]> git.ipfire.org Git - people/stevee/suricata-verify.git/commit
projects / people / stevee / suricata-verify.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: d455819) | patch
stream/tcp: Test verifies the behavior when direction of TCP flow is changed by the...
authorIlya Bakhtin <ilya.bakhtin@gmail.com>
Sat, 1 Aug 2020 17:26:41 +0000 (19:26 +0200)
committerJason Ish <jason.ish@oisf.net>
Wed, 10 Mar 2021 15:51:18 +0000 (09:51 -0600)
commit24e49fa5c9c10fb5bed3f921c5766e68a4a83bbf
tree8e09c6bb8e3c7b5d3c3d0ee6787ae07a773a05b8tree | snapshot
parentd455819cd7341dff8c26881a8fa8649ebb9b5eeacommit | diff
stream/tcp: Test verifies the behavior when direction of TCP flow is changed by the probing parser

pcap file contains 2 http transactions. The request is missing for the first one.
The second transaction is fully complete. So eve.json must contain one and only anomaly event.

Also common flow details are verified.
It must be http, to port 80 with specified number of bytes_toclient and bytes_toserver
tests/tcp-stream-after-swap/README.md [new file with mode: 0644] blob
tests/tcp-stream-after-swap/http-start-from-response.pcap [new file with mode: 0644] blob
tests/tcp-stream-after-swap/test.yaml [new file with mode: 0644] blob
Stefan's tree of suricata-verify.