]> git.ipfire.org Git - thirdparty/suricata-verify.git/commit
projects / thirdparty / suricata-verify.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: aa8b609) | patch
detect/content: Add negated endswith tests
authorJeff Lucovsky <jlucovsky@oisf.net>
Mon, 27 Mar 2023 13:04:31 +0000 (09:04 -0400)
committerJason Ish <jason.ish@oisf.net>
Fri, 12 May 2023 18:42:01 +0000 (12:42 -0600)
commit6c1425a6ee3b1e59c9777e2a220a54172489e3ef
treeadaa47b566828c15421eb9ce21f072f7b749803etree
parentaa8b609d245a19b518f74e177bb441bff503e3e7commit | diff
detect/content: Add negated endswith tests

Issue: 5541

This commit adds test cases for the issue discovered in 5541 so that
negated endswith are handled properly.

3 tests
- Negated endswith content that *should* match
- Negated endswith content that *shouldn't* match
- Negated endswith content that *should* match with a content match
  following it

For versions greater than 6.0.11
tests/detect-content-ends-with-negated-01/input.pcap [new file with mode: 0644] blob
tests/detect-content-ends-with-negated-01/test.rules [new file with mode: 0644] blob
tests/detect-content-ends-with-negated-01/test.yaml [new file with mode: 0644] blob
tests/detect-content-ends-with-negated-02/input.pcap [new file with mode: 0644] blob
tests/detect-content-ends-with-negated-02/test.rules [new file with mode: 0644] blob
tests/detect-content-ends-with-negated-02/test.yaml [new file with mode: 0644] blob
tests/detect-content-ends-with-negated-03/input.pcap [new file with mode: 0644] blob
tests/detect-content-ends-with-negated-03/test.rules [new file with mode: 0644] blob
tests/detect-content-ends-with-negated-03/test.yaml [new file with mode: 0644] blob
Mirror of https://github.com/OISF/suricata-verify.git