communityid 0.1.2

A practical implementation of the Community ID standard for network flow hashing
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76

use communityid::Flow;
use serde::Deserialize;
use std::{fs, net::IpAddr, str::FromStr};

#[derive(Deserialize)]
struct BaselineStruct {
    proto: u8,
    saddr: String,
    daddr: String,
    sport: Option<u16>,
    dport: Option<u16>,
    communityid: String,
}

impl From<&BaselineStruct> for Flow {
    fn from(value: &BaselineStruct) -> Self {
        if value.sport.is_some() {
            Self::new(
                value.proto.into(),
                IpAddr::from_str(&value.saddr).unwrap(),
                value.sport.unwrap(),
                IpAddr::from_str(&value.daddr).unwrap(),
                value.dport.unwrap(),
            )
        } else {
            Self::partial(
                value.proto.into(),
                IpAddr::from_str(&value.saddr).unwrap(),
                IpAddr::from_str(&value.daddr).unwrap(),
            )
        }
    }
}

// testing out the baseline file provided by the community-id-spec
// https://github.com/corelight/community-id-spec/blob/master/baseline/baseline_deflt.json
#[test]
fn test_baseline_default() {
    let data: Vec<BaselineStruct> =
        serde_json::from_str(&fs::read_to_string("./tests/data/baseline_default.json").unwrap())
            .unwrap();

    for b in data.iter() {
        let f = Flow::from(b);
        assert_eq!(f.community_id_v1(0).base64(), b.communityid)
    }
}

// testing baseline file provided by community-id-spec
// https://github.com/corelight/community-id-spec/blob/master/baseline/baseline_seed1.json
#[test]
fn test_baseline_seed1() {
    let data: Vec<BaselineStruct> =
        serde_json::from_str(&fs::read_to_string("./tests/data/baseline_seed1.json").unwrap())
            .unwrap();

    for b in data.iter() {
        let f = Flow::from(b);
        assert_eq!(f.community_id_v1(1).base64(), b.communityid)
    }
}

// testing baseline file provided by community-id-spec
// https://github.com/corelight/community-id-spec/blob/master/baseline/baseline_nob64.json

#[test]
fn test_baseline_no_base64() {
    let data: Vec<BaselineStruct> =
        serde_json::from_str(&fs::read_to_string("./tests/data/baseline_nob64.json").unwrap())
            .unwrap();

    for b in data.iter() {
        let f = Flow::from(b);
        assert_eq!(f.community_id_v1(0).hexdigest(), b.communityid)
    }
}