Function TestParseFirewallLogLine

pkg/cli/firewall_log_test.go:15–218

(t *testing.T)

)

func TestParseFirewallLogLine(t *testing.T) {
	tests := []struct {
		name     string
		line     string
		expected *FirewallLogEntry
	}{
		{
			name: "valid log line with all fields",
			line: `1761332530.474 172.30.0.20:35288 api.enterprise.githubcopilot.com:443 140.82.112.22:443 1.1 CONNECT 200 TCP_TUNNEL:HIER_DIRECT api.enterprise.githubcopilot.com:443 "-"`,
			expected: &FirewallLogEntry{
				Timestamp:    "1761332530.474",
				ClientIPPort: "172.30.0.20:35288",
				Domain:       "api.enterprise.githubcopilot.com:443",
				DestIPPort:   "140.82.112.22:443",
				Proto:        "1.1",
				Method:       "CONNECT",
				Status:       "200",
				Decision:     "TCP_TUNNEL:HIER_DIRECT",
				URL:          "api.enterprise.githubcopilot.com:443",
				UserAgent:    "-",
			},
		},
		{
			name: "log line with placeholder values",
			line: `1761332530.500 - - - - - 0 NONE_NONE:HIER_NONE - "-"`,
			expected: &FirewallLogEntry{
				Timestamp:    "1761332530.500",
				ClientIPPort: "-",
				Domain:       "-",
				DestIPPort:   "-",
				Proto:        "-",
				Method:       "-",
				Status:       "0",
				Decision:     "NONE_NONE:HIER_NONE",
				URL:          "-",
				UserAgent:    "-",
			},
		},
		{
			name:     "empty line",
			line:     "",
			expected: nil,
		},
		{
			name:     "comment line",
			line:     "# This is a comment",
			expected: nil,
		},
		{
			name:     "invalid timestamp (non-numeric)",
			line:     `WARNING: 172.30.0.20:35288 api.github.com:443 140.82.112.22:443 1.1 CONNECT 200 TCP_TUNNEL:HIER_DIRECT api.github.com:443 "-"`,
			expected: nil,
		},
		{
			name: "non-standard client IP:port format is accepted",
			line: `1761332530.474 Accepting api.github.com:443 140.82.112.22:443 1.1 CONNECT 200 TCP_TUNNEL:HIER_DIRECT api.github.com:443 "-"`,
			expected: &FirewallLogEntry{
				Timestamp:    "1761332530.474",