - <sip:voi18063@sip.cybercity.dk> <sip:voi18063@sip.cybercity.dk> - 578222729-4665d775@578222732-4665d772 69 REGISTER - SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 403 Wrong password - 0 0 -
1120469680.188467 CjhGID4nQcgTWjvg4c 192.168.1.2 5060 212.242.33.35 5060 0 REGISTER sip:sip.cybercity.dk - <sip:voi18063@sip.cybercity.dk> <sip:voi18063@sip.cybercity.dk> - 578222729-4665d775@578222732-4665d772 70 REGISTER - SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 401 Unauthorized - 0 0 -
1120469697.469146 CjhGID4nQcgTWjvg4c 192.168.1.2 5060 212.242.33.35 5060 0 REGISTER sip:sip.cybercity.dk - <sip:voi18063@sip.cybercity.dk> <sip:voi18063@sip.cybercity.dk> - 578222729-4665d775@578222732-4665d772 71 REGISTER - SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 401 nonce has changed - 0 0 -
1120469847.669186 CCvvfg3TEfuqmmG4bh 192.168.1.2 5060 212.242.33.35 5060 0 REGISTER sip:sip.cybercity.dk - <sip:voi18062@sip.cybercity.dk> <sip:voi18062@sip.cybercity.dk> - 578222729-4665d775@578222732-4665d772 72 REGISTER - SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 401 Unauthorized - 0 0 -
1120469864.994366 CCvvfg3TEfuqmmG4bh 192.168.1.2 5060 212.242.33.35 5060 0 REGISTER sip:sip.cybercity.dk - <sip:voi18062@sip.cybercity.dk> <sip:voi18062@sip.cybercity.dk> - 578222729-4665d775@578222732-4665d772 73 REGISTER - SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 401 nonce has changed - 0 0 -
1120469938.910409 CsRx2w45OKnoww6xl4 192.168.1.2 5060 212.242.33.35 5060 0 REGISTER sip:sip.cybercity.dk - <sip:voi18062@sip.cybercity.dk> <sip:voi18062@sip.cybercity.dk> - 578222729-4665d775@578222732-4665d772 74 REGISTER - SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 401 Unauthorized - 0 0 -
1120469956.235447 CsRx2w45OKnoww6xl4 192.168.1.2 5060 212.242.33.35 5060 0 REGISTER sip:sip.cybercity.dk - <sip:voi18062@sip.cybercity.dk> <sip:voi18062@sip.cybercity.dk> - 578222729-4665d775@578222732-4665d772 75 REGISTER - SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 100 Trying - 0 0 -
1120469956.235447 CsRx2w45OKnoww6xl4 192.168.1.2 5060 212.242.33.35 5060 0 REGISTER sip:sip.cybercity.dk - <sip:voi18062@sip.cybercity.dk> <sip:voi18062@sip.cybercity.dk> - 578222729-4665d775@578222732-4665d772 75 REGISTER - SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 200 OK - 0 0 -
1120470049.188993 CRJuHdVW0XPVINV8a 192.168.1.2 5060 200.68.120.81 5060 0 INVITE sip:97239287044@voip.brujula.net - "arik" <sip:816666@voip.brurjula.net> <sip:97239287044@voip.brujula.net> - 105090259-446faf7a@192.168.1.2 1 INVITE - SIP/2.0/UDP 192.168.1.2:5060,SIP/2.0/UDP 192.168.1.2:5060,SIP/2.0/UDP 192.168.1.2:5060 Nero SIPPS IP Phone Version 2.0.51.16 100 trying -- your call is important to us 392 200.68.120.81:5060 "Noisy feedback tells: pid=32642 req_src_ip=80.230.219.70 req_src_port=5060 in_uri=sip:97239287044@voip.brujula.net out_uri=sip:97239287044@voip.brujula.net via_cnt==1" 272 0 -
1120470049.188993 CRJuHdVW0XPVINV8a 192.168.1.2 5060 200.68.120.81 5060 0 CANCEL sip:97239287044@voip.brujula.net - "arik" <sip:816666@voip.brurjula.net> <sip:97239287044@voip.brujula.net> - 105090259-446faf7a@192.168.1.2 1 CANCEL - SIP/2.0/UDP 192.168.1.2:5060,SIP/2.0/UDP 192.168.1.2:5060,SIP/2.0/UDP 192.168.1.2:5060,SIP/2.0/UDP 192.168.1.2,SIP/2.0/UDP 192.168.1.2,SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 408 Request Timeout 392 200.68.120.81:5060 "Noisy feedback tells: pid=32753 req_src_ip=80.230.219.70 req_src_port=5060 in_uri=sip:97239287044@voip.brujula.net out_uri=sip:97239287044@voip.brujula.net via_cnt==0" 0 0 -
1120470085.969731 CRJuHdVW0XPVINV8a 192.168.1.2 5060 200.68.120.81 5060 0 CANCEL sip:97239287044@voip.brujula.net - "arik" <sip:816666@voip.brurjula.net> <sip:97239287044@voip.brujula.net> - 105090259-446faf7a@192.168.1.2 1 CANCEL - SIP/2.0/UDP 192.168.1.2:5060,SIP/2.0/UDP 192.168.1.2,SIP/2.0/UDP 192.168.1.2,SIP/2.0/UDP 192.168.1.2,SIP/2.0/UDP 192.168.1.2,SIP/2.0/UDP 192.168.1.2,SIP/2.0/UDP 192.168.1.2,SIP/2.0/UDP 192.168.1.2,SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 408 Request Timeout 392 200.68.120.81:5060 "Noisy feedback tells: pid=32753 req_src_ip=80.230.219.70 req_src_port=5060 in_uri=sip:97239287044@voip.brujula.net out_uri=sip:97239287044@voip.brujula.net via_cnt==0" 0 0 -
1120470233.794463 CPbrpk1qSsw6ESzHV4 192.168.1.2 5060 212.242.33.35 5060 0 INVITE sip:0097239287044@sip.cybercity.dk - "arik" <sip:voi18062@sip.cybercity.dk> <sip:0097239287044@sip.cybercity.dk> - 85216695-42dcdb1d@192.168.1.2 1 INVITE - SIP/2.0/UDP 192.168.1.2:5060,SIP/2.0/UDP 192.168.1.2:5060,SIP/2.0/UDP 192.168.1.2:5060 Nero SIPPS IP Phone Version 2.0.51.16 407 authentication required - 270 0 -
1120470235.521078 CPbrpk1qSsw6ESzHV4 192.168.1.2 5060 212.242.33.35 5060 0 INVITE sip:0097239287044@sip.cybercity.dk Mon, 04 Jul 2005 09:43:55 GMT "arik" <sip:voi18062@sip.cybercity.dk> <sip:0097239287044@sip.cybercity.dk> - 85216695-42dcdb1d@192.168.1.2 2 INVITE - SIP/2.0/UDP 192.168.1.2:5060,SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 403 Wrong password or domain - 270 0 -
1120470268.180956 CPbrpk1qSsw6ESzHV4 192.168.1.2 5060 212.242.33.35 5060 0 ACK sip:0097239287044@sip.cybercity.dk - "arik" <sip:voi18062@sip.cybercity.dk> <sip:0097239287044@sip.cybercity.dk>;tag=00-04071-1701b4ad-52a186e31 - 85216695-42dcdb1d@192.168.1.2 2 ACK - SIP/2.0/UDP 192.168.1.2 - - - - 0 - -
1120470456.154119 C6pKV8GSxOnSLghOa 192.168.1.2 5060 212.242.33.35 5060 0 REGISTER sip:sip.cybercity.dk - <sip:voi18062@sip.cybercity.dk> <sip:voi18062@sip.cybercity.dk> - 578222729-4665d775@578222732-4665d772 76 REGISTER - SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 401 Unauthorized - 0 0 -
1120470473.529233 C6pKV8GSxOnSLghOa 192.168.1.2 5060 212.242.33.35 5060 0 REGISTER sip:sip.cybercity.dk - <sip:voi18062@sip.cybercity.dk> <sip:voi18062@sip.cybercity.dk> - 578222729-4665d775@578222732-4665d772 77 REGISTER - SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 401 nonce has changed - 0 0 -
1120470490.643822 C6pKV8GSxOnSLghOa 192.168.1.2 5060 212.242.33.35 5060 0 REGISTER sip:sip.cybercity.dk - <sip:35104723@sip.cybercity.dk> <sip:35104723@sip.cybercity.dk> - 578222729-4665d775@578222732-4665d772 78 REGISTER - SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 401 Unauthorized - 0 0 -
1120470509.450894 C6pKV8GSxOnSLghOa 192.168.1.2 5060 212.242.33.35 5060 0 REGISTER sip:sip.cybercity.dk - <sip:35104723@sip.cybercity.dk> <sip:35104723@sip.cybercity.dk> - 578222729-4665d775@578222732-4665d772 79 REGISTER - SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 401 nonce has changed - 0 0 -
1120470796.804243 CIPOse170MGiRM1Qf4 192.168.1.2 5060 212.242.33.35 5060 0 REGISTER sip:sip.cybercity.dk - <sip:35104723@sip.cybercity.dk> <sip:35104723@sip.cybercity.dk> - 29858147-465b0752@29858051-465b07b2 1 REGISTER - SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 401 Unauthorized - 0 0 -
1120470814.189540 CIPOse170MGiRM1Qf4 192.168.1.2 5060 212.242.33.35 5060 0 REGISTER sip:sip.cybercity.dk - <sip:35104723@sip.cybercity.dk> <sip:35104723@sip.cybercity.dk> - 29858147-465b0752@29858051-465b07b2 2 REGISTER - SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 100 Trying - 0 0 -
1120470814.189540 CIPOse170MGiRM1Qf4 192.168.1.2 5060 212.242.33.35 5060 0 REGISTER sip:sip.cybercity.dk - <sip:35104723@sip.cybercity.dk> <sip:35104723@sip.cybercity.dk> - 29858147-465b0752@29858051-465b07b2 2 REGISTER - SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 200 OK - 0 0 -
1120470831.403943 CIPOse170MGiRM1Qf4 192.168.1.2 5060 212.242.33.35 5060 0 REGISTER sip:sip.cybercity.dk - <sip:35104723@sip.cybercity.dk> <sip:35104723@sip.cybercity.dk> - 29858147-465b0752@29858051-465b07b2 3 REGISTER - SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 401 Unauthorized - 0 0 -
1120470848.528833 CIPOse170MGiRM1Qf4 192.168.1.2 5060 212.242.33.35 5060 0 INVITE sip:0097239287044@sip.cybercity.dk - "arik" <sip:35104723@sip.cybercity.dk> <sip:0097239287044@sip.cybercity.dk> - 24487391-449bf2a0@192.168.1.2 1 INVITE - SIP/2.0/UDP 192.168.1.2:5060 Nero SIPPS IP Phone Version 2.0.51.16 407 authentication required - 270 0 -
1120470848.686860 CIPOse170MGiRM1Qf4 192.168.1.2 5060 212.242.33.35 5060 0 REGISTER sip:sip.cybercity.dk - <sip:35104723@sip.cybercity.dk> <sip:35104723@sip.cybercity.dk> - 29858147-465b0752@29858051-465b07b2 4 REGISTER - SIP/2.0/UDP 192.168.1.2:5060,SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 401 nonce has changed - 0 0 -
1120470899.862890 CIPOse170MGiRM1Qf4 192.168.1.2 5060 212.242.33.35 5060 0 INVITE sip:0097239287044@sip.cybercity.dk Mon, 04 Jul 2005 09:54:25 GMT "arik" <sip:35104723@sip.cybercity.dk> <sip:0097239287044@sip.cybercity.dk> - 24487391-449bf2a0@192.168.1.2 2 INVITE - SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 100 Trying - 270 0 -
1120470899.862890 CIPOse170MGiRM1Qf4 192.168.1.2 5060 212.242.33.35 5060 0 INVITE sip:0097239287044@sip.cybercity.dk Mon, 04 Jul 2005 09:54:25 GMT "arik" <sip:35104723@sip.cybercity.dk> <sip:0097239287044@sip.cybercity.dk> - 24487391-449bf2a0@192.168.1.2 2 INVITE - SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 403 Wrong password or domain - 270 0 -
1120470900.060556 CIPOse170MGiRM1Qf4 192.168.1.2 5060 212.242.33.35 5060 0 ACK sip:0097239287044@sip.cybercity.dk - "arik" <sip:35104723@sip.cybercity.dk> <sip:0097239287044@sip.cybercity.dk>;tag=00-04083-1701ba17-57d493ef5 - 24487391-449bf2a0@192.168.1.2 2 ACK - SIP/2.0/UDP 192.168.1.2 - - - - 0 - -
1120470966.443914 C7XEbhP654jzLoe3a 192.168.1.2 5060 212.242.33.35 5060 0 INVITE sip:35104724@sip.cybercity.dk - "arik" <sip:35104723@sip.cybercity.dk> <sip:35104724@sip.cybercity.dk> - 11894297-4432a9f8@192.168.1.2 1 INVITE - SIP/2.0/UDP 192.168.1.2:5060 Nero SIPPS IP Phone Version 2.0.51.16 407 authentication required - 270 0 -
1120470966.606422 C7XEbhP654jzLoe3a 192.168.1.2 5060 212.242.33.35 5060 0 INVITE sip:35104724@sip.cybercity.dk Mon, 04 Jul 2005 09:56:06 GMT "arik" <sip:35104723@sip.cybercity.dk> <sip:35104724@sip.cybercity.dk> - 11894297-4432a9f8@192.168.1.2 2 INVITE - SIP/2.0/UDP 192.168.1.2:5060,SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 100 Trying - 270 0 -
1120470966.606422 C7XEbhP654jzLoe3a 192.168.1.2 5060 212.242.33.35 5060 0 INVITE sip:35104724@sip.cybercity.dk Mon, 04 Jul 2005 09:56:06 GMT "arik" <sip:35104723@sip.cybercity.dk> <sip:35104724@sip.cybercity.dk> - 11894297-4432a9f8@192.168.1.2 2 INVITE - SIP/2.0/UDP 192.168.1.2:5060,SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 480 Error - 270 0 application/sdp
1120470984.353086 C7XEbhP654jzLoe3a 192.168.1.2 5060 212.242.33.35 5060 0 REGISTER sip:sip.cybercity.dk - <sip:35104723@sip.cybercity.dk> <sip:35104723@sip.cybercity.dk> - 29858147-465b0752@29858051-465b07b2 5 REGISTER - SIP/2.0/UDP 192.168.1.2,SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 401 Unauthorized - 0 0 -
1120471018.723316 C7XEbhP654jzLoe3a 192.168.1.2 5060 212.242.33.35 5060 0 REGISTER sip:sip.cybercity.dk - <sip:35104723@sip.cybercity.dk> <sip:35104723@sip.cybercity.dk> - 29858147-465b0752@29858051-465b07b2 6 REGISTER - SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 100 Trying - 0 0 -
1120471018.723316 C7XEbhP654jzLoe3a 192.168.1.2 5060 212.242.33.35 5060 0 REGISTER sip:sip.cybercity.dk - <sip:35104723@sip.cybercity.dk> <sip:35104723@sip.cybercity.dk> - 29858147-465b0752@29858051-465b07b2 6 REGISTER - SIP/2.0/UDP 192.168.1.2 Nero SIPPS IP Phone Version 2.0.51.16 200 OK - 0 0 -
#close 2015-04-20-02-24-18

BIN
testing/btest/Traces/sip/wireshark.trace Normal file
View file

Binary file not shown.

10
testing/btest/core/leaks/sip.test Normal file
View file

@ -0,0 +1,10 @@
# Needs perftools support.
#
# @TEST-REQUIRES: bro --help 2>&1 | grep -q mem-leaks
#
# @TEST-GROUP: leaks
#
# @TEST-EXEC: HEAP_CHECK_DUMP_DIRECTORY=. HEAPCHECK=local btest-bg-run bro bro -b -m -r $TRACES/sip/wireshark.trace %INPUT
# @TEST-EXEC: btest-bg-wait 60
@load base/protocols/sip

6
testing/btest/scripts/base/protocols/sip/wireshark.test Normal file
View file

@ -0,0 +1,6 @@
# This tests a PCAP with a few SIP commands from the Wireshark samples.
# @TEST-EXEC: bro -b -r $TRACES/sip/wireshark.trace %INPUT
# @TEST-EXEC: btest-diff sip.log
@load base/protocols/sip