public void TestSpotterKeyValue() { this.FrameworkController.ProcessCapture(this.PrepareCaptureForProcessing(SnoopersPcaps.Default.webmail_webmail_live_test_pcapng)); var conversations = this.L7Conversations.ToArray(); var pk = File.ReadAllText(PrivateKeys.Default.pk_pem); foreach (var conversation in conversations) { conversation.Key = new CypherKey(); conversation.Key.ServerPrivateKey = pk; } this.FrameworkController.ExportData(this.AvailableSnoopers.Where(x => x is SnooperHTTP.SnooperHTTP), conversations, this.CurrentTestBaseDirectory, true); var msgObject = this.SnooperExports.ToArray()[0].ExportObjects[4] as SnooperExportedDataObjectHTTP; Assert.AreNotEqual(null, msgObject); var msg = msgObject.Message; var spotter = new SpotterKeyValue(); spotter.Init(msg); /* verify true states */ Assert.AreEqual(true, spotter.IsSpottable()); Assert.AreEqual(true, spotter.ContainsOneOf(new[] { "nieco", "cn" }, SpotterBase.SpotterContext.ContentKey)); Assert.AreEqual(true, spotter.Contains("cnmn", SpotterBase.SpotterContext.AllKey)); Assert.AreEqual(true, spotter.ContainsKeyValuePair("mn", "MarkMessagesReadState", SpotterBase.SpotterContext.ContentPair)); /* verify false states */ Assert.AreEqual(false, spotter.ContainsOneOf(new[] { "nieco", "ine" }, SpotterBase.SpotterContext.ContentKey)); Assert.AreEqual(false, spotter.Contains("hocico", SpotterBase.SpotterContext.AllKey)); Assert.AreEqual(false, spotter.ContainsKeyValuePair("mn", "GetInboxData", SpotterBase.SpotterContext.AllPair)); }
public object applyOn(SpotterKeyValue spotter) { throw new NotImplementedException(); }