1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
|
#!/usr/bin/perl
BEGIN {
die "The PERCONA_TOOLKIT_BRANCH environment variable is not set.\n"
unless $ENV{PERCONA_TOOLKIT_BRANCH} && -d $ENV{PERCONA_TOOLKIT_BRANCH};
unshift @INC, "$ENV{PERCONA_TOOLKIT_BRANCH}/lib";
};
use strict;
use warnings FATAL => 'all';
use English qw(-no_match_vars);
use Test::More;
use TcpdumpParser;
use PerconaTest;
my $sample = "t/lib/samples/tcpdump/";
my $p = new TcpdumpParser();
# First, parse the TCP and IP packet...
my $contents = <<EOF;
2009-04-12 21:18:40.638244 IP 192.168.28.223.56462 > 192.168.28.213.mysql: tcp 301
\t0x0000: 4508 0161 7dc5 4000 4006 00c5 c0a8 1cdf
\t0x0010: c0a8 1cd5 dc8e 0cea adc4 5111 ad6f 995e
\t0x0020: 8018 005b 0987 0000 0101 080a 62e6 32e7
\t0x0030: 62e4 a103 2901 0000 0353 454c 4543 5420
\t0x0040: 6469 7374 696e 6374 2074 702e 6964 2c20
\t0x0050: 7470 2e70 726f 6475 6374 5f69 6d61 6765
\t0x0060: 5f6c 696e 6b20 6173 2069 6d67 2c20 7470
\t0x0070: 2e69 6e6e 6572 5f76 6572 7365 3220 6173
\t0x0080: 2074 6974 6c65 2c20 7470 2e70 7269 6365
\t0x0090: 2046 524f 4d20 7470 726f 6475 6374 7320
\t0x00a0: 7470 2c20 6667 6966 745f 6c69 6e6b 2065
\t0x00b0: 2057 4845 5245 2074 702e 7072 6f64 7563
\t0x00c0: 745f 6465 7363 203d 2027 6667 6966 7427
\t0x00d0: 2041 4e44 2074 702e 6964 3d65 2e70 726f
\t0x00e0: 6475 6374 5f69 6420 2061 6e64 2074 702e
\t0x00f0: 7072 6f64 7563 745f 7374 6174 7573 3d35
\t0x0100: 2041 4e44 2065 2e63 6174 5f69 6420 696e
\t0x0110: 2028 322c 3131 2c2d 3129 2041 4e44 2074
\t0x0120: 702e 696e 7369 6465 5f69 6d61 6765 203d
\t0x0130: 2027 456e 676c 6973 6827 2020 4f52 4445
\t0x0140: 5220 4259 2074 702e 7072 696e 7461 626c
\t0x0150: 6520 6465 7363 204c 494d 4954 2030 2c20
\t0x0160: 38
EOF
is_deeply(
$p->_parse_packet($contents),
{ ts => '2009-04-12 21:18:40.638244',
seq => '2915324177',
ack => '2909772126',
src_host => '192.168.28.223',
src_port => '56462',
dst_host => '192.168.28.213',
dst_port => '3306',
complete => 1,
ip_hlen => 5,
tcp_hlen => 8,
dgram_len => 353,
data_len => 301,
syn => 0,
fin => 0,
rst => 0,
data => join('', qw(
2901 0000 0353 454c 4543 5420
6469 7374 696e 6374 2074 702e 6964 2c20
7470 2e70 726f 6475 6374 5f69 6d61 6765
5f6c 696e 6b20 6173 2069 6d67 2c20 7470
2e69 6e6e 6572 5f76 6572 7365 3220 6173
2074 6974 6c65 2c20 7470 2e70 7269 6365
2046 524f 4d20 7470 726f 6475 6374 7320
7470 2c20 6667 6966 745f 6c69 6e6b 2065
2057 4845 5245 2074 702e 7072 6f64 7563
745f 6465 7363 203d 2027 6667 6966 7427
2041 4e44 2074 702e 6964 3d65 2e70 726f
6475 6374 5f69 6420 2061 6e64 2074 702e
7072 6f64 7563 745f 7374 6174 7573 3d35
2041 4e44 2065 2e63 6174 5f69 6420 696e
2028 322c 3131 2c2d 3129 2041 4e44 2074
702e 696e 7369 6465 5f69 6d61 6765 203d
2027 456e 676c 6973 6827 2020 4f52 4445
5220 4259 2074 702e 7072 696e 7461 626c
6520 6465 7363 204c 494d 4954 2030 2c20
38)),
},
'Parsed packet OK');
my $oktorun = 1;
# Check that parsing multiple packets and callback works.
test_packet_parser(
parser => $p,
oktorun => sub { $oktorun = $_[0]; },
file => "$sample/tcpdump001.txt",
desc => 'basic packets',
result =>
[
{ ts => '2009-04-12 09:50:16.804849',
ack => '2903937561',
seq => '2894758931',
src_host => '127.0.0.1',
src_port => '42167',
dst_host => '127.0.0.1',
dst_port => '3306',
complete => 1,
pos_in_log => 0,
ip_hlen => 5,
tcp_hlen => 8,
dgram_len => 89,
data_len => 37,
syn => 0,
fin => 0,
rst => 0,
data => join('', qw(
2100 0000 0373 656c 6563 7420
2268 656c 6c6f 2077 6f72 6c64 2220 6173
2067 7265 6574 696e 67)),
},
{ ts => '2009-04-12 09:50:16.805123',
ack => '2894758968',
seq => '2903937561',
src_host => '127.0.0.1',
src_port => '3306',
dst_host => '127.0.0.1',
dst_port => '42167',
complete => 1,
pos_in_log => 355,
ip_hlen => 5,
tcp_hlen => 8,
dgram_len => 125,
data_len => 73,
syn => 0,
fin => 0,
rst => 0,
data => join('', qw(
0100 0001 011e 0000 0203 6465
6600 0000 0867 7265 6574 696e 6700 0c08
000b 0000 00fd 0100 1f00 0005 0000 03fe
0000 0200 0c00 0004 0b68 656c 6c6f 2077
6f72 6c64 0500 0005 fe00 0002 00)),
},
],
);
is(
$oktorun,
0,
'Sets oktorun'
);
# #############################################################################
# Issue 564: mk-query-digest --type tcpdump|memcached crashes on empty input
# #############################################################################
test_packet_parser(
parser => $p,
file => "$sample/tcpdump020.txt",
desc => 'Empty input (issue 564)',
result =>
[
],
);
# #############################################################################
# Issue 906: mk-query-digest --tcpdump doesn't work if dumped packet header
# has extra info
# #############################################################################
test_packet_parser(
parser => $p,
file => "$sample/tcpdump039.txt",
desc => 'Extra packet header info (issue 906)',
result =>
[
{
ack => 3203084012,
complete => 1,
data_len => 154,
dgram_len => 206,
dst_host => '192.168.1.220',
dst_port => '3310',
fin => 0,
ip_hlen => 5,
pos_in_log => 0,
rst => 0,
seq => 3474524,
src_host => '192.168.1.81',
src_port => '36762',
syn => 0,
tcp_hlen => 8,
ts => '2009-11-10 09:49:31.864481',
data => '960000000353454c45435420636f757273655f73656374696f6e5f69642c20636f757273655f69642c20636f64652c206465736372697074696f6e2c206578745f69642c20626f6172645f69642c207374617475732c206c6f636174696f6e0a46524f4d202020636f757273655f73656374696f6e0a57484552452020636f757273655f73656374696f6e5f6964203d2027313435383133270a',
},
],
);
# #############################################################################
# Done.
# #############################################################################
my $output = '';
{
local *STDERR;
open STDERR, '>', \$output;
$p->_d('Complete test coverage');
}
like(
$output,
qr/Complete test coverage/,
'_d() works'
);
done_testing;
|
