#!/usr/bin/python # -*- coding: utf-8 -*- # # Copyright 2013 The Plaso Project Authors. # Please see the AUTHORS file for details on individual authors. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. """Tests for the Mac wifi.log parser.""" import unittest # pylint: disable=unused-import from plaso.formatters import mac_wifi as mac_wifi_formatter from plaso.lib import timelib_test from plaso.parsers import mac_wifi from plaso.parsers import test_lib class MacWifiUnitTest(test_lib.ParserTestCase): """Tests for the Mac wifi.log parser.""" def setUp(self): """Sets up the needed objects used throughout the test.""" self._parser = mac_wifi.MacWifiLogParser() def testParse(self): """Tests the Parse function.""" knowledge_base_values = {'year': 2013} test_file = self._GetTestFilePath(['wifi.log']) event_queue_consumer = self._ParseFile( self._parser, test_file, knowledge_base_values=knowledge_base_values) event_objects = self._GetEventObjectsFromQueue(event_queue_consumer) self.assertEqual(len(event_objects), 9) event_object = event_objects[0] expected_timestamp = timelib_test.CopyStringToTimestamp( '2013-11-14 20:36:37.222') self.assertEqual(event_object.timestamp, expected_timestamp) self.assertEqual(event_object.agent, u'airportd[88]') self.assertEqual(event_object.function, u'airportdProcessDLILEvent') self.assertEqual(event_object.action, u'Interface en0 turn up.') self.assertEqual(event_object.text, u'en0 attached (up)') expected_msg = ( u'Action: Interface en0 turn up. ' u'(airportdProcessDLILEvent) ' u'Log: en0 attached (up)') expected_msg_short = ( u'Action: Interface en0 turn up.') self._TestGetMessageStrings(event_object, expected_msg, expected_msg_short) event_object = event_objects[1] expected_timestamp = timelib_test.CopyStringToTimestamp( '2013-11-14 20:36:43.818') self.assertEqual(event_object.timestamp, expected_timestamp) self.assertEqual(event_object.agent, u'airportd[88]') self.assertEqual(event_object.function, u'_doAutoJoin') self.assertEqual(event_object.action, u'Wifi connected to SSID CampusNet') expected_text = ( u'Already associated to \u201cCampusNet\u201d. Bailing on auto-join.') self.assertEqual(event_object.text, expected_text) event_object = event_objects[2] expected_timestamp = timelib_test.CopyStringToTimestamp( '2013-11-14 21:50:52.395') self.assertEqual(event_object.timestamp, expected_timestamp) self.assertEqual(event_object.agent, u'airportd[88]') self.assertEqual(event_object.function, u'_handleLinkEvent') expected_string = ( u'Unable to process link event, op mode request returned -3903 ' u'(Operation not supported)') self.assertEqual(event_object.action, expected_string) self.assertEqual(event_object.text, expected_string) event_object = event_objects[5] expected_timestamp = timelib_test.CopyStringToTimestamp( '2013-11-14 21:52:09.883') self.assertEqual(event_object.timestamp, expected_timestamp) self.assertEqual(u'airportd[88]', event_object.agent) self.assertEqual(u'_processSystemPSKAssoc', event_object.function) expected_action = ( u'New wifi configured. BSSID: 88:30:8a:7a:61:88, SSID: AndroidAP, ' u'Security: WPA2 Personal.') self.assertEqual(event_object.action, expected_action) expected_text = ( u'No password for network ' u'[ssid=AndroidAP, bssid=88:30:8a:7a:61:88, security=WPA2 ' u'Personal, rssi=-21, channel= ' u'[channelNumber=11(2GHz), channelWidth={20MHz}], ibss=0] ' u'in the system keychain') self.assertEqual(event_object.text, expected_text) event_object = event_objects[7] expected_timestamp = timelib_test.CopyStringToTimestamp( '2013-12-31 23:59:38.165') self.assertEqual(event_object.timestamp, expected_timestamp) event_object = event_objects[8] expected_timestamp = timelib_test.CopyStringToTimestamp( '2014-01-01 01:12:17.311') self.assertEqual(event_object.timestamp, expected_timestamp) if __name__ == '__main__': unittest.main()