osquery-1/tests/integration/tables/process_open_sockets.cpp
seph a73ffad3bf tables: Add constraints and testing (#6105)
Co-Authored-By: Teddy Reed <teddy@casualhacking.io>
2019-12-12 20:45:15 -05:00

51 lines
1.3 KiB
C++

/**
* Copyright (c) 2014-present, Facebook, Inc.
* All rights reserved.
*
* This source code is licensed in accordance with the terms specified in
* the LICENSE file found in the root directory of this source tree.
*/
// Sanity check integration test for process_open_sockets
// Spec file: specs/process_open_sockets.table
#include <osquery/tests/integration/tables/helper.h>
#include <osquery/utils/info/platform_type.h>
namespace osquery {
namespace table_tests {
class processOpenSockets : public testing::Test {
protected:
void SetUp() override {
setUpEnvironment();
}
};
TEST_F(processOpenSockets, test_sanity) {
ValidationMap row_map = {
{"pid", IntType},
{"fd", IntOrEmpty},
{"socket", IntOrEmpty},
{"family", IntType},
{"protocol", IntType},
{"local_address", NormalType},
{"remote_address", NormalType},
{"local_port", IntType},
{"remote_port", IntType},
{"path", NormalType},
{"state", NormalType},
};
if (isPlatform(PlatformType::TYPE_LINUX)) {
row_map["net_namespace"] = IntType;
}
auto const data = execute_query("select * from process_open_sockets");
ASSERT_FALSE(data.empty());
validate_rows(data, row_map);
}
} // namespace table_tests
} // namespace osquery