blob: 7201c0ef2181331d8825e88bfd3dc013f94ca690 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
|
#include <doctest/doctest.h>
#include <vector>
#include "packeteer/l7/ssh.hpp"
using namespace packeteer::net;
namespace {
std::vector<unsigned char> to_bytes(const std::string& s) {
return std::vector<unsigned char>(s.begin(), s.end());
}
} // namespace
TEST_CASE("parse_ssh_banner decodes a CRLF-terminated banner with a comment") {
auto banner = parse_ssh_banner(to_bytes("SSH-2.0-OpenSSH_9.6 FreeBSD-20240101\r\n"));
REQUIRE(banner.has_value());
CHECK(banner->proto_version == "2.0");
CHECK(banner->software_version == "OpenSSH_9.6");
}
TEST_CASE("parse_ssh_banner decodes a banner with no comment") {
auto banner = parse_ssh_banner(to_bytes("SSH-2.0-libssh_0.10.6\r\n"));
REQUIRE(banner.has_value());
CHECK(banner->proto_version == "2.0");
CHECK(banner->software_version == "libssh_0.10.6");
}
TEST_CASE("parse_ssh_banner tolerates a bare LF terminator") {
auto banner = parse_ssh_banner(to_bytes("SSH-1.99-OpenSSH_3.9\n"));
REQUIRE(banner.has_value());
CHECK(banner->proto_version == "1.99");
CHECK(banner->software_version == "OpenSSH_3.9");
}
TEST_CASE("parse_ssh_banner rejects payloads without the SSH- prefix") {
CHECK_FALSE(parse_ssh_banner(to_bytes("not an ssh banner\r\n")).has_value());
}
TEST_CASE("parse_ssh_banner rejects a banner missing the version separator") {
CHECK_FALSE(parse_ssh_banner(to_bytes("SSH-nodash\r\n")).has_value());
}
TEST_CASE("parse_ssh_banner rejects an unterminated line") {
CHECK_FALSE(parse_ssh_banner(to_bytes("SSH-2.0-OpenSSH_9.6")).has_value());
}
TEST_CASE("SshDissector claims port 22 and its summary matches parse_ssh_banner") {
SshDissector dissector;
CHECK(dissector.port() == kSshPort);
auto summary = dissector.summarize(to_bytes("SSH-2.0-OpenSSH_9.6\r\n"));
REQUIRE(summary.has_value());
CHECK(*summary == "SSH 2.0 OpenSSH_9.6");
}
TEST_CASE("SshDissector::summarize returns nullopt for non-SSH payload") {
SshDissector dissector;
CHECK_FALSE(dissector.summarize(to_bytes("GET / HTTP/1.1\r\n")).has_value());
}
|