759 lines
32 KiB
Go
759 lines
32 KiB
Go
package sflow
|
|
|
|
import (
|
|
"bytes"
|
|
"encoding/hex"
|
|
"testing"
|
|
"time"
|
|
|
|
"github.com/influxdata/telegraf"
|
|
"github.com/influxdata/telegraf/testutil"
|
|
"github.com/stretchr/testify/require"
|
|
)
|
|
|
|
func TestIPv4SW(t *testing.T) {
|
|
str := `00000005` + // version
|
|
`00000001` + //address type
|
|
`c0a80102` + // ip address
|
|
`00000010` + // sub agent id
|
|
`0000f3d4` + // sequence number
|
|
`0bfa047f` + // uptime
|
|
`00000002` + // sample count
|
|
`00000001` + // sample type
|
|
`000000d0` + // sample data length
|
|
`0001210a` + // sequence number
|
|
`000001fe` + // source id 00 = source id type, 0001fe = source id index
|
|
`00000400` + // sampling rate.. apparently this should be input if index????
|
|
`04842400` + // sample pool
|
|
`00000000` + // drops
|
|
`000001fe` + // input if index
|
|
`00000200` + // output if index
|
|
`00000002` + // flow records count
|
|
`00000001` + // FlowFormat
|
|
`00000090` + // flow length
|
|
`00000001` + // header protocol
|
|
`0000010b` + // Frame length
|
|
`00000004` + // stripped octets
|
|
`00000080` + // header length
|
|
`000c2936d3d6` + // dest mac
|
|
`94c691aa9760` + // source mac
|
|
`0800` + // etype code: ipv4
|
|
`4500` + // dscp + ecn
|
|
`00f9` + // total length
|
|
`f190` + // identification
|
|
`4000` + // fragment offset + flags
|
|
`40` + // ttl
|
|
`11` + // protocol
|
|
`b4f5` + // header checksum
|
|
`c0a80913` + // source ip
|
|
`c0a8090a` + // dest ip
|
|
`00a1` + // source port
|
|
`ba05` + // dest port
|
|
`00e5` + // udp length
|
|
// rest of header/flowSample we ignore
|
|
`641f3081da02010104066d6f746f6770a281cc02047b46462e0201000201003081bd3012060d2b06010201190501010281dc710201003013060d2b06010201190501010281e66802025acc3012060d2b0601020119050101` +
|
|
// next flow record - ignored
|
|
`000003e90000001000000009000000000000000900000000` +
|
|
// next sample
|
|
`00000001000000d00000e3cc000002100000400048eb740000000000000002100000020000000002000000010000009000000001000000970000000400000080000c2936d3d6fcecda44008f81000009080045000081186440003f119098c0a80815c0a8090a9a690202006d23083c33303e4170722031312030393a33333a3031206b6e6f64653120736e6d70645b313039385d3a20436f6e6e656374696f6e2066726f6d205544503a205b3139322e3136382e392e31305d3a34393233362d000003e90000001000000009000000000000000900000000`
|
|
packet, err := hex.DecodeString(str)
|
|
require.NoError(t, err)
|
|
|
|
actual := []telegraf.Metric{}
|
|
dc := NewDecoder()
|
|
dc.OnPacket(func(p *V5Format) {
|
|
metrics, err := makeMetrics(p)
|
|
require.NoError(t, err)
|
|
actual = append(actual, metrics...)
|
|
})
|
|
buf := bytes.NewReader(packet)
|
|
err = dc.Decode(buf)
|
|
require.NoError(t, err)
|
|
|
|
expected := []telegraf.Metric{
|
|
testutil.MustMetric(
|
|
"sflow",
|
|
map[string]string{
|
|
"agent_address": "192.168.1.2",
|
|
"dst_ip": "192.168.9.10",
|
|
"dst_mac": "00:0c:29:36:d3:d6",
|
|
"dst_port": "47621",
|
|
"ether_type": "IPv4",
|
|
"header_protocol": "ETHERNET-ISO88023",
|
|
"input_ifindex": "510",
|
|
"output_ifindex": "512",
|
|
"sample_direction": "ingress",
|
|
"source_id_index": "510",
|
|
"source_id_type": "0",
|
|
"src_ip": "192.168.9.19",
|
|
"src_mac": "94:c6:91:aa:97:60",
|
|
"src_port": "161",
|
|
},
|
|
map[string]interface{}{
|
|
"bytes": uint64(0x042c00),
|
|
"drops": uint64(0x00),
|
|
"frame_length": uint64(0x010b),
|
|
"header_length": uint64(0x80),
|
|
"ip_flags": uint64(0x02),
|
|
"ip_fragment_offset": uint64(0x00),
|
|
"ip_total_length": uint64(0xf9),
|
|
"ip_ttl": uint64(0x40),
|
|
"sampling_rate": uint64(0x0400),
|
|
"udp_length": uint64(0xe5),
|
|
"ip_dscp": "0",
|
|
"ip_ecn": "0",
|
|
},
|
|
time.Unix(0, 0),
|
|
),
|
|
testutil.MustMetric(
|
|
"sflow",
|
|
map[string]string{
|
|
"agent_address": "192.168.1.2",
|
|
"dst_ip": "192.168.9.10",
|
|
"dst_mac": "00:0c:29:36:d3:d6",
|
|
"dst_port": "514",
|
|
"ether_type": "IPv4",
|
|
"header_protocol": "ETHERNET-ISO88023",
|
|
"input_ifindex": "528",
|
|
"output_ifindex": "512",
|
|
"sample_direction": "ingress",
|
|
"source_id_index": "528",
|
|
"source_id_type": "0",
|
|
"src_ip": "192.168.8.21",
|
|
"src_mac": "fc:ec:da:44:00:8f",
|
|
"src_port": "39529",
|
|
},
|
|
map[string]interface{}{
|
|
"bytes": uint64(0x25c000),
|
|
"drops": uint64(0x00),
|
|
"frame_length": uint64(0x97),
|
|
"header_length": uint64(0x80),
|
|
"ip_flags": uint64(0x02),
|
|
"ip_fragment_offset": uint64(0x00),
|
|
"ip_total_length": uint64(0x81),
|
|
"ip_ttl": uint64(0x3f),
|
|
"sampling_rate": uint64(0x4000),
|
|
"udp_length": uint64(0x6d),
|
|
"ip_dscp": "0",
|
|
"ip_ecn": "0",
|
|
},
|
|
time.Unix(0, 0),
|
|
),
|
|
}
|
|
testutil.RequireMetricsEqual(t, expected, actual, testutil.IgnoreTime())
|
|
}
|
|
|
|
func BenchmarkDecodeIPv4SW(b *testing.B) {
|
|
packet, err := hex.DecodeString("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")
|
|
require.NoError(b, err)
|
|
|
|
dc := NewDecoder()
|
|
require.NoError(b, err)
|
|
|
|
b.ResetTimer()
|
|
for n := 0; n < b.N; n++ {
|
|
_, err = dc.DecodeOnePacket(bytes.NewBuffer(packet))
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
}
|
|
}
|
|
|
|
func TestExpandFlow(t *testing.T) {
|
|
packet, err := hex.DecodeString("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")
|
|
require.NoError(t, err)
|
|
|
|
dc := NewDecoder()
|
|
p, err := dc.DecodeOnePacket(bytes.NewBuffer(packet))
|
|
require.NoError(t, err)
|
|
actual, err := makeMetrics(p)
|
|
require.NoError(t, err)
|
|
|
|
expected := []telegraf.Metric{
|
|
testutil.MustMetric(
|
|
"sflow",
|
|
map[string]string{
|
|
"agent_address": "10.0.1.80",
|
|
"dst_ip": "217.77.82.245",
|
|
"dst_mac": "00:1b:17:00:01:30",
|
|
"dst_port": "32368",
|
|
"ether_type": "IPv4",
|
|
"header_protocol": "ETHERNET-ISO88023",
|
|
"input_ifindex": "1054596",
|
|
"output_ifindex": "1051780",
|
|
"sample_direction": "egress",
|
|
"source_id_index": "1051780",
|
|
"source_id_type": "0",
|
|
"src_ip": "172.16.0.22",
|
|
"src_mac": "00:12:01:f5:8d:44",
|
|
"src_port": "1433",
|
|
},
|
|
map[string]interface{}{
|
|
"bytes": uint64(0x16f000),
|
|
"drops": uint64(0x00),
|
|
"frame_length": uint64(0x05bc),
|
|
"header_length": uint64(0x80),
|
|
"ip_flags": uint64(0x02),
|
|
"ip_fragment_offset": uint64(0x00),
|
|
"ip_total_length": uint64(0x05a6),
|
|
"ip_ttl": uint64(0x7e),
|
|
"sampling_rate": uint64(0x0400),
|
|
"tcp_header_length": uint64(0x14),
|
|
"tcp_urgent_pointer": uint64(0x00),
|
|
"tcp_window_size": uint64(0x0200),
|
|
"ip_dscp": "0",
|
|
"ip_ecn": "2",
|
|
},
|
|
time.Unix(0, 0),
|
|
),
|
|
testutil.MustMetric(
|
|
"sflow",
|
|
map[string]string{
|
|
"agent_address": "10.0.1.80",
|
|
"dst_ip": "192.168.6.8",
|
|
"dst_mac": "00:24:e8:32:43:38",
|
|
"dst_port": "61391",
|
|
"ether_type": "IPv4",
|
|
"header_protocol": "ETHERNET-ISO88023",
|
|
"input_ifindex": "1054596",
|
|
"output_ifindex": "1054468",
|
|
"sample_direction": "egress",
|
|
"source_id_index": "1054468",
|
|
"source_id_type": "0",
|
|
"src_ip": "192.168.6.12",
|
|
"src_mac": "d4:ae:52:aa:0b:54",
|
|
"src_port": "80",
|
|
},
|
|
map[string]interface{}{
|
|
"bytes": uint64(0x017c8000),
|
|
"drops": uint64(0x00),
|
|
"frame_length": uint64(0x05f2),
|
|
"header_length": uint64(0x80),
|
|
"ip_flags": uint64(0x02),
|
|
"ip_fragment_offset": uint64(0x00),
|
|
"ip_total_length": uint64(0x05dc),
|
|
"ip_ttl": uint64(0x80),
|
|
"sampling_rate": uint64(0x4000),
|
|
"tcp_header_length": uint64(0x14),
|
|
"tcp_urgent_pointer": uint64(0x00),
|
|
"tcp_window_size": uint64(0xff),
|
|
"ip_dscp": "0",
|
|
"ip_ecn": "0",
|
|
},
|
|
time.Unix(0, 0),
|
|
),
|
|
testutil.MustMetric(
|
|
"sflow",
|
|
map[string]string{
|
|
"agent_address": "10.0.1.80",
|
|
"dst_ip": "80.16.24.240",
|
|
"dst_mac": "00:1b:17:00:01:30",
|
|
"ether_type": "IPv4",
|
|
"header_protocol": "ETHERNET-ISO88023",
|
|
"input_ifindex": "1054596",
|
|
"output_ifindex": "1051652",
|
|
"sample_direction": "egress",
|
|
"source_id_index": "1051652",
|
|
"source_id_type": "0",
|
|
"src_ip": "217.77.81.5",
|
|
"src_mac": "00:12:01:f5:8d:44",
|
|
},
|
|
map[string]interface{}{
|
|
"bytes": uint64(0x01f800),
|
|
"drops": uint64(0x00),
|
|
"frame_length": uint64(0x7e),
|
|
"header_length": uint64(0x7a),
|
|
"ip_flags": uint64(0x02),
|
|
"ip_fragment_offset": uint64(0x00),
|
|
"ip_total_length": uint64(0x68),
|
|
"ip_ttl": uint64(0xff),
|
|
"sampling_rate": uint64(0x0400),
|
|
"ip_dscp": "0",
|
|
"ip_ecn": "0",
|
|
},
|
|
time.Unix(0, 0),
|
|
),
|
|
}
|
|
testutil.RequireMetricsEqual(t, expected, actual, testutil.IgnoreTime())
|
|
}
|
|
|
|
func TestIPv4SWRT(t *testing.T) {
|
|
packet, err := hex.DecodeString("000000050000000189dd4f010000000000003d4f21151ad40000000600000001000000bc354b97090000020c000013b175792bea000000000000028f0000020c0000000300000001000000640000000100000058000000040000005408b2587a57624c16fc0b61a5080045000046c3e440003a1118a0052aada7569e5ab367a6e35b0032d7bbf1f2fb2eb2490a97f87abc31e135834be367000002590000ffffffffffffffff02add830d51e0aec14cf000003e90000001000000000000000000000000000000000000003ea0000001000000001c342e32a000000160000000b00000001000000a88b8ffb57000002a2000013b12e344fd800000000000002a20000028f0000000300000001000000500000000100000042000000040000003e4c16fc0b6202c03e0fdecafe080045000030108000007d11fe45575185a718693996f0570e8c001c20614ad602003fd6d4afa6a6d18207324000271169b00000000003e90000001000000000000000000000000000000000000003ea000000100000000189dd4f210000000f0000001800000001000000e8354b970a0000020c000013b175793f9b000000000000028f0000020c00000003000000010000009000000001000001a500000004000000800231466d0b2c4c16fc0b61a5080045000193198f40003a114b75052aae1f5f94c778678ef24d017f50ea7622287c30799e1f7d45932d01ca92c46d930000927c0000ffffffffffffffff02ad0eea6498953d1c7ebb6dbdf0525c80e1a9a62bacfea92f69b7336c2f2f60eba0593509e14eef167eb37449f05ad70b8241c1a46d000003e90000001000000000000000000000000000000000000003ea0000001000000001c342e1fd000000160000001000000001000000e8354b970b0000020c000013b17579534c000000000000028f0000020c00000003000000010000009000000001000000b500000004000000800231466d0b2c4c16fc0b61a50800450000a327c240003606fd67b93c706a021ff365045fe8a0976d624df8207083501800edb31b0000485454502f312e3120323030204f4b0d0a5365727665723a2050726f746f636f6c20485454500d0a436f6e74656e742d4c656e6774683a20313430340d0a436f6e6e656374696f6e3a20000003e90000001000000000000000000000000000000000000003ea0000001000000001c342e1fd000000170000001000000001000000e8354b970c0000020c000013b1757966fd000000000000028f0000020c000000030000000100000090000000010000018e00000004000000800231466d0b2c4c16fc0b61a508004500017c7d2c40003a116963052abd8d021c940e67e7e0d501682342dbe7936bd47ef487dee5591ec1b24d83622e000072250000ffffffffffffffff02ad0039d8ba86a90017071d76b177de4d8c4e23bcaaaf4d795f77b032f959e0fb70234d4c28922d4e08dd3330c66e34bff51cc8ade5000003e90000001000000000000000000000000000000000000003ea0000001000000001c342e1fd000000160000001000000001000000e80d6146ac000002a1000013b17880b49d00000000000002a10000028f00000003000000010000009000000001000005ee00000004000000804c16fc0b6201d8b122766a2c0800450005dc04574000770623a11fcd80a218691d4cf2fe01bbd4f47482065fd63a5010fabd7987000052a20002c8c43ea91ca1eaa115663f5218a37fbb409dfbbedff54731ef41199b35535905ac2366a05a803146ced544abf45597f3714327d59f99e30c899c39fc5a4b67d12087bf8db2bc000003e90000001000000000000000000000000000000000000003ea000000100000000189dd4f210000001000000018")
|
|
require.NoError(t, err)
|
|
|
|
dc := NewDecoder()
|
|
p, err := dc.DecodeOnePacket(bytes.NewBuffer(packet))
|
|
require.NoError(t, err)
|
|
actual, err := makeMetrics(p)
|
|
require.NoError(t, err)
|
|
|
|
expected := []telegraf.Metric{
|
|
testutil.MustMetric(
|
|
"sflow",
|
|
map[string]string{
|
|
"agent_address": "137.221.79.1",
|
|
"dst_ip": "86.158.90.179",
|
|
"dst_mac": "08:b2:58:7a:57:62",
|
|
"dst_port": "58203",
|
|
"ether_type": "IPv4",
|
|
"header_protocol": "ETHERNET-ISO88023",
|
|
"input_ifindex": "655",
|
|
"output_ifindex": "524",
|
|
"sample_direction": "egress",
|
|
"source_id_index": "524",
|
|
"source_id_type": "0",
|
|
"src_ip": "5.42.173.167",
|
|
"src_mac": "4c:16:fc:0b:61:a5",
|
|
"src_port": "26534",
|
|
},
|
|
map[string]interface{}{
|
|
"bytes": uint64(0x06c4d8),
|
|
"drops": uint64(0x00),
|
|
"frame_length": uint64(0x58),
|
|
"header_length": uint64(0x54),
|
|
"ip_flags": uint64(0x02),
|
|
"ip_fragment_offset": uint64(0x00),
|
|
"ip_total_length": uint64(0x46),
|
|
"ip_ttl": uint64(0x3a),
|
|
"sampling_rate": uint64(0x13b1),
|
|
"udp_length": uint64(0x32),
|
|
"ip_dscp": "0",
|
|
"ip_ecn": "0",
|
|
},
|
|
time.Unix(0, 0),
|
|
),
|
|
testutil.MustMetric(
|
|
"sflow",
|
|
map[string]string{
|
|
"agent_address": "137.221.79.1",
|
|
"dst_ip": "24.105.57.150",
|
|
"dst_mac": "4c:16:fc:0b:62:02",
|
|
"dst_port": "3724",
|
|
"ether_type": "IPv4",
|
|
"header_protocol": "ETHERNET-ISO88023",
|
|
"input_ifindex": "674",
|
|
"output_ifindex": "655",
|
|
"sample_direction": "ingress",
|
|
"source_id_index": "674",
|
|
"source_id_type": "0",
|
|
"src_ip": "87.81.133.167",
|
|
"src_mac": "c0:3e:0f:de:ca:fe",
|
|
"src_port": "61527",
|
|
},
|
|
map[string]interface{}{
|
|
"bytes": uint64(0x0513a2),
|
|
"drops": uint64(0x00),
|
|
"frame_length": uint64(0x42),
|
|
"header_length": uint64(0x3e),
|
|
"ip_flags": uint64(0x00),
|
|
"ip_fragment_offset": uint64(0x00),
|
|
"ip_total_length": uint64(0x30),
|
|
"ip_ttl": uint64(0x7d),
|
|
"sampling_rate": uint64(0x13b1),
|
|
"udp_length": uint64(0x1c),
|
|
"ip_dscp": "0",
|
|
"ip_ecn": "0",
|
|
},
|
|
time.Unix(0, 0),
|
|
),
|
|
testutil.MustMetric(
|
|
"sflow",
|
|
map[string]string{
|
|
"agent_address": "137.221.79.1",
|
|
"dst_ip": "95.148.199.120",
|
|
"dst_mac": "02:31:46:6d:0b:2c",
|
|
"dst_port": "62029",
|
|
"ether_type": "IPv4",
|
|
"header_protocol": "ETHERNET-ISO88023",
|
|
"input_ifindex": "655",
|
|
"output_ifindex": "524",
|
|
"sample_direction": "egress",
|
|
"source_id_index": "524",
|
|
"source_id_type": "0",
|
|
"src_ip": "5.42.174.31",
|
|
"src_mac": "4c:16:fc:0b:61:a5",
|
|
"src_port": "26510",
|
|
},
|
|
map[string]interface{}{
|
|
"bytes": uint64(0x206215),
|
|
"drops": uint64(0x00),
|
|
"frame_length": uint64(0x01a5),
|
|
"header_length": uint64(0x80),
|
|
"ip_flags": uint64(0x02),
|
|
"ip_fragment_offset": uint64(0x00),
|
|
"ip_total_length": uint64(0x0193),
|
|
"ip_ttl": uint64(0x3a),
|
|
"sampling_rate": uint64(0x13b1),
|
|
"udp_length": uint64(0x017f),
|
|
"ip_dscp": "0",
|
|
"ip_ecn": "0",
|
|
},
|
|
time.Unix(0, 0),
|
|
),
|
|
testutil.MustMetric(
|
|
"sflow",
|
|
map[string]string{
|
|
"agent_address": "137.221.79.1",
|
|
"dst_ip": "2.31.243.101",
|
|
"dst_mac": "02:31:46:6d:0b:2c",
|
|
"dst_port": "59552",
|
|
"ether_type": "IPv4",
|
|
"header_protocol": "ETHERNET-ISO88023",
|
|
"input_ifindex": "655",
|
|
"output_ifindex": "524",
|
|
"sample_direction": "egress",
|
|
"source_id_index": "524",
|
|
"source_id_type": "0",
|
|
"src_ip": "185.60.112.106",
|
|
"src_mac": "4c:16:fc:0b:61:a5",
|
|
"src_port": "1119",
|
|
},
|
|
map[string]interface{}{
|
|
"bytes": uint64(0x0dec25),
|
|
"drops": uint64(0x00),
|
|
"frame_length": uint64(0xb5),
|
|
"header_length": uint64(0x80),
|
|
"ip_flags": uint64(0x02),
|
|
"ip_fragment_offset": uint64(0x00),
|
|
"ip_total_length": uint64(0xa3),
|
|
"ip_ttl": uint64(0x36),
|
|
"sampling_rate": uint64(0x13b1),
|
|
"tcp_header_length": uint64(0x14),
|
|
"tcp_urgent_pointer": uint64(0x00),
|
|
"tcp_window_size": uint64(0xed),
|
|
"ip_dscp": "0",
|
|
"ip_ecn": "0",
|
|
},
|
|
time.Unix(0, 0),
|
|
),
|
|
testutil.MustMetric(
|
|
"sflow",
|
|
map[string]string{
|
|
"agent_address": "137.221.79.1",
|
|
"dst_ip": "2.28.148.14",
|
|
"dst_mac": "02:31:46:6d:0b:2c",
|
|
"dst_port": "57557",
|
|
"ether_type": "IPv4",
|
|
"header_protocol": "ETHERNET-ISO88023",
|
|
"input_ifindex": "655",
|
|
"output_ifindex": "524",
|
|
"sample_direction": "egress",
|
|
"source_id_index": "524",
|
|
"source_id_type": "0",
|
|
"src_ip": "5.42.189.141",
|
|
"src_mac": "4c:16:fc:0b:61:a5",
|
|
"src_port": "26599",
|
|
},
|
|
map[string]interface{}{
|
|
"bytes": uint64(0x1e9d2e),
|
|
"drops": uint64(0x00),
|
|
"frame_length": uint64(0x018e),
|
|
"header_length": uint64(0x80),
|
|
"ip_flags": uint64(0x02),
|
|
"ip_fragment_offset": uint64(0x00),
|
|
"ip_total_length": uint64(0x017c),
|
|
"ip_ttl": uint64(0x3a),
|
|
"sampling_rate": uint64(0x13b1),
|
|
"udp_length": uint64(0x0168),
|
|
"ip_dscp": "0",
|
|
"ip_ecn": "0",
|
|
},
|
|
time.Unix(0, 0),
|
|
),
|
|
testutil.MustMetric(
|
|
"sflow",
|
|
map[string]string{
|
|
"agent_address": "137.221.79.1",
|
|
"dst_ip": "24.105.29.76",
|
|
"dst_mac": "4c:16:fc:0b:62:01",
|
|
"dst_port": "443",
|
|
"ether_type": "IPv4",
|
|
"header_protocol": "ETHERNET-ISO88023",
|
|
"input_ifindex": "673",
|
|
"output_ifindex": "655",
|
|
"sample_direction": "ingress",
|
|
"source_id_index": "673",
|
|
"source_id_type": "0",
|
|
"src_ip": "31.205.128.162",
|
|
"src_mac": "d8:b1:22:76:6a:2c",
|
|
"src_port": "62206",
|
|
},
|
|
map[string]interface{}{
|
|
"bytes": uint64(0x74c38e),
|
|
"drops": uint64(0x00),
|
|
"frame_length": uint64(0x05ee),
|
|
"header_length": uint64(0x80),
|
|
"ip_flags": uint64(0x02),
|
|
"ip_fragment_offset": uint64(0x00),
|
|
"ip_total_length": uint64(0x05dc),
|
|
"ip_ttl": uint64(0x77),
|
|
"sampling_rate": uint64(0x13b1),
|
|
"tcp_header_length": uint64(0x14),
|
|
"tcp_urgent_pointer": uint64(0x00),
|
|
"tcp_window_size": uint64(0xfabd),
|
|
"ip_dscp": "0",
|
|
"ip_ecn": "0",
|
|
},
|
|
time.Unix(0, 0),
|
|
),
|
|
}
|
|
testutil.RequireMetricsEqual(t, expected, actual, testutil.IgnoreTime())
|
|
}
|
|
|
|
func TestIPv6SW(t *testing.T) {
|
|
packet, err := hex.DecodeString("00000005000000010ae0648100000002000093d824ac82340000000100000001000000d000019f94000001010000100019f94000000000000000010100000000000000020000000100000090000000010000058c00000008000000800008e3fffc10d4f4be04612486dd60000000054e113a2607f8b0400200140000000000000008262000edc000e804a25e30c581af36fa01bbfa6f054e249810b584bcbf12926c2e29a779c26c72db483e8191524fe2288bfdaceaf9d2e724d04305706efcfdef70db86873bbacf29698affe4e7d6faa21d302f9b4b023291a05a000003e90000001000000001000000000000000100000000")
|
|
require.NoError(t, err)
|
|
|
|
dc := NewDecoder()
|
|
p, err := dc.DecodeOnePacket(bytes.NewBuffer(packet))
|
|
require.NoError(t, err)
|
|
actual, err := makeMetrics(p)
|
|
require.NoError(t, err)
|
|
|
|
expected := []telegraf.Metric{
|
|
|
|
testutil.MustMetric(
|
|
"sflow",
|
|
map[string]string{
|
|
"agent_address": "10.224.100.129",
|
|
"dst_ip": "2620:ed:c000:e804:a25e:30c5:81af:36fa",
|
|
"dst_mac": "00:08:e3:ff:fc:10",
|
|
"dst_port": "64111",
|
|
"ether_type": "IPv6",
|
|
"header_protocol": "ETHERNET-ISO88023",
|
|
"input_ifindex": "257",
|
|
"output_ifindex": "0",
|
|
"sample_direction": "ingress",
|
|
"source_id_index": "257",
|
|
"source_id_type": "0",
|
|
"src_ip": "2607:f8b0:4002:14::8",
|
|
"src_mac": "d4:f4:be:04:61:24",
|
|
"src_port": "443",
|
|
},
|
|
map[string]interface{}{
|
|
"bytes": uint64(0x58c000),
|
|
"drops": uint64(0x00),
|
|
"frame_length": uint64(0x058c),
|
|
"header_length": uint64(0x80),
|
|
"sampling_rate": uint64(0x1000),
|
|
"payload_length": uint64(0x054e),
|
|
"udp_length": uint64(0x054e),
|
|
"ip_dscp": "0",
|
|
"ip_ecn": "0",
|
|
},
|
|
time.Unix(0, 0),
|
|
),
|
|
}
|
|
testutil.RequireMetricsEqual(t, expected, actual, testutil.IgnoreTime())
|
|
}
|
|
|
|
func TestExpandFlowCounter(t *testing.T) {
|
|
packet, err := hex.DecodeString("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")
|
|
require.NoError(t, err)
|
|
|
|
dc := NewDecoder()
|
|
p, err := dc.DecodeOnePacket(bytes.NewBuffer(packet))
|
|
require.NoError(t, err)
|
|
actual, err := makeMetrics(p)
|
|
require.NoError(t, err)
|
|
|
|
expected := []telegraf.Metric{
|
|
testutil.MustMetric(
|
|
"sflow",
|
|
map[string]string{
|
|
"agent_address": "10.0.1.80",
|
|
"dst_ip": "192.168.6.79",
|
|
"dst_mac": "00:12:81:51:16:c4",
|
|
"dst_port": "1194",
|
|
"ether_type": "IPv4",
|
|
"header_protocol": "ETHERNET-ISO88023",
|
|
"input_ifindex": "1054596",
|
|
"output_ifindex": "1049348",
|
|
"sample_direction": "egress",
|
|
"source_id_index": "1049348",
|
|
"source_id_type": "0",
|
|
"src_ip": "192.168.6.10",
|
|
"src_mac": "00:15:17:cf:42:6d",
|
|
"src_port": "1263",
|
|
},
|
|
map[string]interface{}{
|
|
"bytes": uint64(0x110000),
|
|
"drops": uint64(0x00),
|
|
"frame_length": uint64(0x44),
|
|
"header_length": uint64(0x40),
|
|
"ip_flags": uint64(0x02),
|
|
"ip_fragment_offset": uint64(0x00),
|
|
"ip_total_length": uint64(0x28),
|
|
"ip_ttl": uint64(0x80),
|
|
"sampling_rate": uint64(0x4000),
|
|
"tcp_header_length": uint64(0x14),
|
|
"tcp_urgent_pointer": uint64(0x00),
|
|
"tcp_window_size": uint64(0xffff),
|
|
"ip_dscp": "0",
|
|
"ip_ecn": "0",
|
|
},
|
|
time.Unix(0, 0),
|
|
),
|
|
testutil.MustMetric(
|
|
"sflow",
|
|
map[string]string{
|
|
"agent_address": "10.0.1.80",
|
|
"dst_ip": "217.77.82.226",
|
|
"dst_mac": "00:1b:17:00:01:31",
|
|
"dst_port": "61769",
|
|
"ether_type": "IPv4",
|
|
"header_protocol": "ETHERNET-ISO88023",
|
|
"input_ifindex": "1053956",
|
|
"output_ifindex": "1053828",
|
|
"sample_direction": "egress",
|
|
"source_id_index": "1053828",
|
|
"source_id_type": "0",
|
|
"src_ip": "31.13.71.3",
|
|
"src_mac": "f0:f7:55:b9:af:c0",
|
|
"src_port": "443",
|
|
},
|
|
map[string]interface{}{
|
|
"bytes": uint64(0x01bc00),
|
|
"drops": uint64(0x00),
|
|
"frame_length": uint64(0x6f),
|
|
"header_length": uint64(0x6b),
|
|
"ip_flags": uint64(0x02),
|
|
"ip_fragment_offset": uint64(0x00),
|
|
"ip_total_length": uint64(0x59),
|
|
"ip_ttl": uint64(0x52),
|
|
"sampling_rate": uint64(0x0400),
|
|
"tcp_header_length": uint64(0x20),
|
|
"tcp_urgent_pointer": uint64(0x00),
|
|
"tcp_window_size": uint64(0x41),
|
|
"ip_dscp": "0",
|
|
"ip_ecn": "0",
|
|
},
|
|
time.Unix(0, 0),
|
|
),
|
|
testutil.MustMetric(
|
|
"sflow",
|
|
map[string]string{
|
|
"agent_address": "10.0.1.80",
|
|
"dst_ip": "192.168.6.9",
|
|
"dst_mac": "00:24:e8:36:9e:2b",
|
|
"dst_port": "63573",
|
|
"ether_type": "IPv4",
|
|
"header_protocol": "ETHERNET-ISO88023",
|
|
"input_ifindex": "1054596",
|
|
"output_ifindex": "1054468",
|
|
"sample_direction": "egress",
|
|
"source_id_index": "1054468",
|
|
"source_id_type": "0",
|
|
"src_ip": "192.168.6.12",
|
|
"src_mac": "d4:ae:52:aa:0b:54",
|
|
"src_port": "80",
|
|
},
|
|
map[string]interface{}{
|
|
"bytes": uint64(0x017c8000),
|
|
"drops": uint64(0x00),
|
|
"frame_length": uint64(0x05f2),
|
|
"header_length": uint64(0x80),
|
|
"ip_flags": uint64(0x02),
|
|
"ip_fragment_offset": uint64(0x00),
|
|
"ip_total_length": uint64(0x05dc),
|
|
"ip_ttl": uint64(0x80),
|
|
"sampling_rate": uint64(0x4000),
|
|
"tcp_header_length": uint64(0x20),
|
|
"tcp_urgent_pointer": uint64(0x00),
|
|
"tcp_window_size": uint64(0x0104),
|
|
"ip_dscp": "0",
|
|
"ip_ecn": "0",
|
|
},
|
|
time.Unix(0, 0),
|
|
),
|
|
testutil.MustMetric(
|
|
"sflow",
|
|
map[string]string{
|
|
"agent_address": "10.0.1.80",
|
|
"dst_ip": "217.77.82.143",
|
|
"dst_mac": "00:1b:17:00:01:31",
|
|
"dst_port": "19515",
|
|
"ether_type": "IPv4",
|
|
"header_protocol": "ETHERNET-ISO88023",
|
|
"input_ifindex": "1053956",
|
|
"output_ifindex": "1053828",
|
|
"sample_direction": "egress",
|
|
"source_id_index": "1053828",
|
|
"source_id_type": "0",
|
|
"src_ip": "193.206.135.147",
|
|
"src_mac": "f0:f7:55:b9:af:c0",
|
|
"src_port": "80",
|
|
},
|
|
map[string]interface{}{
|
|
"bytes": uint64(0x012800),
|
|
"drops": uint64(0x00),
|
|
"frame_length": uint64(0x4a),
|
|
"header_length": uint64(0x46),
|
|
"ip_flags": uint64(0x02),
|
|
"ip_fragment_offset": uint64(0x00),
|
|
"ip_total_length": uint64(0x34),
|
|
"ip_ttl": uint64(0x3a),
|
|
"sampling_rate": uint64(0x0400),
|
|
"tcp_header_length": uint64(0x20),
|
|
"tcp_urgent_pointer": uint64(0x00),
|
|
"tcp_window_size": uint64(0x0545),
|
|
"ip_dscp": "0",
|
|
"ip_ecn": "0",
|
|
},
|
|
time.Unix(0, 0),
|
|
),
|
|
testutil.MustMetric(
|
|
"sflow",
|
|
map[string]string{
|
|
"agent_address": "10.0.1.80",
|
|
"dst_ip": "192.168.150.114",
|
|
"dst_mac": "00:00:5e:00:01:ff",
|
|
"dst_port": "57724",
|
|
"ether_type": "IPv4",
|
|
"header_protocol": "ETHERNET-ISO88023",
|
|
"input_ifindex": "1050500",
|
|
"output_ifindex": "1049220",
|
|
"sample_direction": "egress",
|
|
"source_id_index": "1049220",
|
|
"source_id_type": "0",
|
|
"src_ip": "10.0.10.200",
|
|
"src_mac": "00:50:56:80:0d:d1",
|
|
"src_port": "443",
|
|
},
|
|
map[string]interface{}{
|
|
"bytes": uint64(0x017c8000),
|
|
"drops": uint64(0x00),
|
|
"frame_length": uint64(0x05f2),
|
|
"header_length": uint64(0x80),
|
|
"ip_flags": uint64(0x02),
|
|
"ip_fragment_offset": uint64(0x00),
|
|
"ip_total_length": uint64(0x05dc),
|
|
"ip_ttl": uint64(0x40),
|
|
"sampling_rate": uint64(0x4000),
|
|
"tcp_header_length": uint64(0x14),
|
|
"tcp_urgent_pointer": uint64(0x00),
|
|
"tcp_window_size": uint64(0x0103),
|
|
"ip_dscp": "0",
|
|
"ip_ecn": "0",
|
|
},
|
|
time.Unix(0, 0),
|
|
),
|
|
}
|
|
testutil.RequireMetricsEqual(t, expected, actual, testutil.IgnoreTime())
|
|
}
|
|
|
|
func TestFlowExpandCounter(t *testing.T) {
|
|
packet, err := hex.DecodeString("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")
|
|
require.NoError(t, err)
|
|
|
|
dc := NewDecoder()
|
|
p, err := dc.DecodeOnePacket(bytes.NewBuffer(packet))
|
|
require.NoError(t, err)
|
|
actual, err := makeMetrics(p)
|
|
require.NoError(t, err)
|
|
|
|
// we don't do anything with samples yet
|
|
expected := []telegraf.Metric{}
|
|
testutil.RequireMetricsEqual(t, expected, actual, testutil.IgnoreTime())
|
|
}
|