File tree Expand file tree Collapse file tree 3 files changed +26
-0
lines changed
Expand file tree Collapse file tree 3 files changed +26
-0
lines changed Original file line number Diff line number Diff line change @@ -516,3 +516,27 @@ fn serde_message() {
516516 ] ,
517517 ) ;
518518}
519+
520+ #[ test]
521+ #[ should_panic]
522+ fn parse_uringop ( ) {
523+ let msg = parse ( include_bytes ! ( "testdata/line-uringop.txt" ) , false ) . unwrap ( ) ;
524+ println ! ( "{msg:?}" ) ;
525+ let v = msg
526+ . body
527+ . get ( "uring_op" )
528+ . unwrap_or_else ( || panic ! ( "{}: uring_op not found" , msg. id) ) ;
529+ assert_eq ! ( * v, Value :: Number ( Number :: Dec ( 18 ) ) ) ;
530+ }
531+
532+ #[ test]
533+ #[ should_panic]
534+ fn parse_bpf ( ) {
535+ let msg = parse ( include_bytes ! ( "testdata/line-bpf.txt" ) , false ) . unwrap ( ) ;
536+ println ! ( "{msg:?}" ) ;
537+ let v = msg
538+ . body
539+ . get ( "prog-id" )
540+ . unwrap_or_else ( || panic ! ( "{}: prog-id not found" , msg. id) ) ;
541+ assert_eq ! ( * v, Value :: Number ( Number :: Dec ( 75 ) ) ) ;
542+ }
Original file line number Diff line number Diff line change 1+ type=BPF msg=audit(1737533267.765:12263987): prog-id=75 op=LOAD
Original file line number Diff line number Diff line change 1+ type=URINGOP msg=audit(1737533617.373:12266329): uring_op=18 success=yes exit=0 items=0 ppid=140504 pid=3178806 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 subj=unconfined key=(null)
You can’t perform that action at this time.
0 commit comments