3939 ProfileID ("192.168.1.1" ),
4040 TimeWindow (1 ),
4141 "IP 192.168.1.1 detected as malicious in timewindow 1"
42- " (start 2023/07/01 12:00:00, stop 2023/07/01 12:05:00) \n "
42+ " (start 2023/07/01 12:00:00, stop 2023/07/01 12:05:00) "
4343 "given the following evidence:\n "
4444 "\t - Detected Port scan detected threat level: medium.\n " ,
4545 ),
7474 ProfileID ("192.168.1.1" ),
7575 TimeWindow (1 ),
7676 "IP 192.168.1.1 detected as malicious in timewindow 1"
77- " (start 2023/07/01 12:00:00, stop 2023/07/01 12:05:00) \n "
77+ " (start 2023/07/01 12:00:00, stop 2023/07/01 12:05:00) "
7878 "given the following evidence:\n "
7979 "\t - Detected Port scan detected threat level: medium.\n "
8080 "\t - Detected Malicious JA3 fingerprint threat level: high.\n " ,
@@ -95,7 +95,7 @@ def test_format_evidence_for_printing(
9595 mock_get_alert_time .return_value = (
9696 f"IP { profileid .ip } detected as malicious "
9797 f"in timewindow { twid .number } (start 2023/07/01 12:00:00, "
98- f"stop 2023/07/01 12:05:00) \n "
98+ f"stop 2023/07/01 12:05:00)"
9999 )
100100 alert = Alert (
101101 profile = profileid ,
@@ -117,6 +117,7 @@ def test_format_evidence_for_printing(
117117 .replace ("\033 [36m" , "" )
118118 .replace ("\033 [0m" , "" )
119119 )
120+
120121 assert expected_output in result
121122 assert "converted_time" in result
122123
0 commit comments