Function TestBuildIPFilter

shell/tracescript_test.go:310–373

(t *testing.T)

}

func TestBuildIPFilter(t *testing.T) {
	tests := []struct {
		name         string
		ips          []string
		expectHexIPs []string
		noStringIPs  bool // Verify original strings don't appear
	}{
		{
			name:         "single IP",
			ips:          []string{"10.0.0.1"},
			expectHexIPs: []string{"0x0a000001"},
			noStringIPs:  true,
		},
		{
			name:         "multiple IPs",
			ips:          []string{"10.0.0.1", "192.168.1.1"},
			expectHexIPs: []string{"0x0a000001", "0xc0a80101"},
			noStringIPs:  true,
		},
		{
			name:         "Class B network",
			ips:          []string{"172.16.0.1"},
			expectHexIPs: []string{"0xac100001"},
			noStringIPs:  true,
		},
	}

	for _, tt := range tests {
		t.Run(tt.name, func(t *testing.T) {
			var parsedIPs []net.IP
			for _, ipStr := range tt.ips {
				ip := net.ParseIP(ipStr)
				if ip == nil {
					t.Fatalf("failed to parse IP: %s", ipStr)
				}
				parsedIPs = append(parsedIPs, ip)
			}

			config := TraceConfig{
				FilterIPs:  parsedIPs,
				OutputJSON: false,
			}

			gen := NewScriptGenerator(config)
			filter := gen.buildSkbIPFilterCondition()

			// Verify hex IPs are present
			for _, hexIP := range tt.expectHexIPs {
				if !strings.Contains(filter, hexIP) {
					t.Errorf("expected filter to contain %s, got: %s", hexIP, filter)
				}
			}

			// Verify original string IPs are NOT present (security)
			if tt.noStringIPs {
				for _, ipStr := range tt.ips {
					if strings.Contains(filter, ipStr) {
						t.Errorf("filter should not contain original IP string %s - security risk", ipStr)