Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with
or
.
Download ZIP
Browse files

Added --interface tests

  • Loading branch information...
commit ab256658f1648cd41f9db5d5be714833dc0b0fa2 1 parent 109bacf
@mrash authored
Showing with 37 additions and 0 deletions.
  1. +37 −0 test/test-psad.pl
View
37 test/test-psad.pl
@@ -281,6 +281,43 @@
'exec_err' => $NO,
'fatal' => $NO
},
+ {
+ 'category' => 'operations',
+ 'detail' => 'IPv4 SYN scan --interface eth1',
+ 'err_msg' => 'did not detect SYN scan',
+ 'positive_output_matches' => [qr/Top\s\d+\sattackers/i,
+ qr/scanned\sports.*?1000\-1500\b/i,
+ qr/Source\sOS/i, qr/BACKDOOR/i,
+ qr/IP\sstatus/i,
+ qr/192\.168\.10\.55/],
+ 'match_all' => $MATCH_ALL_RE,
+ 'function' => \&generic_exec,
+ 'cmdline' => "$psad_def --interface eth1 -A -m $scans_dir/" .
+ "$fw_type/$syn_scan_file -c $default_conf",
+ 'firewalls' => {
+ 'iptables' => ''
+ },
+ 'exec_err' => $NO,
+ 'fatal' => $NO
+ },
+ {
+ 'category' => 'operations',
+ 'detail' => 'IPv4 SYN scan --interface badintf',
+ 'err_msg' => 'logged SYN scan',
+ 'negative_output_matches' => [
+ qr/scanned\sports.*?1000\-1500\b/i,
+ qr/Source\sOS/i, qr/BACKDOOR/i,
+ qr/\b192\.168\.10\.55/],
+ 'match_all' => $MATCH_ALL_RE,
+ 'function' => \&generic_exec,
+ 'cmdline' => "$psad_def --interface badintf -A -m $scans_dir/" .
+ "$fw_type/$syn_scan_file -c $default_conf",
+ 'firewalls' => {
+ 'iptables' => ''
+ },
+ 'exec_err' => $NO,
+ 'fatal' => $NO
+ },
{
'category' => 'operations',
Please sign in to comment.
Something went wrong with that request. Please try again.