func TestPacketDot11DataARP(t *testing.T) { p := gopacket.NewPacket(testPacketDot11DataARP, LinkTypeIEEE80211Radio, gopacket.Default) if p.ErrorLayer() != nil { t.Error("Failed to decode packet:", p.ErrorLayer().Error()) } checkLayers(p, []gopacket.LayerType{LayerTypeRadioTap, LayerTypeDot11, LayerTypeDot11Data, LayerTypeLLC, LayerTypeSNAP, LayerTypeARP}, t) if got, ok := p.Layer(LayerTypeARP).(*ARP); ok { want := &ARP{ BaseLayer: BaseLayer{ Contents: []uint8{0x0, 0x1, 0x8, 0x0, 0x6, 0x4, 0x0, 0x1, 0x0, 0x19, 0xe3, 0xd3, 0x53, 0x52, 0xa9, 0xfe, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, 0x8, 0xe, 0x36}, Payload: []uint8{}, }, AddrType: 0x1, Protocol: 0x800, HwAddressSize: 0x6, ProtAddressSize: 0x4, Operation: 0x1, SourceHwAddress: []uint8{0x0, 0x19, 0xe3, 0xd3, 0x53, 0x52}, SourceProtAddress: []uint8{0xa9, 0xfe, 0xf7, 0x0}, DstHwAddress: []uint8{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, DstProtAddress: []uint8{0x43, 0x8, 0xe, 0x36}, } if !reflect.DeepEqual(got, want) { t.Errorf("ARP packet processing failed:\ngot :\n%#v\n\nwant :\n%#v\n\n", got, want) } } }
func TestPacketIPSecESP(t *testing.T) { p := gopacket.NewPacket(testPacketIPSecESP, LinkTypeEthernet, gopacket.Default) if p.ErrorLayer() != nil { t.Error("Failed to decode packet:", p.ErrorLayer().Error()) } checkLayers(p, []gopacket.LayerType{LayerTypeEthernet, LayerTypeIPv4, LayerTypeIPSecESP}, t) }
func TestPacketDot11DataIP(t *testing.T) { p := gopacket.NewPacket(testPacketDot11DataIP, LinkTypeIEEE80211Radio, gopacket.Default) if p.ErrorLayer() != nil { t.Error("Failed to decode packet:", p.ErrorLayer().Error()) } checkLayers(p, []gopacket.LayerType{LayerTypeRadioTap, LayerTypeDot11, LayerTypeDot11Data, LayerTypeLLC, LayerTypeSNAP, LayerTypeIPv4, LayerTypeUDP, gopacket.LayerTypePayload}, t) }
func TestPacketUSB0(t *testing.T) { p := gopacket.NewPacket(testPacketUSB0, LinkTypeLinuxUSB, gopacket.Default) if p.ErrorLayer() != nil { t.Error("Failed to decode packet:", p.ErrorLayer().Error()) } checkLayers(p, []gopacket.LayerType{LayerTypeUSB, LayerTypeUSBInterrupt}, t) if got, ok := p.Layer(LayerTypeUSB).(*USB); ok { want := &USB{ BaseLayer: BaseLayer{ Contents: []uint8{0x0, 0x38, 0x4a, 0x3b, 0x0, 0x88, 0xff, 0xff, 0x43, 0x1, 0x81, 0x1, 0x2, 0x0, 0x2d, 0x0, 0xc0, 0xd3, 0x5b, 0x50, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x85, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0}, Payload: []uint8{0x4}, }, ID: 0xffff88003b4a3800, EventType: USBEventTypeComplete, TransferType: USBTransportTypeInterrupt, Direction: 0x1, EndpointNumber: 0x1, DeviceAddress: 0x1, BusID: 0x2, TimestampSec: 1348195264, TimestampUsec: 689546, Setup: false, Data: true, Status: 0, UrbLength: 0x1, UrbDataLength: 0x1, } if !reflect.DeepEqual(got, want) { t.Errorf("USB packet processing failed:\ngot :\n%#v\n\nwant :\n%#v\n\n", got, want) } } }
func TestPacketP6196(t *testing.T) { p := gopacket.NewPacket(testPacketP6196, LinkTypeIEEE80211Radio, gopacket.Default) if p.ErrorLayer() != nil { t.Error("Failed to decode packet:", p.ErrorLayer().Error()) } checkLayers(p, []gopacket.LayerType{LayerTypeRadioTap, LayerTypeDot11, LayerTypeDot11WEP}, t) }
func TestPacketPrism(t *testing.T) { p := gopacket.NewPacket(testPacketPrism, LinkTypePrismHeader, gopacket.Default) if p.ErrorLayer() != nil { t.Error("Failed to decode packet:", p.ErrorLayer().Error()) } checkLayers(p, []gopacket.LayerType{LayerTypePrismHeader, LayerTypeDot11, LayerTypeDot11MgmtProbeReq}, t) if got, ok := p.Layer(LayerTypePrismHeader).(*PrismHeader); ok { want := &PrismHeader{ BaseLayer: BaseLayer{ Contents: []uint8{0x44, 0x0, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x72, 0x61, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xf9, 0xc1, 0x29, 0x0, 0x44, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x44, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe1, 0xff, 0xff, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x44, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7e, 0x0, 0x0, 0x0}, Payload: []uint8{0x40, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xcc, 0xfa, 0x0, 0xad, 0x79, 0xe8, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xa0, 0x41, 0x0, 0x0, 0x1, 0x4, 0x2, 0x4, 0xb, 0x16, 0x32, 0x8, 0xc, 0x12, 0x18, 0x24, 0x30, 0x48, 0x60, 0x6c, 0x3, 0x1, 0x1, 0x2d, 0x1a, 0x2d, 0x11, 0x17, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xdd, 0x9, 0x0, 0x10, 0x18, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0xdd, 0x1e, 0x0, 0x90, 0x4c, 0x33, 0x2d, 0x11, 0x17, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, Code: 0x44, Length: 0x90, DeviceName: "ra0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", Values: []PrismValue{ PrismValue{DID: PrismDIDType1HostTime, Status: 0x0, Length: 0x4, Data: []uint8{0xf9, 0xc1, 0x29, 0x0}}, PrismValue{DID: PrismDIDType1MACTime, Status: 0x0, Length: 0x0, Data: []uint8{}}, PrismValue{DID: PrismDIDType1Channel, Status: 0x0, Length: 0x4, Data: []uint8{0xa, 0x0, 0x0, 0x0}}, PrismValue{DID: PrismDIDType1RSSI, Status: 0x0, Length: 0x4, Data: []uint8{0xe1, 0xff, 0xff, 0xff}}, PrismValue{DID: 0x0, Status: 0x0, Length: 0x0, Data: []uint8{}}, PrismValue{DID: PrismDIDType1Signal, Status: 0x0, Length: 0x4, Data: []uint8{0x0, 0x0, 0x0, 0x0}}, PrismValue{DID: PrismDIDType1Noise, Status: 0x0, Length: 0x4, Data: []uint8{0x0, 0x0, 0x0, 0x0}}, PrismValue{DID: PrismDIDType1Rate, Status: 0x0, Length: 0x4, Data: []uint8{0x2, 0x0, 0x0, 0x0}}, PrismValue{DID: PrismDIDType1TransmittedFrameIndicator, Status: 0x0, Length: 0x0, Data: []uint8{}}, PrismValue{DID: PrismDIDType1FrameLength, Status: 0x0, Length: 0x4, Data: []uint8{0x7e, 0x0, 0x0, 0x0}}, }, } if !reflect.DeepEqual(got, want) { t.Errorf("RadioTap packet processing failed:\ngot :\n%#v\n\nwant :\n%#v\n\n", got, want) } } if got, ok := p.Layer(LayerTypeDot11).(*Dot11); ok { want := &Dot11{ BaseLayer: BaseLayer{ Contents: []uint8{0x40, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xcc, 0xfa, 0x0, 0xad, 0x79, 0xe8, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xa0, 0x41}, Payload: []uint8{0x0, 0x0, 0x1, 0x4, 0x2, 0x4, 0xb, 0x16, 0x32, 0x8, 0xc, 0x12, 0x18, 0x24, 0x30, 0x48, 0x60, 0x6c, 0x3, 0x1, 0x1, 0x2d, 0x1a, 0x2d, 0x11, 0x17, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xdd, 0x9, 0x0, 0x10, 0x18, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0xdd, 0x1e, 0x0, 0x90, 0x4c, 0x33, 0x2d, 0x11, 0x17, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, }, Type: 0x10, Proto: 0x0, Flags: 0x0, DurationID: 0x0, Address1: net.HardwareAddr{0xff, 0xff, 0xff, 0xff, 0xff, 0xff}, Address2: net.HardwareAddr{0xcc, 0xfa, 0x0, 0xad, 0x79, 0xe8}, Address3: net.HardwareAddr{0xff, 0xff, 0xff, 0xff, 0xff, 0xff}, Address4: net.HardwareAddr(nil), SequenceNumber: 0x106, FragmentNumber: 0x20, Checksum: 0x0, } if !reflect.DeepEqual(got, want) { t.Errorf("Dot11 packet processing failed:\ngot :\n%#v\n\nwant :\n%#v\n\n", got, want) } } }
func TestPacketICMPv6(t *testing.T) { p := gopacket.NewPacket(testPacketICMPv6, LinkTypeEthernet, gopacket.Default) if p.ErrorLayer() != nil { t.Error("Failed to decode packet:", p.ErrorLayer().Error()) } checkLayers(p, []gopacket.LayerType{LayerTypeEthernet, LayerTypeIPv6, LayerTypeICMPv6, gopacket.LayerTypePayload}, t) if got, ok := p.Layer(LayerTypeIPv6).(*IPv6); ok { want := &IPv6{ BaseLayer: BaseLayer{ Contents: []byte{0x60, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3a, 0xff, 0x26, 0x20, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x26, 0xbe, 0x5, 0xff, 0xfe, 0x27, 0xb, 0x17, 0xfe, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1f, 0xca, 0xff, 0xfe, 0xb3, 0x76, 0x40}, Payload: []byte{0x88, 0x0, 0x1e, 0xd6, 0x40, 0x0, 0x0, 0x0, 0x26, 0x20, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x26, 0xbe, 0x5, 0xff, 0xfe, 0x27, 0xb, 0x17}, }, Version: 6, TrafficClass: 0, FlowLabel: 0, Length: 24, NextHeader: IPProtocolICMPv6, HopLimit: 255, SrcIP: net.IP{0x26, 0x20, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x26, 0xbe, 0x5, 0xff, 0xfe, 0x27, 0xb, 0x17}, DstIP: net.IP{0xfe, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1f, 0xca, 0xff, 0xfe, 0xb3, 0x76, 0x40}, } if !reflect.DeepEqual(got, want) { t.Errorf("IPv6 packet processing failed:\ngot :\n%#v\n\nwant :\n%#v\n\n", got, want) } } else { t.Error("No IPv6 layer type found in packet") } if got, ok := p.Layer(LayerTypeICMPv6).(*ICMPv6); ok { want := &ICMPv6{ BaseLayer: BaseLayer{ Contents: []byte{0x88, 0x0, 0x1e, 0xd6, 0x40, 0x0, 0x0, 0x0}, Payload: []byte{0x26, 0x20, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x26, 0xbe, 0x5, 0xff, 0xfe, 0x27, 0xb, 0x17}, }, TypeCode: 0x8800, Checksum: 0x1ed6, TypeBytes: []byte{0x40, 0x0, 0x0, 0x0}, } if !reflect.DeepEqual(got, want) { t.Errorf("ICMPv6 packet processing failed:\ngot :\n%#v\n\nwant :\n%#v\n\n", got, want) } if got.TypeCode.String() != "NeighborAdvertisement(0)" { t.Errorf("ICMPv6 type code, got %q want 'NeighborAdvertisement(0)'", got.TypeCode.String()) } } else { t.Error("No ICMPv6 layer type found in packet") } }
func TestPacketRadiotap0(t *testing.T) { p := gopacket.NewPacket(testPacketRadiotap0, LayerTypeRadioTap, gopacket.Default) if p.ErrorLayer() != nil { t.Error("Failed to decode packet:", p.ErrorLayer().Error()) } checkLayers(p, []gopacket.LayerType{LayerTypeRadioTap, LayerTypeDot11}, t) rt := p.Layer(LayerTypeRadioTap).(*RadioTap) if rt.ChannelFrequency != 2412 || rt.DBMAntennaSignal != -58 || rt.Antenna != 7 { t.Error("Radiotap decode error") } if rt.Rate != 2 { // 500Kbps unit t.Error("Radiotap Rate decode error") } }
func TestPacketDot11MgmtBeacon(t *testing.T) { p := gopacket.NewPacket(testPacketDot11MgmtBeacon, LinkTypeIEEE80211Radio, gopacket.Default) if p.ErrorLayer() != nil { t.Error("Failed to decode packet:", p.ErrorLayer().Error()) } expectedLayers := []gopacket.LayerType{LayerTypeRadioTap, LayerTypeDot11, LayerTypeDot11MgmtBeacon} for i := 0; i < 12; i++ { expectedLayers = append(expectedLayers, LayerTypeDot11InformationElement) } checkLayers(p, expectedLayers, t) if _, ok := p.Layer(LayerTypeDot11MgmtBeacon).(*Dot11MgmtBeacon); !ok { t.Errorf("dot11 management beacon frame was expected") } }
// getHwAddr is a hacky but effective way to get the destination hardware // address for our packets. It does an ARP request for our gateway (if there is // one) or destination IP (if no gateway is necessary), then waits for an ARP // reply. This is pretty slow right now, since it blocks on the ARP // request/reply. func (s *scanner) getHwAddr() (net.HardwareAddr, error) { start := time.Now() arpDst := s.dst if s.gw != nil { arpDst = s.gw } // Prepare the layers to send for an ARP request. eth := layers.Ethernet{ SrcMAC: s.iface.HardwareAddr, DstMAC: net.HardwareAddr{0xff, 0xff, 0xff, 0xff, 0xff, 0xff}, EthernetType: layers.EthernetTypeARP, } arp := layers.ARP{ AddrType: layers.LinkTypeEthernet, Protocol: layers.EthernetTypeIPv4, HwAddressSize: 6, ProtAddressSize: 4, Operation: layers.ARPRequest, SourceHwAddress: []byte(s.iface.HardwareAddr), SourceProtAddress: []byte(s.src), DstHwAddress: []byte{0, 0, 0, 0, 0, 0}, DstProtAddress: []byte(arpDst), } // Send a single ARP request packet (we never retry a send, since this // is just an example ;) if err := s.send(ð, &arp); err != nil { return nil, err } // Wait 3 seconds for an ARP reply. for { if time.Since(start) > time.Second*3 { return nil, fmt.Errorf("timeout getting ARP reply") } data, _, err := s.handle.ReadPacketData() if err == pcap.NextErrorTimeoutExpired { continue } else if err != nil { return nil, err } packet := gopacket.NewPacket(data, layers.LayerTypeEthernet, gopacket.NoCopy) if arpLayer := packet.Layer(layers.LayerTypeARP); arpLayer != nil { arp := arpLayer.(*layers.ARP) if bytes.Equal(arp.SourceProtAddress, arpDst) { return net.HardwareAddr(arp.SourceHwAddress), nil } } } }
func TestPacketEthernetOverGRE(t *testing.T) { p := gopacket.NewPacket(testPacketEthernetOverGRE, LinkTypeEthernet, gopacket.Default) if p.ErrorLayer() != nil { t.Error("Failed to decode packet:", p.ErrorLayer().Error()) } checkLayers(p, []gopacket.LayerType{LayerTypeEthernet, LayerTypeIPv4, LayerTypeGRE, LayerTypeEthernet, LayerTypeIPv4, LayerTypeICMPv4, gopacket.LayerTypePayload}, t) if got, ok := p.Layer(LayerTypeGRE).(*GRE); ok { want := &GRE{ BaseLayer: BaseLayer{testPacketEthernetOverGRE[34:38], testPacketEthernetOverGRE[38:]}, Protocol: EthernetTypeTransparentEthernetBridging, } if !reflect.DeepEqual(want, got) { t.Errorf("GRE layer mismatch, \nwant %#v\ngot %#v\n", want, got) } } }
func TestPacketDot11MgmtAction(t *testing.T) { p := gopacket.NewPacket(testPacketDot11MgmtAction, LinkTypeIEEE80211Radio, gopacket.Default) if p.ErrorLayer() != nil { t.Error("Failed to decode packet:", p.ErrorLayer().Error()) } checkLayers(p, []gopacket.LayerType{LayerTypeRadioTap, LayerTypeDot11, LayerTypeDot11MgmtAction}, t) if got, ok := p.Layer(LayerTypeDot11).(*Dot11); !ok { t.Errorf("dot11 frame was not parsed") } else if !got.ChecksumValid() { t.Errorf("Dot11 packet processing failed: checksum failed") } if got, ok := p.Layer(LayerTypeDot11MgmtAction).(*Dot11MgmtAction); !ok { t.Errorf("management action frame was not parsed") } else if got.Contents[0] != 0 { t.Errorf("action category was not spectrum management") } }
func loadDNS(dnspacket []byte, t *testing.T) *DNS { p := gopacket.NewPacket(dnspacket, LinkTypeEthernet, gopacket.Default) if p.ErrorLayer() != nil { t.Error("Failed to decode packet:", p.ErrorLayer().Error()) } checkLayers(p, []gopacket.LayerType{LayerTypeEthernet, LayerTypeIPv4, LayerTypeUDP, LayerTypeDNS}, t) dnsL := p.Layer(LayerTypeDNS) if dnsL == nil { t.Error("No DNS Layer found") } dns, ok := dnsL.(*DNS) if !ok { return nil } return dns }
func TestInformationElement(t *testing.T) { bin := []byte{ 0, 0, 0, 2, 1, 3, 221, 5, 1, 2, 3, 4, 5, } pkt := gopacket.NewPacket(bin, LayerTypeDot11InformationElement, gopacket.NoCopy) buf := gopacket.NewSerializeBuffer() var sLayers []gopacket.SerializableLayer for _, l := range pkt.Layers() { sLayers = append(sLayers, l.(*Dot11InformationElement)) } if err := gopacket.SerializeLayers(buf, gopacket.SerializeOptions{}, sLayers...); err != nil { t.Error(err.Error()) } if !bytes.Equal(bin, buf.Bytes()) { t.Error("build failed") } }
func TestPacketRadiotap1(t *testing.T) { p := gopacket.NewPacket(testPacketRadiotap1, LayerTypeRadioTap, gopacket.Default) if p.ErrorLayer() != nil { t.Error("Failed to decode packet:", p.ErrorLayer().Error()) } checkLayers(p, []gopacket.LayerType{LayerTypeRadioTap, LayerTypeDot11}, t) rt := p.Layer(LayerTypeRadioTap).(*RadioTap) if rt.ChannelFrequency != 2412 || rt.DBMAntennaSignal != -36 || rt.Antenna != 5 { t.Error("Radiotap decode error") } if !rt.MCS.Known.MCSIndex() || rt.MCS.MCS != 7 { t.Error("Radiotap MCS error") } if !rt.MCS.Known.Bandwidth() || rt.MCS.Flags.Bandwidth() != 0 { t.Error("Radiotap bandwidth error") } if !rt.MCS.Known.GuardInterval() || rt.MCS.Flags.ShortGI() { t.Error("Radiotap GI error") } }
func TestUDPPacketDNS(t *testing.T) { p := gopacket.NewPacket(testUDPPacketDNS, LinkTypeEthernet, gopacket.Default) if p.ErrorLayer() != nil { t.Error("Failed to decode packet:", p.ErrorLayer().Error()) } checkLayers(p, []gopacket.LayerType{LayerTypeEthernet, LayerTypeIPv4, LayerTypeUDP, LayerTypeDNS}, t) if got, ok := p.TransportLayer().(*UDP); ok { want := &UDP{ BaseLayer: BaseLayer{ Contents: []byte{0x0, 0x35, 0x89, 0x6d, 0x0, 0xd2, 0x75, 0x4a}, Payload: []byte{0xb8, 0xd8, 0x81, 0x80, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x78, 0x6b, 0x63, 0x64, 0x3, 0x63, 0x6f, 0x6d, 0x0, 0x0, 0xf, 0x0, 0x1, 0xc0, 0xc, 0x0, 0xf, 0x0, 0x1, 0x0, 0x0, 0x2, 0x58, 0x0, 0x18, 0x0, 0x14, 0x4, 0x41, 0x4c, 0x54, 0x32, 0x5, 0x41, 0x53, 0x50, 0x4d, 0x58, 0x1, 0x4c, 0x6, 0x47, 0x4f, 0x4f, 0x47, 0x4c, 0x45, 0xc0, 0x11, 0xc0, 0xc, 0x0, 0xf, 0x0, 0x1, 0x0, 0x0, 0x2, 0x58, 0x0, 0x16, 0x0, 0x1e, 0x6, 0x41, 0x53, 0x50, 0x4d, 0x58, 0x32, 0xa, 0x47, 0x4f, 0x4f, 0x47, 0x4c, 0x45, 0x4d, 0x41, 0x49, 0x4c, 0xc0, 0x11, 0xc0, 0xc, 0x0, 0xf, 0x0, 0x1, 0x0, 0x0, 0x2, 0x58, 0x0, 0xb, 0x0, 0x1e, 0x6, 0x41, 0x53, 0x50, 0x4d, 0x58, 0x33, 0xc0, 0x53, 0xc0, 0xc, 0x0, 0xf, 0x0, 0x1, 0x0, 0x0, 0x2, 0x58, 0x0, 0xb, 0x0, 0x1e, 0x6, 0x41, 0x53, 0x50, 0x4d, 0x58, 0x34, 0xc0, 0x53, 0xc0, 0xc, 0x0, 0xf, 0x0, 0x1, 0x0, 0x0, 0x2, 0x58, 0x0, 0xb, 0x0, 0x1e, 0x6, 0x41, 0x53, 0x50, 0x4d, 0x58, 0x35, 0xc0, 0x53, 0xc0, 0xc, 0x0, 0xf, 0x0, 0x1, 0x0, 0x0, 0x2, 0x58, 0x0, 0x4, 0x0, 0xa, 0xc0, 0x2d, 0xc0, 0xc, 0x0, 0xf, 0x0, 0x1, 0x0, 0x0, 0x2, 0x58, 0x0, 0x9, 0x0, 0x14, 0x4, 0x41, 0x4c, 0x54, 0x31, 0xc0, 0x2d}, }, SrcPort: 53, DstPort: 35181, Length: 210, Checksum: 30026, sPort: []byte{0x0, 0x35}, dPort: []byte{0x89, 0x6d}, } if !reflect.DeepEqual(got, want) { t.Errorf("UDP packet mismatch:\ngot :\n%#v\n\nwant :\n%#v\n\n", got, want) } } else { t.Error("Transport layer packet not UDP") } }
func TestPacketIPSecAHTunnel(t *testing.T) { p := gopacket.NewPacket(testPacketIPSecAHTunnel, LinkTypeEthernet, gopacket.Default) if p.ErrorLayer() != nil { t.Error("Failed to decode packet:", p.ErrorLayer().Error()) } checkLayers(p, []gopacket.LayerType{LayerTypeEthernet, LayerTypeIPv4, LayerTypeIPSecAH, LayerTypeIPv4, LayerTypeICMPv4, gopacket.LayerTypePayload}, t) if got, ok := p.Layer(LayerTypeIPSecAH).(*IPSecAH); ok { want := &IPSecAH{ Reserved: 0x0, SPI: 0x101, Seq: 1, AuthenticationData: []byte{0xcc, 0xa4, 0x01, 0xda, 0x9e, 0xb4, 0xfb, 0x75, 0x10, 0xfe, 0x5a, 0x59}, } want.BaseLayer = BaseLayer{testPacketIPSecAHTunnel[34:58], testPacketIPSecAHTunnel[58:]} want.NextHeader = IPProtocolIPv4 want.HeaderLength = 0x4 want.ActualLength = 0x18 if !reflect.DeepEqual(want, got) { t.Errorf("IPSecAH layer mismatch, \nwant %#v\ngot %#v\n", want, got) } } }
func TestDecodeUDPSFlow(t *testing.T) { p := gopacket.NewPacket(SFlowTestPacket1, LayerTypeEthernet, gopacket.Default) if p.ErrorLayer() != nil { t.Error("Failed to decode packet:", p.ErrorLayer().Error()) } checkLayers(p, []gopacket.LayerType{LayerTypeEthernet, LayerTypeIPv4, LayerTypeUDP, LayerTypeSFlow}, t) if got, ok := p.TransportLayer().(*UDP); ok { want := &UDP{ BaseLayer: BaseLayer{SFlowTestPacket1[34:42], SFlowTestPacket1[42:]}, sPort: []byte{199, 87}, dPort: []byte{24, 199}, SrcPort: 51031, DstPort: 6343, Checksum: 8763, Length: 1448, } if !reflect.DeepEqual(want, got) { t.Errorf("UDP layer mismatch, \nwant %#v\ngot %#v\n", want, got) } } else { t.Error("Transport layer packet not UDP") } }
func TestPacketDot11CtrlAck(t *testing.T) { p := gopacket.NewPacket(testPacketDot11CtrlAck, LinkTypeIEEE80211Radio, gopacket.Default) if p.ErrorLayer() != nil { t.Error("Failed to decode packet:", p.ErrorLayer().Error()) } checkLayers(p, []gopacket.LayerType{LayerTypeRadioTap, LayerTypeDot11}, t) if got, ok := p.Layer(LayerTypeDot11).(*Dot11); ok { if !got.ChecksumValid() { t.Errorf("Dot11 packet processing failed:\nchecksum failed. got :\n%#v\n\n", got) } } if got, ok := p.Layer(LayerTypeDot11).(*Dot11); ok { if !got.ChecksumValid() { t.Errorf("Dot11 packet processing failed:\nchecksum failed. got :\n%#v\n\n", got) } want := &Dot11{ BaseLayer: BaseLayer{ Contents: []uint8{0xd4, 0x0, 0x0, 0x0, 0x0, 0x19, 0xe3, 0xd3, 0x53, 0x52}, Payload: []uint8{}, }, Type: Dot11TypeCtrlAck, Proto: 0x0, Flags: 0x0, DurationID: 0x0, Address1: net.HardwareAddr{0x0, 0x19, 0xe3, 0xd3, 0x53, 0x52}, Address2: net.HardwareAddr(nil), Address3: net.HardwareAddr(nil), Address4: net.HardwareAddr(nil), Checksum: 0x8776e946, } if !reflect.DeepEqual(got, want) { t.Errorf("Dot11 packet processing failed:\ngot :\n%#v\n\nwant :\n%#v\n\n", got, want) } } }
func BenchmarkDecodePacketUSB0(b *testing.B) { for i := 0; i < b.N; i++ { gopacket.NewPacket(testPacketUSB0, LinkTypeLinuxUSB, gopacket.NoCopy) } }
func BenchmarkDecodePacketRadiotap1(b *testing.B) { for i := 0; i < b.N; i++ { gopacket.NewPacket(testPacketRadiotap1, LayerTypeRadioTap, gopacket.NoCopy) } }
func BenchmarkDecodePacketDot11CtrlCTS(b *testing.B) { for i := 0; i < b.N; i++ { gopacket.NewPacket(testPacketDot11CtrlCTS, LinkTypeIEEE80211Radio, gopacket.NoCopy) } }
func BenchmarkDecodePacketPrism(b *testing.B) { for i := 0; i < b.N; i++ { gopacket.NewPacket(testPacketPrism, LinkTypePrismHeader, gopacket.NoCopy) } }
func BenchmarkDecodeDNS(b *testing.B) { for i := 0; i < b.N; i++ { gopacket.NewPacket(testDNSQueryA, LinkTypeEthernet, gopacket.NoCopy) } }
func BenchmarkDecodeSFlowPacket2(b *testing.B) { for i := 0; i < b.N; i++ { gopacket.NewPacket(SFlowTestPacket2, LinkTypeEthernet, gopacket.NoCopy) } }
func BenchmarkDecodePacketEthernetOverGRE(b *testing.B) { for i := 0; i < b.N; i++ { gopacket.NewPacket(testPacketEthernetOverGRE, LinkTypeEthernet, gopacket.NoCopy) } }
func TestPacketDot11CtrlCTS(t *testing.T) { p := gopacket.NewPacket(testPacketDot11CtrlCTS, LinkTypeIEEE80211Radio, gopacket.Default) if p.ErrorLayer() != nil { t.Error("Failed to decode packet:", p.ErrorLayer().Error()) } checkLayers(p, []gopacket.LayerType{LayerTypeRadioTap, LayerTypeDot11}, t) if got, ok := p.Layer(LayerTypeRadioTap).(*RadioTap); ok { want := &RadioTap{ BaseLayer: BaseLayer{ Contents: []uint8{0x0, 0x0, 0x19, 0x0, 0x6f, 0x8, 0x0, 0x0, 0x37, 0x68, 0x3a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x12, 0x30, 0x78, 0x14, 0x40, 0x1, 0xb1, 0xa4, 0x1}, Payload: []uint8{0xc4, 0x0, 0x94, 0x0, 0xd8, 0xa2, 0x5e, 0x97, 0x61, 0xc1, 0x36, 0x50, 0x95, 0x8e}, }, Version: 0x0, Length: 0x19, Present: 0x86f, TSFT: 0x13a6837, Flags: 0x12, Rate: 0x30, ChannelFrequency: 0x1478, ChannelFlags: 0x140, FHSS: 0x0, DBMAntennaSignal: -79, DBMAntennaNoise: -92, LockQuality: 0x0, TxAttenuation: 0x0, DBTxAttenuation: 0x0, DBMTxPower: 0, Antenna: 1, DBAntennaSignal: 0x0, DBAntennaNoise: 0x0, } if !reflect.DeepEqual(got, want) { t.Errorf("RadioTap packet processing failed:\ngot :\n%#v\n\nwant :\n%#v\n\n", got, want) } } if got, ok := p.Layer(LayerTypeDot11).(*Dot11); ok { if !got.ChecksumValid() { t.Errorf("Dot11 packet processing failed:\nchecksum failed. got :\n%#v\n\n", got) } want := &Dot11{ BaseLayer: BaseLayer{ Contents: []uint8{0xc4, 0x0, 0x94, 0x0, 0xd8, 0xa2, 0x5e, 0x97, 0x61, 0xc1}, Payload: []uint8{}, }, Type: Dot11TypeCtrlCTS, Proto: 0x0, Flags: 0x0, DurationID: 0x94, Address1: net.HardwareAddr{0xd8, 0xa2, 0x5e, 0x97, 0x61, 0xc1}, // check Address2: net.HardwareAddr(nil), Address3: net.HardwareAddr(nil), Address4: net.HardwareAddr(nil), Checksum: 0x8e955036, } if !reflect.DeepEqual(got, want) { t.Errorf("Dot11 packet processing failed:\ngot :\n%#v\n\nwant :\n%#v\n\n", got, want) } } }
func TestDecodeSFlowDatagram(t *testing.T) { p := gopacket.NewPacket(SFlowTestPacket1, LayerTypeEthernet, gopacket.Default) if p.ErrorLayer() != nil { t.Error("Failed to decode packet:", p.ErrorLayer().Error()) } checkLayers(p, []gopacket.LayerType{LayerTypeEthernet, LayerTypeIPv4, LayerTypeUDP, LayerTypeSFlow}, t) if got, ok := p.ApplicationLayer().(*SFlowDatagram); ok { want := &SFlowDatagram{ DatagramVersion: uint32(5), AgentAddress: []byte{0xa, 0x1, 0xf8, 0x16}, SubAgentID: uint32(17), SequenceNumber: uint32(40443), AgentUptime: uint32(1078576845), SampleCount: uint32(7), FlowSamples: []SFlowFlowSample{ SFlowFlowSample{ EnterpriseID: 0x0, Format: 0x1, SampleLength: 0xd0, SequenceNumber: 0x2627e8, SourceIDClass: 0x0, SourceIDIndex: 0x213, SamplingRate: 0x3e80, SamplePool: 0x50bde580, Dropped: 0x0, InputInterface: 0x213, OutputInterface: 0x0, RecordCount: 0x2, Records: []SFlowRecord{ SFlowRawPacketFlowRecord{ SFlowBaseFlowRecord: SFlowBaseFlowRecord{ EnterpriseID: 0x0, Format: 0x1, FlowDataLength: 0x90, }, HeaderProtocol: 0x1, FrameLength: 0x5d2, PayloadRemoved: 0x4, HeaderLength: 0x80, Header: gopacket.NewPacket(SFlowTestPacket1[134:262], LayerTypeEthernet, gopacket.Default), }, SFlowExtendedSwitchFlowRecord{ SFlowBaseFlowRecord: SFlowBaseFlowRecord{ EnterpriseID: 0x0, Format: 0x3e9, FlowDataLength: 0x10, }, IncomingVLAN: 0x202, IncomingVLANPriority: 0x0, OutgoingVLAN: 0x0, OutgoingVLANPriority: 0x0, }, }, }, SFlowFlowSample{ EnterpriseID: 0x0, Format: 0x1, SampleLength: 0xd0, SequenceNumber: 0x15e5c1e, SourceIDClass: 0x0, SourceIDIndex: 0x257, SamplingRate: 0x7d0, SamplePool: 0xb12fa290, Dropped: 0x0, InputInterface: 0x257, OutputInterface: 0x0, RecordCount: 0x2, Records: []SFlowRecord{ SFlowRawPacketFlowRecord{ SFlowBaseFlowRecord: SFlowBaseFlowRecord{ EnterpriseID: 0x0, Format: 0x1, FlowDataLength: 0x90, }, HeaderProtocol: 0x1, FrameLength: 0x5ee, PayloadRemoved: 0x4, HeaderLength: 0x80, Header: gopacket.NewPacket(SFlowTestPacket1[350:478], LayerTypeEthernet, gopacket.Default), }, SFlowExtendedSwitchFlowRecord{ SFlowBaseFlowRecord: SFlowBaseFlowRecord{ EnterpriseID: 0x0, Format: 0x3e9, FlowDataLength: 0x10, }, IncomingVLAN: 0x202, IncomingVLANPriority: 0x0, OutgoingVLAN: 0x0, OutgoingVLANPriority: 0x0, }, }, }, SFlowFlowSample{ EnterpriseID: 0x0, Format: 0x1, SampleLength: 0xd0, SequenceNumber: 0x15acdd0, SourceIDClass: 0x0, SourceIDIndex: 0x255, SamplingRate: 0x7d0, SamplePool: 0x9567e130, Dropped: 0x0, InputInterface: 0x255, OutputInterface: 0x0, RecordCount: 0x2, Records: []SFlowRecord{ SFlowRawPacketFlowRecord{ SFlowBaseFlowRecord: SFlowBaseFlowRecord{ EnterpriseID: 0x0, Format: 0x1, FlowDataLength: 0x90, }, HeaderProtocol: 0x1, FrameLength: 0x446, PayloadRemoved: 0x4, HeaderLength: 0x80, Header: gopacket.NewPacket(SFlowTestPacket1[566:694], LayerTypeEthernet, gopacket.Default), }, SFlowExtendedSwitchFlowRecord{ SFlowBaseFlowRecord: SFlowBaseFlowRecord{ EnterpriseID: 0x0, Format: 0x3e9, FlowDataLength: 0x10, }, IncomingVLAN: 0x202, IncomingVLANPriority: 0x0, OutgoingVLAN: 0x0, OutgoingVLANPriority: 0x0, }, }, }, SFlowFlowSample{ EnterpriseID: 0x0, Format: 0x1, SampleLength: 0xd0, SequenceNumber: 0x15e5c1f, SourceIDClass: 0x0, SourceIDIndex: 0x257, SamplingRate: 0x7d0, SamplePool: 0xb12faa60, Dropped: 0x0, InputInterface: 0x257, OutputInterface: 0x0, RecordCount: 0x2, Records: []SFlowRecord{ SFlowRawPacketFlowRecord{ SFlowBaseFlowRecord: SFlowBaseFlowRecord{ EnterpriseID: 0x0, Format: 0x1, FlowDataLength: 0x90, }, HeaderProtocol: 0x1, FrameLength: 0x5ee, PayloadRemoved: 0x4, HeaderLength: 0x80, Header: gopacket.NewPacket(SFlowTestPacket1[958:1086], LayerTypeEthernet, gopacket.Default), }, SFlowExtendedSwitchFlowRecord{ SFlowBaseFlowRecord: SFlowBaseFlowRecord{ EnterpriseID: 0x0, Format: 0x3e9, FlowDataLength: 0x10, }, IncomingVLAN: 0x202, IncomingVLANPriority: 0x0, OutgoingVLAN: 0x0, OutgoingVLANPriority: 0x0, }, }, }, SFlowFlowSample{ EnterpriseID: 0x0, Format: 0x1, SampleLength: 0xd0, SequenceNumber: 0x15acdd1, SourceIDClass: 0x0, SourceIDIndex: 0x255, SamplingRate: 0x7d0, SamplePool: 0x9567e900, Dropped: 0x0, InputInterface: 0x255, OutputInterface: 0x257, RecordCount: 0x2, Records: []SFlowRecord{ SFlowRawPacketFlowRecord{ SFlowBaseFlowRecord: SFlowBaseFlowRecord{ EnterpriseID: 0x0, Format: 0x1, FlowDataLength: 0x90, }, HeaderProtocol: 0x1, FrameLength: 0x5ee, PayloadRemoved: 0x4, HeaderLength: 0x80, Header: gopacket.NewPacket(SFlowTestPacket1[1174:1302], LayerTypeEthernet, gopacket.Default), }, SFlowExtendedSwitchFlowRecord{ SFlowBaseFlowRecord: SFlowBaseFlowRecord{ EnterpriseID: 0x0, Format: 0x3e9, FlowDataLength: 0x10, }, IncomingVLAN: 0x202, IncomingVLANPriority: 0x0, OutgoingVLAN: 0x202, OutgoingVLANPriority: 0x0, }, }, }, SFlowFlowSample{ EnterpriseID: 0x0, Format: 0x1, SampleLength: 0x94, SequenceNumber: 0x15e5c20, SourceIDClass: 0x0, SourceIDIndex: 0x257, SamplingRate: 0x7d0, SamplePool: 0xb12fb230, Dropped: 0x0, InputInterface: 0x257, OutputInterface: 0x0, RecordCount: 0x2, Records: []SFlowRecord{ SFlowRawPacketFlowRecord{ SFlowBaseFlowRecord: SFlowBaseFlowRecord{ EnterpriseID: 0x0, Format: 0x1, FlowDataLength: 0x54, }, HeaderProtocol: 0x1, FrameLength: 0x46, PayloadRemoved: 0x4, HeaderLength: 0x42, Header: gopacket.NewPacket(SFlowTestPacket1[1390:1458], LayerTypeEthernet, gopacket.Default), }, SFlowExtendedSwitchFlowRecord{ SFlowBaseFlowRecord: SFlowBaseFlowRecord{ EnterpriseID: 0x0, Format: 0x3e9, FlowDataLength: 0x10, }, IncomingVLAN: 0x202, IncomingVLANPriority: 0x0, OutgoingVLAN: 0x0, OutgoingVLANPriority: 0x0, }, }, }, }, CounterSamples: []SFlowCounterSample{ SFlowCounterSample{ Format: 0x2, SampleLength: 0xa8, SequenceNumber: 0x20f2, SourceIDClass: 0x0, SourceIDIndex: 0x20a, RecordCount: 0x2, Records: []SFlowRecord{ SFlowGenericInterfaceCounters{ SFlowBaseCounterRecord: SFlowBaseCounterRecord{ EnterpriseID: 0x0, Format: 0x1, FlowDataLength: 0x58, }, IfIndex: 0x20a, IfType: 0x6, IfSpeed: 0x2540be400, IfDirection: 0x1, IfStatus: 0x3, IfInOctets: 0x129826db06c0b, IfInUcastPkts: 0xcb0ddd96, IfInMulticastPkts: 0x6a8c6, IfInBroadcastPkts: 0x7b, IfInDiscards: 0x0, IfInErrors: 0x0, IfInUnknownProtos: 0x0, IfOutOctets: 0x340235587c9e, IfOutUcastPkts: 0x56642571, IfOutMulticastPkts: 0x705ac4, IfOutBroadcastPkts: 0x908f1, IfOutDiscards: 0x0, IfOutErrors: 0x0, IfPromiscuousMode: 0x0, }, SFlowEthernetCounters{ SFlowBaseCounterRecord: SFlowBaseCounterRecord{ EnterpriseID: 0x0, Format: 0x2, FlowDataLength: 0x34, }, AlignmentErrors: 0x0, FCSErrors: 0x0, SingleCollisionFrames: 0x0, MultipleCollisionFrames: 0x0, SQETestErrors: 0x0, DeferredTransmissions: 0x0, LateCollisions: 0x0, ExcessiveCollisions: 0x0, InternalMacTransmitErrors: 0x0, CarrierSenseErrors: 0x0, FrameTooLongs: 0x0, InternalMacReceiveErrors: 0x0, SymbolErrors: 0x0, }, }, }, }, } if !reflect.DeepEqual(want, got) { t.Errorf("SFlow layer mismatch, \nwant:\n\n%#v\ngot:\n\n\n%#v\n\n", want, got) } } else { t.Error("Application layer packet not UDP") } }
func BenchmarkDecodePacketIPSecAHTransport(b *testing.B) { for i := 0; i < b.N; i++ { gopacket.NewPacket(testPacketIPSecAHTransport, LinkTypeEthernet, gopacket.NoCopy) } }
func TestPacketPacket0(t *testing.T) { p := gopacket.NewPacket(SFlowTestPacket2, LinkTypeEthernet, gopacket.Default) if p.ErrorLayer() != nil { t.Error("Failed to decode packet:", p.ErrorLayer().Error()) } checkLayers(p, []gopacket.LayerType{LayerTypeEthernet, LayerTypeIPv4, LayerTypeUDP, LayerTypeSFlow}, t) if got, ok := p.ApplicationLayer().(*SFlowDatagram); ok { want := &SFlowDatagram{ DatagramVersion: uint32(5), AgentAddress: []byte{192, 168, 91, 17}, SubAgentID: uint32(0), SequenceNumber: uint32(46394), AgentUptime: uint32(52000), SampleCount: uint32(3), FlowSamples: []SFlowFlowSample{ SFlowFlowSample{ EnterpriseID: 0x0, Format: 0x1, SampleLength: 340, SequenceNumber: 139118, SourceIDClass: 0, SourceIDIndex: 3, SamplingRate: 1, SamplePool: 139118, Dropped: 0, InputInterface: 3, OutputInterface: 1073741823, RecordCount: 4, Records: []SFlowRecord{ SFlowExtendedURLRecord{ SFlowBaseFlowRecord: SFlowBaseFlowRecord{ EnterpriseID: 0, Format: 1005, FlowDataLength: 48, }, Direction: SFlowURLsrc, URL: "http://www.sflow.org", Host: "host1.sflow.org", }, SFlowExtendedUserFlow{ SFlowBaseFlowRecord: SFlowBaseFlowRecord{ EnterpriseID: 0, Format: 1004, FlowDataLength: 44, }, SourceCharSet: SFlowCSUTF8, SourceUserID: "source user", DestinationCharSet: SFlowCSUTF8, DestinationUserID: "destination user", }, SFlowExtendedGatewayFlowRecord{ SFlowBaseFlowRecord: SFlowBaseFlowRecord{ EnterpriseID: 0, Format: 1003, FlowDataLength: 100, }, NextHop: []byte{0x0d, 0x0c, 0x0b, 0x0a}, AS: 65001, SourceAS: 123, PeerAS: 999, ASPathCount: 3, ASPath: []SFlowASDestination{ SFlowASDestination{ Type: SFlowASSequence, Count: 3, Members: []uint32{123, 456, 789}, }, SFlowASDestination{ Type: SFlowASSet, Count: 3, Members: []uint32{11111, 22222, 33333}, }, SFlowASDestination{ Type: SFlowASSequence, Count: 3, Members: []uint32{777, 888, 999}, }, }, Communities: []uint32{12, 13}, LocalPref: 432, }, SFlowRawPacketFlowRecord{ SFlowBaseFlowRecord: SFlowBaseFlowRecord{ EnterpriseID: 0x0, Format: 0x1, FlowDataLength: 84, }, HeaderProtocol: 1, FrameLength: 70, PayloadRemoved: 4, HeaderLength: 0x42, Header: gopacket.NewPacket(SFlowTestPacket2[350:418], LayerTypeEthernet, gopacket.Default), }, }, }, SFlowFlowSample{ EnterpriseID: 0x0, Format: 0x1, SampleLength: 400, SequenceNumber: 139119, SourceIDClass: 0, SourceIDIndex: 3, SamplingRate: 1, SamplePool: 139119, Dropped: 0, InputInterface: 1073741823, OutputInterface: 3, RecordCount: 4, Records: []SFlowRecord{ SFlowExtendedURLRecord{ SFlowBaseFlowRecord: SFlowBaseFlowRecord{ EnterpriseID: 0, Format: 1005, FlowDataLength: 48, }, Direction: SFlowURLsrc, URL: "http://www.sflow.org", Host: "host1.sflow.org", }, SFlowExtendedUserFlow{ SFlowBaseFlowRecord: SFlowBaseFlowRecord{ EnterpriseID: 0, Format: 1004, FlowDataLength: 44, }, SourceCharSet: SFlowCSUTF8, SourceUserID: "source user", DestinationCharSet: SFlowCSUTF8, DestinationUserID: "destination user", }, SFlowExtendedGatewayFlowRecord{ SFlowBaseFlowRecord: SFlowBaseFlowRecord{ EnterpriseID: 0, Format: 1003, FlowDataLength: 100, }, NextHop: []byte{0x0d, 0x0c, 0x0b, 0x0a}, AS: 65001, SourceAS: 123, PeerAS: 999, ASPathCount: 3, ASPath: []SFlowASDestination{ SFlowASDestination{ Type: SFlowASSequence, Count: 3, Members: []uint32{123, 456, 789}, }, SFlowASDestination{ Type: SFlowASSet, Count: 3, Members: []uint32{11111, 22222, 33333}, }, SFlowASDestination{ Type: SFlowASSequence, Count: 3, Members: []uint32{777, 888, 999}, }, }, Communities: []uint32{12, 13}, LocalPref: 432, }, SFlowRawPacketFlowRecord{ SFlowBaseFlowRecord: SFlowBaseFlowRecord{ EnterpriseID: 0x0, Format: 0x1, FlowDataLength: 144, }, HeaderProtocol: 1, FrameLength: 390, PayloadRemoved: 4, HeaderLength: 0x80, Header: gopacket.NewPacket(SFlowTestPacket2[698:826], LayerTypeEthernet, gopacket.Default), }, }, }, SFlowFlowSample{ EnterpriseID: 0x0, Format: 0x1, SampleLength: 340, SequenceNumber: 139120, SourceIDClass: 0, SourceIDIndex: 3, SamplingRate: 1, SamplePool: 139120, Dropped: 0, InputInterface: 3, OutputInterface: 1073741823, RecordCount: 4, Records: []SFlowRecord{ SFlowExtendedURLRecord{ SFlowBaseFlowRecord: SFlowBaseFlowRecord{ EnterpriseID: 0, Format: 1005, FlowDataLength: 48, }, Direction: SFlowURLsrc, URL: "http://www.sflow.org", Host: "host1.sflow.org", }, SFlowExtendedUserFlow{ SFlowBaseFlowRecord: SFlowBaseFlowRecord{ EnterpriseID: 0, Format: 1004, FlowDataLength: 44, }, SourceCharSet: SFlowCSUTF8, SourceUserID: "source user", DestinationCharSet: SFlowCSUTF8, DestinationUserID: "destination user", }, SFlowExtendedGatewayFlowRecord{ SFlowBaseFlowRecord: SFlowBaseFlowRecord{ EnterpriseID: 0, Format: 1003, FlowDataLength: 100, }, NextHop: []byte{0x0d, 0x0c, 0x0b, 0x0a}, AS: 65001, SourceAS: 123, PeerAS: 999, ASPathCount: 3, ASPath: []SFlowASDestination{ SFlowASDestination{ Type: SFlowASSequence, Count: 3, Members: []uint32{123, 456, 789}, }, SFlowASDestination{ Type: SFlowASSet, Count: 3, Members: []uint32{11111, 22222, 33333}, }, SFlowASDestination{ Type: SFlowASSequence, Count: 3, Members: []uint32{777, 888, 999}, }, }, Communities: []uint32{12, 13}, LocalPref: 432, }, SFlowRawPacketFlowRecord{ SFlowBaseFlowRecord: SFlowBaseFlowRecord{ EnterpriseID: 0x0, Format: 0x1, FlowDataLength: 84, }, HeaderProtocol: 1, FrameLength: 70, PayloadRemoved: 4, HeaderLength: 0x42, Header: gopacket.NewPacket(SFlowTestPacket2[1106:1174], LayerTypeEthernet, gopacket.Default), }, }, }, }, } if !reflect.DeepEqual(want, got) { t.Errorf("SFlow layer mismatch, \nwant:\n\n%#v\ngot:\n\n\n%#v\n\n", want, got) } } else { t.Error("Application layer packet not UDP") } }