From: Fupeng Zhao Date: Wed, 17 Sep 2025 13:25:03 +0000 (+0000) Subject: tests/etag: Basic test case for ETAG decode X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=51b11154386258b15c13a5d519c95ffed481b802;p=thirdparty%2Fsuricata-verify.git tests/etag: Basic test case for ETAG decode Ticket #3953. --- diff --git a/tests/decode-etag-01/README.md b/tests/decode-etag-01/README.md new file mode 100644 index 000000000..230ed7260 --- /dev/null +++ b/tests/decode-etag-01/README.md @@ -0,0 +1,11 @@ +# Test Description + +Test basic 802.1BR E-tag decoding + +## PCAP + +PCAP comes from https://redmine.openinfosecfoundation.org/issues/3953 + +## Related issues + +https://redmine.openinfosecfoundation.org/issues/3953 diff --git a/tests/decode-etag-01/input.pcap b/tests/decode-etag-01/input.pcap new file mode 100644 index 000000000..3eb1633b4 Binary files /dev/null and b/tests/decode-etag-01/input.pcap differ diff --git a/tests/decode-etag-01/test.yaml b/tests/decode-etag-01/test.yaml new file mode 100644 index 000000000..65d196be3 --- /dev/null +++ b/tests/decode-etag-01/test.yaml @@ -0,0 +1,12 @@ +requires: + min-version: 9 + +checks: + - filter: + count: 1 + match: + event_type: stats + - stats: + decoder.ipv4: 1 + decoder.etag: 1 + decoder.tcp: 1 diff --git a/tests/decode-etag-02/README.md b/tests/decode-etag-02/README.md new file mode 100644 index 000000000..230ed7260 --- /dev/null +++ b/tests/decode-etag-02/README.md @@ -0,0 +1,11 @@ +# Test Description + +Test basic 802.1BR E-tag decoding + +## PCAP + +PCAP comes from https://redmine.openinfosecfoundation.org/issues/3953 + +## Related issues + +https://redmine.openinfosecfoundation.org/issues/3953 diff --git a/tests/decode-etag-02/input.pcap b/tests/decode-etag-02/input.pcap new file mode 100644 index 000000000..376edd484 Binary files /dev/null and b/tests/decode-etag-02/input.pcap differ diff --git a/tests/decode-etag-02/test.yaml b/tests/decode-etag-02/test.yaml new file mode 100644 index 000000000..65d196be3 --- /dev/null +++ b/tests/decode-etag-02/test.yaml @@ -0,0 +1,12 @@ +requires: + min-version: 9 + +checks: + - filter: + count: 1 + match: + event_type: stats + - stats: + decoder.ipv4: 1 + decoder.etag: 1 + decoder.tcp: 1