Ejemplo n.º 1
0
    def testParse602(self):
        """Tests the Parse function on a version 602 IDX file."""
        parser = java_idx.JavaIDXParser()
        storage_writer = self._ParseFile(['java_602.idx'], parser)

        self.assertEqual(storage_writer.number_of_warnings, 0)
        self.assertEqual(storage_writer.number_of_events, 2)

        events = list(storage_writer.GetEvents())

        expected_event_values = {
            'data_type': 'java:download:idx',
            'idx_version': 602,
            'timestamp': '2010-05-05 01:34:19.720000',
            'timestamp_desc': 'File Hosted Date',
            'url': 'http://www.gxxxxx.com/a/java/xxz.jar'
        }

        self.CheckEventValues(storage_writer, events[0], expected_event_values)

        # Parse second event. Same metadata; different timestamp event.
        expected_event_values = {
            'data_type': 'java:download:idx',
            'idx_version': 602,
            'timestamp': '2010-05-05 03:52:31.000000',
            'timestamp_desc': definitions.TIME_DESCRIPTION_FILE_DOWNLOADED,
            'url': 'http://www.gxxxxx.com/a/java/xxz.jar'
        }

        self.CheckEventValues(storage_writer, events[1], expected_event_values)
Ejemplo n.º 2
0
    def testParse602(self):
        """Tests the Parse function on a version 602 IDX file."""
        parser = java_idx.JavaIDXParser()
        storage_writer = self._ParseFile(['java_602.idx'], parser)

        self.assertEqual(storage_writer.number_of_warnings, 0)
        self.assertEqual(storage_writer.number_of_events, 2)

        events = list(storage_writer.GetEvents())

        event = events[0]

        self.CheckTimestamp(event.timestamp, '2010-05-05 01:34:19.720000')

        self.assertEqual(event.idx_version, 602)

        expected_url = 'http://www.gxxxxx.com/a/java/xxz.jar'
        self.assertEqual(event.url, expected_url)

        description_expected = 'File Hosted Date'
        self.assertEqual(event.timestamp_desc, description_expected)

        # Parse second event. Same metadata; different timestamp event.
        event = events[1]

        self.CheckTimestamp(event.timestamp, '2010-05-05 03:52:31.000000')

        self.assertEqual(event.idx_version, 602)

        expected_url = 'http://www.gxxxxx.com/a/java/xxz.jar'
        self.assertEqual(event.url, expected_url)

        description_expected = definitions.TIME_DESCRIPTION_FILE_DOWNLOADED
        self.assertEqual(event.timestamp_desc, description_expected)
Ejemplo n.º 3
0
    def testParse605(self):
        """Tests the Parse function on a version 605 IDX file."""
        parser = java_idx.JavaIDXParser()
        storage_writer = self._ParseFile(['java.idx'], parser)

        self.assertEqual(storage_writer.number_of_warnings, 0)
        self.assertEqual(storage_writer.number_of_events, 2)

        events = list(storage_writer.GetEvents())

        expected_event_values = {
            'data_type':
            'java:download:idx',
            'idx_version':
            605,
            'ip_address':
            '10.7.119.10',
            'timestamp':
            '2001-07-26 05:00:00.000000',
            'timestamp_desc':
            'File Hosted Date',
            'url': ('http://xxxxc146d3.gxhjxxwsf.xx:82/forum/dare.php?'
                    'hsh=6&key=b30xxxx1c597xxxx15d593d3f0xxx1ab')
        }

        self.CheckEventValues(storage_writer, events[0], expected_event_values)

        # Parse second event. Same metadata; different timestamp event.
        expected_event_values = {
            'data_type':
            'java:download:idx',
            'idx_version':
            605,
            'ip_address':
            '10.7.119.10',
            'timestamp':
            '2013-01-13 16:22:01.000000',
            'timestamp_desc':
            definitions.TIME_DESCRIPTION_FILE_DOWNLOADED,
            'url': ('http://xxxxc146d3.gxhjxxwsf.xx:82/forum/dare.php?'
                    'hsh=6&key=b30xxxx1c597xxxx15d593d3f0xxx1ab')
        }

        self.CheckEventValues(storage_writer, events[1], expected_event_values)
Ejemplo n.º 4
0
  def testParse605(self):
    """Tests the Parse function on a version 605 IDX file."""
    parser = java_idx.JavaIDXParser()
    storage_writer = self._ParseFile(['java.idx'], parser)

    self.assertEqual(storage_writer.number_of_warnings, 0)
    self.assertEqual(storage_writer.number_of_events, 2)

    events = list(storage_writer.GetEvents())

    event = events[0]

    self.CheckTimestamp(event.timestamp, '2001-07-26 05:00:00.000000')

    event_data = self._GetEventDataOfEvent(storage_writer, event)
    self.assertEqual(event_data.idx_version, 605)
    self.assertEqual(event_data.ip_address, '10.7.119.10')

    expected_url = (
        'http://xxxxc146d3.gxhjxxwsf.xx:82/forum/dare.php?'
        'hsh=6&key=b30xxxx1c597xxxx15d593d3f0xxx1ab')
    self.assertEqual(event_data.url, expected_url)

    description_expected = 'File Hosted Date'
    self.assertEqual(event.timestamp_desc, description_expected)

    # Parse second event. Same metadata; different timestamp event.
    event = events[1]

    self.CheckTimestamp(event.timestamp, '2013-01-13 16:22:01.000000')

    event_data = self._GetEventDataOfEvent(storage_writer, event)
    self.assertEqual(event_data.idx_version, 605)
    self.assertEqual(event_data.ip_address, '10.7.119.10')

    expected_url = (
        'http://xxxxc146d3.gxhjxxwsf.xx:82/forum/dare.php?'
        'hsh=6&key=b30xxxx1c597xxxx15d593d3f0xxx1ab')
    self.assertEqual(event_data.url, expected_url)

    description_expected = definitions.TIME_DESCRIPTION_FILE_DOWNLOADED
    self.assertEqual(event.timestamp_desc, description_expected)
Ejemplo n.º 5
0
    def testParse605(self):
        """Tests the Parse function on a version 605 IDX file."""
        parser_object = java_idx.JavaIDXParser()

        test_file = self._GetTestFilePath([u'java.idx'])
        event_queue_consumer = self._ParseFile(parser_object, test_file)
        event_objects = self._GetEventObjectsFromQueue(event_queue_consumer)

        self.assertEqual(len(event_objects), 2)

        event_object = event_objects[0]

        idx_version_expected = 605
        self.assertEqual(event_object.idx_version, idx_version_expected)

        ip_address_expected = u'10.7.119.10'
        self.assertEqual(event_object.ip_address, ip_address_expected)

        url_expected = (u'http://xxxxc146d3.gxhjxxwsf.xx:82/forum/dare.php?'
                        u'hsh=6&key=b30xxxx1c597xxxx15d593d3f0xxx1ab')
        self.assertEqual(event_object.url, url_expected)

        description_expected = u'File Hosted Date'
        self.assertEqual(event_object.timestamp_desc, description_expected)

        expected_timestamp = timelib.Timestamp.CopyFromString(
            u'2001-07-26 05:00:00')
        self.assertEqual(event_object.timestamp, expected_timestamp)

        # Parse second event. Same metadata; different timestamp event.
        event_object = event_objects[1]

        self.assertEqual(event_object.idx_version, idx_version_expected)
        self.assertEqual(event_object.ip_address, ip_address_expected)
        self.assertEqual(event_object.url, url_expected)

        description_expected = eventdata.EventTimestamp.FILE_DOWNLOADED
        self.assertEqual(event_object.timestamp_desc, description_expected)

        expected_timestamp = timelib.Timestamp.CopyFromString(
            u'2013-01-13 16:22:01')
        self.assertEqual(event_object.timestamp, expected_timestamp)
Ejemplo n.º 6
0
    def testParse605(self):
        """Tests the Parse function on a version 605 IDX file."""
        parser = java_idx.JavaIDXParser()
        storage_writer = self._ParseFile(['java.idx'], parser)

        self.assertEqual(storage_writer.number_of_events, 2)

        events = list(storage_writer.GetEvents())

        event = events[0]

        idx_version_expected = 605
        self.assertEqual(event.idx_version, idx_version_expected)

        ip_address_expected = '10.7.119.10'
        self.assertEqual(event.ip_address, ip_address_expected)

        url_expected = ('http://xxxxc146d3.gxhjxxwsf.xx:82/forum/dare.php?'
                        'hsh=6&key=b30xxxx1c597xxxx15d593d3f0xxx1ab')
        self.assertEqual(event.url, url_expected)

        description_expected = 'File Hosted Date'
        self.assertEqual(event.timestamp_desc, description_expected)

        expected_timestamp = timelib.Timestamp.CopyFromString(
            '2001-07-26 05:00:00')
        self.assertEqual(event.timestamp, expected_timestamp)

        # Parse second event. Same metadata; different timestamp event.
        event = events[1]

        self.assertEqual(event.idx_version, idx_version_expected)
        self.assertEqual(event.ip_address, ip_address_expected)
        self.assertEqual(event.url, url_expected)

        description_expected = definitions.TIME_DESCRIPTION_FILE_DOWNLOADED
        self.assertEqual(event.timestamp_desc, description_expected)

        expected_timestamp = timelib.Timestamp.CopyFromString(
            '2013-01-13 16:22:01')
        self.assertEqual(event.timestamp, expected_timestamp)
Ejemplo n.º 7
0
    def testParse602(self):
        """Tests the Parse function on a version 602 IDX file."""
        parser_object = java_idx.JavaIDXParser()

        test_file = self._GetTestFilePath([u'java_602.idx'])
        event_queue_consumer = self._ParseFile(parser_object, test_file)
        event_objects = self._GetEventObjectsFromQueue(event_queue_consumer)

        self.assertEqual(len(event_objects), 2)

        event_object = event_objects[0]

        idx_version_expected = 602
        self.assertEqual(event_object.idx_version, idx_version_expected)

        ip_address_expected = u'Unknown'
        self.assertEqual(event_object.ip_address, ip_address_expected)

        url_expected = u'http://www.gxxxxx.com/a/java/xxz.jar'
        self.assertEqual(event_object.url, url_expected)

        description_expected = u'File Hosted Date'
        self.assertEqual(event_object.timestamp_desc, description_expected)

        expected_timestamp = timelib.Timestamp.CopyFromString(
            u'2010-05-05 01:34:19.720')
        self.assertEqual(event_object.timestamp, expected_timestamp)

        # Parse second event. Same metadata; different timestamp event.
        event_object = event_objects[1]

        self.assertEqual(event_object.idx_version, idx_version_expected)
        self.assertEqual(event_object.ip_address, ip_address_expected)
        self.assertEqual(event_object.url, url_expected)

        description_expected = eventdata.EventTimestamp.FILE_DOWNLOADED
        self.assertEqual(event_object.timestamp_desc, description_expected)

        expected_timestamp = timelib.Timestamp.CopyFromString(
            u'2010-05-05 03:52:31')
        self.assertEqual(event_object.timestamp, expected_timestamp)
Ejemplo n.º 8
0
    def testParse602(self):
        """Tests the Parse function on a version 602 IDX file."""
        parser = java_idx.JavaIDXParser()
        storage_writer = self._ParseFile(['java_602.idx'], parser)

        self.assertEqual(storage_writer.number_of_events, 2)

        events = list(storage_writer.GetEvents())

        event = events[0]

        idx_version_expected = 602
        self.assertEqual(event.idx_version, idx_version_expected)

        ip_address_expected = 'Unknown'
        self.assertEqual(event.ip_address, ip_address_expected)

        url_expected = 'http://www.gxxxxx.com/a/java/xxz.jar'
        self.assertEqual(event.url, url_expected)

        description_expected = 'File Hosted Date'
        self.assertEqual(event.timestamp_desc, description_expected)

        expected_timestamp = timelib.Timestamp.CopyFromString(
            '2010-05-05 01:34:19.720')
        self.assertEqual(event.timestamp, expected_timestamp)

        # Parse second event. Same metadata; different timestamp event.
        event = events[1]

        self.assertEqual(event.idx_version, idx_version_expected)
        self.assertEqual(event.ip_address, ip_address_expected)
        self.assertEqual(event.url, url_expected)

        description_expected = definitions.TIME_DESCRIPTION_FILE_DOWNLOADED
        self.assertEqual(event.timestamp_desc, description_expected)

        expected_timestamp = timelib.Timestamp.CopyFromString(
            '2010-05-05 03:52:31')
        self.assertEqual(event.timestamp, expected_timestamp)
Ejemplo n.º 9
0
 def setUp(self):
     """Sets up the needed objects used throughout the test."""
     self._parser = java_idx.JavaIDXParser()
Ejemplo n.º 10
0
 def setUp(self):
   """Makes preparations before running an individual test."""
   self._parser = java_idx.JavaIDXParser()
Ejemplo n.º 11
0
 def setUp(self):
     """Sets up the needed objects used throughout the test."""
     pre_obj = event.PreprocessObject()
     self._parser = java_idx.JavaIDXParser(pre_obj)