forked from andrewf/pcap2har
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathREADME.txt
43 lines (31 loc) · 1.39 KB
/
README.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
What we have in this director is a set of pcaps to be used as tests for
pcap2har. Many of them exhibited specific previous bugs in pcap2har.
Also included are HAR's that are expected from the pcaps. They thus
serve as a primitive regression test suite.
To run the tests, just run the bash script run_tests.sh. This iterates
through all the pcaps in the directory, runs pcap2har on them, and diffs
the output with saved hars to check for errors. If either pcap2har or the diff
fails, the log is saved and the script continues to check files.
Here is a list of pcaps, their properties, and where they came from.
http.pcap
Previously http.cap. A simple http pageload. It has some awkward feature
I forgot.
fhs.pcap
A complete pageload of andrewfleenor.users.sourceforge.net/fhs/fhs.xml.
Streams are gzip compressed.
fhs_ncomp.pcap
Above, but not compressed.
empty.pcap
Empty file. dpkt doesn't like it, but we have to handle it.
out-of-order.pcap
From from Dekel Amrani. A big pcap, with out-of-order starting packet on
incoming stream of tcp port 59743.
github.pcap
A pageload of github.
pcapr.net.pcap
A pageload of pcapr.net, an online pcap repository. Includes a redirect
from pcapr.net to pcapr.net/home
missing_response.pcap:
A flow from fhs.pcap with one of the responses missing, to test -k functionality
request_only.pcap:
Flow with a request and nothing else, to handle a different failure case of -k