def testParse602(self): """Tests the Parse function on a version 602 IDX file.""" parser = java_idx.JavaIDXParser() storage_writer = self._ParseFile(['java_602.idx'], parser) self.assertEqual(storage_writer.number_of_warnings, 0) self.assertEqual(storage_writer.number_of_events, 2) events = list(storage_writer.GetEvents()) expected_event_values = { 'data_type': 'java:download:idx', 'idx_version': 602, 'timestamp': '2010-05-05 01:34:19.720000', 'timestamp_desc': 'File Hosted Date', 'url': 'http://www.gxxxxx.com/a/java/xxz.jar' } self.CheckEventValues(storage_writer, events[0], expected_event_values) # Parse second event. Same metadata; different timestamp event. expected_event_values = { 'data_type': 'java:download:idx', 'idx_version': 602, 'timestamp': '2010-05-05 03:52:31.000000', 'timestamp_desc': definitions.TIME_DESCRIPTION_FILE_DOWNLOADED, 'url': 'http://www.gxxxxx.com/a/java/xxz.jar' } self.CheckEventValues(storage_writer, events[1], expected_event_values)
def testParse602(self): """Tests the Parse function on a version 602 IDX file.""" parser = java_idx.JavaIDXParser() storage_writer = self._ParseFile(['java_602.idx'], parser) self.assertEqual(storage_writer.number_of_warnings, 0) self.assertEqual(storage_writer.number_of_events, 2) events = list(storage_writer.GetEvents()) event = events[0] self.CheckTimestamp(event.timestamp, '2010-05-05 01:34:19.720000') self.assertEqual(event.idx_version, 602) expected_url = 'http://www.gxxxxx.com/a/java/xxz.jar' self.assertEqual(event.url, expected_url) description_expected = 'File Hosted Date' self.assertEqual(event.timestamp_desc, description_expected) # Parse second event. Same metadata; different timestamp event. event = events[1] self.CheckTimestamp(event.timestamp, '2010-05-05 03:52:31.000000') self.assertEqual(event.idx_version, 602) expected_url = 'http://www.gxxxxx.com/a/java/xxz.jar' self.assertEqual(event.url, expected_url) description_expected = definitions.TIME_DESCRIPTION_FILE_DOWNLOADED self.assertEqual(event.timestamp_desc, description_expected)
def testParse605(self): """Tests the Parse function on a version 605 IDX file.""" parser = java_idx.JavaIDXParser() storage_writer = self._ParseFile(['java.idx'], parser) self.assertEqual(storage_writer.number_of_warnings, 0) self.assertEqual(storage_writer.number_of_events, 2) events = list(storage_writer.GetEvents()) expected_event_values = { 'data_type': 'java:download:idx', 'idx_version': 605, 'ip_address': '10.7.119.10', 'timestamp': '2001-07-26 05:00:00.000000', 'timestamp_desc': 'File Hosted Date', 'url': ('http://xxxxc146d3.gxhjxxwsf.xx:82/forum/dare.php?' 'hsh=6&key=b30xxxx1c597xxxx15d593d3f0xxx1ab') } self.CheckEventValues(storage_writer, events[0], expected_event_values) # Parse second event. Same metadata; different timestamp event. expected_event_values = { 'data_type': 'java:download:idx', 'idx_version': 605, 'ip_address': '10.7.119.10', 'timestamp': '2013-01-13 16:22:01.000000', 'timestamp_desc': definitions.TIME_DESCRIPTION_FILE_DOWNLOADED, 'url': ('http://xxxxc146d3.gxhjxxwsf.xx:82/forum/dare.php?' 'hsh=6&key=b30xxxx1c597xxxx15d593d3f0xxx1ab') } self.CheckEventValues(storage_writer, events[1], expected_event_values)
def testParse605(self): """Tests the Parse function on a version 605 IDX file.""" parser = java_idx.JavaIDXParser() storage_writer = self._ParseFile(['java.idx'], parser) self.assertEqual(storage_writer.number_of_warnings, 0) self.assertEqual(storage_writer.number_of_events, 2) events = list(storage_writer.GetEvents()) event = events[0] self.CheckTimestamp(event.timestamp, '2001-07-26 05:00:00.000000') event_data = self._GetEventDataOfEvent(storage_writer, event) self.assertEqual(event_data.idx_version, 605) self.assertEqual(event_data.ip_address, '10.7.119.10') expected_url = ( 'http://xxxxc146d3.gxhjxxwsf.xx:82/forum/dare.php?' 'hsh=6&key=b30xxxx1c597xxxx15d593d3f0xxx1ab') self.assertEqual(event_data.url, expected_url) description_expected = 'File Hosted Date' self.assertEqual(event.timestamp_desc, description_expected) # Parse second event. Same metadata; different timestamp event. event = events[1] self.CheckTimestamp(event.timestamp, '2013-01-13 16:22:01.000000') event_data = self._GetEventDataOfEvent(storage_writer, event) self.assertEqual(event_data.idx_version, 605) self.assertEqual(event_data.ip_address, '10.7.119.10') expected_url = ( 'http://xxxxc146d3.gxhjxxwsf.xx:82/forum/dare.php?' 'hsh=6&key=b30xxxx1c597xxxx15d593d3f0xxx1ab') self.assertEqual(event_data.url, expected_url) description_expected = definitions.TIME_DESCRIPTION_FILE_DOWNLOADED self.assertEqual(event.timestamp_desc, description_expected)
def testParse605(self): """Tests the Parse function on a version 605 IDX file.""" parser_object = java_idx.JavaIDXParser() test_file = self._GetTestFilePath([u'java.idx']) event_queue_consumer = self._ParseFile(parser_object, test_file) event_objects = self._GetEventObjectsFromQueue(event_queue_consumer) self.assertEqual(len(event_objects), 2) event_object = event_objects[0] idx_version_expected = 605 self.assertEqual(event_object.idx_version, idx_version_expected) ip_address_expected = u'10.7.119.10' self.assertEqual(event_object.ip_address, ip_address_expected) url_expected = (u'http://xxxxc146d3.gxhjxxwsf.xx:82/forum/dare.php?' u'hsh=6&key=b30xxxx1c597xxxx15d593d3f0xxx1ab') self.assertEqual(event_object.url, url_expected) description_expected = u'File Hosted Date' self.assertEqual(event_object.timestamp_desc, description_expected) expected_timestamp = timelib.Timestamp.CopyFromString( u'2001-07-26 05:00:00') self.assertEqual(event_object.timestamp, expected_timestamp) # Parse second event. Same metadata; different timestamp event. event_object = event_objects[1] self.assertEqual(event_object.idx_version, idx_version_expected) self.assertEqual(event_object.ip_address, ip_address_expected) self.assertEqual(event_object.url, url_expected) description_expected = eventdata.EventTimestamp.FILE_DOWNLOADED self.assertEqual(event_object.timestamp_desc, description_expected) expected_timestamp = timelib.Timestamp.CopyFromString( u'2013-01-13 16:22:01') self.assertEqual(event_object.timestamp, expected_timestamp)
def testParse605(self): """Tests the Parse function on a version 605 IDX file.""" parser = java_idx.JavaIDXParser() storage_writer = self._ParseFile(['java.idx'], parser) self.assertEqual(storage_writer.number_of_events, 2) events = list(storage_writer.GetEvents()) event = events[0] idx_version_expected = 605 self.assertEqual(event.idx_version, idx_version_expected) ip_address_expected = '10.7.119.10' self.assertEqual(event.ip_address, ip_address_expected) url_expected = ('http://xxxxc146d3.gxhjxxwsf.xx:82/forum/dare.php?' 'hsh=6&key=b30xxxx1c597xxxx15d593d3f0xxx1ab') self.assertEqual(event.url, url_expected) description_expected = 'File Hosted Date' self.assertEqual(event.timestamp_desc, description_expected) expected_timestamp = timelib.Timestamp.CopyFromString( '2001-07-26 05:00:00') self.assertEqual(event.timestamp, expected_timestamp) # Parse second event. Same metadata; different timestamp event. event = events[1] self.assertEqual(event.idx_version, idx_version_expected) self.assertEqual(event.ip_address, ip_address_expected) self.assertEqual(event.url, url_expected) description_expected = definitions.TIME_DESCRIPTION_FILE_DOWNLOADED self.assertEqual(event.timestamp_desc, description_expected) expected_timestamp = timelib.Timestamp.CopyFromString( '2013-01-13 16:22:01') self.assertEqual(event.timestamp, expected_timestamp)
def testParse602(self): """Tests the Parse function on a version 602 IDX file.""" parser_object = java_idx.JavaIDXParser() test_file = self._GetTestFilePath([u'java_602.idx']) event_queue_consumer = self._ParseFile(parser_object, test_file) event_objects = self._GetEventObjectsFromQueue(event_queue_consumer) self.assertEqual(len(event_objects), 2) event_object = event_objects[0] idx_version_expected = 602 self.assertEqual(event_object.idx_version, idx_version_expected) ip_address_expected = u'Unknown' self.assertEqual(event_object.ip_address, ip_address_expected) url_expected = u'http://www.gxxxxx.com/a/java/xxz.jar' self.assertEqual(event_object.url, url_expected) description_expected = u'File Hosted Date' self.assertEqual(event_object.timestamp_desc, description_expected) expected_timestamp = timelib.Timestamp.CopyFromString( u'2010-05-05 01:34:19.720') self.assertEqual(event_object.timestamp, expected_timestamp) # Parse second event. Same metadata; different timestamp event. event_object = event_objects[1] self.assertEqual(event_object.idx_version, idx_version_expected) self.assertEqual(event_object.ip_address, ip_address_expected) self.assertEqual(event_object.url, url_expected) description_expected = eventdata.EventTimestamp.FILE_DOWNLOADED self.assertEqual(event_object.timestamp_desc, description_expected) expected_timestamp = timelib.Timestamp.CopyFromString( u'2010-05-05 03:52:31') self.assertEqual(event_object.timestamp, expected_timestamp)
def testParse602(self): """Tests the Parse function on a version 602 IDX file.""" parser = java_idx.JavaIDXParser() storage_writer = self._ParseFile(['java_602.idx'], parser) self.assertEqual(storage_writer.number_of_events, 2) events = list(storage_writer.GetEvents()) event = events[0] idx_version_expected = 602 self.assertEqual(event.idx_version, idx_version_expected) ip_address_expected = 'Unknown' self.assertEqual(event.ip_address, ip_address_expected) url_expected = 'http://www.gxxxxx.com/a/java/xxz.jar' self.assertEqual(event.url, url_expected) description_expected = 'File Hosted Date' self.assertEqual(event.timestamp_desc, description_expected) expected_timestamp = timelib.Timestamp.CopyFromString( '2010-05-05 01:34:19.720') self.assertEqual(event.timestamp, expected_timestamp) # Parse second event. Same metadata; different timestamp event. event = events[1] self.assertEqual(event.idx_version, idx_version_expected) self.assertEqual(event.ip_address, ip_address_expected) self.assertEqual(event.url, url_expected) description_expected = definitions.TIME_DESCRIPTION_FILE_DOWNLOADED self.assertEqual(event.timestamp_desc, description_expected) expected_timestamp = timelib.Timestamp.CopyFromString( '2010-05-05 03:52:31') self.assertEqual(event.timestamp, expected_timestamp)
def setUp(self): """Sets up the needed objects used throughout the test.""" self._parser = java_idx.JavaIDXParser()
def setUp(self): """Makes preparations before running an individual test.""" self._parser = java_idx.JavaIDXParser()
def setUp(self): """Sets up the needed objects used throughout the test.""" pre_obj = event.PreprocessObject() self._parser = java_idx.JavaIDXParser(pre_obj)