mime: adds test about quoted-printable

Ticket: 7950

diff --git a/tests/mime/mime-quoted-printable/README.md b/tests/mime/mime-quoted-printable/README.md
new file mode 100644 (file)
index 0000000..0c3826d
--- /dev/null
+++ b/tests/mime/mime-quoted-printable/README.md
@@ -0,0 +1,11 @@
+# Test Description
+
+Test mime quoted-printable processing
+
+## PCAP
+
+From https://redmine.openinfosecfoundation.org/issues/7950
+
+## Related issues
+
+https://redmine.openinfosecfoundation.org/issues/7950

diff --git a/tests/mime/mime-quoted-printable/input.pcap b/tests/mime/mime-quoted-printable/input.pcap
new file mode 100644 (file)
index 0000000..7ce724c
Binary files /dev/null and b/tests/mime/mime-quoted-printable/input.pcap differ

diff --git a/tests/mime/mime-quoted-printable/suricata.yaml b/tests/mime/mime-quoted-printable/suricata.yaml
new file mode 100644 (file)
index 0000000..18985d6
--- /dev/null
+++ b/tests/mime/mime-quoted-printable/suricata.yaml
@@ -0,0 +1,23 @@
+%YAML 1.1
+---
+
+outputs:
+  - eve-log:
+      enabled: yes
+      filetype: regular #regular|syslog|unix_dgram|unix_stream|redis
+      filename: eve.json
+      types:
+        - files:
+            force-hash: [sha256]
+        - smtp:
+            extended: yes # enable this for extended logging information
+
+
+app-layer:
+  protocols:
+    smtp:
+      enabled: yes
+      # Configure SMTP-MIME Decoder
+      mime:
+        decode-mime: yes
+        decode-quoted-printable: yes

diff --git a/tests/mime/mime-quoted-printable/test.yaml b/tests/mime/mime-quoted-printable/test.yaml
new file mode 100644 (file)
index 0000000..f69a45a
--- /dev/null
+++ b/tests/mime/mime-quoted-printable/test.yaml
@@ -0,0 +1,14 @@
+requires:
+  min-version: 9
+
+args:
+- -k none
+
+checks:
+- filter:
+    count: 1
+    match:
+      event_type: fileinfo
+      fileinfo.filename: related.patch
+      fileinfo.size: 34224
+      fileinfo.sha256: 359641873610597882317aee0f72104ed54fe8aa82d6fa323a5418e4529bd3b9