johanels/akvorado
1
0
Fork 0
mirror of https://github.com/akvorado/akvorado.git synced 2025-12-11 22:14:02 +01:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity
Files
1ec89aac1fef837f579b49d68480def2d6abb53a
akvorado/inlet/flow/decoder/netflow/root_test.go
Vincent Bernat 59b06635fd inlet/flow: discard invalid VLANs for sFlow
2023-01-19 22:40:50 +01:00

210 lines
9.4 KiB
Go
Raw Blame History

// SPDX-FileCopyrightText: 2022 Free Mobile
// SPDX-License-Identifier: AGPL-3.0-only
package netflow
import (
"net"
"net/netip"
"path/filepath"
"testing"
"akvorado/common/helpers"
"akvorado/common/reporter"
"akvorado/common/schema"
"akvorado/inlet/flow/decoder"
)
func TestDecode(t *testing.T) {
r := reporter.NewMock(t)
nfdecoder := New(r, decoder.Dependencies{Schema: schema.NewMock(t).EnableAllColumns()})
// Send an option template
template := helpers.ReadPcapPayload(t, filepath.Join("testdata", "options-template-257.pcap"))
got := nfdecoder.Decode(decoder.RawFlow{Payload: template, Source: net.ParseIP("127.0.0.1")})
if got == nil {
t.Fatalf("Decode() error on options template")
}
if len(got) != 0 {
t.Fatalf("Decode() on options template got flows")
}
// Check metrics
gotMetrics := r.GetMetrics("akvorado_inlet_flow_decoder_netflow_")
expectedMetrics := map[string]string{
`count{exporter="127.0.0.1",version="9"}`: "1",
`flowset_records_sum{exporter="127.0.0.1",type="OptionsTemplateFlowSet",version="9"}`: "1",
`flowset_sum{exporter="127.0.0.1",type="OptionsTemplateFlowSet",version="9"}`: "1",
`templates_count{exporter="127.0.0.1",obs_domain_id="0",template_id="257",type="options_template",version="9"}`: "1",
}
if diff := helpers.Diff(gotMetrics, expectedMetrics); diff != "" {
t.Fatalf("Metrics after template (-got, +want):\n%s", diff)
}
// Send option data
data := helpers.ReadPcapPayload(t, filepath.Join("testdata", "options-data-257.pcap"))
got = nfdecoder.Decode(decoder.RawFlow{Payload: data, Source: net.ParseIP("127.0.0.1")})
if got == nil {
t.Fatalf("Decode() error on options data")
}
if len(got) != 0 {
t.Fatalf("Decode() on options data got flows")
}
// Check metrics
gotMetrics = r.GetMetrics("akvorado_inlet_flow_decoder_netflow_")
expectedMetrics = map[string]string{
`count{exporter="127.0.0.1",version="9"}`: "2",
`flowset_records_sum{exporter="127.0.0.1",type="OptionsTemplateFlowSet",version="9"}`: "1",
`flowset_records_sum{exporter="127.0.0.1",type="OptionsDataFlowSet",version="9"}`: "4",
`flowset_sum{exporter="127.0.0.1",type="OptionsTemplateFlowSet",version="9"}`: "1",
`flowset_sum{exporter="127.0.0.1",type="OptionsDataFlowSet",version="9"}`: "1",
`templates_count{exporter="127.0.0.1",obs_domain_id="0",template_id="257",type="options_template",version="9"}`: "1",
}
if diff := helpers.Diff(gotMetrics, expectedMetrics); diff != "" {
t.Fatalf("Metrics after template (-got, +want):\n%s", diff)
}
// Send a regular template
template = helpers.ReadPcapPayload(t, filepath.Join("testdata", "template-260.pcap"))
got = nfdecoder.Decode(decoder.RawFlow{Payload: template, Source: net.ParseIP("127.0.0.1")})
if got == nil {
t.Fatalf("Decode() error on template")
}
if len(got) != 0 {
t.Fatalf("Decode() on template got flows")
}
// Check metrics
gotMetrics = r.GetMetrics("akvorado_inlet_flow_decoder_netflow_")
expectedMetrics = map[string]string{
`count{exporter="127.0.0.1",version="9"}`: "3",
`flowset_records_sum{exporter="127.0.0.1",type="OptionsTemplateFlowSet",version="9"}`: "1",
`flowset_records_sum{exporter="127.0.0.1",type="OptionsDataFlowSet",version="9"}`: "4",
`flowset_records_sum{exporter="127.0.0.1",type="TemplateFlowSet",version="9"}`: "1",
`flowset_sum{exporter="127.0.0.1",type="OptionsTemplateFlowSet",version="9"}`: "1",
`flowset_sum{exporter="127.0.0.1",type="OptionsDataFlowSet",version="9"}`: "1",
`flowset_sum{exporter="127.0.0.1",type="TemplateFlowSet",version="9"}`: "1",
`templates_count{exporter="127.0.0.1",obs_domain_id="0",template_id="257",type="options_template",version="9"}`: "1",
`templates_count{exporter="127.0.0.1",obs_domain_id="0",template_id="260",type="template",version="9"}`: "1",
}
if diff := helpers.Diff(gotMetrics, expectedMetrics); diff != "" {
t.Fatalf("Metrics after template (-got, +want):\n%s", diff)
}
// Send data
data = helpers.ReadPcapPayload(t, filepath.Join("testdata", "data-260.pcap"))
got = nfdecoder.Decode(decoder.RawFlow{Payload: data, Source: net.ParseIP("127.0.0.1")})
if got == nil {
t.Fatalf("Decode() error on data")
}
expectedFlows := []*schema.FlowMessage{
{
SamplingRate: 30000,
ExporterAddress: netip.MustParseAddr("::ffff:127.0.0.1"),
SrcAddr: netip.MustParseAddr("::ffff:198.38.121.178"),
DstAddr: netip.MustParseAddr("::ffff:91.170.143.87"),
NextHop: netip.MustParseAddr("::ffff:194.149.174.63"),
InIf: 335,
OutIf: 450,
ProtobufDebug: map[schema.ColumnKey]interface{}{
schema.ColumnBytes: 1500,
schema.ColumnPackets: 1,
schema.ColumnSrcNetMask: 24,
schema.ColumnDstNetMask: 14,
schema.ColumnEType: helpers.ETypeIPv4,
schema.ColumnProto: 6,
schema.ColumnSrcPort: 443,
schema.ColumnDstPort: 19624,
schema.ColumnForwardingStatus: 64,
},
}, {
SamplingRate: 30000,
ExporterAddress: netip.MustParseAddr("::ffff:127.0.0.1"),
SrcAddr: netip.MustParseAddr("::ffff:198.38.121.219"),
DstAddr: netip.MustParseAddr("::ffff:88.122.57.97"),
InIf: 335,
OutIf: 452,
NextHop: netip.MustParseAddr("::ffff:194.149.174.71"),
ProtobufDebug: map[schema.ColumnKey]interface{}{
schema.ColumnBytes: 1500,
schema.ColumnPackets: 1,
schema.ColumnSrcNetMask: 24,
schema.ColumnDstNetMask: 14,
schema.ColumnEType: helpers.ETypeIPv4,
schema.ColumnProto: 6,
schema.ColumnSrcPort: 443,
schema.ColumnDstPort: 2444,
schema.ColumnForwardingStatus: 64,
},
}, {
SamplingRate: 30000,
ExporterAddress: netip.MustParseAddr("::ffff:127.0.0.1"),
SrcAddr: netip.MustParseAddr("::ffff:173.194.190.106"),
DstAddr: netip.MustParseAddr("::ffff:37.165.129.20"),
InIf: 461,
OutIf: 306,
NextHop: netip.MustParseAddr("::ffff:252.223.0.0"),
ProtobufDebug: map[schema.ColumnKey]interface{}{
schema.ColumnBytes: 1400,
schema.ColumnPackets: 1,
schema.ColumnSrcNetMask: 20,
schema.ColumnDstNetMask: 18,
schema.ColumnEType: helpers.ETypeIPv4,
schema.ColumnProto: 6,
schema.ColumnSrcPort: 443,
schema.ColumnDstPort: 53697,
schema.ColumnForwardingStatus: 64,
},
}, {
SamplingRate: 30000,
ExporterAddress: netip.MustParseAddr("::ffff:127.0.0.1"),
SrcAddr: netip.MustParseAddr("::ffff:74.125.100.234"),
DstAddr: netip.MustParseAddr("::ffff:88.120.219.117"),
NextHop: netip.MustParseAddr("::ffff:194.149.174.61"),
InIf: 461,
OutIf: 451,
ProtobufDebug: map[schema.ColumnKey]interface{}{
schema.ColumnBytes: 1448,
schema.ColumnPackets: 1,
schema.ColumnSrcNetMask: 16,
schema.ColumnDstNetMask: 14,
schema.ColumnEType: helpers.ETypeIPv4,
schema.ColumnProto: 6,
schema.ColumnSrcPort: 443,
schema.ColumnDstPort: 52300,
schema.ColumnForwardingStatus: 64,
},
},
}
for _, f := range got {
f.TimeReceived = 0
}
if diff := helpers.Diff(got, expectedFlows); diff != "" {
t.Fatalf("Decode() (-got, +want):\n%s", diff)
}
gotMetrics = r.GetMetrics(
"akvorado_inlet_flow_decoder_netflow_",
"count",
"flowset_",
"templates_",
)
expectedMetrics = map[string]string{
`count{exporter="127.0.0.1",version="9"}`: "4",
`flowset_records_sum{exporter="127.0.0.1",type="DataFlowSet",version="9"}`: "4",
`flowset_records_sum{exporter="127.0.0.1",type="OptionsDataFlowSet",version="9"}`: "4",
`flowset_records_sum{exporter="127.0.0.1",type="OptionsTemplateFlowSet",version="9"}`: "1",
`flowset_records_sum{exporter="127.0.0.1",type="TemplateFlowSet",version="9"}`: "1",
`flowset_sum{exporter="127.0.0.1",type="DataFlowSet",version="9"}`: "1",
`flowset_sum{exporter="127.0.0.1",type="OptionsDataFlowSet",version="9"}`: "1",
`flowset_sum{exporter="127.0.0.1",type="OptionsTemplateFlowSet",version="9"}`: "1",
`flowset_sum{exporter="127.0.0.1",type="TemplateFlowSet",version="9"}`: "1",
`templates_count{exporter="127.0.0.1",obs_domain_id="0",template_id="257",type="options_template",version="9"}`: "1",
`templates_count{exporter="127.0.0.1",obs_domain_id="0",template_id="260",type="template",version="9"}`: "1",
}
if diff := helpers.Diff(gotMetrics, expectedMetrics); diff != "" {
t.Fatalf("Metrics after data (-got, +want):\n%s", diff)
}
}
Reference in New Issue View Git Blame Copy Permalink