mentat.stats.test_idea module

class mentat.stats.test_idea.TestMentatStatsIdea(methodName='runTest')

Bases: unittest.case.TestCase

ideas_raw = [{'Format': 'IDEA0', 'ID': 'msg01', 'CreateTime': '2012-11-03T10:00:02Z', 'DetectTime': '2012-11-03T10:00:07Z', 'Category': ['Fraud.Phishing'], 'Source': [{'Type': ['Phishing'], 'IP4': ['192.168.0.2-192.168.0.5', '192.168.0.0/25'], 'IP6': ['2001:db8::ff00:42:0/112']}], 'Node': [{'Name': 'org.example.kippo', 'Tags': ['Protocol', 'Honeypot'], 'SW': ['Kippo']}], '_Mentat': {'ResolvedAbuses': ['abuse@cesnet.cz']}}, {'Format': 'IDEA0', 'ID': 'msg02', 'CreateTime': '2012-11-03T11:00:02Z', 'DetectTime': '2012-11-03T11:00:07Z', 'Category': ['Fraud.Phishing'], 'Source': [{'Type': ['Phishing'], 'IP4': ['192.168.0.2-192.168.0.5', '192.168.0.0/25'], 'IP6': ['2001:db8::ff00:42:0/112']}], 'Node': [{'Name': 'org.example.kippo', 'Tags': ['Protocol', 'Honeypot'], 'SW': ['Kippo']}], '_Mentat': {'ResolvedAbuses': ['abuse@cesnet.cz']}}, {'Format': 'IDEA0', 'ID': 'msg03', 'CreateTime': '2012-11-03T12:00:02Z', 'DetectTime': '2012-11-03T12:00:07Z', 'Category': ['Fraud.Phishing'], 'Source': [{'Type': ['Phishing'], 'IP4': ['192.168.0.2-192.168.0.5', '192.168.0.0/25'], 'IP6': ['2001:db8::ff00:42:0/112']}], 'Node': [{'Name': 'org.example.dionaea', 'Tags': ['Protocol', 'Honeypot'], 'SW': ['Kippo']}], '_Mentat': {'ResolvedAbuses': ['abuse@cesnet.cz']}}, {'Format': 'IDEA0', 'ID': 'msg04', 'CreateTime': '2012-11-03T15:00:02Z', 'DetectTime': '2012-11-03T15:00:07Z', 'Category': ['Spam'], 'Source': [{'Type': ['Spam'], 'IP4': ['192.168.0.100', '192.168.0.105']}], 'Node': [{'Name': 'org.example.dionaea', 'Tags': ['Protocol', 'Honeypot'], 'SW': ['Dionaea']}]}, {'Format': 'IDEA0', 'ID': 'msg05', 'CreateTime': '2012-11-03T18:00:02Z', 'DetectTime': '2012-11-03T18:00:07Z', 'Category': ['Exploit'], 'Source': [{'Type': ['Exploit'], 'IP4': ['192.168.0.109', '192.168.0.200']}], 'Node': [{'Name': 'org.example.labrea', 'Tags': ['Protocol', 'Honeypot'], 'SW': ['LaBrea']}], '_Mentat': {'ResolvedAbuses': ['abuse@cesnet.cz']}}, {'Format': 'IDEA0', 'ID': 'msg06', 'CreateTime': '2012-11-03T18:00:02Z', 'DetectTime': '2012-11-03T18:00:07Z', 'Category': ['Exploit'], 'Source': [{'Type': ['Exploit'], 'IP4': ['192.172.0.109', '192.172.0.200']}], 'Node': [{'Name': 'org.example.labrea', 'Tags': ['Protocol', 'Honeypot'], 'SW': ['LaBrea']}, {'SW': ['Beekeeper'], 'Name': 'cz.cesnet.holly'}]}]

test_01_counter_inc()

Test counter incrementation utility.

test_02_make_toplist()

Test toplist creation utility.

test_03_timeline_boundaries()

Test timeline boundary calculations.

test_04_timeline_steps()

Test timeline step calculations.

test_05_calc_timeline_cfg()

Test timeline config calculations.

test_06_evaluate_events()

Perform the message evaluation tests.

test_07_truncate_stats()

Perform the basic operativity tests.

test_08_group_events()

Perform the basic operativity tests.

test_09_evaluate_event_groups()

Perform the basic operativity tests.

test_10_merge_stats()

Perform the statistics aggregation tests.

test_11_aggregate_stat_groups()

Perform the statistic group aggregation tests.

verbose = False