Function _build_db

tests/test_passive_host_discovery.py:147–151

(existing_by_ip=None)

def test_listening_port_not_recorded_for_ephemeral(analyzer):
    # Random ephemeral source; the host is a client, not a listener.
    line = f'{BASE_TS} IP 192.168.1.50.40000 > 192.168.1.20.443: tcp 512'
    analyzer._parse_and_record_packet(line)

    listening = analyzer._listening_ports.get('192.168.1.50', set())
    assert 40000 not in listening