#include #include #include "wireframe/l7/ssh.hpp" using namespace wireframe::net; namespace { std::vector to_bytes(const std::string& s) { return std::vector(s.begin(), s.end()); } } // namespace TEST_CASE("parse_ssh_banner decodes a CRLF-terminated banner with a comment") { auto banner = parse_ssh_banner(to_bytes("SSH-2.0-OpenSSH_9.6 FreeBSD-20240101\r\n")); REQUIRE(banner.has_value()); CHECK(banner->proto_version == "2.0"); CHECK(banner->software_version == "OpenSSH_9.6"); } TEST_CASE("parse_ssh_banner decodes a banner with no comment") { auto banner = parse_ssh_banner(to_bytes("SSH-2.0-libssh_0.10.6\r\n")); REQUIRE(banner.has_value()); CHECK(banner->proto_version == "2.0"); CHECK(banner->software_version == "libssh_0.10.6"); } TEST_CASE("parse_ssh_banner tolerates a bare LF terminator") { auto banner = parse_ssh_banner(to_bytes("SSH-1.99-OpenSSH_3.9\n")); REQUIRE(banner.has_value()); CHECK(banner->proto_version == "1.99"); CHECK(banner->software_version == "OpenSSH_3.9"); } TEST_CASE("parse_ssh_banner rejects payloads without the SSH- prefix") { CHECK_FALSE(parse_ssh_banner(to_bytes("not an ssh banner\r\n")).has_value()); } TEST_CASE("parse_ssh_banner rejects a banner missing the version separator") { CHECK_FALSE(parse_ssh_banner(to_bytes("SSH-nodash\r\n")).has_value()); } TEST_CASE("parse_ssh_banner rejects an unterminated line") { CHECK_FALSE(parse_ssh_banner(to_bytes("SSH-2.0-OpenSSH_9.6")).has_value()); } TEST_CASE("SshDissector claims port 22 and its summary matches parse_ssh_banner") { SshDissector dissector; CHECK(dissector.port() == kSshPort); auto summary = dissector.summarize(to_bytes("SSH-2.0-OpenSSH_9.6\r\n")); REQUIRE(summary.has_value()); CHECK(*summary == "SSH 2.0 OpenSSH_9.6"); } TEST_CASE("SshDissector::summarize returns nullopt for non-SSH payload") { SshDissector dissector; CHECK_FALSE(dissector.summarize(to_bytes("GET / HTTP/1.1\r\n")).has_value()); }