6
6
import java .net .InetAddress ;
7
7
import java .net .InetSocketAddress ;
8
8
import java .time .ZoneId ;
9
- import java .time .ZoneOffset ;
10
9
import java .time .ZonedDateTime ;
11
- import java .time .format .DateTimeFormatter ;
12
10
import java .util .Date ;
13
- import java .util .Locale ;
14
11
15
12
import static java .time .ZoneOffset .UTC ;
16
13
import static org .assertj .core .api .Assertions .assertThat ;
@@ -24,15 +21,15 @@ public class CiscoSyslogServerEventTest {
24
21
private static final ZoneId CET = ZoneId .of ("CET" );
25
22
private static final int YEAR = ZonedDateTime .now ().getYear ();
26
23
27
- private CiscoSyslogServerEvent buildEvent (String message ) {
28
- return new CiscoSyslogServerEvent (message , INET_ADDR );
24
+ private CiscoSyslogServerEvent buildEvent (String message , DateTimeZone defaultZone ) {
25
+ return new CiscoSyslogServerEvent (message , INET_ADDR , defaultZone );
29
26
}
30
27
31
28
@ Test
32
29
public void testCisco1 () throws Exception {
33
30
final String message = "<166>Mar 06 2016 12:53:10 DEVICENAME : %ASA-6-302013: Built inbound TCP connection 723494125 for FRONTEND:IP/11288 (IP/11288) to BACKEND:IP/27180 (IP/27180)" ;
34
31
35
- final CiscoSyslogServerEvent event = buildEvent (message );
32
+ final CiscoSyslogServerEvent event = buildEvent (message , null );
36
33
37
34
assertThat (toZonedDateTime (event .getDate (), UTC )).isEqualTo (ZonedDateTime .of (2016 , 3 , 6 , 12 , 53 , 10 , 0 , UTC ));
38
35
assertThat (event .getFacility ()).isEqualTo (20 );
@@ -46,7 +43,7 @@ public void testCisco1() throws Exception {
46
43
public void testCisco2 () throws Exception {
47
44
final String message = "<186>1541800: Feb 27 06:08:59.485: %HARDWARE-2-FAN_ERROR: Fan Failure" ;
48
45
49
- final CiscoSyslogServerEvent event = buildEvent (message );
46
+ final CiscoSyslogServerEvent event = buildEvent (message , null );
50
47
51
48
assertThat (toZonedDateTime (event .getDate (), UTC )).isEqualTo (ZonedDateTime .of (YEAR , 2 , 27 , 6 , 8 , 59 , 485_000_000 , UTC ));
52
49
assertThat (event .getFacility ()).isEqualTo (23 );
@@ -60,7 +57,7 @@ public void testCisco2() throws Exception {
60
57
public void testCisco3 () throws Exception {
61
58
final String message = "<187>148094: Feb 27 06:07:29.716: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/15, changed state to down" ;
62
59
63
- final CiscoSyslogServerEvent event = buildEvent (message );
60
+ final CiscoSyslogServerEvent event = buildEvent (message , null );
64
61
65
62
assertThat (toZonedDateTime (event .getDate (), UTC )).isEqualTo (ZonedDateTime .of (YEAR , 2 , 27 , 6 , 7 , 29 , 716_000_000 , UTC ));
66
63
assertThat (event .getFacility ()).isEqualTo (23 );
@@ -74,7 +71,7 @@ public void testCisco3() throws Exception {
74
71
public void testCisco4 () throws Exception {
75
72
final String message = "<190>530470: *Sep 28 17:13:35.098: %SEC-6-IPACCESSLOGP: list MGMT_IN denied udp IP(49964) -> IP(161), 11 packets" ;
76
73
77
- final CiscoSyslogServerEvent event = buildEvent (message );
74
+ final CiscoSyslogServerEvent event = buildEvent (message , null );
78
75
79
76
assertThat (toZonedDateTime (event .getDate (), UTC )).isEqualTo (ZonedDateTime .of (YEAR , 9 , 28 , 17 , 13 , 35 , 98_000_000 , UTC ));
80
77
assertThat (event .getFacility ()).isEqualTo (23 );
@@ -88,7 +85,7 @@ public void testCisco4() throws Exception {
88
85
public void testCisco5 () throws Exception {
89
86
final String message = "<190>: 2016 Mar 06 09:22:34 CET: %AUTHPRIV-6-SYSTEM_MSG: START: rsync pid=4311 from=::ffff:IP - xinetd[6219]" ;
90
87
91
- final CiscoSyslogServerEvent event = buildEvent (message );
88
+ final CiscoSyslogServerEvent event = buildEvent (message , null );
92
89
93
90
assertThat (toZonedDateTime (event .getDate (), CET )).isEqualTo (ZonedDateTime .of (2016 , 3 , 6 , 9 , 22 , 34 , 0 , CET ));
94
91
assertThat (event .getFacility ()).isEqualTo (23 );
@@ -102,7 +99,7 @@ public void testCisco5() throws Exception {
102
99
public void testCisco6 () throws Exception {
103
100
final String message = "<134>: 2016 Mar 6 12:53:10 UTC: %POLICY_ENGINE-6-POLICY_LOOKUP_EVENT: policy=POLICYNAME rule=RULENAME action=Permit direction=egress src.net.ip-address=IP src.net.port=38321 dst.net.ip-address=IP dst.net.port=5666 net.protocol=6 net.ethertype=800 net.service=\" protocol 6 port 5666\" " ;
104
101
105
- final CiscoSyslogServerEvent event = buildEvent (message );
102
+ final CiscoSyslogServerEvent event = buildEvent (message , null );
106
103
107
104
assertThat (toZonedDateTime (event .getDate (), UTC )).isEqualTo (ZonedDateTime .of (2016 , 3 , 6 , 12 , 53 , 10 , 0 , UTC ));
108
105
assertThat (event .getFacility ()).isEqualTo (16 );
@@ -116,7 +113,7 @@ public void testCisco6() throws Exception {
116
113
public void testCisco7 () throws Exception {
117
114
final String message = "<166>%ASA-6-302015: Built inbound UDP connection 23631055 for inside:192.168.19.91/44764 (192.168.19.91/44764) to identity:192.168.249.33/161 (192.168.249.33/161)" ;
118
115
119
- final CiscoSyslogServerEvent event = buildEvent (message );
116
+ final CiscoSyslogServerEvent event = buildEvent (message , null );
120
117
121
118
assertThat (event .getDate ())
122
119
.isInThePast ()
@@ -131,15 +128,15 @@ public void testCisco7() throws Exception {
131
128
@ Test
132
129
public void testDefaultTimeZoneUtcIfNotConfigured () throws Exception {
133
130
final String message = "<190>: 2016 Mar 06 09:22:34: %AUTHPRIV-6-SYSTEM_MSG: START: rsync pid=4311 from=::ffff:IP - xinetd[6219]" ;
134
- final CiscoSyslogServerEvent event = buildEvent (message );
131
+ final CiscoSyslogServerEvent event = buildEvent (message , null );
135
132
136
133
assertThat (toZonedDateTime (event .getDate (), UTC )).isEqualTo (ZonedDateTime .of (2016 , 3 , 6 , 9 , 22 , 34 , 0 , UTC ));
137
134
}
138
135
139
136
@ Test
140
137
public void testDefaultTimeZoneConfigured () throws Exception {
141
138
final String message = "<190>: 2016 Mar 06 09:22:34: %AUTHPRIV-6-SYSTEM_MSG: START: rsync pid=4311 from=::ffff:IP - xinetd[6219]" ;
142
- final CiscoSyslogServerEvent event = new CiscoSyslogServerEvent (message , INET_ADDR , MST );
139
+ final CiscoSyslogServerEvent event = buildEvent (message , MST );
143
140
144
141
assertThat (toZonedDateTime (event .getDate (), MST_ZONE_ID )).isEqualTo (ZonedDateTime .of (2016 , 3 , 6 , 9 , 22 , 34 , 0 , MST_ZONE_ID ));
145
142
}
@@ -148,12 +145,12 @@ public void testDefaultTimeZoneConfigured() throws Exception {
148
145
public void testDefaultTimeZoneIgnoredSinceZoneDetected () throws Exception {
149
146
final String message = "<190>: 2016 Mar 06 09:22:34 CET: %AUTHPRIV-6-SYSTEM_MSG: START: rsync pid=4311 from=::ffff:IP - xinetd[6219]" ;
150
147
DateTimeZone mst = DateTimeZone .forID ("MST" );
151
- final CiscoSyslogServerEvent event = new CiscoSyslogServerEvent (message , INET_ADDR , mst );
148
+ final CiscoSyslogServerEvent event = buildEvent (message , mst );
152
149
153
150
assertThat (toZonedDateTime (event .getDate (), CET )).isEqualTo (ZonedDateTime .of (2016 , 3 , 6 , 9 , 22 , 34 , 0 , CET ));
154
151
}
155
152
156
153
private ZonedDateTime toZonedDateTime (Date date , ZoneId zoneId ) {
157
154
return ZonedDateTime .ofInstant (date .toInstant (), zoneId );
158
155
}
159
- }
156
+ }
0 commit comments