firewall: test that we drop packet with bad request line

Ticket: 5739

diff --git a/tests/firewall/ruletype-firewall-31-retrans-of-drop/test.yaml b/tests/firewall/ruletype-firewall-31-retrans-of-drop/test.yaml
index 3bd0abaf115ad593513100410bba52e2022c0904..0236c371ad592da0bb4ebd67f1f82e1aa81af544 100644 (file)
--- a/tests/firewall/ruletype-firewall-31-retrans-of-drop/test.yaml
+++ b/tests/firewall/ruletype-firewall-31-retrans-of-drop/test.yaml
@@ -76,9 +76,14 @@ checks:
       event_type: alert
       alert.signature_id: 206
 - filter:
-    count: 4
+    count: 6
     match:
       event_type: drop
+- filter:
+    count: 1
+    match:
+      event_type: drop
+      pcap_cnt: 4
 - filter:
     count: 1
     match:
@@ -92,7 +97,7 @@ checks:
     count: 1
     match:
       event_type: stats
-      stats.ips.accepted: 5
-      stats.ips.blocked: 4
+      stats.ips.accepted: 3
+      stats.ips.blocked: 6
       stats.ips.drop_reason.default_app_policy: 1
-      stats.ips.drop_reason.flow_drop: 3
+      stats.ips.drop_reason.flow_drop: 5