Function TestNetlinkTCPQueries

daemon/netlink/socket_test.go:69–116

TestNetlinkQueries tests queries to the kernel to get the inode of a connection. When using ProcFS as monitor method, we need that value to get the PID of an application. We also need it if for any reason auditd or ebpf doesn't return the PID of the application. TODO: test all the cases described in

(t *testing.T)

// We also need it if for any reason auditd or ebpf doesn't return the PID of the application.
// TODO: test all the cases described in the GetSocketInfo() description.
func TestNetlinkTCPQueries(t *testing.T) {
	// netlink tests disabled by default, they cause random failures on restricted
	// environments.
	if os.Getenv("NETLINK_TESTS") == "" {
		t.Skip("Skipping netlink tests. Use NETLINK_TESTS=1 to launch these tests.")
	}

	connChan := make(chan *Connection)
	go setupConnection("tcp", connChan)
	conn := <-connChan
	if conn == nil {
		t.Error("TestParseTCPConnection, conn nil")
	}

	var inodes []int
	uid := -1
	t.Run("Test GetSocketInfo", func(t *testing.T) {
		uid, inodes = GetSocketInfo("tcp", conn.SrcIP, conn.SrcPort, conn.DstIP, conn.DstPort)

		if len(inodes) == 0 {
			t.Error("inodes empty")
		}
		if uid != os.Getuid() {
			t.Error("GetSocketInfo UID error:", uid, os.Getuid())
		}
	})

	t.Run("Test GetSocketInfoByInode", func(t *testing.T) {
		socket, err := GetSocketInfoByInode(fmt.Sprint(inodes[0]))
		if err != nil {
			t.Error("GetSocketInfoByInode error:", err)
		}
		if socket == nil {
			t.Error("GetSocketInfoByInode inode not found")
		}
		if socket.ID.SourcePort != uint16(conn.SrcPort) {
			t.Error("GetSocketInfoByInode dstPort error:", socket)
		}
		if socket.ID.DestinationPort != uint16(conn.DstPort) {
			t.Error("GetSocketInfoByInode dstPort error:", socket)
		}
		if socket.UID != uint32(os.Getuid()) {
			t.Error("GetSocketInfoByInode UID error:", socket, os.Getuid())
		}
	})

	conn.Listener.Close()
}