Generating communication protocol test cases based on network traffic

• US 8,547,974 B1
• Filed: 05/05/2011
• Issued: 10/01/2013
• Est. Priority Date: 05/05/2010
• Status: Active Grant

• Current Assignee: Mu Dynamics, Inc.
• Original Assignee: MU Dynamics
• Inventors: Guruswamy, Kowsik, Khodosh, Yuri, Baggott, Nick, Vasan, Sundar, Helder, David
• Primary Examiner(s): Pham, Brenda H
• Application Number:
  US13/101,728
• Time in Patent Office: 880 Days
• Field of Search: 370/389, 370/395.5, 370/395.52, 370/252
• US Class Current: 370/389
• CPC Class Codes: H04L 43/026 using flow identification
• CPC Class Codes: H04L 43/50 Testing arrangements

Abstract

A packet capture is received from actual network traffic, the traffic including a multiple protocol message exchange. A scenario may be generated based on an analysis of the received packet capture, the scenario modeling the multiple protocol message exchange. The scenario is used to generate tests, for example protocol mutation tests.

Claims

1. A method for generating tests, comprising:

receiving a packet capture from actual network traffic, the traffic including a multiple protocol message exchange;

identifying a message structure for a message in the packet capture;

generating a scenario based on an analysis of the received packet capture, the scenario modeling the multiple protocol message exchange and including the identified message structure; and

generating mutation tests using the scenario.

2. The method of claim 1 wherein the multiple protocols include nested protocols.

3. The method of claim 1 wherein the multiple protocols include standard protocols with custom extensions.

4. The method of claim 1, further comprising:

automatically identifying a lower level transport in the packet capture.

5. The method of claim 4, further comprising:

creating a modified packet capture with the identified lower level transports filtered out; and

generating the scenario with the modified packet capture.

6. The method of claim 4, further comprising:

generating the tests using a different lower level transport protocol in place of the identified lower level transport.

7. The method of claim 6, wherein

unencrypted packets for the lower level transport are captured in the clear, and wherein the different lower level transport protocol is encrypted.

8. The method of claim 4, wherein the identified lower level transport is TCP/IP, the method further comprising:

creating a modified packet capture by;

creating packet objects for each packet in the packet capture;

reassembling IP fragments in the packet capture;

reordering out of order packets in IP fragments;

merging TCP packets in the capture;

wherein the scenario is generated using the modified packet capture.

9. The method of claim 1,

identifying field hierarchy having values and encoding rules for a message in the packet capture by cross-referencing the output of a protocol dissector applied to the packet capture with the packet capture;

and

including field hierarchy in the scenario.

10. The method of claim 1, further comprising:

identifying steps in the packet capture; and

including steps in the scenario.

11. The method of claim 1, further comprising:

creating a packet object for a packet in the packet capture by reading the packet;

reading the protocol headers at various levels for the packet and

identifying the top-level protocol that the packet is part of;

modeling the data in packet as an object that represents the payload of the top-level protocol.

12. The method of claim 1, further comprising:

describing the scenario using a platform-independent description language.

13. The method of claim 12, further comprising:

using the platform-independent scenario description to generate the tests on a platform different than the one where the scenarios was created.

14. A method for generating tests, comprising:

receiving a packet capture from actual network traffic, the traffic including a multiple protocol message exchange;

generating a scenario based on an analysis of the received packet capture, the scenario modeling the multiple protocol message exchange;

generating mutation tests using the scenario; and

identifying message flows in the packet capture; and

including the message flows in the scenario.

15. A method for generating tests, comprising:

receiving a packet capture from actual network traffic, the traffic including a multiple protocol message exchange;

generating a scenario based on an analysis of the received packet capture, the scenario modeling the multiple protocol message exchange among multiple hosts;

generating mutation tests using the scenario;

identifying the multiple hosts in the packet exchange; and

including an identification of the hosts in the scenario.

16. A method for generating tests, comprising:

receiving a packet capture from actual network traffic, the traffic including a multiple protocol message exchange;

generating a scenario based on an analysis of the received packet capture, the scenario modeling the multiple protocol message exchange; and

generating mutation tests using the scenario;

wherein the mutation tests are stateful.

17. The method of claim 16, wherein generating tests further comprises dynamically creating protocol message payload information.

18. An article of manufacture including a computer readable medium having stored thereon instructions configured to be executed by a processor to carry out a method comprising:

receiving a packet capture from actual network traffic, the traffic including a multiple protocol message exchange and identifying a message structure for a message in the packet capture;

generating a scenario based on an analysis of the received packet capture, the scenario modeling the multiple protocol message exchange and including the identified message structure; and

generating mutation tests using the scenario.

19. A system for generating mutation tests derived from actual network traffic, comprising:

storage configured to store a packet capture from actual network traffic, the traffic including a multiple protocol message exchange and identifying a message structure for a message in the packet capture;

a scenario generator in communication with the storage, and configured to generate a scenario based on an analysis of the packet capture, the scenario modeling the multiple protocol message exchange and including the identified message structure; and

a test generator configured to generate mutation tests using the scenario.

20. The method of claim 19, wherein the multiple protocols include nested protocols.

21. The method of claim 19, wherein the protocols include standard protocols with custom extensions.

22. The system of claim 19, further comprising:

a flow selector configured to identify message flows in the packet capture and to include user-selected message flows in the scenario.

23. The system of claim 19, further comprising:

a packet capture refiner configured to automatically identify a lower level transport in the packet capture, and to generate a modified packet capture with the identified lower level transport filtered out, and wherein the scenario generator is configured to generate the scenario using the modified packet capture.

24. The system of claim 23, wherein the identified lower level transport is TCP/IP, and wherein the packet capture refiner is configured to create the modified packet capture by:

creating packet objects for each packet in the packet capture;

reassembling IP fragments in the packet capture;

reordering out of order packets in IP fragments;

merging TCP packets in the capture.

25. The system of claim 19, wherein multiple hosts are in the packet exchange, and wherein the scenario generator is further configured to include an identification of the hosts in the scenario.

26. The system of claim 19, further comprising:

a packet analyzer configure to create a packet object for a packet in the packet capture by;

reading the packet;

reading the protocol headers at various levels for the packet;

identifying the top-level protocol that the packet is part of;

wherein the scenario generator is further configured to model the data in the packet as an object that represents the payload of the top-level protocol.

27. The system of claim 19, further comprising:

an output generator configured to output a platform-independent description for the file, the test generator being further configured to operate on a different type of platform than the scenario generator, the test generator further being configured to generate the tests using the platform-independent description of the scenario.