Initial commitHEADv1.0.1main

11 files changed, 386 insertions, 0 deletions

diff --git a/test/test_result_json/01-ftp-port-upload-download.json b/test/test_result_json/01-ftp-port-upload-download.json
new file mode 100644
index 0000000..522beb5
--- /dev/null
+++ b/test/test_result_json/01-ftp-port-upload-download.json
@@ -0,0 +1,66 @@
+[
+    {
+        "FTP_LINK_TYPE": "DATA",
+        "TUPLE4": "192.168.40.139.20>192.168.38.2.51808",
+        "FTP_BANNER_1": "Welcome to blah FTP service.",
+        "FTP_ACCOUNT_2": "ftp",
+        "FTP_PASSWORD_3": "111111",
+        "FTP_URI_4": "ftp://192.168.40.139/2001.03147v1.pdf",
+        "FTP_TRANS_MODE_5": "PORT",
+        "FTP_TRANS_DIR_6": "STOR",
+        "total-payload-len": 681116,
+        "name": "FTP_RESULT_0"
+    },
+    {
+        "FTP_LINK_TYPE": "DATA",
+        "TUPLE4": "192.168.40.139.20>192.168.38.2.51809",
+        "FTP_BANNER_1": "Welcome to blah FTP service.",
+        "FTP_ACCOUNT_2": "ftp",
+        "FTP_PASSWORD_3": "111111",
+        "FTP_TRANS_MODE_4": "PORT",
+        "FTP_TRANS_DIR_5": "LIST",
+        "total-payload-len": 76,
+        "name": "FTP_RESULT_1"
+    },
+    {
+        "FTP_LINK_TYPE": "DATA",
+        "TUPLE4": "192.168.40.139.20>192.168.38.2.51810",
+        "FTP_BANNER_1": "Welcome to blah FTP service.",
+        "FTP_ACCOUNT_2": "ftp",
+        "FTP_PASSWORD_3": "111111",
+        "FTP_URI_4": "ftp://192.168.40.139/3cdaemon-v2r10.zip",
+        "FTP_TRANS_MODE_5": "PORT",
+        "FTP_TRANS_DIR_6": "RETR",
+        "total-payload-len": 953457,
+        "name": "FTP_RESULT_2"
+    },
+    {
+        "FTP_LINK_TYPE": "DATA",
+        "TUPLE4": "192.168.40.139.20>192.168.38.2.51811",
+        "FTP_BANNER_1": "Welcome to blah FTP service.",
+        "FTP_ACCOUNT_2": "ftp",
+        "FTP_PASSWORD_3": "111111",
+        "FTP_TRANS_MODE_4": "PORT",
+        "FTP_TRANS_DIR_5": "LIST",
+        "total-payload-len": 76,
+        "name": "FTP_RESULT_3"
+    },
+    {
+        "FTP_LINK_TYPE": "CTRL",
+        "TUPLE4": "192.168.38.2.51805>192.168.40.139.21",
+        "FTP_BANNER_1": "Welcome to blah FTP service.",
+        "FTP_ACCOUNT_2": "ftp",
+        "FTP_PASSWORD_3": "111111",
+        "FTP_TRANS_MODE_4": "PORT",
+        "FTP_TRANS_DIR_5": "LIST",
+        "FTP_TRANS_MODE_6": "PORT",
+        "FTP_URI_7": "ftp://192.168.40.139/2001.03147v1.pdf",
+        "FTP_TRANS_DIR_8": "STOR",
+        "FTP_TRANS_MODE_9": "PORT",
+        "FTP_TRANS_MODE_10": "PORT",
+        "FTP_URI_11": "ftp://192.168.40.139/3cdaemon-v2r10.zip",
+        "FTP_TRANS_DIR_12": "RETR",
+        "FTP_TRANS_MODE_13": "PORT",
+        "name": "FTP_RESULT_4"
+    }
+]
\ No newline at end of file
diff --git a/test/test_result_json/01-ftp-port-upload-download_C2S.json b/test/test_result_json/01-ftp-port-upload-download_C2S.json
new file mode 100644
index 0000000..d04e6a9
--- /dev/null
+++ b/test/test_result_json/01-ftp-port-upload-download_C2S.json
@@ -0,0 +1,28 @@
+[
+    {
+        "FTP_LINK_TYPE": "DATA",
+        "TUPLE4": "192.168.40.139.20>192.168.38.2.51808",
+        "FTP_ACCOUNT_1": "ftp",
+        "FTP_PASSWORD_2": "111111",
+        "FTP_URI_3": "ftp://192.168.40.139/2001.03147v1.pdf",
+        "FTP_TRANS_MODE_4": "PORT",
+        "FTP_TRANS_DIR_5": "STOR",
+        "total-payload-len": 681116,
+        "name": "FTP_RESULT_0"
+    },
+    {
+        "FTP_ACCOUNT_1": "ftp",
+        "FTP_PASSWORD_2": "111111",
+        "FTP_TRANS_MODE_3": "PORT",
+        "FTP_TRANS_DIR_4": "LIST",
+        "FTP_TRANS_MODE_5": "PORT",
+        "FTP_URI_6": "ftp://192.168.40.139/2001.03147v1.pdf",
+        "FTP_TRANS_DIR_7": "STOR",
+        "FTP_TRANS_MODE_8": "PORT",
+        "FTP_TRANS_MODE_9": "PORT",
+        "FTP_URI_10": "ftp://192.168.40.139/3cdaemon-v2r10.zip",
+        "FTP_TRANS_DIR_11": "RETR",
+        "FTP_TRANS_MODE_12": "PORT",
+        "name": "FTP_RESULT_1"
+    }
+]
\ No newline at end of file
diff --git a/test/test_result_json/01-ftp-port-upload-download_S2C.json b/test/test_result_json/01-ftp-port-upload-download_S2C.json
new file mode 100644
index 0000000..346c6dc
--- /dev/null
+++ b/test/test_result_json/01-ftp-port-upload-download_S2C.json
@@ -0,0 +1,8 @@
+[
+    {
+        "FTP_LINK_TYPE": "CTRL",
+        "TUPLE4": "192.168.38.2.51805>192.168.40.139.21",
+        "FTP_BANNER_1": "Welcome to blah FTP service.",
+        "name": "FTP_RESULT_0"
+    }
+]
\ No newline at end of file
diff --git a/test/test_result_json/02-ftp_v6_1.json b/test/test_result_json/02-ftp_v6_1.json
new file mode 100644
index 0000000..1a6e236
--- /dev/null
+++ b/test/test_result_json/02-ftp_v6_1.json
@@ -0,0 +1,57 @@
+[
+    {
+        "FTP_LINK_TYPE": "DATA",
+        "TUPLE4": "::1.39002>::1.10791",
+        "FTP_BANNER_1": "Welcome to blah FTP service.",
+        "FTP_ACCOUNT_2": "ftp",
+        "FTP_PASSWORD_3": "111111",
+        "FTP_TRANS_DIR_4": "LIST",
+        "total-payload-len": 65,
+        "name": "FTP_RESULT_0"
+    },
+    {
+        "FTP_LINK_TYPE": "DATA",
+        "TUPLE4": "::1.41426>::1.20987",
+        "FTP_BANNER_1": "Welcome to blah FTP service.",
+        "FTP_ACCOUNT_2": "ftp",
+        "FTP_PASSWORD_3": "111111",
+        "FTP_URI_4": "ftp://::1/123.txt",
+        "FTP_TRANS_DIR_5": "RETR",
+        "total-payload-len": 44,
+        "name": "FTP_RESULT_1"
+    },
+    {
+        "FTP_LINK_TYPE": "DATA",
+        "TUPLE4": "::1.59846>::1.50928",
+        "FTP_BANNER_1": "Welcome to blah FTP service.",
+        "FTP_ACCOUNT_2": "ftp",
+        "FTP_PASSWORD_3": "111111",
+        "FTP_URI_4": "ftp://::1/test.txt",
+        "FTP_TRANS_DIR_5": "STOR",
+        "total-payload-len": 140,
+        "name": "FTP_RESULT_2"
+    },
+    {
+        "FTP_LINK_TYPE": "DATA",
+        "TUPLE4": "::1.50872>::1.14779",
+        "FTP_BANNER_1": "Welcome to blah FTP service.",
+        "FTP_ACCOUNT_2": "ftp",
+        "FTP_PASSWORD_3": "111111",
+        "FTP_TRANS_DIR_4": "LIST",
+        "total-payload-len": 131,
+        "name": "FTP_RESULT_3"
+    },
+    {
+        "FTP_LINK_TYPE": "CTRL",
+        "TUPLE4": "::1.47756>::1.21",
+        "FTP_BANNER_1": "Welcome to blah FTP service.",
+        "FTP_ACCOUNT_2": "ftp",
+        "FTP_PASSWORD_3": "111111",
+        "FTP_TRANS_DIR_4": "LIST",
+        "FTP_URI_5": "ftp://::1/123.txt",
+        "FTP_TRANS_DIR_6": "RETR",
+        "FTP_URI_7": "ftp://::1/test.txt",
+        "FTP_TRANS_DIR_8": "STOR",
+        "name": "FTP_RESULT_4"
+    }
+]
\ No newline at end of file
diff --git a/test/test_result_json/03-ipv6_eport_upload_download.json b/test/test_result_json/03-ipv6_eport_upload_download.json
new file mode 100644
index 0000000..557b942
--- /dev/null
+++ b/test/test_result_json/03-ipv6_eport_upload_download.json
@@ -0,0 +1,77 @@
+[
+    {
+        "FTP_LINK_TYPE": "DATA",
+        "TUPLE4": "::1.20>::1.49998",
+        "FTP_BANNER_1": "Welcome to blah FTP service.",
+        "FTP_ACCOUNT_2": "ftp",
+        "FTP_PASSWORD_3": "111111",
+        "FTP_TRANS_MODE_4": "EPRT",
+        "FTP_TRANS_DIR_5": "LIST",
+        "total-payload-len": 65,
+        "name": "FTP_RESULT_0"
+    },
+    {
+        "FTP_LINK_TYPE": "DATA",
+        "TUPLE4": "::1.20>::1.40784",
+        "FTP_BANNER_1": "Welcome to blah FTP service.",
+        "FTP_ACCOUNT_2": "ftp",
+        "FTP_PASSWORD_3": "111111",
+        "FTP_URI_4": "ftp://::1/123.txt",
+        "FTP_TRANS_MODE_5": "EPRT",
+        "FTP_TRANS_DIR_6": "RETR",
+        "total-payload-len": 44,
+        "name": "FTP_RESULT_1"
+    },
+    {
+        "FTP_LINK_TYPE": "DATA",
+        "TUPLE4": "::1.20>::1.32865",
+        "FTP_BANNER_1": "Welcome to blah FTP service.",
+        "FTP_ACCOUNT_2": "ftp",
+        "FTP_PASSWORD_3": "111111",
+        "FTP_TRANS_MODE_4": "EPRT",
+        "FTP_TRANS_DIR_5": "LIST",
+        "total-payload-len": 65,
+        "name": "FTP_RESULT_2"
+    },
+    {
+        "FTP_LINK_TYPE": "DATA",
+        "TUPLE4": "::1.20>::1.55267",
+        "FTP_BANNER_1": "Welcome to blah FTP service.",
+        "FTP_ACCOUNT_2": "ftp",
+        "FTP_PASSWORD_3": "111111",
+        "FTP_URI_4": "ftp://::1/test.txt",
+        "FTP_TRANS_MODE_5": "EPRT",
+        "FTP_TRANS_DIR_6": "STOR",
+        "total-payload-len": 140,
+        "name": "FTP_RESULT_3"
+    },
+    {
+        "FTP_LINK_TYPE": "DATA",
+        "TUPLE4": "::1.20>::1.34844",
+        "FTP_BANNER_1": "Welcome to blah FTP service.",
+        "FTP_ACCOUNT_2": "ftp",
+        "FTP_PASSWORD_3": "111111",
+        "FTP_TRANS_MODE_4": "EPRT",
+        "FTP_TRANS_DIR_5": "LIST",
+        "total-payload-len": 131,
+        "name": "FTP_RESULT_4"
+    },
+    {
+        "FTP_LINK_TYPE": "CTRL",
+        "TUPLE4": "::1.49594>::1.21",
+        "FTP_BANNER_1": "Welcome to blah FTP service.",
+        "FTP_ACCOUNT_2": "ftp",
+        "FTP_PASSWORD_3": "111111",
+        "FTP_TRANS_MODE_4": "EPRT",
+        "FTP_TRANS_DIR_5": "LIST",
+        "FTP_TRANS_MODE_6": "EPRT",
+        "FTP_URI_7": "ftp://::1/123.txt",
+        "FTP_TRANS_DIR_8": "RETR",
+        "FTP_TRANS_MODE_9": "EPRT",
+        "FTP_TRANS_MODE_10": "EPRT",
+        "FTP_URI_11": "ftp://::1/test.txt",
+        "FTP_TRANS_DIR_12": "STOR",
+        "FTP_TRANS_MODE_13": "EPRT",
+        "name": "FTP_RESULT_5"
+    }
+]
\ No newline at end of file
diff --git a/test/test_result_json/04-ftp-banner-no-ftp-characters.json b/test/test_result_json/04-ftp-banner-no-ftp-characters.json
new file mode 100644
index 0000000..ddb097b
--- /dev/null
+++ b/test/test_result_json/04-ftp-banner-no-ftp-characters.json
@@ -0,0 +1,26 @@
+[
+    {
+        "FTP_LINK_TYPE": "DATA",
+        "TUPLE4": "10.20.144.150.35976>10.20.144.151.16013",
+        "FTP_BANNER_1": "Connection will close if idle more than 5 minutes.",
+        "FTP_ACCOUNT_2": "cdts3500",
+        "FTP_PASSWORD_3": "cdts3500",
+        "FTP_URI_4": "ftp://10.20.144.151/qgpl/apkeyf.apkeyf",
+        "FTP_TRANS_MODE_5": "PASV",
+        "FTP_TRANS_DIR_6": "RETR",
+        "total-payload-len": 439,
+        "name": "FTP_RESULT_0"
+    },
+    {
+        "FTP_LINK_TYPE": "CTRL",
+        "TUPLE4": "10.20.144.150.35974>10.20.144.151.21",
+        "FTP_BANNER_1": "at fran.csg.stercomm.com.",
+        "FTP_BANNER_2": "Connection will close if idle more than 5 minutes.",
+        "FTP_ACCOUNT_3": "cdts3500",
+        "FTP_PASSWORD_4": "cdts3500",
+        "FTP_TRANS_MODE_5": "PASV",
+        "FTP_URI_6": "ftp://10.20.144.151/qgpl/apkeyf.apkeyf",
+        "FTP_TRANS_DIR_7": "RETR",
+        "name": "FTP_RESULT_1"
+    }
+]
\ No newline at end of file
diff --git a/test/test_result_json/05-only-ctrl-link.json b/test/test_result_json/05-only-ctrl-link.json
new file mode 100644
index 0000000..a4a5068
--- /dev/null
+++ b/test/test_result_json/05-only-ctrl-link.json
@@ -0,0 +1,11 @@
+[{
+    "FTP_LINK_TYPE":	"CTRL",
+    "TUPLE4":	"192.168.20.1.40920>192.168.60.1.21",
+    "FTP_BANNER_1":	"(vsFTPd 3.0.2)",
+    "FTP_ACCOUNT_2":	"test1",
+    "FTP_PASSWORD_3":	"iiecas2021",
+    "FTP_TRANS_MODE_4":	"PASV",
+    "FTP_URI_5":	"ftp://192.168.60.1//home/test1/20210622201359人肉炸弹.txt",
+    "FTP_TRANS_DIR_6":	"STOR",
+    "name":	"FTP_RESULT_0"
+}]
\ No newline at end of file
diff --git a/test/test_result_json/06-ftp_pasv-upload-download.json b/test/test_result_json/06-ftp_pasv-upload-download.json
new file mode 100644
index 0000000..7ba734d
--- /dev/null
+++ b/test/test_result_json/06-ftp_pasv-upload-download.json
@@ -0,0 +1,65 @@
+[
+    {
+        "FTP_LINK_TYPE": "DATA",
+        "TUPLE4": "127.0.0.1.59814>127.0.0.1.13144",
+        "FTP_BANNER_1": "Welcome to blah FTP service.",
+        "FTP_ACCOUNT_2": "ftp",
+        "FTP_PASSWORD_3": "111111",
+        "FTP_TRANS_MODE_4": "PASV",
+        "FTP_TRANS_DIR_5": "LIST",
+        "total-payload-len": 61,
+        "name": "FTP_RESULT_0"
+    },
+    {
+        "FTP_LINK_TYPE": "DATA",
+        "TUPLE4": "127.0.0.1.38754>127.0.0.1.15810",
+        "FTP_BANNER_1": "Welcome to blah FTP service.",
+        "FTP_ACCOUNT_2": "ftp",
+        "FTP_PASSWORD_3": "111111",
+        "FTP_TRANS_MODE_4": "PASV",
+        "FTP_TRANS_DIR_5": "LIST",
+        "total-payload-len": 131,
+        "name": "FTP_RESULT_1"
+    },
+    {
+        "FTP_LINK_TYPE": "DATA",
+        "TUPLE4": "127.0.0.1.52584>127.0.0.1.6554",
+        "FTP_BANNER_1": "Welcome to blah FTP service.",
+        "FTP_ACCOUNT_2": "ftp",
+        "FTP_PASSWORD_3": "111111",
+        "FTP_URI_4": "ftp://127.0.0.1/123.txt",
+        "FTP_TRANS_MODE_5": "PASV",
+        "FTP_TRANS_DIR_6": "RETR",
+        "total-payload-len": 44,
+        "name": "FTP_RESULT_2"
+    },
+    {
+        "FTP_LINK_TYPE": "DATA",
+        "TUPLE4": "127.0.0.1.32799>127.0.0.1.58439",
+        "FTP_BANNER_1": "Welcome to blah FTP service.",
+        "FTP_ACCOUNT_2": "ftp",
+        "FTP_PASSWORD_3": "111111",
+        "FTP_URI_4": "ftp://127.0.0.1/test.txt",
+        "FTP_TRANS_MODE_5": "PASV",
+        "FTP_TRANS_DIR_6": "STOR",
+        "total-payload-len": 140,
+        "name": "FTP_RESULT_3"
+    },
+    {
+        "FTP_LINK_TYPE": "CTRL",
+        "TUPLE4": "127.0.0.1.42042>127.0.0.1.21",
+        "FTP_BANNER_1": "Welcome to blah FTP service.",
+        "FTP_ACCOUNT_2": "ftp",
+        "FTP_PASSWORD_3": "111111",
+        "FTP_TRANS_MODE_4": "PASV",
+        "FTP_TRANS_DIR_5": "LIST",
+        "FTP_TRANS_MODE_6": "PASV",
+        "FTP_TRANS_MODE_7": "PASV",
+        "FTP_URI_8": "ftp://127.0.0.1/123.txt",
+        "FTP_TRANS_DIR_9": "RETR",
+        "FTP_TRANS_MODE_10": "PASV",
+        "FTP_URI_11": "ftp://127.0.0.1/test.txt",
+        "FTP_TRANS_DIR_12": "STOR",
+        "name": "FTP_RESULT_4"
+    }
+]
\ No newline at end of file
diff --git a/test/test_result_json/06-ftp_pasv-upload-download_C2S.json b/test/test_result_json/06-ftp_pasv-upload-download_C2S.json
new file mode 100644
index 0000000..30d28c7
--- /dev/null
+++ b/test/test_result_json/06-ftp_pasv-upload-download_C2S.json
@@ -0,0 +1,18 @@
+[
+    {
+        "FTP_LINK_TYPE": "CTRL",
+        "TUPLE4": "127.0.0.1.42042>127.0.0.1.21",
+        "FTP_ACCOUNT_1": "ftp",
+        "FTP_PASSWORD_2": "111111",
+        "FTP_TRANS_MODE_3": "PASV",
+        "FTP_TRANS_DIR_4": "LIST",
+        "FTP_TRANS_MODE_5": "PASV",
+        "FTP_TRANS_MODE_6": "PASV",
+        "FTP_URI_7": "ftp://127.0.0.1/123.txt",
+        "FTP_TRANS_DIR_8": "RETR",
+        "FTP_TRANS_MODE_9": "PASV",
+        "FTP_URI_10": "ftp://127.0.0.1/test.txt",
+        "FTP_TRANS_DIR_11": "STOR",
+        "name": "FTP_RESULT_0"
+    }
+]
\ No newline at end of file
diff --git a/test/test_result_json/06-ftp_pasv-upload-download_S2C.json b/test/test_result_json/06-ftp_pasv-upload-download_S2C.json
new file mode 100644
index 0000000..86d0af6
--- /dev/null
+++ b/test/test_result_json/06-ftp_pasv-upload-download_S2C.json
@@ -0,0 +1,29 @@
+[
+    {
+        "FTP_LINK_TYPE": "DATA",
+        "TUPLE4": "127.0.0.1.59814>127.0.0.1.13144",
+        "FTP_BANNER_1": "Welcome to blah FTP service.",
+        "total-payload-len": 61,
+        "name": "FTP_RESULT_0"
+    },
+    {
+        "FTP_LINK_TYPE": "DATA",
+        "TUPLE4": "127.0.0.1.38754>127.0.0.1.15810",
+        "FTP_BANNER_1": "Welcome to blah FTP service.",
+        "total-payload-len": 131,
+        "name": "FTP_RESULT_1"
+    },
+    {
+        "FTP_LINK_TYPE": "DATA",
+        "TUPLE4": "127.0.0.1.52584>127.0.0.1.6554",
+        "FTP_BANNER_1": "Welcome to blah FTP service.",
+        "total-payload-len": 44,
+        "name": "FTP_RESULT_2"
+    },
+    {
+        "FTP_LINK_TYPE": "CTRL",
+        "TUPLE4": "127.0.0.1.42042>127.0.0.1.21",
+        "FTP_BANNER_1": "Welcome to blah FTP service.",
+        "name": "FTP_RESULT_3"
+    }
+]
\ No newline at end of file
diff --git a/test/test_result_json/empty.json b/test/test_result_json/empty.json
new file mode 100644
index 0000000..fe51488
--- /dev/null
+++ b/test/test_result_json/empty.json
@@ -0,0 +1 @@
+[]