# Test Suite for NetIQ UNIX Agent 2011.1r3

Test Suite for NetIQ UNIX Agent 2011.1r3

Run on 2013-4-24 1366849610000

## Summary Results

Suite | Total | Pass | Warn | Fail
--- | --- | --- | --- | ---
Plug-in Tests |  |  |  |
Type-specific Tests |  |  |  |
Release-specific Tests |  |  |  |
Regression against previous build |  |  |  |
Regression against previous release |  |  |  |

## 1. Plug-in Tests

# | Test Name | Result Details
--- | --- | ---

## 2. Type-specific Tests

# | Test Name | Result Details
--- | --- | ---
12486941 | Verify there is a single default CONNECTION METHOD | All 1 Matched Events Passed
12487891 | CollPack spz.zip file should exist in build folder | No Events Matched the Match Condition. ERROR: java.lang.RuntimeException: SOLUTION_PACK package type does not exist. Required files do not exist. Verify this was not a Production Build, if it was this indicates a build problem
12487901 | Test presence of EULA in collpack | No Events Matched the Match Condition. ERROR: java.lang.RuntimeException: SOLUTION_PACK package type does not exist. Required files do not exist. Verify this was not a Production Build, if it was this indicates a build problem
12487911 | Validate format and content from columns of Taxonomy.map | All 1 Matched Events Passed
12487921 | Collector Pack controls and Collector Controls must be present in package.xml from collpack | No Events Matched the Match Condition. ERROR: java.lang.RuntimeException: SOLUTION_PACK package type does not exist. Required files do not exist. Verify this was not a Production Build, if it was this indicates a build problem
31 | All events should have DeviceEventTime, DeviceEventTimeString, EventName, Message, Severity | All 63 Matched Events Passed
33 | All events should report the Collector name and UUID | No Events Matched the Match Condition. PluginTestObject.formattedResultMessage

## 3. Release-specific Tests

# | Test Name | Result Details
--- | --- | ---
12874921 | Secure Shell Server Error event should properly map when received by Unix Agent | All 1 Matched Events Passed
12907441 | sulog group started event should properly map when received by Unix Agent | All 1 Matched Events Passed
12907442 | sulog rule group terminated event should properly map when received by Unix Agent | All 1 Matched Events Passed
12916801 | wtmp User logout event should properly map when received by Unix Agent | All 1 Matched Events Passed
12916811 | wtmp User login event should properly map when received by Unix Agent | All 1 Matched Events Passed
12916841 | wtmp Detect rules started event should properly map when received by Unix Agent | All 1 Matched Events Passed
12916842 | btmp Detect rules started event should properly map when received by Unix Agent | All 1 Matched Events Passed
12916843 | network Detect rules started event should properly map when received by Unix Agent | All 1 Matched Events Passed
12916844 | filesystem Detect rules started event should properly map when received by Unix Agent | All 1 Matched Events Passed
12916845 | pacct event Detect rules started should properly map when received by Unix Agent | All 1 Matched Events Passed
12916846 | syslog event Detect rules started should properly map when received by Unix Agent | 0 events passed out of 1 events matching the Match Condition: Failed test on line 31: . From event syslog event Detect rules started should properly map when received by Unix Agent "Observer Host Name" was "unknown-host" but was expected to be "unknown-host". Test Result: fail
12916847 | Linux event Detect rules started should properly map when received by Unix Agent | All 1 Matched Events Passed
12916848 | aix event Detect rules started should properly map when received by Unix Agent | All 1 Matched Events Passed
12916851 | wtmp Detect rule group terminated event should properly map when received by Unix Agent | All 1 Matched Events Passed
12916852 | btmp group terminated event should properly map when received by Unix Agent | All 1 Matched Events Passed
12916853 | network group terminated event should properly map when received by Unix Agent | All 1 Matched Events Passed
12916854 | filesystem group terminated event should properly map when received by Unix Agent | All 1 Matched Events Passed
12916855 | pacct event group terminated should properly map when received by Unix Agent | All 1 Matched Events Passed
12916856 | syslog event Detect rule group terminated should properly map when received by Unix Agent | 0 events passed out of 1 events matching the Match Condition: Failed test on line 32: . From event syslog event Detect rule group terminated should properly map when received by Unix Agent "Observer Host Name" was "unknown-host" but was expected to be "unknown-host". Test Result: fail
12916857 | Linux event Detect rule group terminated should properly map when received by Unix Agent | All 1 Matched Events Passed
12916858 | aix event Detect rule group terminated should properly map when received by Unix Agent | All 1 Matched Events Passed
12916861 | btmp Failed UNIX login event should properly map when received by Unix Agent | All 1 Matched Events Passed
12916862 | syslog event Failed UNIX login should properly map when received by Unix Agent | All 1 Matched Events Passed
12916863 | linux event Failed UNIX login should properly map when received by Unix Agent | All 1 Matched Events Passed
12923331 | filesystem Batch Authorization Changed event should properly map when received by Unix Agent | All 1 Matched Events Passed
12923332 | filesystem Batch Configuration Changed event should properly map when received by Unix Agent | All 1 Matched Events Passed
12923351 | filesystem event New or modified set-user-id file should properly map when received by Unix Agent | All 1 Matched Events Passed
12923361 | filesystem event System configuration file modified should properly map when received by Unix Agent | All 1 Matched Events Passed
12923371 | filesystem event User Password Changed should properly map when received by Unix Agent | All 1 Matched Events Passed
12925931 | filesystem event New or modified executable file should properly map when received by Unix Agent | All 1 Matched Events Passed
12928821 | filesystem event Log File Size Decreased should properly map when received by Unix Agent | All 1 Matched Events Passed
12931331 | pacct event Detects that TCP or UDP is running should properly map when received by Unix Agent | All 1 Matched Events Passed
12931541 | pacct event Critical system commands run by non-root should properly map when received by Unix Agent | All 1 Matched Events Passed
12931551 | pacct event System hacking tools being used should properly map when received by Unix Agent | All 1 Matched Events Passed
12935701 | syslog event Failed su should properly map when received by Unix Agent | All 1 Matched Events Passed
12935721 | syslog event Network Promiscuous Mode Detected should properly map when received by Unix Agent | All 1 Matched Events Passed
12935801 | syslog event Successful su to Root should properly map when received by Unix Agent | All 1 Matched Events Passed
12935802 | syslog event Successful su to myuser should properly map when received by Unix Agent | All 1 Matched Events Passed
12935803 | aix event Detects executions of the su command should properly map when received by Unix Agent | All 1 Matched Events Passed
12941491 | syslog event Changed Ethernet Address should properly map when received by Unix Agent | All 1 Matched Events Passed
12941501 | syslog event Flip-flop Ethernet Address should properly map when received by Unix Agent | All 1 Matched Events Passed
12941511 | syslog event Reused Ethernet Address should properly map when received by Unix Agent | All 1 Matched Events Passed
12941521 | syslog event Execute From Stack Attempted should properly map when received by Unix Agent | All 1 Matched Events Passed
12941541 | syslog event Internet Service Server (inetd) Errors should properly map when received by Unix Agent | All 1 Matched Events Passed
12941581 | syslog event TCP Wrapper Errors should properly map when received by Unix Agent | All 1 Matched Events Passed
12941611 | event File system is full should properly map when received by Unix Agent | All 1 Matched Events Passed
12941621 | event FTP Server Errors should properly map when received by Unix Agent | All 1 Matched Events Passed
12941651 | syslog event Unsafe Code Detected in Detect Rule Set should properly map when received by Unix Agent | All 1 Matched Events Passed
12941671 | syslog event Mail redirection should properly map when received by Unix Agent | All 1 Matched Events Passed
12941701 | Linux event Application Attempted to Set uid or euid should properly map when received by Unix Agent | All 1 Matched Events Passed
12942111 | linux event File System Object Modified by Non-Root User should properly map when received by Unix Agent | All 1 Matched Events Passed
12942112 | aix event File System Object Modified by Non-Root User should properly map when received by Unix Agent | All 1 Matched Events Passed
12954481 | linux event File System Object Modified by Root User should properly map when received by Unix Agent | All 1 Matched Events Passed
12954482 | aix event File System Object Modified by Root User should properly map when received by Unix Agent | All 1 Matched Events Passed
12964231 | event Root runs non-root executable should properly map when received by Unix Agent | All 1 Matched Events Passed
12964251 | event Clock Changed should properly map when received by Unix Agent | All 1 Matched Events Passed
12964301 | event Root executed world-writable file should properly map when received by Unix Agent | All 1 Matched Events Passed
13026191 | aix event file file \/etc\/security\/audit\/config modified should properly map when received by Unix Agent | All 1 Matched Events Passed
13026211 | aix event Detects execution of the audit command should properly map when received by Unix Agent | All 1 Matched Events Passed
13026221 | aix event AIX User Group Changed should properly map when received by Unix Agent | All 1 Matched Events Passed
13026241 | aix event AIX File Permissions Changed should properly map when received by Unix Agent | All 1 Matched Events Passed
13029601 | aix event AIX User Group Created should properly map when received by Unix Agent | All 1 Matched Events Passed
13030481 | aix event AIX User Account Created should properly map when received by Unix Agent | All 1 Matched Events Passed

## 4. Regression Tests

### Comparison of this version with previous prototype/beta version:

### Comparison of this version with previous released version: