// TCP state machine test: init -> opening #include "test_utils.h" /****************************************************************************** * case: TCP init -> opening (by SYN) ******************************************************************************/ #if 1 TEST(TCP_INIT_TO_OPENING, BY_SYN) { char buffer[1024] = {0}; struct packet pkt; struct session *sess = NULL; struct session_manager *mgr = NULL; timestamp_update(); mgr = session_manager_create(&config); EXPECT_TRUE(mgr != NULL); // C2S SYN Packet printf("=> packet parse: TCP C2S SYN packet\n"); packet_parse(&pkt, (const char *)tcp_pkt1_c2s_syn, sizeof(tcp_pkt1_c2s_syn)); printf("<= packet parse\n\n"); sess = session_manager_update_session(mgr, &pkt); EXPECT_TRUE(sess); EXPECT_TRUE(session_get_id(sess) == 0); tuple6_tostring(session_get0_key(sess), buffer, sizeof(buffer)); EXPECT_STREQ(buffer, "192.168.38.105:60111 -> 93.184.216.34:80, proto: 6, domain: 0"); EXPECT_TRUE(session_get_key_dir(sess) == SESSION_DIR_C2S); EXPECT_TRUE(session_get_state(sess) == SESSION_STATE_OPENING); EXPECT_TRUE(session_get_type(sess) == SESSION_TYPE_TCP); EXPECT_TRUE(session_get_dup_traffic_flag(sess) == 0); EXPECT_TRUE(session_get_closing_reasion(sess) == 0); EXPECT_TRUE(session_get_c2s_bytes(sess) == 78); EXPECT_TRUE(session_get_s2c_bytes(sess) == 0); EXPECT_TRUE(session_get_c2s_packets(sess) == 1); EXPECT_TRUE(session_get_s2c_packets(sess) == 0); EXPECT_TRUE(session_get_create_time(sess) == timestamp_get_msec()); EXPECT_TRUE(session_get_last_time(sess) == timestamp_get_msec()); EXPECT_TRUE(session_get0_cur_pkt(sess) == &pkt); EXPECT_TRUE(session_get_cur_dir(sess) == SESSION_DIR_C2S); EXPECT_TRUE(session_get_tcp_state(sess) == TCP_SYN_RECVED); EXPECT_TRUE(session_get0_c2s_1st_pkt(sess) != NULL); EXPECT_TRUE(session_get0_s2c_1st_pkt(sess) == NULL); EXPECT_TRUE(session_get0_1st_pkt(sess) == session_get0_c2s_1st_pkt(sess)); __session_dispatch(sess); __session_manager_count(mgr, 1, 0, 0, 0, 0, 0); __session_manager_dispatch(mgr, CLOSING_BY_TIMEOUT); __session_manager_count(mgr, 0, 0, 0, 0, 0, 0); session_manager_destroy(mgr); } #endif /****************************************************************************** * case: TCP init -> opening (by SYNACK) ******************************************************************************/ #if 1 TEST(TCP_INIT_TO_OPENING, BY_SYNACK) { char buffer[1024] = {0}; struct packet pkt; struct session *sess = NULL; struct session_manager *mgr = NULL; timestamp_update(); mgr = session_manager_create(&config); EXPECT_TRUE(mgr != NULL); // SYNACK Packet printf("=> packet parse: TCP S2C SYNACK packet\n"); packet_parse(&pkt, (const char *)tcp_pkt2_s2c_syn_ack, sizeof(tcp_pkt2_s2c_syn_ack)); printf("<= packet parse\n\n"); sess = session_manager_update_session(mgr, &pkt); EXPECT_TRUE(sess); EXPECT_TRUE(session_get_id(sess) == 0); tuple6_tostring(session_get0_key(sess), buffer, sizeof(buffer)); EXPECT_STREQ(buffer, "93.184.216.34:80 -> 192.168.38.105:60111, proto: 6, domain: 0"); EXPECT_TRUE(session_get_key_dir(sess) == SESSION_DIR_S2C); EXPECT_TRUE(session_get_state(sess) == SESSION_STATE_OPENING); EXPECT_TRUE(session_get_type(sess) == SESSION_TYPE_TCP); EXPECT_TRUE(session_get_dup_traffic_flag(sess) == 0); EXPECT_TRUE(session_get_closing_reasion(sess) == 0); EXPECT_TRUE(session_get_c2s_bytes(sess) == 0); EXPECT_TRUE(session_get_s2c_bytes(sess) == 74); EXPECT_TRUE(session_get_c2s_packets(sess) == 0); EXPECT_TRUE(session_get_s2c_packets(sess) == 1); EXPECT_TRUE(session_get_create_time(sess) == timestamp_get_msec()); EXPECT_TRUE(session_get_last_time(sess) == timestamp_get_msec()); EXPECT_TRUE(session_get0_cur_pkt(sess) == &pkt); EXPECT_TRUE(session_get_cur_dir(sess) == SESSION_DIR_S2C); EXPECT_TRUE(session_get_tcp_state(sess) == TCP_SYNACK_RECVED); EXPECT_TRUE(session_get0_c2s_1st_pkt(sess) == NULL); EXPECT_TRUE(session_get0_s2c_1st_pkt(sess) != NULL); EXPECT_TRUE(session_get0_1st_pkt(sess) == session_get0_s2c_1st_pkt(sess)); __session_dispatch(sess); __session_manager_count(mgr, 1, 0, 0, 0, 0, 0); __session_manager_dispatch(mgr, CLOSING_BY_TIMEOUT); __session_manager_count(mgr, 0, 0, 0, 0, 0, 0); session_manager_destroy(mgr); } #endif /****************************************************************************** * case: TCP init -> opening (by SYN + SYNACK) ******************************************************************************/ #if 1 TEST(TCP_INIT_TO_OPENING, BY_SYN_SYNACK) { char buffer[1024] = {0}; struct packet pkt; struct session *sess = NULL; struct session_manager *mgr = NULL; timestamp_update(); mgr = session_manager_create(&config); EXPECT_TRUE(mgr != NULL); // C2S SYN Packet printf("=> packet parse: TCP C2S SYN packet\n"); packet_parse(&pkt, (const char *)tcp_pkt1_c2s_syn, sizeof(tcp_pkt1_c2s_syn)); printf("<= packet parse\n\n"); sess = session_manager_update_session(mgr, &pkt); EXPECT_TRUE(sess); EXPECT_TRUE(session_get_id(sess) == 0); tuple6_tostring(session_get0_key(sess), buffer, sizeof(buffer)); EXPECT_STREQ(buffer, "192.168.38.105:60111 -> 93.184.216.34:80, proto: 6, domain: 0"); EXPECT_TRUE(session_get_key_dir(sess) == SESSION_DIR_C2S); EXPECT_TRUE(session_get_state(sess) == SESSION_STATE_OPENING); EXPECT_TRUE(session_get_type(sess) == SESSION_TYPE_TCP); EXPECT_TRUE(session_get_dup_traffic_flag(sess) == 0); EXPECT_TRUE(session_get_closing_reasion(sess) == 0); EXPECT_TRUE(session_get_c2s_bytes(sess) == 78); EXPECT_TRUE(session_get_s2c_bytes(sess) == 0); EXPECT_TRUE(session_get_c2s_packets(sess) == 1); EXPECT_TRUE(session_get_s2c_packets(sess) == 0); EXPECT_TRUE(session_get_create_time(sess) == timestamp_get_msec()); EXPECT_TRUE(session_get_last_time(sess) == timestamp_get_msec()); EXPECT_TRUE(session_get0_cur_pkt(sess) == &pkt); EXPECT_TRUE(session_get_cur_dir(sess) == SESSION_DIR_C2S); EXPECT_TRUE(session_get_tcp_state(sess) == TCP_SYN_RECVED); EXPECT_TRUE(session_get0_c2s_1st_pkt(sess) != NULL); EXPECT_TRUE(session_get0_s2c_1st_pkt(sess) == NULL); EXPECT_TRUE(session_get0_1st_pkt(sess) == session_get0_c2s_1st_pkt(sess)); __session_dispatch(sess); __session_manager_count(mgr, 1, 0, 0, 0, 0, 0); sleep(1); timestamp_update(); // SYNACK Packet printf("=> packet parse: TCP S2C SYNACK packet\n"); packet_parse(&pkt, (const char *)tcp_pkt2_s2c_syn_ack, sizeof(tcp_pkt2_s2c_syn_ack)); printf("<= packet parse\n\n"); sess = session_manager_update_session(mgr, &pkt); EXPECT_TRUE(sess); EXPECT_TRUE(session_get_id(sess) == 0); tuple6_tostring(session_get0_key(sess), buffer, sizeof(buffer)); EXPECT_STREQ(buffer, "192.168.38.105:60111 -> 93.184.216.34:80, proto: 6, domain: 0"); EXPECT_TRUE(session_get_key_dir(sess) == SESSION_DIR_C2S); EXPECT_TRUE(session_get_state(sess) == SESSION_STATE_OPENING); EXPECT_TRUE(session_get_type(sess) == SESSION_TYPE_TCP); EXPECT_TRUE(session_get_dup_traffic_flag(sess) == 0); EXPECT_TRUE(session_get_closing_reasion(sess) == 0); EXPECT_TRUE(session_get_c2s_bytes(sess) == 78); EXPECT_TRUE(session_get_s2c_bytes(sess) == 74); EXPECT_TRUE(session_get_c2s_packets(sess) == 1); EXPECT_TRUE(session_get_s2c_packets(sess) == 1); EXPECT_TRUE(session_get_create_time(sess) < timestamp_get_msec()); EXPECT_TRUE(session_get_last_time(sess) == timestamp_get_msec()); EXPECT_TRUE(session_get0_cur_pkt(sess) == &pkt); EXPECT_TRUE(session_get_cur_dir(sess) == SESSION_DIR_S2C); EXPECT_TRUE(session_get_tcp_state(sess) == (TCP_SYN_RECVED | TCP_SYNACK_RECVED)); EXPECT_TRUE(session_get0_c2s_1st_pkt(sess) != NULL); EXPECT_TRUE(session_get0_s2c_1st_pkt(sess) != NULL); EXPECT_TRUE(session_get0_1st_pkt(sess) == session_get0_c2s_1st_pkt(sess)); __session_dispatch(sess); __session_manager_count(mgr, 1, 0, 0, 0, 0, 0); __session_manager_dispatch(mgr, CLOSING_BY_TIMEOUT); __session_manager_count(mgr, 0, 0, 0, 0, 0, 0); session_manager_destroy(mgr); } #endif /****************************************************************************** * case: TCP init -> opening (by SYN + SYNACK + ACK) ******************************************************************************/ #if 1 TEST(TCP_INIT_TO_OPENING, BY_SYN_SYNACK_ACK) { char buffer[1024] = {0}; struct packet pkt; struct session *sess = NULL; struct session_manager *mgr = NULL; timestamp_update(); mgr = session_manager_create(&config); EXPECT_TRUE(mgr != NULL); // C2S SYN Packet printf("=> packet parse: TCP C2S SYN packet\n"); packet_parse(&pkt, (const char *)tcp_pkt1_c2s_syn, sizeof(tcp_pkt1_c2s_syn)); printf("<= packet parse\n\n"); sess = session_manager_update_session(mgr, &pkt); EXPECT_TRUE(sess); EXPECT_TRUE(session_get_id(sess) == 0); tuple6_tostring(session_get0_key(sess), buffer, sizeof(buffer)); EXPECT_STREQ(buffer, "192.168.38.105:60111 -> 93.184.216.34:80, proto: 6, domain: 0"); EXPECT_TRUE(session_get_key_dir(sess) == SESSION_DIR_C2S); EXPECT_TRUE(session_get_state(sess) == SESSION_STATE_OPENING); EXPECT_TRUE(session_get_type(sess) == SESSION_TYPE_TCP); EXPECT_TRUE(session_get_dup_traffic_flag(sess) == 0); EXPECT_TRUE(session_get_closing_reasion(sess) == 0); EXPECT_TRUE(session_get_c2s_bytes(sess) == 78); EXPECT_TRUE(session_get_s2c_bytes(sess) == 0); EXPECT_TRUE(session_get_c2s_packets(sess) == 1); EXPECT_TRUE(session_get_s2c_packets(sess) == 0); EXPECT_TRUE(session_get_create_time(sess) == timestamp_get_msec()); EXPECT_TRUE(session_get_last_time(sess) == timestamp_get_msec()); EXPECT_TRUE(session_get0_cur_pkt(sess) == &pkt); EXPECT_TRUE(session_get_cur_dir(sess) == SESSION_DIR_C2S); EXPECT_TRUE(session_get_tcp_state(sess) == TCP_SYN_RECVED); EXPECT_TRUE(session_get0_c2s_1st_pkt(sess) != NULL); EXPECT_TRUE(session_get0_s2c_1st_pkt(sess) == NULL); EXPECT_TRUE(session_get0_1st_pkt(sess) == session_get0_c2s_1st_pkt(sess)); __session_dispatch(sess); __session_manager_count(mgr, 1, 0, 0, 0, 0, 0); sleep(1); timestamp_update(); // SYNACK Packet printf("=> packet parse: TCP S2C SYNACK packet\n"); packet_parse(&pkt, (const char *)tcp_pkt2_s2c_syn_ack, sizeof(tcp_pkt2_s2c_syn_ack)); printf("<= packet parse\n\n"); sess = session_manager_update_session(mgr, &pkt); EXPECT_TRUE(sess); EXPECT_TRUE(session_get_id(sess) == 0); tuple6_tostring(session_get0_key(sess), buffer, sizeof(buffer)); EXPECT_STREQ(buffer, "192.168.38.105:60111 -> 93.184.216.34:80, proto: 6, domain: 0"); EXPECT_TRUE(session_get_key_dir(sess) == SESSION_DIR_C2S); EXPECT_TRUE(session_get_state(sess) == SESSION_STATE_OPENING); EXPECT_TRUE(session_get_type(sess) == SESSION_TYPE_TCP); EXPECT_TRUE(session_get_dup_traffic_flag(sess) == 0); EXPECT_TRUE(session_get_closing_reasion(sess) == 0); EXPECT_TRUE(session_get_c2s_bytes(sess) == 78); EXPECT_TRUE(session_get_s2c_bytes(sess) == 74); EXPECT_TRUE(session_get_c2s_packets(sess) == 1); EXPECT_TRUE(session_get_s2c_packets(sess) == 1); EXPECT_TRUE(session_get_create_time(sess) < timestamp_get_msec()); EXPECT_TRUE(session_get_last_time(sess) == timestamp_get_msec()); EXPECT_TRUE(session_get0_cur_pkt(sess) == &pkt); EXPECT_TRUE(session_get_cur_dir(sess) == SESSION_DIR_S2C); EXPECT_TRUE(session_get_tcp_state(sess) == (TCP_SYN_RECVED | TCP_SYNACK_RECVED)); EXPECT_TRUE(session_get0_c2s_1st_pkt(sess) != NULL); EXPECT_TRUE(session_get0_s2c_1st_pkt(sess) != NULL); EXPECT_TRUE(session_get0_1st_pkt(sess) == session_get0_c2s_1st_pkt(sess)); __session_dispatch(sess); __session_manager_count(mgr, 1, 0, 0, 0, 0, 0); sleep(1); timestamp_update(); // ACK Packet printf("=> packet parse: TCP C2S ACK packet\n"); packet_parse(&pkt, (const char *)tcp_pkt3_c2s_ack, sizeof(tcp_pkt3_c2s_ack)); printf("<= packet parse\n\n"); sess = session_manager_update_session(mgr, &pkt); EXPECT_TRUE(sess); EXPECT_TRUE(session_get_id(sess) == 0); tuple6_tostring(session_get0_key(sess), buffer, sizeof(buffer)); EXPECT_STREQ(buffer, "192.168.38.105:60111 -> 93.184.216.34:80, proto: 6, domain: 0"); EXPECT_TRUE(session_get_key_dir(sess) == SESSION_DIR_C2S); EXPECT_TRUE(session_get_state(sess) == SESSION_STATE_OPENING); EXPECT_TRUE(session_get_type(sess) == SESSION_TYPE_TCP); EXPECT_TRUE(session_get_dup_traffic_flag(sess) == 0); EXPECT_TRUE(session_get_closing_reasion(sess) == 0); EXPECT_TRUE(session_get_c2s_bytes(sess) == 78 + 66); EXPECT_TRUE(session_get_s2c_bytes(sess) == 74); EXPECT_TRUE(session_get_c2s_packets(sess) == 1 + 1); EXPECT_TRUE(session_get_s2c_packets(sess) == 1); EXPECT_TRUE(session_get_create_time(sess) < timestamp_get_msec()); EXPECT_TRUE(session_get_last_time(sess) == timestamp_get_msec()); EXPECT_TRUE(session_get0_cur_pkt(sess) == &pkt); EXPECT_TRUE(session_get_cur_dir(sess) == SESSION_DIR_C2S); EXPECT_TRUE(session_get_tcp_state(sess) == (TCP_SYN_RECVED | TCP_SYNACK_RECVED | TCP_C2S_ACK_RECVED)); EXPECT_TRUE(session_get0_c2s_1st_pkt(sess) != NULL); EXPECT_TRUE(session_get0_s2c_1st_pkt(sess) != NULL); __session_dispatch(sess); __session_manager_count(mgr, 1, 0, 0, 0, 0, 0); __session_manager_dispatch(mgr, CLOSING_BY_TIMEOUT); __session_manager_count(mgr, 0, 0, 0, 0, 0, 0); session_manager_destroy(mgr); } #endif /****************************************************************************** * case: TCP init -> opening (by SYN retransmission) ******************************************************************************/ // overwrited ipid to build SYN retransmission #if 1 TEST(TCP_INIT_TO_OPENING, BY_SYN_RETRANSMISSION) { char buffer[1024] = {0}; struct packet pkt; struct session *sess = NULL; struct session_manager *mgr = NULL; timestamp_update(); mgr = session_manager_create(&config); EXPECT_TRUE(mgr != NULL); // C2S SYN Packet printf("=> packet parse: TCP C2S SYN packet\n"); packet_parse(&pkt, (const char *)tcp_pkt1_c2s_syn, sizeof(tcp_pkt1_c2s_syn)); printf("<= packet parse\n\n"); sess = session_manager_update_session(mgr, &pkt); EXPECT_TRUE(sess); EXPECT_TRUE(session_get_id(sess) == 0); tuple6_tostring(session_get0_key(sess), buffer, sizeof(buffer)); EXPECT_STREQ(buffer, "192.168.38.105:60111 -> 93.184.216.34:80, proto: 6, domain: 0"); EXPECT_TRUE(session_get_key_dir(sess) == SESSION_DIR_C2S); EXPECT_TRUE(session_get_state(sess) == SESSION_STATE_OPENING); EXPECT_TRUE(session_get_type(sess) == SESSION_TYPE_TCP); EXPECT_TRUE(session_get_dup_traffic_flag(sess) == 0); EXPECT_TRUE(session_get_closing_reasion(sess) == 0); EXPECT_TRUE(session_get_c2s_bytes(sess) == 78); EXPECT_TRUE(session_get_s2c_bytes(sess) == 0); EXPECT_TRUE(session_get_c2s_packets(sess) == 1); EXPECT_TRUE(session_get_s2c_packets(sess) == 0); EXPECT_TRUE(session_get_create_time(sess) == timestamp_get_msec()); EXPECT_TRUE(session_get_last_time(sess) == timestamp_get_msec()); EXPECT_TRUE(session_get0_cur_pkt(sess) == &pkt); EXPECT_TRUE(session_get_cur_dir(sess) == SESSION_DIR_C2S); EXPECT_TRUE(session_get_tcp_state(sess) == TCP_SYN_RECVED); EXPECT_TRUE(session_get0_c2s_1st_pkt(sess) != NULL); EXPECT_TRUE(session_get0_s2c_1st_pkt(sess) == NULL); EXPECT_TRUE(session_get0_1st_pkt(sess) == session_get0_c2s_1st_pkt(sess)); __session_dispatch(sess); __session_manager_count(mgr, 1, 0, 0, 0, 0, 0); sleep(1); timestamp_update(); // C2S SYN Packet retransmission printf("=> packet parse: TCP C2S SYN retransmission packet\n"); char tcp_pkt_c2s_syn_retransmission[1500] = {0}; memcpy(tcp_pkt_c2s_syn_retransmission, tcp_pkt1_c2s_syn, sizeof(tcp_pkt1_c2s_syn)); packet_parse(&pkt, (const char *)tcp_pkt_c2s_syn_retransmission, sizeof(tcp_pkt1_c2s_syn)); const struct layer_record *ipv4_layer = packet_get_innermost_layer(&pkt, LAYER_TYPE_IPV4); EXPECT_TRUE(ipv4_layer); const struct ip *hdr = (const struct ip *)ipv4_layer->hdr_ptr; ipv4_hdr_set_ipid((struct ip *)hdr, 0x1234); printf("<= packet parse\n\n"); sess = session_manager_update_session(mgr, &pkt); EXPECT_TRUE(sess); EXPECT_TRUE(session_get_id(sess) == 0); tuple6_tostring(session_get0_key(sess), buffer, sizeof(buffer)); EXPECT_STREQ(buffer, "192.168.38.105:60111 -> 93.184.216.34:80, proto: 6, domain: 0"); EXPECT_TRUE(session_get_key_dir(sess) == SESSION_DIR_C2S); EXPECT_TRUE(session_get_state(sess) == SESSION_STATE_OPENING); EXPECT_TRUE(session_get_type(sess) == SESSION_TYPE_TCP); EXPECT_TRUE(session_get_dup_traffic_flag(sess) == 0); EXPECT_TRUE(session_get_closing_reasion(sess) == 0); EXPECT_TRUE(session_get_c2s_bytes(sess) == 78 + 78); EXPECT_TRUE(session_get_s2c_bytes(sess) == 0); EXPECT_TRUE(session_get_c2s_packets(sess) == 1 + 1); EXPECT_TRUE(session_get_s2c_packets(sess) == 0); EXPECT_TRUE(session_get_create_time(sess) < timestamp_get_msec()); EXPECT_TRUE(session_get_last_time(sess) == timestamp_get_msec()); EXPECT_TRUE(session_get0_cur_pkt(sess) == &pkt); EXPECT_TRUE(session_get_cur_dir(sess) == SESSION_DIR_C2S); EXPECT_TRUE(session_get_tcp_state(sess) == TCP_SYN_RECVED); EXPECT_TRUE(session_get0_c2s_1st_pkt(sess) != NULL); EXPECT_TRUE(session_get0_s2c_1st_pkt(sess) == NULL); EXPECT_TRUE(session_get0_1st_pkt(sess) == session_get0_c2s_1st_pkt(sess)); __session_dispatch(sess); __session_manager_count(mgr, 1, 0, 0, 0, 0, 0); __session_manager_dispatch(mgr, CLOSING_BY_TIMEOUT); __session_manager_count(mgr, 0, 0, 0, 0, 0, 0); session_manager_destroy(mgr); } #endif /****************************************************************************** * case: TCP init -> opening (by SYNACK retransmission) ******************************************************************************/ // overwrited ipid to build SYNACK retransmission #if 1 TEST(TCP_INIT_TO_OPENING, BY_SYNACK_RETRANSMISSION) { char buffer[1024] = {0}; struct packet pkt; struct session *sess = NULL; struct session_manager *mgr = NULL; timestamp_update(); mgr = session_manager_create(&config); EXPECT_TRUE(mgr != NULL); // SYNACK Packet printf("=> packet parse: TCP S2C SYNACK packet\n"); packet_parse(&pkt, (const char *)tcp_pkt2_s2c_syn_ack, sizeof(tcp_pkt2_s2c_syn_ack)); printf("<= packet parse\n\n"); sess = session_manager_update_session(mgr, &pkt); EXPECT_TRUE(sess); EXPECT_TRUE(session_get_id(sess) == 0); tuple6_tostring(session_get0_key(sess), buffer, sizeof(buffer)); EXPECT_STREQ(buffer, "93.184.216.34:80 -> 192.168.38.105:60111, proto: 6, domain: 0"); EXPECT_TRUE(session_get_key_dir(sess) == SESSION_DIR_S2C); EXPECT_TRUE(session_get_state(sess) == SESSION_STATE_OPENING); EXPECT_TRUE(session_get_type(sess) == SESSION_TYPE_TCP); EXPECT_TRUE(session_get_dup_traffic_flag(sess) == 0); EXPECT_TRUE(session_get_closing_reasion(sess) == 0); EXPECT_TRUE(session_get_c2s_bytes(sess) == 0); EXPECT_TRUE(session_get_s2c_bytes(sess) == 74); EXPECT_TRUE(session_get_c2s_packets(sess) == 0); EXPECT_TRUE(session_get_s2c_packets(sess) == 1); EXPECT_TRUE(session_get_create_time(sess) == timestamp_get_msec()); EXPECT_TRUE(session_get_last_time(sess) == timestamp_get_msec()); EXPECT_TRUE(session_get0_cur_pkt(sess) == &pkt); EXPECT_TRUE(session_get_cur_dir(sess) == SESSION_DIR_S2C); EXPECT_TRUE(session_get_tcp_state(sess) == TCP_SYNACK_RECVED); EXPECT_TRUE(session_get0_c2s_1st_pkt(sess) == NULL); EXPECT_TRUE(session_get0_s2c_1st_pkt(sess) != NULL); EXPECT_TRUE(session_get0_1st_pkt(sess) == session_get0_s2c_1st_pkt(sess)); __session_dispatch(sess); __session_manager_count(mgr, 1, 0, 0, 0, 0, 0); sleep(1); timestamp_update(); // SYNACK Packet retransmission printf("=> packet parse: TCP S2C SYNACK retransmission packet\n"); char tcp_pkt_s2c_synack_retransmission[1500] = {0}; memcpy(tcp_pkt_s2c_synack_retransmission, tcp_pkt2_s2c_syn_ack, sizeof(tcp_pkt2_s2c_syn_ack)); packet_parse(&pkt, (const char *)tcp_pkt_s2c_synack_retransmission, sizeof(tcp_pkt2_s2c_syn_ack)); const struct layer_record *ipv4_layer = packet_get_innermost_layer(&pkt, LAYER_TYPE_IPV4); EXPECT_TRUE(ipv4_layer); const struct ip *hdr = (const struct ip *)ipv4_layer->hdr_ptr; ipv4_hdr_set_ipid((struct ip *)hdr, 0x1234); printf("<= packet parse\n\n"); sess = session_manager_update_session(mgr, &pkt); EXPECT_TRUE(sess); EXPECT_TRUE(session_get_id(sess) == 0); tuple6_tostring(session_get0_key(sess), buffer, sizeof(buffer)); EXPECT_STREQ(buffer, "93.184.216.34:80 -> 192.168.38.105:60111, proto: 6, domain: 0"); EXPECT_TRUE(session_get_key_dir(sess) == SESSION_DIR_S2C); EXPECT_TRUE(session_get_state(sess) == SESSION_STATE_OPENING); EXPECT_TRUE(session_get_type(sess) == SESSION_TYPE_TCP); EXPECT_TRUE(session_get_dup_traffic_flag(sess) == 0); EXPECT_TRUE(session_get_closing_reasion(sess) == 0); EXPECT_TRUE(session_get_c2s_bytes(sess) == 0); EXPECT_TRUE(session_get_s2c_bytes(sess) == 74 + 74); EXPECT_TRUE(session_get_c2s_packets(sess) == 0); EXPECT_TRUE(session_get_s2c_packets(sess) == 1 + 1); EXPECT_TRUE(session_get_create_time(sess) < timestamp_get_msec()); EXPECT_TRUE(session_get_last_time(sess) == timestamp_get_msec()); EXPECT_TRUE(session_get0_cur_pkt(sess) == &pkt); EXPECT_TRUE(session_get_cur_dir(sess) == SESSION_DIR_S2C); EXPECT_TRUE(session_get_tcp_state(sess) == TCP_SYNACK_RECVED); EXPECT_TRUE(session_get0_c2s_1st_pkt(sess) == NULL); EXPECT_TRUE(session_get0_s2c_1st_pkt(sess) != NULL); EXPECT_TRUE(session_get0_1st_pkt(sess) == session_get0_s2c_1st_pkt(sess)); __session_dispatch(sess); __session_manager_count(mgr, 1, 0, 0, 0, 0, 0); __session_manager_dispatch(mgr, CLOSING_BY_TIMEOUT); __session_manager_count(mgr, 0, 0, 0, 0, 0, 0); session_manager_destroy(mgr); } #endif /****************************************************************************** * case: TCP init -> opening (by C2S asymmetric) ******************************************************************************/ #if 1 TEST(TCP_INIT_TO_OPENING, BY_C2S_ASMMETRIC) { char buffer[1024] = {0}; struct packet pkt; struct session *sess = NULL; struct session_manager *mgr = NULL; timestamp_update(); mgr = session_manager_create(&config); EXPECT_TRUE(mgr != NULL); // C2S SYN Packet printf("=> packet parse: TCP C2S SYN packet\n"); packet_parse(&pkt, (const char *)tcp_pkt1_c2s_syn, sizeof(tcp_pkt1_c2s_syn)); printf("<= packet parse\n\n"); sess = session_manager_update_session(mgr, &pkt); EXPECT_TRUE(sess); EXPECT_TRUE(session_get_id(sess) == 0); tuple6_tostring(session_get0_key(sess), buffer, sizeof(buffer)); EXPECT_STREQ(buffer, "192.168.38.105:60111 -> 93.184.216.34:80, proto: 6, domain: 0"); EXPECT_TRUE(session_get_key_dir(sess) == SESSION_DIR_C2S); EXPECT_TRUE(session_get_state(sess) == SESSION_STATE_OPENING); EXPECT_TRUE(session_get_type(sess) == SESSION_TYPE_TCP); EXPECT_TRUE(session_get_dup_traffic_flag(sess) == 0); EXPECT_TRUE(session_get_closing_reasion(sess) == 0); EXPECT_TRUE(session_get_c2s_bytes(sess) == 78); EXPECT_TRUE(session_get_s2c_bytes(sess) == 0); EXPECT_TRUE(session_get_c2s_packets(sess) == 1); EXPECT_TRUE(session_get_s2c_packets(sess) == 0); EXPECT_TRUE(session_get_create_time(sess) == timestamp_get_msec()); EXPECT_TRUE(session_get_last_time(sess) == timestamp_get_msec()); EXPECT_TRUE(session_get0_cur_pkt(sess) == &pkt); EXPECT_TRUE(session_get_cur_dir(sess) == SESSION_DIR_C2S); EXPECT_TRUE(session_get_tcp_state(sess) == TCP_SYN_RECVED); EXPECT_TRUE(session_get0_c2s_1st_pkt(sess) != NULL); EXPECT_TRUE(session_get0_s2c_1st_pkt(sess) == NULL); EXPECT_TRUE(session_get0_1st_pkt(sess) == session_get0_c2s_1st_pkt(sess)); __session_dispatch(sess); __session_manager_count(mgr, 1, 0, 0, 0, 0, 0); sleep(1); timestamp_update(); // ACK Packet printf("=> packet parse: TCP C2S ACK packet\n"); packet_parse(&pkt, (const char *)tcp_pkt3_c2s_ack, sizeof(tcp_pkt3_c2s_ack)); printf("<= packet parse\n\n"); sess = session_manager_update_session(mgr, &pkt); EXPECT_TRUE(sess); EXPECT_TRUE(session_get_id(sess) == 0); tuple6_tostring(session_get0_key(sess), buffer, sizeof(buffer)); EXPECT_STREQ(buffer, "192.168.38.105:60111 -> 93.184.216.34:80, proto: 6, domain: 0"); EXPECT_TRUE(session_get_key_dir(sess) == SESSION_DIR_C2S); EXPECT_TRUE(session_get_state(sess) == SESSION_STATE_OPENING); EXPECT_TRUE(session_get_type(sess) == SESSION_TYPE_TCP); EXPECT_TRUE(session_get_dup_traffic_flag(sess) == 0); EXPECT_TRUE(session_get_closing_reasion(sess) == 0); EXPECT_TRUE(session_get_c2s_bytes(sess) == 78 + 66); EXPECT_TRUE(session_get_s2c_bytes(sess) == 0); EXPECT_TRUE(session_get_c2s_packets(sess) == 1 + 1); EXPECT_TRUE(session_get_s2c_packets(sess) == 0); EXPECT_TRUE(session_get_create_time(sess) < timestamp_get_msec()); EXPECT_TRUE(session_get_last_time(sess) == timestamp_get_msec()); EXPECT_TRUE(session_get0_cur_pkt(sess) == &pkt); EXPECT_TRUE(session_get_cur_dir(sess) == SESSION_DIR_C2S); EXPECT_TRUE(session_get_tcp_state(sess) == (TCP_SYN_RECVED | TCP_C2S_ACK_RECVED)); EXPECT_TRUE(session_get0_c2s_1st_pkt(sess) != NULL); EXPECT_TRUE(session_get0_s2c_1st_pkt(sess) == NULL); EXPECT_TRUE(session_get0_1st_pkt(sess) == session_get0_c2s_1st_pkt(sess)); __session_dispatch(sess); __session_manager_count(mgr, 1, 0, 0, 0, 0, 0); __session_manager_dispatch(mgr, CLOSING_BY_TIMEOUT); __session_manager_count(mgr, 0, 0, 0, 0, 0, 0); session_manager_destroy(mgr); } #endif /****************************************************************************** * case: TCP init -> opening (by S2C asymmetric) ******************************************************************************/ #if 1 TEST(TCP_INIT_TO_OPENING, BY_S2C_ASMMETRIC) { char buffer[1024] = {0}; struct packet pkt; struct session *sess = NULL; struct session_manager *mgr = NULL; timestamp_update(); mgr = session_manager_create(&config); EXPECT_TRUE(mgr != NULL); // SYNACK Packet printf("=> packet parse: TCP S2C SYNACK packet\n"); packet_parse(&pkt, (const char *)tcp_pkt2_s2c_syn_ack, sizeof(tcp_pkt2_s2c_syn_ack)); printf("<= packet parse\n\n"); sess = session_manager_update_session(mgr, &pkt); EXPECT_TRUE(sess); EXPECT_TRUE(session_get_id(sess) == 0); tuple6_tostring(session_get0_key(sess), buffer, sizeof(buffer)); EXPECT_STREQ(buffer, "93.184.216.34:80 -> 192.168.38.105:60111, proto: 6, domain: 0"); EXPECT_TRUE(session_get_key_dir(sess) == SESSION_DIR_S2C); EXPECT_TRUE(session_get_state(sess) == SESSION_STATE_OPENING); EXPECT_TRUE(session_get_type(sess) == SESSION_TYPE_TCP); EXPECT_TRUE(session_get_dup_traffic_flag(sess) == 0); EXPECT_TRUE(session_get_closing_reasion(sess) == 0); EXPECT_TRUE(session_get_c2s_bytes(sess) == 0); EXPECT_TRUE(session_get_s2c_bytes(sess) == 74); EXPECT_TRUE(session_get_c2s_packets(sess) == 0); EXPECT_TRUE(session_get_s2c_packets(sess) == 1); EXPECT_TRUE(session_get_create_time(sess) == timestamp_get_msec()); EXPECT_TRUE(session_get_last_time(sess) == timestamp_get_msec()); EXPECT_TRUE(session_get0_cur_pkt(sess) == &pkt); EXPECT_TRUE(session_get_cur_dir(sess) == SESSION_DIR_S2C); EXPECT_TRUE(session_get_tcp_state(sess) == TCP_SYNACK_RECVED); EXPECT_TRUE(session_get0_c2s_1st_pkt(sess) == NULL); EXPECT_TRUE(session_get0_s2c_1st_pkt(sess) != NULL); EXPECT_TRUE(session_get0_1st_pkt(sess) == session_get0_s2c_1st_pkt(sess)); __session_dispatch(sess); __session_manager_count(mgr, 1, 0, 0, 0, 0, 0); sleep(1); timestamp_update(); // ACK Packet printf("=> packet parse: TCP S2C ACK packet\n"); packet_parse(&pkt, (const char *)tcp_pkt5_s2c_ack, sizeof(tcp_pkt5_s2c_ack)); printf("<= packet parse\n\n"); sess = session_manager_update_session(mgr, &pkt); EXPECT_TRUE(sess); EXPECT_TRUE(session_get_id(sess) == 0); tuple6_tostring(session_get0_key(sess), buffer, sizeof(buffer)); EXPECT_STREQ(buffer, "93.184.216.34:80 -> 192.168.38.105:60111, proto: 6, domain: 0"); EXPECT_TRUE(session_get_key_dir(sess) == SESSION_DIR_S2C); EXPECT_TRUE(session_get_state(sess) == SESSION_STATE_OPENING); EXPECT_TRUE(session_get_type(sess) == SESSION_TYPE_TCP); EXPECT_TRUE(session_get_dup_traffic_flag(sess) == 0); EXPECT_TRUE(session_get_closing_reasion(sess) == 0); EXPECT_TRUE(session_get_c2s_bytes(sess) == 0); EXPECT_TRUE(session_get_s2c_bytes(sess) == 74 + 66); EXPECT_TRUE(session_get_c2s_packets(sess) == 0); EXPECT_TRUE(session_get_s2c_packets(sess) == 1 + 1); EXPECT_TRUE(session_get_create_time(sess) < timestamp_get_msec()); EXPECT_TRUE(session_get_last_time(sess) == timestamp_get_msec()); EXPECT_TRUE(session_get0_cur_pkt(sess) == &pkt); EXPECT_TRUE(session_get_cur_dir(sess) == SESSION_DIR_S2C); EXPECT_TRUE(session_get_tcp_state(sess) == (TCP_SYNACK_RECVED | TCP_S2C_ACK_RECVED)); EXPECT_TRUE(session_get0_c2s_1st_pkt(sess) == NULL); EXPECT_TRUE(session_get0_s2c_1st_pkt(sess) != NULL); EXPECT_TRUE(session_get0_1st_pkt(sess) == session_get0_s2c_1st_pkt(sess)); __session_dispatch(sess); __session_manager_count(mgr, 1, 0, 0, 0, 0, 0); __session_manager_dispatch(mgr, CLOSING_BY_TIMEOUT); __session_manager_count(mgr, 0, 0, 0, 0, 0, 0); session_manager_destroy(mgr); } #endif int main(int argc, char **argv) { ::testing::InitGoogleTest(&argc, argv); return RUN_ALL_TESTS(); }