From c0d13ec1f3faefa8efa3ad769b3b39297763f608 Mon Sep 17 00:00:00 2001 From: Philippe Antoine Date: Mon, 13 Jul 2020 09:50:42 +0200 Subject: [PATCH] http: adds test with signle gap --- tests/http-gap-simple/README.md | 13 +++++++ tests/http-gap-simple/input.pcap | Bin 0 -> 2818 bytes tests/http-gap-simple/test.yaml | 44 ++++++++++++++++++++++++ tests/http-gap-simple/toaddgap.txt | 53 +++++++++++++++++++++++++++++ 4 files changed, 110 insertions(+) create mode 100644 tests/http-gap-simple/README.md create mode 100644 tests/http-gap-simple/input.pcap create mode 100644 tests/http-gap-simple/test.yaml create mode 100644 tests/http-gap-simple/toaddgap.txt diff --git a/tests/http-gap-simple/README.md b/tests/http-gap-simple/README.md new file mode 100644 index 000000000..73de7efbc --- /dev/null +++ b/tests/http-gap-simple/README.md @@ -0,0 +1,13 @@ +# Description + +Test http gap handling + +This test case contains a single simple gap in response body with defined content-length + +# PCAP + +The pcap comes from running +`python test/htptopcap.py toaddgap.txt` +With the attached toaddgap.txt + +Then removing packet 17 diff --git a/tests/http-gap-simple/input.pcap b/tests/http-gap-simple/input.pcap new file mode 100644 index 0000000000000000000000000000000000000000..5edd0f198d51e6a6e2a96f3aae46a6253d3aa59f GIT binary patch literal 2818 zc-pm<%Wo1<6o)TR9~n!uCc?N7raMinFtk<6#!{&@!A6Ss0NMh@5lBXc(82gf)PxO5 zyJ%OWabay@qB~;ZPLn34hAyyCn`#;tZZuu?FK9iNJJ5myy_4vKL&(hV-S7P72k$|l4r;LGXgb@tl1p<%y~xh7=p2^lBnN=IV}!N^>c zQYj%OC#95=i;2=CIVD5$UH%7Y;K{;$*_M#+iaQss2&uT7aB{q(n#=D1^<0#or*+8X zt6DDYL4+ zsWNR2x@kKQqMo)5SaTD+SJk`+fb$HIQaFW{92PiJdraHE9HevhYRkzG^`qL%mn|M> zc}1<|g%Ir^Sv<9t8wSZ$cVOy@HoHJGyTYg@P8>L&)HpZBsJo1-bZJ)a^6{7^yKI9U zrkXLQL~oaEVrTx_?w2;Z9N3lB>=wqU?Q-;XpT{-X%{H^+!_-?1;jqB*)^jRbO*h?E z;|B2RF^; z%T_%Eu&frqqX=z~R(&Oa4)q}CwD}kseAp`I(1b=#hdReSLEV=DSjQU%1asIw&5Xx0 literal 0 Hc-jL100001 diff --git a/tests/http-gap-simple/test.yaml b/tests/http-gap-simple/test.yaml new file mode 100644 index 000000000..c47eb7973 --- /dev/null +++ b/tests/http-gap-simple/test.yaml @@ -0,0 +1,44 @@ +requires: + features: + - HAVE_LIBJANSSON + min-version: 6.0.0 + +# disables checksum verification +args: + - -k none + +checks: + + # Check that there is one file event with content range. + - filter: + count: 1 + match: + event_type: http + http.url: "/1" + http.status: 200 + - filter: + count: 1 + match: + event_type: http + http.url: "/2" + http.status: 200 + - filter: + count: 1 + match: + event_type: http + http.url: "/3" + http.status: 200 + - filter: + count: 2 + match: + event_type: fileinfo + fileinfo.size: 14 + fileinfo.state: "CLOSED" + fileinfo.gaps: false + - filter: + count: 1 + match: + event_type: fileinfo + fileinfo.size: 70 + fileinfo.state: "TRUNCATED" + fileinfo.gaps: true diff --git a/tests/http-gap-simple/toaddgap.txt b/tests/http-gap-simple/toaddgap.txt new file mode 100644 index 000000000..c6859edfa --- /dev/null +++ b/tests/http-gap-simple/toaddgap.txt @@ -0,0 +1,53 @@ +>>> +GET /1 HTTP/1.0 +User-Agent: Mozilla + + +<<< +HTTP/1.0 200 OK +Date: Mon, 31 Aug 2009 20:25:50 GMT +Server: Apache +Connection: close +Content-Type: text/html +Content-Length: 12 + + +<<< +Hello World! + +>>> +GET /2 HTTP/1.0 +User-Agent: Mozilla + + +<<< +HTTP/1.0 200 OK +Server: Apache +Connection: close +Content-Type: text/html +Content-Length: 70 + + +<<< +AAAAAAAAAAAAAA +<<< +AAAAAAAAAAAAAA +<<< +AAAAAAAAAAAAAA +<<< +AAAAAAAAAAAAAA +<<< +AAAAAAAAAAAAAA +>>> +GET /3 HTTP/1.0 +User-Agent: Mozilla + + +<<< +HTTP/1.0 200 OK +Server: Apache +Connection: close +Content-Type: text/html +Content-Length: 12 + +Hello People -- 2.47.2