public class org.apache.drill.exec.udfs.TestThreatHuntingFunctions extends org.apache.drill.test.ClusterTest
{
public void <init>()
{
org.apache.drill.exec.udfs.TestThreatHuntingFunctions v;
v := @this: org.apache.drill.exec.udfs.TestThreatHuntingFunctions;
specialinvoke v.<org.apache.drill.test.ClusterTest: void <init>()>();
return;
}
public static void setup() throws java.lang.Exception
{
org.apache.drill.test.BaseDirTestWatcher v;
org.apache.drill.test.ClusterFixtureBuilder v;
v = <org.apache.drill.exec.udfs.TestThreatHuntingFunctions: org.apache.drill.test.BaseDirTestWatcher dirTestWatcher>;
v = staticinvoke <org.apache.drill.test.ClusterFixture: org.apache.drill.test.ClusterFixtureBuilder builder(org.apache.drill.test.BaseDirTestWatcher)>(v);
staticinvoke <org.apache.drill.exec.udfs.TestThreatHuntingFunctions: void startCluster(org.apache.drill.test.ClusterFixtureBuilder)>(v);
return;
}
public void testPunctuationPattern() throws java.lang.Exception
{
java.lang.Object[] v;
org.apache.drill.exec.udfs.TestThreatHuntingFunctions v;
java.lang.String[] v;
org.apache.drill.test.TestBuilder v, v, v, v, v;
v := @this: org.apache.drill.exec.udfs.TestThreatHuntingFunctions;
v = virtualinvoke v.<org.apache.drill.exec.udfs.TestThreatHuntingFunctions: org.apache.drill.test.TestBuilder testBuilder()>();
v = virtualinvoke v.<org.apache.drill.test.TestBuilder: org.apache.drill.test.TestBuilder sqlQuery(java.lang.String)>("SELECT punctuation_pattern(\'192.168.1.1 - - [10/Oct/2020:12:32:27 +0000] \"GET /some/web/app?param=test&param2=another_test\" 200 9987\') AS pp FROM (VALUES(1))");
v = virtualinvoke v.<org.apache.drill.test.TestBuilder: org.apache.drill.test.TestBuilder ordered()>();
v = newarray (java.lang.String)[1];
v[0] = "pp";
v = virtualinvoke v.<org.apache.drill.test.TestBuilder: org.apache.drill.test.TestBuilder baselineColumns(java.lang.String[])>(v);
v = newarray (java.lang.Object)[1];
v[0] = "..._-_-_[//:::_+]_\"_///?=&=_\"__";
v = virtualinvoke v.<org.apache.drill.test.TestBuilder: org.apache.drill.test.TestBuilder baselineValues(java.lang.Object[])>(v);
virtualinvoke v.<org.apache.drill.test.TestBuilder: void go()>();
return;
}
public void testEmptyPunctuationPattern() throws java.lang.Exception
{
java.lang.Object[] v;
org.apache.drill.exec.udfs.TestThreatHuntingFunctions v;
java.lang.String[] v;
org.apache.drill.test.TestBuilder v, v, v, v, v;
v := @this: org.apache.drill.exec.udfs.TestThreatHuntingFunctions;
v = virtualinvoke v.<org.apache.drill.exec.udfs.TestThreatHuntingFunctions: org.apache.drill.test.TestBuilder testBuilder()>();
v = virtualinvoke v.<org.apache.drill.test.TestBuilder: org.apache.drill.test.TestBuilder sqlQuery(java.lang.String)>("SELECT punctuation_pattern(\'\') AS pp FROM (VALUES(1))");
v = virtualinvoke v.<org.apache.drill.test.TestBuilder: org.apache.drill.test.TestBuilder ordered()>();
v = newarray (java.lang.String)[1];
v[0] = "pp";
v = virtualinvoke v.<org.apache.drill.test.TestBuilder: org.apache.drill.test.TestBuilder baselineColumns(java.lang.String[])>(v);
v = newarray (java.lang.Object)[1];
v[0] = "";
v = virtualinvoke v.<org.apache.drill.test.TestBuilder: org.apache.drill.test.TestBuilder baselineValues(java.lang.Object[])>(v);
virtualinvoke v.<org.apache.drill.test.TestBuilder: void go()>();
return;
}
public void testEntropyFunction() throws java.lang.Exception
{
java.lang.Object[] v;
java.lang.Double v;
org.apache.drill.exec.udfs.TestThreatHuntingFunctions v;
java.lang.String[] v;
org.apache.drill.test.TestBuilder v, v, v, v, v;
v := @this: org.apache.drill.exec.udfs.TestThreatHuntingFunctions;
v = virtualinvoke v.<org.apache.drill.exec.udfs.TestThreatHuntingFunctions: org.apache.drill.test.TestBuilder testBuilder()>();
v = virtualinvoke v.<org.apache.drill.test.TestBuilder: org.apache.drill.test.TestBuilder sqlQuery(java.lang.String)>("SELECT entropy(\'asdkjflkdsjlefjdc\') AS entropy FROM (VALUES(1))");
v = virtualinvoke v.<org.apache.drill.test.TestBuilder: org.apache.drill.test.TestBuilder ordered()>();
v = newarray (java.lang.String)[1];
v[0] = "entropy";
v = virtualinvoke v.<org.apache.drill.test.TestBuilder: org.apache.drill.test.TestBuilder baselineColumns(java.lang.String[])>(v);
v = newarray (java.lang.Object)[1];
v = staticinvoke <java.lang.Double: java.lang.Double valueOf(double)>(3.057476076289932);
v[0] = v;
v = virtualinvoke v.<org.apache.drill.test.TestBuilder: org.apache.drill.test.TestBuilder baselineValues(java.lang.Object[])>(v);
virtualinvoke v.<org.apache.drill.test.TestBuilder: void go()>();
return;
}
public void testEntropyFunctionWithEmptyString() throws java.lang.Exception
{
java.lang.Object[] v;
java.lang.Double v;
org.apache.drill.exec.udfs.TestThreatHuntingFunctions v;
java.lang.String[] v;
org.apache.drill.test.TestBuilder v, v, v, v, v;
v := @this: org.apache.drill.exec.udfs.TestThreatHuntingFunctions;
v = virtualinvoke v.<org.apache.drill.exec.udfs.TestThreatHuntingFunctions: org.apache.drill.test.TestBuilder testBuilder()>();
v = virtualinvoke v.<org.apache.drill.test.TestBuilder: org.apache.drill.test.TestBuilder sqlQuery(java.lang.String)>("SELECT entropy(\'\') AS entropy FROM (VALUES(1))");
v = virtualinvoke v.<org.apache.drill.test.TestBuilder: org.apache.drill.test.TestBuilder ordered()>();
v = newarray (java.lang.String)[1];
v[0] = "entropy";
v = virtualinvoke v.<org.apache.drill.test.TestBuilder: org.apache.drill.test.TestBuilder baselineColumns(java.lang.String[])>(v);
v = newarray (java.lang.Object)[1];
v = staticinvoke <java.lang.Double: java.lang.Double valueOf(double)>(0.0);
v[0] = v;
v = virtualinvoke v.<org.apache.drill.test.TestBuilder: org.apache.drill.test.TestBuilder baselineValues(java.lang.Object[])>(v);
virtualinvoke v.<org.apache.drill.test.TestBuilder: void go()>();
return;
}
public void testNormedEntropyFunction() throws java.lang.Exception
{
java.lang.Object[] v;
java.lang.Double v;
org.apache.drill.exec.udfs.TestThreatHuntingFunctions v;
java.lang.String[] v;
org.apache.drill.test.TestBuilder v, v, v, v, v;
v := @this: org.apache.drill.exec.udfs.TestThreatHuntingFunctions;
v = virtualinvoke v.<org.apache.drill.exec.udfs.TestThreatHuntingFunctions: org.apache.drill.test.TestBuilder testBuilder()>();
v = virtualinvoke v.<org.apache.drill.test.TestBuilder: org.apache.drill.test.TestBuilder sqlQuery(java.lang.String)>("SELECT entropy_per_byte(\'asdkjflkdsjlefjdc\') AS entropy FROM (VALUES(1))");
v = virtualinvoke v.<org.apache.drill.test.TestBuilder: org.apache.drill.test.TestBuilder ordered()>();
v = newarray (java.lang.String)[1];
v[0] = "entropy";
v = virtualinvoke v.<org.apache.drill.test.TestBuilder: org.apache.drill.test.TestBuilder baselineColumns(java.lang.String[])>(v);
v = newarray (java.lang.Object)[1];
v = staticinvoke <java.lang.Double: java.lang.Double valueOf(double)>(0.17985153389940778);
v[0] = v;
v = virtualinvoke v.<org.apache.drill.test.TestBuilder: org.apache.drill.test.TestBuilder baselineValues(java.lang.Object[])>(v);
virtualinvoke v.<org.apache.drill.test.TestBuilder: void go()>();
return;
}
public void testNormedEntropyFunctionWithEmptyString() throws java.lang.Exception
{
java.lang.Object[] v;
java.lang.Double v;
org.apache.drill.exec.udfs.TestThreatHuntingFunctions v;
java.lang.String[] v;
org.apache.drill.test.TestBuilder v, v, v, v, v;
v := @this: org.apache.drill.exec.udfs.TestThreatHuntingFunctions;
v = virtualinvoke v.<org.apache.drill.exec.udfs.TestThreatHuntingFunctions: org.apache.drill.test.TestBuilder testBuilder()>();
v = virtualinvoke v.<org.apache.drill.test.TestBuilder: org.apache.drill.test.TestBuilder sqlQuery(java.lang.String)>("SELECT entropy_per_byte(\'\') AS entropy FROM (VALUES(1))");
v = virtualinvoke v.<org.apache.drill.test.TestBuilder: org.apache.drill.test.TestBuilder ordered()>();
v = newarray (java.lang.String)[1];
v[0] = "entropy";
v = virtualinvoke v.<org.apache.drill.test.TestBuilder: org.apache.drill.test.TestBuilder baselineColumns(java.lang.String[])>(v);
v = newarray (java.lang.Object)[1];
v = staticinvoke <java.lang.Double: java.lang.Double valueOf(double)>(0.0);
v[0] = v;
v = virtualinvoke v.<org.apache.drill.test.TestBuilder: org.apache.drill.test.TestBuilder baselineValues(java.lang.Object[])>(v);
virtualinvoke v.<org.apache.drill.test.TestBuilder: void go()>();
return;
}
}