public void TestSpotterKeyValue()
{
this.FrameworkController.ProcessCapture(this.PrepareCaptureForProcessing(SnoopersPcaps.Default.webmail_webmail_live_test_pcapng));
var conversations = this.L7Conversations.ToArray();
var pk = File.ReadAllText(PrivateKeys.Default.pk_pem);
foreach (var conversation in conversations)
{
conversation.Key = new CypherKey();
conversation.Key.ServerPrivateKey = pk;
}
this.FrameworkController.ExportData(this.AvailableSnoopers.Where(x => x is SnooperHTTP.SnooperHTTP), conversations, this.CurrentTestBaseDirectory, true);
var msgObject = this.SnooperExports.ToArray()[0].ExportObjects[4] as SnooperExportedDataObjectHTTP;
Assert.AreNotEqual(null, msgObject);
var msg = msgObject.Message;
var spotter = new SpotterKeyValue();
spotter.Init(msg);
/* verify true states */
Assert.AreEqual(true, spotter.IsSpottable());
Assert.AreEqual(true, spotter.ContainsOneOf(new[] { "nieco", "cn" }, SpotterBase.SpotterContext.ContentKey));
Assert.AreEqual(true, spotter.Contains("cnmn", SpotterBase.SpotterContext.AllKey));
Assert.AreEqual(true, spotter.ContainsKeyValuePair("mn", "MarkMessagesReadState", SpotterBase.SpotterContext.ContentPair));
/* verify false states */
Assert.AreEqual(false, spotter.ContainsOneOf(new[] { "nieco", "ine" }, SpotterBase.SpotterContext.ContentKey));
Assert.AreEqual(false, spotter.Contains("hocico", SpotterBase.SpotterContext.AllKey));
Assert.AreEqual(false, spotter.ContainsKeyValuePair("mn", "GetInboxData", SpotterBase.SpotterContext.AllPair));
}
public object applyOn(SpotterKeyValue spotter)
{
throw new NotImplementedException();
}
