Abstract: Methods, systems, and computer readable media for measuring data integrity in time sensitive networks. An example method for testing a time sensitive network (TSN) device includes calculating a data integrity value for a preemptable frame. The method includes appending the data integrity value to an end of the preemptable frame and transmitting the preemptable frame to the TSN device, causing the TSN device to fragment the preemptable frame or to reassemble the preemptable frame after fragmentation. The method includes receiving the preemptable frame after traversing the TSN device and validating the data integrity value of the preemptable frame after traversing the TSN device.

Abstract: The subject matter described herein includes methods, systems, and computer readable media for stateless service traffic generation. A method for stateless service traffic generation occurs at a network equipment test system. The method includes generating, at a first transmit port associated with the network equipment test system, a first test packet flow comprising one or more packets, wherein the first test packet flow indicates a match and action instruction for triggering an action at a second transmit port associated with the network equipment test system; sending the first test packet flow toward a node associated with a data center under test (DCUT); receiving the first test packet flow from the node associated with the DCUT; and performing, using the match and action instruction, the action at the second transmit port associated with the network equipment test system.

Abstract: A method for software-based emulation of media access control security (MACsec) includes generating, using a software-based emulated MACsec packet generator, a plurality of emulated MACsec packets, each of the emulated MACsec packets including a MACsec header having a packet number field value that remains fixed across the emulated MACsec packets. The method further includes configuring a device under test to accept plural MACsec packets with the same MACsec packet number field value. The method further includes transmitting the emulated MACsec packets to the device under test (DUT). The method further includes determining whether the DUT responds correctly to the emulated MACsec packets given a replay protection configuration of the DUT. The method further includes generating test output based on a result of the determination.

Abstract: The subject matter described herein includes methods, systems, and computer readable media for stateless service traffic generation. A method for stateless service traffic generation occurs at a network equipment test system. The method includes generating, at a first transmit port associated with the network equipment test system, a first test packet flow comprising one or more packets, wherein the first test packet flow indicates a match and action instruction for triggering an action at a second transmit port associated with the network equipment test system; sending the first test packet flow toward a node associated with a data center under test (DCUT); receiving the first test packet flow from the node associated with the DCUT; and performing, using the match and action instruction, the action at the second transmit port associated with the network equipment test system.

Abstract: A method for software-based emulation of media access control security (MACsec) includes generating, using a software-based emulated MACsec packet generator, a plurality of emulated MACsec packets, each of the emulated MACsec packets including a MACsec header having a packet number field value that remains fixed across the emulated MACsec packets. The method further includes configuring a device under test to accept plural MACsec packets with the same MACsec packet number field value. The method further includes transmitting the emulated MACsec packets to the device under test (DUT). The method further includes determining whether the DUT responds correctly to the emulated MACsec packets given a replay protection configuration of the DUT. The method further includes generating test output based on a result of the determination.

Abstract: Methods, systems, and computer readable media for testing effects of simulated frame preemption and deterministic fragmentation of preemptable frames in a frame-preemption-capable network are disclosed. According to one method, a device under test including at least one processor simulates frame preemption by generating a plurality of simulated preempted frame fragments and an express frame. The test device deterministically orders, independently from MAC merge sublayer fragmentation and ordering, the simulated preempted frame fragments and the express frame for transmission to the DUT. The test device transmits the simulated preempted frame fragments and the express frame to the DUT in an order corresponding to the deterministic ordering. The test device receives a response of the DUT to the simulated preempted frame fragments and the express frame. The test device determines, based on the response of the DUT, whether the DUT operates in accordance with specifications for frame preemption.

Abstract: According to one method, the method occurs at a network equipment test device. The method includes receiving one or more source code files for programming a packet forwarding plane of a network node; analyzing the one or more source code files to determine test metadata, wherein analyzing the one or more source code files to determine the test metadata includes identifying source code portions that indicate conditions for rejecting or accepting packets and determining the test metadata based on the conditions; generating, using the test metadata, one or more test plans for testing the network node, wherein the one or more test plans define test packets to be sent to the network node for testing the network node's implementation of the conditions for rejecting or accepting packets; and testing the network node using the one or more test plans.

Abstract: Methods, systems, and computer readable media for testing network elements of an in-band telemetry (INT)-capable network are disclosed. One exemplary method includes generating, by a network test tool device, at least one INT test system data packet that includes emulated INT metadata that represents telemetry parameters corresponding to a plurality of emulated network devices. The method also includes sending the at least one INT test system data packet to an INT sink device and generating, by the INT sink device, an INT telemetry report derived from the INT metadata extracted from the at least one INT test system data packet. The method also includes forwarding the generated INT telemetry report to a software defined network (SDN) controller entity.

Abstract: Methods, systems, and computer readable media for testing network elements of an in-band telemetry (INT)-capable network are disclosed. One exemplary method includes generating, by a network test tool device, at least one INT test system data packet that includes emulated INT metadata that represents telemetry parameters corresponding to a plurality of emulated network devices. The method also includes sending the at least one INT test system data packet to an INT sink device and generating, by the INT sink device, an INT telemetry report derived from the INT metadata extracted from the at least one INT test system data packet. The method also includes forwarding the generated INT telemetry report to a software defined network (SDN) controller entity.

Abstract: Methods, systems, and computer readable media for measuring preempted frame delivery latency in a frame-preemption-capable network are disclosed. One method includes, in a network test tool including at least one processor, simulating frame preemption by generating a plurality of simulated preempted frame fragments of a simulated preempted frame and an express frame. The method further includes inserting a last fragment generation timestamp in a last fragment of the simulated preempted frame fragments, wherein inserting the last fragment generation timestamp in a last fragment of the simulated preempted frame fragments includes inserting the last fragment generation timestamp in a portion of the last fragment that will remain in a last fragment of a refragmentation of the simulated preempted frame in the event that the simulated preempted frame is reassembled and refragmented. The method further includes transmitting the simulated preempted frame fragments and the express frame to a device under test (DUT).

Abstract: Methods, systems, and computer readable media for testing network elements of an in-band telemetry (INT)-capable network are disclosed. One exemplary method includes generating, by a network test tool device, at least one INT test system data packet that includes emulated INT metadata that represents telemetry parameters corresponding to a plurality of emulated network devices. The method also includes sending the at least one INT test system data packet to an INT sink device and generating, by the INT sink device, an INT telemetry report derived from the INT metadata extracted from the at least one INT test system data packet. The method also includes forwarding the generated INT telemetry report to a software defined network (SDN) controller entity.

Abstract: Methods, systems, and computer readable media for measuring preempted frame delivery latency in a frame-preemption-capable network are disclosed. One method includes, in a network test tool including at least one processor, simulating frame preemption by generating a plurality of simulated preempted frame fragments of a simulated preempted frame and an express frame. The method further includes inserting a last fragment generation timestamp in a last fragment of the simulated preempted frame fragments, wherein inserting the last fragment generation timestamp in a last fragment of the simulated preempted frame fragments includes inserting the last fragment generation timestamp in a portion of the last fragment that will remain in a last fragment of a refragmentation of the simulated preempted frame in the event that the simulated preempted frame is reassembled and refragmented. The method further includes transmitting the simulated preempted frame fragments and the express frame to a device under test (DUT).

Abstract: Methods, systems, and computer readable media for testing effects of simulated frame preemption and deterministic fragmentation of preemptable frames in a frame-preemption-capable network are disclosed. According to one method, a device under test including at least one processor simulates frame preemption by generating a plurality of simulated preempted frame fragments and an express frame. The test device deterministically orders, independently from MAC merge sublayer fragmentation and ordering, the simulated preempted frame fragments and the express frame for transmission to the DUT. The test device transmits the simulated preempted frame fragments and the express frame to the DUT in an order corresponding to the deterministic ordering. The test device receives a response of the DUT to the simulated preempted frame fragments and the express frame. The test device determines, based on the response of the DUT, whether the DUT operates in accordance with specifications for frame preemption.

Abstract: According to one method, the method occurs at a network equipment test device. The method includes receiving one or more source code files for programming a packet forwarding plane of a network node; analyzing the one or more source code files to determine test metadata, wherein analyzing the one or more source code files to determine the test metadata includes identifying source code portions that indicate conditions for rejecting or accepting packets and determining the test metadata based on the conditions; generating, using the test metadata, one or more test plans for testing the network node, wherein the one or more test plans define test packets to be sent to the network node for testing the network node's implementation of the conditions for rejecting or accepting packets; and testing the network node using the one or more test plans.

Abstract: A method for visualizing interdependent network protocol fields for fuzzing and progress reporting includes providing a graphical user interface including a stacked representation of network protocol fields to be fuzzed. The method further includes displaying, in the stacked representation, an indication of network protocol fields that can or cannot be fuzzed. The method further includes receiving, via the stacked representation, selections of network protocol fields to be fuzzed and specifications of fuzzed parameter values for the selections. The method further includes generating and sending to a device under test network protocol packets with fuzzed parameter values according the selections and specifications.

Abstract: A method for progressive convergence on network protocol stack vulnerabilities includes defining an initial protocol field and field value space for fuzz testing of a network communications protocol stack implementation. The method further includes dividing the initial space into regions corresponding to combinations of protocol fields and field values. The method further includes assigning vulnerability ratings to at least some of the regions. The method further includes executing fuzz testing of the network communications protocol stack implementation using the protocol fields and field values corresponding to the regions. The method further includes updating the vulnerability ratings of the regions based on results of the testing. The method further includes identifying, based on the updated vulnerability ratings, at least one region with a higher vulnerability rating than other regions. The method further includes performing fuzz testing for the sub-regions.

Abstract: The subject matter described herein includes methods, systems, and computer readable media for simplistic visual representation of complex interdependent network protocol fields for network protocol fuzzing and graphical framework for reporting instantaneous system level progress. One method includes providing a graphical user interface including a stacked representation of network protocol fields to be fuzzed. The method further includes, displaying in the stacked representation an indication of network protocol fields that can or cannot be fuzzed. The method further includes receiving, via the stacked representation, selections of network protocol fields to be fuzzed and specifications of fuzzed parameter values for the selections. The method further includes generating and sending to a device under test network protocol packets with fuzzed parameter values according the selections and specifications.

Abstract: A method for progressive convergence on network protocol stack vulnerabilities includes defining an initial protocol field and field value space for fuzz testing of a network communications protocol stack implementation. The method further includes dividing the initial space into regions corresponding to combinations of protocol fields and field values. The method further includes assigning vulnerability ratings to at least some of the regions. The method further includes executing fuzz testing of the network communications protocol stack implementation using the protocol fields and field values corresponding to the regions. The method further includes updating the vulnerability ratings of the regions based on results of the testing. The method further includes identifying, based on the updated vulnerability ratings, at least one region with a higher vulnerability rating than other regions. The method further includes performing fuzz testing for the sub-regions.