From: Philippe Antoine <pantoine@oisf.net>
Date: Sat, 19 Apr 2025 12:41:41 +0000 (+0200)
Subject: firewall: test that we drop packet with bad request line
X-Git-Tag: suricata-7.0.11~85
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=4e9bed180fdb47a48048907c3ace4be5ce20fe65;p=thirdparty%2Fsuricata-verify.git

firewall: test that we drop packet with bad request line

Ticket: 5739
---

diff --git a/tests/firewall/ruletype-firewall-31-retrans-of-drop/test.yaml b/tests/firewall/ruletype-firewall-31-retrans-of-drop/test.yaml
index 3bd0abaf1..0236c371a 100644
--- a/tests/firewall/ruletype-firewall-31-retrans-of-drop/test.yaml
+++ b/tests/firewall/ruletype-firewall-31-retrans-of-drop/test.yaml
@@ -76,9 +76,14 @@ checks:
       event_type: alert
       alert.signature_id: 206
 - filter:
-    count: 4
+    count: 6
     match:
       event_type: drop
+- filter:
+    count: 1
+    match:
+      event_type: drop
+      pcap_cnt: 4
 - filter:
     count: 1
     match:
@@ -92,7 +97,7 @@ checks:
     count: 1
     match:
       event_type: stats
-      stats.ips.accepted: 5
-      stats.ips.blocked: 4
+      stats.ips.accepted: 3
+      stats.ips.blocked: 6
       stats.ips.drop_reason.default_app_policy: 1
-      stats.ips.drop_reason.flow_drop: 3
+      stats.ips.drop_reason.flow_drop: 5