1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
|
from asfframework import VppTestRunner
from framework import VppTestCase
import unittest
from config import config
@unittest.skipIf("snort" in config.excluded_plugins, "Exclude snort plugin test")
class TestSnort(VppTestCase):
"""Simple Snort plugin test"""
@classmethod
def setUpClass(cls):
super(TestSnort, cls).setUpClass()
try:
cls.create_pg_interfaces(range(2))
for i in cls.pg_interfaces:
i.config_ip4().resolve_arp()
i.admin_up()
except Exception:
cls.tearDownClass()
raise
@classmethod
def tearDownClass(cls):
for i in cls.pg_interfaces:
i.unconfig_ip4()
i.admin_down()
super(TestSnort, cls).tearDownClass()
def test_snort_cli(self):
# TODO: add a test with packets
# { cli command : part of the expected reply }
print("TEST SNORT CLI")
commands_replies = {
"snort create-instance name snortTest queue-size 16 on-disconnect drop": "",
"snort create-instance name snortTest2 queue-size 16 on-disconnect pass": "",
"snort attach instance snortTest interface pg0 output": "",
"snort attach instance snortTest2 interface pg1 input": "",
"show snort instances": "snortTest",
"show snort interfaces": "pg0",
"show snort clients": "number of clients",
"show snort mode": "input mode: interrupt",
"snort mode polling": "",
"snort mode interrupt": "",
"snort detach interface pg0": "",
"snort detach interface pg1": "",
"snort delete instance snortTest": "",
}
for command, reply in commands_replies.items():
actual_reply = self.vapi.cli(command)
self.assertIn(reply, actual_reply)
@unittest.skipIf("snort" in config.excluded_plugins, "Exclude snort plugin test")
class TestSnortVapi(VppTestCase):
"""Snort plugin test [VAPI]"""
@classmethod
def setUpClass(cls):
super(TestSnortVapi, cls).setUpClass()
try:
cls.create_pg_interfaces(range(2))
for i in cls.pg_interfaces:
i.config_ip4()
i.resolve_arp()
i.admin_up()
except Exception:
cls.tearDownClass()
raise
@classmethod
def tearDownClass(cls):
for i in cls.pg_interfaces:
i.unconfig_ip4()
i.admin_down()
super(TestSnortVapi, cls).tearDownClass()
def test_snort_01_modes_set_interrupt(self):
"""Set mode to interrupt"""
self.vapi.snort_input_mode_set(input_mode=1)
reply = self.vapi.snort_input_mode_get()
self.assertEqual(reply.snort_mode, 1)
reply = self.vapi.cli("show snort mode")
self.assertIn("interrupt", reply)
def test_snort_02_modes_set_polling(self):
"""Set mode to polling"""
self.vapi.snort_input_mode_set(input_mode=0)
reply = self.vapi.snort_input_mode_get()
self.assertEqual(reply.snort_mode, 0)
def test_snort_03_create(self):
"""Create two snort instances"""
reply = self.vapi.snort_instance_create(
queue_size=8, drop_on_disconnect=0, name="snortTest0"
)
self.assertEqual(reply.instance_index, 0)
reply = self.vapi.snort_instance_create(
queue_size=32, drop_on_disconnect=1, name="snortTest1"
)
self.assertEqual(reply.instance_index, 1)
reply = self.vapi.cli("show snort instances")
self.assertIn("snortTest0", reply)
self.assertIn("snortTest1", reply)
def test_snort_04_attach_if(self):
"""Interfaces can be attached"""
reply = self.vapi.snort_interface_attach(
instance_index=0, sw_if_index=1, snort_dir=1
)
try:
reply = self.vapi.snort_interface_attach(
instance_index=1, sw_if_index=1, snort_dir=1
)
except:
pass
else:
self.assertNotEqual(reply.retval, 0)
reply = self.vapi.snort_interface_attach(
instance_index=1, sw_if_index=2, snort_dir=3
)
reply = self.vapi.cli("show snort interfaces")
self.assertIn("snortTest0", reply)
self.assertIn("snortTest1", reply)
def test_snort_05_delete_instance(self):
"""Instances can be deleted"""
reply = self.vapi.snort_instance_delete(instance_index=0)
reply = self.vapi.cli("show snort interfaces")
self.assertNotIn("snortTest0", reply)
self.assertIn("snortTest1", reply)
reply = self.vapi.cli("show snort interfaces")
self.assertNotIn("pg0", reply)
self.assertIn("pg1", reply)
def test_snort_06_detach_if(self):
"""Interfaces can be detached"""
try:
reply = self.vapi.snort_interface_detach(sw_if_index=1)
except:
pass
else:
self.assertNotEqual(reply.retval, 0)
reply = self.vapi.snort_interface_detach(sw_if_index=2)
reply = self.vapi.cli("show snort interfaces")
self.assertNotIn("pg1", reply)
if __name__ == "__main__":
unittest.main(testRunner=VppTestRunner)
|
