Method TestFilterExternalToInternal

integration/filter_test.go:479–704

TestFilterExternalToInternal also tests ICMP

()

// TestFilterExternalToInternal also tests ICMP
func (it *FilterTestSuite) TestFilterExternalToInternal() {
	t := it.T()
	// set up file system interface
	afs := afero.NewOsFs()

	cfg, err := config.ReadFileConfig(afs, ConfigPath)
	require.NoError(t, err)
	cfg.Env.DBConnection = dockerInfo.clickhouseConnection
	cfg.Filtering.FilterExternalToInternal = false
	it.cfg = cfg
	require.NoError(t, err, "updating config should not return an error")

	require.False(t, cfg.Filtering.FilterExternalToInternal)

	// // import data
	importResults, err := cmd.RunImportCmd(time.Now(), cfg, afs, "../test_data/valid_tsv", "filter_ext_to_int", false, true)
	require.NoError(t, err)

	// connect to database
	db, err := database.ConnectToDB(context.Background(), "filter_ext_to_int", cfg, nil)
	require.NoError(t, err)

	// 	// there are ICMP connections that are only on connections that are external to internal

	type protoInfo struct {
		PortProtoService string `ch:"port_proto_service"`
		ConnCount        uint64 `ch:"conn_count"`
		BytesSent        uint64 `ch:"bytes_sent"`
		BytesReceived    uint64 `ch:"bytes_received"`
	}

	type testData struct {
		src          string
		dst          string
		portInfoList []protoInfo
	}

	testCases := []testData{
		{
			src: "165.227.88.15",
			dst: "192.168.88.2",
			portInfoList: []protoInfo{
				{"icmp:3/3", 2, 4858, 0},
			},
		},
		{
			src: "66.218.84.141",
			dst: "10.55.100.107",
			portInfoList: []protoInfo{
				{"icmp:3/3", 1, 240, 0},
			},
		},
		{
			src: "66.218.84.141",
			dst: "10.55.100.104",
			portInfoList: []protoInfo{
				{"icmp:3/3", 1, 240, 0},
			},