예제 #1
0
    def testParseWithTimeZone(self):
        """Tests the Parse function with a time zone."""
        parser = vsftpd.VsftpdLogParser()
        storage_writer = self._ParseFile(['vsftpd.log'],
                                         parser,
                                         timezone='CET')

        self.assertEqual(storage_writer.number_of_warnings, 0)
        self.assertEqual(storage_writer.number_of_events, 25)

        events = list(storage_writer.GetEvents())

        expected_event_values = {
            'data_type':
            'vsftpd:log',
            'text':
            ('[pid 3] [jean] OK DOWNLOAD: Client "192.168.1.7", '
             '"/home/jean/trains/how-thomas-the-tank-engine-works-1.jpg", '
             '49283 bytes, 931.38Kbyte/sec'),
            'timestamp':
            '2016-06-10 12:24:19.000000'
        }

        self.CheckEventValues(storage_writer, events[12],
                              expected_event_values)
예제 #2
0
파일: vsftpd.py 프로젝트: cshanahan/plaso
  def testParse(self):
    """Tests the Parse function."""
    parser = vsftpd.VsftpdLogParser()
    storage_writer = self._ParseFile(['vsftpd.log'], parser)

    number_of_events = storage_writer.GetNumberOfAttributeContainers('event')
    self.assertEqual(number_of_events, 25)

    number_of_warnings = storage_writer.GetNumberOfAttributeContainers(
        'extraction_warning')
    self.assertEqual(number_of_warnings, 0)

    number_of_warnings = storage_writer.GetNumberOfAttributeContainers(
        'recovery_warning')
    self.assertEqual(number_of_warnings, 0)

    events = list(storage_writer.GetEvents())

    expected_event_values = {
        'date_time': '2016-06-10 14:24:19',
        'data_type': 'vsftpd:log',
        'text': (
            '[pid 3] [jean] OK DOWNLOAD: Client "192.168.1.7", '
            '"/home/jean/trains/how-thomas-the-tank-engine-works-1.jpg", '
            '49283 bytes, 931.38Kbyte/sec')}

    self.CheckEventValues(storage_writer, events[12], expected_event_values)
예제 #3
0
파일: vsftpd.py 프로젝트: wankyou/plaso
  def testParseWithTimeZone(self):
    """Tests the Parse function with a time zone."""
    parser = vsftpd.VsftpdLogParser()
    storage_writer = self._ParseFile(['vsftpd.log'], parser, timezone='CET')

    self.assertEqual(storage_writer.number_of_warnings, 0)
    self.assertEqual(storage_writer.number_of_events, 25)

    events = list(storage_writer.GetEvents())

    event = events[12]

    self.CheckTimestamp(event.timestamp, '2016-06-10 12:24:19.000000')
예제 #4
0
    def testParse(self):
        """Tests the Parse function."""
        parser = vsftpd.VsftpdLogParser()
        storage_writer = self._ParseFile(['vsftpd.log'], parser)

        self.assertEqual(storage_writer.number_of_warnings, 0)
        self.assertEqual(storage_writer.number_of_events, 25)

        events = list(storage_writer.GetEvents())

        event = events[12]

        self.CheckTimestamp(event.timestamp, '2016-06-10 14:24:19.000000')

        expected_message = (
            '[pid 3] [jean] OK DOWNLOAD: Client "192.168.1.7", '
            '"/home/jean/trains/how-thomas-the-tank-engine-works-1.jpg", '
            '49283 bytes, 931.38Kbyte/sec')
        expected_short_message = '{0:s}...'.format(expected_message[:77])

        event_data = self._GetEventDataOfEvent(storage_writer, event)

        self._TestGetMessageStrings(event_data, expected_message,
                                    expected_short_message)