コード例 #1
0
ファイル: mac_wifi.py プロジェクト: dfjxs/plaso
    def testParseTurnedOver(self):
        """Tests the Parse function."""
        parser = mac_wifi.MacWifiLogParser()
        knowledge_base_values = {'year': 2017}
        storage_writer = self._ParseFile(
            ['wifi_turned_over.log'],
            parser,
            knowledge_base_values=knowledge_base_values)

        self.assertEqual(storage_writer.number_of_events, 6)
        self.assertEqual(storage_writer.number_of_extraction_warnings, 0)
        self.assertEqual(storage_writer.number_of_recovery_warnings, 0)

        events = list(storage_writer.GetEvents())

        expected_event_values = {
            'data_type': 'mac:wifilog:line',
            'date_time': '2017-01-02 00:10:15.000',
            'text': 'test-macbookpro newsyslog[50498]: logfile turned over'
        }

        self.CheckEventValues(storage_writer, events[0], expected_event_values)

        expected_text = ('<kernel> wl0: powerChange: *** '
                         'BONJOUR/MDNS OFFLOADS ARE NOT RUNNING.')

        expected_event_values = {
            'data_type': 'mac:wifilog:line',
            'date_time': '2017-01-02 00:11:02.378',
            'text': expected_text
        }

        self.CheckEventValues(storage_writer, events[1], expected_event_values)

        expected_event_values = {
            'data_type':
            'mac:wifilog:line',
            'date_time':
            '2017-01-02 07:41:01.371',
            'text':
            ('<kernel> wl0: leaveModulePoweredForOffloads: Wi-Fi will stay on.'
             )
        }

        self.CheckEventValues(storage_writer, events[2], expected_event_values)

        expected_event_values = {
            'data_type':
            'mac:wifilog:line',
            'date_time':
            '2017-01-02 07:41:02.207',
            'text':
            ('<kernel> Setting BTCoex Config: enable_2G:1, profile_2g:0, '
             'enable_5G:1, profile_5G:0')
        }

        self.CheckEventValues(storage_writer, events[5], expected_event_values)
コード例 #2
0
ファイル: mac_wifi.py プロジェクト: arunthirukkonda/plaso
    def testParseTurnedOver(self):
        """Tests the Parse function."""
        parser = mac_wifi.MacWifiLogParser()
        knowledge_base_values = {'year': 2017}
        storage_writer = self._ParseFile(
            ['wifi_turned_over.log'],
            parser,
            knowledge_base_values=knowledge_base_values)

        self.assertEqual(storage_writer.number_of_events, 6)

        events = list(storage_writer.GetEvents())

        event = events[0]

        expected_timestamp = timelib.Timestamp.CopyFromString(
            '2017-01-02 00:10:15')
        self.assertEqual(event.timestamp, expected_timestamp)

        self.assertEqual(
            event.text,
            'test-macbookpro newsyslog[50498]: logfile turned over')

        event = events[1]

        expected_timestamp = timelib.Timestamp.CopyFromString(
            '2017-01-02 00:11:02.378')
        self.assertEqual(event.timestamp, expected_timestamp)

        expected_text = ('<kernel> wl0: powerChange: *** '
                         'BONJOUR/MDNS OFFLOADS ARE NOT RUNNING.')
        self.assertEqual(event.text, expected_text)

        event = events[2]

        expected_timestamp = timelib.Timestamp.CopyFromString(
            '2017-01-02 07:41:01.371')
        self.assertEqual(event.timestamp, expected_timestamp)

        expected_string = (
            '<kernel> wl0: leaveModulePoweredForOffloads: Wi-Fi will stay on.')
        self.assertEqual(event.text, expected_string)

        event = events[5]

        expected_timestamp = timelib.Timestamp.CopyFromString(
            '2017-01-02 07:41:02.207')
        self.assertEqual(event.timestamp, expected_timestamp)

        expected_text = (
            '<kernel> Setting BTCoex Config: enable_2G:1, profile_2g:0, '
            'enable_5G:1, profile_5G:0')

        self.assertEqual(event.text, expected_text)
コード例 #3
0
    def testParse(self):
        """Tests the Parse function."""
        parser = mac_wifi.MacWifiLogParser()
        knowledge_base_values = {'year': 2013}
        storage_writer = self._ParseFile(
            ['wifi.log'], parser, knowledge_base_values=knowledge_base_values)

        self.assertEqual(storage_writer.number_of_errors, 0)
        self.assertEqual(storage_writer.number_of_events, 10)

        events = list(storage_writer.GetEvents())

        event = events[1]

        self.CheckTimestamp(event.timestamp, '2013-11-14 20:36:37.222000')

        self.assertEqual(event.agent, 'airportd[88]')
        self.assertEqual(event.function, 'airportdProcessDLILEvent')
        self.assertEqual(event.action, 'Interface en0 turn up.')
        self.assertEqual(event.text, 'en0 attached (up)')

        expected_message = ('Action: Interface en0 turn up. '
                            'Agent: airportd[88] '
                            '(airportdProcessDLILEvent) '
                            'Log: en0 attached (up)')
        expected_short_message = ('Action: Interface en0 turn up.')

        self._TestGetMessageStrings(event, expected_message,
                                    expected_short_message)

        event = events[2]

        self.CheckTimestamp(event.timestamp, '2013-11-14 20:36:43.818000')

        self.assertEqual(event.agent, 'airportd[88]')
        self.assertEqual(event.function, '_doAutoJoin')
        self.assertEqual(event.action, 'Wifi connected to SSID CampusNet')

        expected_text = (
            'Already associated to \u201cCampusNet\u201d. Bailing on auto-join.'
        )
        self.assertEqual(event.text, expected_text)

        event = events[3]

        self.CheckTimestamp(event.timestamp, '2013-11-14 21:50:52.395000')

        expected_string = (
            '<airportd[88]> _handleLinkEvent: Unable to process link event, '
            'op mode request returned -3903 (Operation not supported)')

        self.assertEqual(event.text, expected_string)

        event = events[6]

        self.CheckTimestamp(event.timestamp, '2013-11-14 21:52:09.883000')

        self.assertEqual('airportd[88]', event.agent)
        self.assertEqual('_processSystemPSKAssoc', event.function)

        expected_action = (
            'New wifi configured. BSSID: 88:30:8a:7a:61:88, SSID: AndroidAP, '
            'Security: WPA2 Personal.')

        self.assertEqual(event.action, expected_action)

        expected_text = (
            'No password for network <CWNetwork: 0x7fdfe970b250> '
            '[ssid=AndroidAP, bssid=88:30:8a:7a:61:88, security=WPA2 '
            'Personal, rssi=-21, channel=<CWChannel: 0x7fdfe9712870> '
            '[channelNumber=11(2GHz), channelWidth={20MHz}], ibss=0] '
            'in the system keychain')

        self.assertEqual(event.text, expected_text)

        event = events[8]

        self.CheckTimestamp(event.timestamp, '2013-12-31 23:59:38.165000')

        event = events[9]

        self.CheckTimestamp(event.timestamp, '2014-01-01 01:12:17.311000')
コード例 #4
0
 def setUp(self):
     """Sets up the needed objects used throughout the test."""
     self._parser = mac_wifi.MacWifiLogParser()
コード例 #5
0
    def testParse(self):
        """Tests the Parse function."""
        parser = mac_wifi.MacWifiLogParser()
        knowledge_base_values = {'year': 2013}
        storage_writer = self._ParseFile(
            ['wifi.log'], parser, knowledge_base_values=knowledge_base_values)

        self.assertEqual(storage_writer.number_of_warnings, 0)
        self.assertEqual(storage_writer.number_of_events, 10)

        events = list(storage_writer.GetEvents())

        expected_event_values = {
            'action': 'Interface en0 turn up.',
            'agent': 'airportd[88]',
            'data_type': 'mac:wifilog:line',
            'function': 'airportdProcessDLILEvent',
            'text': 'en0 attached (up)',
            'timestamp': '2013-11-14 20:36:37.222000'
        }

        self.CheckEventValues(storage_writer, events[1], expected_event_values)

        expected_event_values = {
            'action':
            'Wifi connected to SSID CampusNet',
            'agent':
            'airportd[88]',
            'data_type':
            'mac:wifilog:line',
            'function':
            '_doAutoJoin',
            'text': ('Already associated to \u201cCampusNet\u201d. Bailing on '
                     'auto-join.'),
            'timestamp':
            '2013-11-14 20:36:43.818000'
        }

        self.CheckEventValues(storage_writer, events[2], expected_event_values)

        expected_event_values = {
            'data_type':
            'mac:wifilog:line',
            'text':
            ('<airportd[88]> _handleLinkEvent: Unable to process link event, '
             'op mode request returned -3903 (Operation not supported)'),
            'timestamp':
            '2013-11-14 21:50:52.395000'
        }

        self.CheckEventValues(storage_writer, events[3], expected_event_values)

        expected_event_values = {
            'action':
            ('New wifi configured. BSSID: 88:30:8a:7a:61:88, SSID: AndroidAP, '
             'Security: WPA2 Personal.'),
            'agent':
            'airportd[88]',
            'data_type':
            'mac:wifilog:line',
            'function':
            '_processSystemPSKAssoc',
            'text': ('No password for network <CWNetwork: 0x7fdfe970b250> '
                     '[ssid=AndroidAP, bssid=88:30:8a:7a:61:88, security=WPA2 '
                     'Personal, rssi=-21, channel=<CWChannel: 0x7fdfe9712870> '
                     '[channelNumber=11(2GHz), channelWidth={20MHz}], ibss=0] '
                     'in the system keychain'),
            'timestamp':
            '2013-11-14 21:52:09.883000'
        }

        self.CheckEventValues(storage_writer, events[6], expected_event_values)

        expected_event_values = {
            'data_type': 'mac:wifilog:line',
            'timestamp': '2013-12-31 23:59:38.165000'
        }

        self.CheckEventValues(storage_writer, events[8], expected_event_values)

        expected_event_values = {
            'data_type': 'mac:wifilog:line',
            'timestamp': '2014-01-01 01:12:17.311000'
        }

        self.CheckEventValues(storage_writer, events[9], expected_event_values)
コード例 #6
0
ファイル: mac_wifi.py プロジェクト: vonnopsled/plaso
 def setUp(self):
     """Makes preparations before running an individual test."""
     self._parser = mac_wifi.MacWifiLogParser()
コード例 #7
0
 def setUp(self):
     """Sets up the needed objects used throughout the test."""
     pre_obj = event.PreprocessObject()
     pre_obj.year = 2013
     pre_obj.zone = pytz.timezone('UTC')
     self._parser = mac_wifi_parser.MacWifiLogParser(pre_obj, None)
コード例 #8
0
ファイル: mac_wifi.py プロジェクト: bethlogic/plaso
    def testParse(self):
        """Tests the Parse function."""
        parser_object = mac_wifi.MacWifiLogParser()

        knowledge_base_values = {u'year': 2013}
        test_file = self._GetTestFilePath([u'wifi.log'])
        event_queue_consumer = self._ParseFile(
            parser_object,
            test_file,
            knowledge_base_values=knowledge_base_values)
        event_objects = self._GetEventObjectsFromQueue(event_queue_consumer)

        self.assertEqual(len(event_objects), 9)

        event_object = event_objects[0]

        expected_timestamp = timelib.Timestamp.CopyFromString(
            u'2013-11-14 20:36:37.222')
        self.assertEqual(event_object.timestamp, expected_timestamp)

        self.assertEqual(event_object.agent, u'airportd[88]')
        self.assertEqual(event_object.function, u'airportdProcessDLILEvent')
        self.assertEqual(event_object.action, u'Interface en0 turn up.')
        self.assertEqual(event_object.text, u'en0 attached (up)')

        expected_msg = (u'Action: Interface en0 turn up. '
                        u'(airportdProcessDLILEvent) '
                        u'Log: en0 attached (up)')
        expected_msg_short = (u'Action: Interface en0 turn up.')

        self._TestGetMessageStrings(event_object, expected_msg,
                                    expected_msg_short)

        event_object = event_objects[1]

        expected_timestamp = timelib.Timestamp.CopyFromString(
            u'2013-11-14 20:36:43.818')
        self.assertEqual(event_object.timestamp, expected_timestamp)

        self.assertEqual(event_object.agent, u'airportd[88]')
        self.assertEqual(event_object.function, u'_doAutoJoin')
        self.assertEqual(event_object.action,
                         u'Wifi connected to SSID CampusNet')

        expected_text = (
            u'Already associated to \u201cCampusNet\u201d. Bailing on auto-join.'
        )
        self.assertEqual(event_object.text, expected_text)

        event_object = event_objects[2]

        expected_timestamp = timelib.Timestamp.CopyFromString(
            u'2013-11-14 21:50:52.395')
        self.assertEqual(event_object.timestamp, expected_timestamp)

        self.assertEqual(event_object.agent, u'airportd[88]')
        self.assertEqual(event_object.function, u'_handleLinkEvent')

        expected_string = (
            u'Unable to process link event, op mode request returned -3903 '
            u'(Operation not supported)')

        self.assertEqual(event_object.action, expected_string)
        self.assertEqual(event_object.text, expected_string)

        event_object = event_objects[5]

        expected_timestamp = timelib.Timestamp.CopyFromString(
            u'2013-11-14 21:52:09.883')
        self.assertEqual(event_object.timestamp, expected_timestamp)

        self.assertEqual(u'airportd[88]', event_object.agent)
        self.assertEqual(u'_processSystemPSKAssoc', event_object.function)

        expected_action = (
            u'New wifi configured. BSSID: 88:30:8a:7a:61:88, SSID: AndroidAP, '
            u'Security: WPA2 Personal.')

        self.assertEqual(event_object.action, expected_action)

        expected_text = (
            u'No password for network <CWNetwork: 0x7fdfe970b250> '
            u'[ssid=AndroidAP, bssid=88:30:8a:7a:61:88, security=WPA2 '
            u'Personal, rssi=-21, channel=<CWChannel: 0x7fdfe9712870> '
            u'[channelNumber=11(2GHz), channelWidth={20MHz}], ibss=0] '
            u'in the system keychain')

        self.assertEqual(event_object.text, expected_text)

        event_object = event_objects[7]

        expected_timestamp = timelib.Timestamp.CopyFromString(
            u'2013-12-31 23:59:38.165')
        self.assertEqual(event_object.timestamp, expected_timestamp)

        event_object = event_objects[8]

        expected_timestamp = timelib.Timestamp.CopyFromString(
            u'2014-01-01 01:12:17.311')
        self.assertEqual(event_object.timestamp, expected_timestamp)