Goose Attack Report

Users: 5

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing25-07-15 03:44:2525-07-15 03:44:3000:00:050 → 5
Maintaining25-07-15 03:44:3025-07-15 03:49:3000:05:005
Decreasing25-07-15 03:49:3025-07-15 03:49:3000:00:000 ← 5

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET get_advisory_by_doc_id 259 (+129) 0 11.55 (+1.18) 2 (-1) 71 (+7) 0.86 (+0.43) 0.00 (+0.00)
GET get_analysis_latest_cpe 262 (+132) 0 101.31 (-9.17) 33 (-9) 293 (+118) 0.87 (+0.44) 0.00 (+0.00)
GET get_analysis_status 262 (+132) 0 3.69 (+0.18) 1 (0) 49 (+13) 0.87 (+0.44) 0.00 (+0.00)
GET get_sbom[sha256:f293eb89…6720f692ec5f3081] 262 (+132) 262 5.11 (+1.21) 1 (0) 65 (+31) 0.87 (+0.44) 0.87 (+0.44)
GET get_sbom_license_ids[0195baea-42e3-7…0e3-4c7874263954] 262 (+132) 262 1.97 (-0.90) 1 (0) 16 (-2) 0.87 (+0.44) 0.87 (+0.44)
GET list_advisory 262 (+132) 0 525.44 (-47.80) 258 (-121) 957 (-159) 0.87 (+0.44) 0.00 (+0.00)
GET list_advisory_paginated 260 (+130) 0 411.05 (-28.96) 202 (+13) 738 (+158) 0.87 (+0.43) 0.00 (+0.00)
GET list_importer 257 (+132) 0 4.98 (+2.49) 1 (0) 56 (+17) 0.86 (+0.44) 0.00 (+0.00)
GET list_organizations 262 (+132) 0 12.33 (+4.08) 1 (0) 54 (+3) 0.87 (+0.44) 0.00 (+0.00)
GET list_packages 257 (+132) 0 441.25 (-64.93) 207 (-105) 983 (+91) 0.86 (+0.44) 0.00 (+0.00)
GET list_packages_paginated 257 (+132) 0 383.79 (-19.69) 121 (+5) 686 (+73) 0.86 (+0.44) 0.00 (+0.00)
GET list_products 262 (+132) 0 7.80 (-2.30) 2 (0) 55 (-1) 0.87 (+0.44) 0.00 (+0.00)
GET list_sboms 262 (+132) 0 648.44 (+28.40) 433 (+47) 1259 (+477) 0.87 (+0.44) 0.00 (+0.00)
GET list_sboms_paginated 262 (+132) 0 562.04 (+0.58) 414 (-73) 1091 (+480) 0.87 (+0.44) 0.00 (+0.00)
GET list_vulnerabilities 257 (+132) 0 233.14 (-59.90) 108 (-27) 399 (-106) 0.86 (+0.44) 0.00 (+0.00)
GET list_vulnerabilities_paginated 257 (+132) 0 193.18 (+15.08) 105 (+3) 302 (+41) 0.86 (+0.44) 0.00 (+0.00)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 262 (+132) 0 36.00 (+5.90) 11 (-3) 113 (+15) 0.87 (+0.44) 0.00 (+0.00)
GET search_advisory 259 (+129) 0 979.58 (-119.52) 353 (-73) 2350 (+350) 0.86 (+0.43) 0.00 (+0.00)
GET search_exact_purl 262 (+132) 0 7.10 (-0.45) 2 (0) 57 (+5) 0.87 (+0.44) 0.00 (+0.00)
GET search_purls 262 (+132) 0 1220.34 (-5603.92) 419 (-1079) 4892 (-11347) 0.87 (+0.44) 0.00 (+0.00)
Aggregated 5207 (+2632) 524 289.40 (-298.01) 1 (0) 4892 (-11347) 17.36 (+8.77) 1.75 (+0.88)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET get_advisory_by_doc_id 6 (0) 7 (-1) 8 (-1) 10 (-1) 46 (+32) 54 (+5) 63 (+7) 71 (+7)
GET get_analysis_latest_cpe 96 (-14) 100 (-10) 110 (0) 110 (0) 170 (+20) 180 (+10) 210 (+40) 290 (+115)
GET get_analysis_status 2 (0) 2 (0) 3 (+1) 4 (+1) 5 (+1) 7 (-1) 46 (+11) 49 (+13)
GET get_sbom[sha256:f293eb89…6720f692ec5f3081] 3 (0) 3 (0) 4 (+1) 4 (0) 6 (+2) 13 (+5) 49 (+16) 65 (+31)
GET get_sbom_license_ids[0195baea-42e3-7…0e3-4c7874263954] 1 (0) 1 (0) 1 (-1) 2 (-5) 4 (-4) 8 (-2) 13 (+1) 16 (-2)
GET list_advisory 500 (0) 500 (0) 600 (0) 600 (-100) 700 (-100) 800 (-100) 900 (0) 957 (-43)
GET list_advisory_paginated 410 (-50) 420 (-50) 450 (-40) 470 (-30) 500 (0) 500 (-80) 600 (+20) 700 (+120)
GET list_importer 2 (0) 2 (0) 3 (+1) 4 (+2) 5 (+2) 36 (+31) 53 (+30) 56 (+17)
GET list_organizations 5 (-1) 8 (+1) 12 (+4) 22 (+10) 39 (+22) 43 (+16) 49 (+3) 54 (+3)
GET list_packages 410 (-40) 430 (-30) 470 (-30) 490 (-110) 600 (-200) 800 (-92) 900 (+8) 983 (+91)
GET list_packages_paginated 390 (-20) 400 (-20) 420 (-40) 480 (0) 500 (0) 500 (0) 600 (0) 686 (+86)
GET list_products 6 (0) 6 (0) 7 (0) 8 (-1) 10 (-3) 17 (-31) 53 (-2) 55 (-1)
GET list_sboms 600 (0) 600 (0) 700 (+100) 700 (+100) 800 (+100) 900 (+200) 1,000 (+218) 1,000 (+218)
GET list_sboms_paginated 500 (-100) 600 (0) 600 (0) 600 (0) 700 (+100) 800 (+200) 900 (+300) 1,000 (+400)
GET list_vulnerabilities 230 (-80) 250 (-60) 260 (-70) 280 (-70) 290 (-100) 300 (-120) 330 (-110) 399 (-101)
GET list_vulnerabilities_paginated 190 (0) 200 (+10) 210 (+20) 220 (+20) 260 (+50) 280 (+60) 300 (+40) 300 (+40)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 25 (0) 30 (+3) 46 (+15) 63 (+17) 72 (+16) 79 (+20) 92 (+22) 110 (+12)
GET search_advisory 800 (-200) 1,000 (0) 1,000 (0) 2,000 (+1,000) 2,000 (0) 2,000 (0) 2,000 (0) 2,000 (0)
GET search_exact_purl 4 (-2) 5 (-1) 5 (-2) 6 (-1) 7 (-1) 46 (+36) 53 (+1) 57 (+5)
GET search_purls 800 (-3,200) 800 (-6,200) 1,000 (-7,000) 2,000 (-13,000) 3,000 (-13,000) 3,000 (-13,000) 3,000 (-13,000) 4,892 (-11,108)
Aggregated 130 (+10) 280 (-40) 420 (-40) 500 (-100) 700 (-100) 800 (-1,200) 2,000 (-13,000) 4,892 (-11,108)

Status Code Metrics

Method Name Status Codes
GET get_advisory_by_doc_id 259 [200]
GET get_analysis_latest_cpe 262 [200]
GET get_analysis_status 262 [200]
GET get_sbom[sha256:f293eb89…6720f692ec5f3081] 262 [404]
GET get_sbom_license_ids[0195baea-42e3-7…0e3-4c7874263954] 262 [404]
GET list_advisory 262 [200]
GET list_advisory_paginated 260 [200]
GET list_importer 257 [200]
GET list_organizations 262 [200]
GET list_packages 257 [200]
GET list_packages_paginated 257 [200]
GET list_products 262 [200]
GET list_sboms 262 [200]
GET list_sboms_paginated 262 [200]
GET list_vulnerabilities 257 [200]
GET list_vulnerabilities_paginated 257 [200]
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 262 [200]
GET search_advisory 259 [200]
GET search_exact_purl 262 [200]
GET search_purls 262 [200]
Aggregated 524 [404], 4,683 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 262 (+132) 0 (0) 12.81 (+0.33) 6 (0) 24 (-4) 0.87 (+0.44) 0.00 (+0.00)
1.1 list_organizations 262 (+132) 0 (0) 12.45 (+4.03) 1 (0) 54 (+3) 0.87 (+0.44) 0.00 (+0.00)
1.2 list_advisory 262 (+132) 0 (0) 525.51 (-47.81) 259 (-120) 957 (-159) 0.87 (+0.44) 0.00 (+0.00)
1.3 list_advisory_paginated 260 (+130) 0 (0) 411.12 (-28.95) 202 (+13) 738 (+157) 0.87 (+0.43) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 259 (+129) 0 (0) 11.61 (+1.18) 2 (-1) 71 (+7) 0.86 (+0.43) 0.00 (+0.00)
1.5 search_advisory 259 (+129) 0 (0) 979.64 (-119.55) 353 (-73) 2350 (+349) 0.86 (+0.43) 0.00 (+0.00)
1.6 list_vulnerabilities 257 (+132) 0 (0) 233.22 (-59.88) 108 (-27) 399 (-106) 0.86 (+0.44) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 257 (+132) 0 (0) 193.24 (+15.07) 105 (+3) 302 (+41) 0.86 (+0.44) 0.00 (+0.00)
1.8 list_importer 257 (+132) 0 (0) 5.01 (+2.47) 1 (0) 56 (+15) 0.86 (+0.44) 0.00 (+0.00)
1.9 list_packages 257 (+132) 0 (0) 441.30 (-64.94) 207 (-105) 983 (+91) 0.86 (+0.44) 0.00 (+0.00)
1.10 list_packages_paginated 257 (+132) 0 (0) 383.86 (-19.70) 121 (+5) 686 (+73) 0.86 (+0.44) 0.00 (+0.00)
1.11 search_purls 262 (+132) 0 (0) 1220.39 (-5603.88) 419 (-1079) 4892 (-11348) 0.87 (+0.44) 0.00 (+0.00)
1.12 search_exact_purl 262 (+132) 0 (0) 7.15 (-0.44) 2 (0) 57 (+5) 0.87 (+0.44) 0.00 (+0.00)
1.13 list_products 262 (+132) 0 (0) 7.84 (-2.28) 2 (0) 55 (-1) 0.87 (+0.44) 0.00 (+0.00)
1.14 list_sboms 262 (+132) 0 (0) 648.47 (+28.40) 433 (+47) 1259 (+477) 0.87 (+0.44) 0.00 (+0.00)
1.15 list_sboms_paginated 262 (+132) 0 (0) 562.11 (+0.65) 414 (-73) 1091 (+480) 0.87 (+0.44) 0.00 (+0.00)
1.16 get_analysis_status 262 (+132) 0 (0) 3.75 (+0.23) 1 (0) 49 (+13) 0.87 (+0.44) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 262 (+132) 0 (0) 101.35 (-9.17) 33 (-9) 293 (+118) 0.87 (+0.44) 0.00 (+0.00)
1.18 get_sbom[sha256:f293eb89…6720f692ec5f3081] 262 (+132) 0 (0) 5.15 (+1.20) 1 (0) 66 (+32) 0.87 (+0.44) 0.00 (+0.00)
1.19 sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 262 (+132) 0 (0) 36.05 (+5.90) 11 (-3) 113 (+15) 0.87 (+0.44) 0.00 (+0.00)
1.20 get_sbom_license_ids[0195baea-42e3-7…0e3-4c7874263954] 262 (+132) 0 (0) 2.00 (-0.93) 1 (0) 16 (-2) 0.87 (+0.44) 0.00 (+0.00)
Aggregated 5,469 (+2,764) 0 (0) 275.54 (-283.64) 1 (0) 4892 (-11348) 18.23 (+9.21) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 262 (+132) 5772.34 (-5801.23) 3432 (-2835) 8233 (-12577) 0.87 (+0.44) 52.40 (+26.40)
Aggregated 5 (0) 262 (+132) 5772.34 (-5801.23) 3432 (-2835) 8233 (-12577) 0.87 (+0.44) 52.40 (+26.40)

User Metrics

Errors

# Error
262 (+132) 404 Not Found: get_sbom[sha256:f293eb89…6720f692ec5f3081]
262 (+132) 404 Not Found: get_sbom_license_ids[0195baea-42e3-7…0e3-4c7874263954]