From 08656bfb7a240710818081e0ffe02fc3adaba0aa Mon Sep 17 00:00:00 2001 From: Philippe Antoine Date: Mon, 29 Sep 2025 15:28:42 +0200 Subject: [PATCH] mime: adds test about quoted-printable Ticket: 7950 --- tests/mime/mime-quoted-printable/README.md | 11 +++++++++ tests/mime/mime-quoted-printable/input.pcap | Bin 0 -> 50965 bytes .../mime/mime-quoted-printable/suricata.yaml | 23 ++++++++++++++++++ tests/mime/mime-quoted-printable/test.yaml | 14 +++++++++++ 4 files changed, 48 insertions(+) create mode 100644 tests/mime/mime-quoted-printable/README.md create mode 100644 tests/mime/mime-quoted-printable/input.pcap create mode 100644 tests/mime/mime-quoted-printable/suricata.yaml create mode 100644 tests/mime/mime-quoted-printable/test.yaml diff --git a/tests/mime/mime-quoted-printable/README.md b/tests/mime/mime-quoted-printable/README.md new file mode 100644 index 000000000..0c3826def --- /dev/null +++ b/tests/mime/mime-quoted-printable/README.md @@ -0,0 +1,11 @@ +# Test Description + +Test mime quoted-printable processing + +## PCAP + +From https://redmine.openinfosecfoundation.org/issues/7950 + +## Related issues + +https://redmine.openinfosecfoundation.org/issues/7950 diff --git a/tests/mime/mime-quoted-printable/input.pcap b/tests/mime/mime-quoted-printable/input.pcap new file mode 100644 index 0000000000000000000000000000000000000000..7ce724c3559c44d4bbc7f8159db5f8d011f9951d GIT binary patch literal 50965 zc-rlK3y>sPaai5n9WX2QKFA`FY~go(dwV@I-926XozL#x_RjRoHaoxT?%59<)YWuX zch_xqRbN&0e7IdWgdzL^ap1FMWQQ$uci_We^O5)*fq@WUA(@Z~2O)!n!wLs-C@_Q} zFhYP}o%vqMnJ?daU;X??-*g{0ojdbldH}f6Fbm9YSb#>o4by!#(_Ca4eVrEpf+pPI1#OdFM9~ z5<)z5_V&-*ez7J2#N@-TxO#QsD-0ULtPHRU0H+XyS^Q{nl(fK&5{}7#ELbD8^3)VEhiK>+63u4^N(1UL)(0){wWvE(5B* z`Uv+Vz-Y;#`&yeM{rOGN zg^MfmYinmKWp;nPvR+=UtX5W+=x;K8x>8@Mtdtp!{NF#qod*0)2Q@r*G)Ei$&wLF( z4tRbGaD424|2fAw^)rY+XdL0r0I)Mbt)9K}rL@(b_O<$30QC&E`fIBkm(AwLxeKe^ zMlavlJik$3a4$5EaHjy~sUS=`@ zJ-@xdapxXc%&c6f?yfB5P8>P>G{AiFm0Y-R#_vo~TtDE&wSEV{eHaC*^ifNBAgqo1 zZs8t;?+*sSn!ocTg>^X)7PR}$4Q=-|%70LtRf%tRMAa{WXAQ@x>6IYqjKtMAimIS49y$J&?Oi!UGzqe4Ynf>KzSwCs|RN(#|X? zHKfd1VI_TjY4_Y~*0b7!^MePa^>b&=o>%jw_K6d;61gX>EthA>x~4V<4XH^^@49L< zZPbNohzMrTDJTleq zin4Xn zn1<4t&1YtOq}oshI!HjRTo>vW*D3dsDBOY@NMYg~kOle(dro9m{AhY$l94Gx$*Agv z*qw)8Qwl@EM66U>P4UD~$$1&7q`I>y>pG}FRC#KzkBWuK1fRVRjA*fIUeF9(LgK`E zJ~K{ciKJ;rgACZ(vt*mn2{peGt@$rd&HqPU%`d#(()@q&evWGs15_0-KM{4amLySB zqEbywkjJr!ZApCOYUzClm?2+{culKu$7`AgG@2*2IwsqOc3V% z4OM|*KsU4j)Ff<5nxIRM4kV=^2?lvx{`L1G=>kfr-KM)FfSS19O|)4)GabxPi>t!v zwS|k6q2RIdg?hQVT3R-yBvTbk>G0N-lF)N}5)nr3Qd=$5bJ+!8h^~OO2&&u^@Ykl; zxD;o!667YxunaP*!BNdsx)Uw>}7~2xQ15AyI*>1AbXn?pUVO%xThT2V@%ckIw6X_CA68iMI z{l5{Q(MCaUACM?xaZTEi(WXK+0 zLnAbVO5*e5bWE=R6KjfOkeb?%C1aPwDIO_84YMs~qkJCVjSW54UieMTHnl~p z2F*F;bqSOw)P%QWP!_29ACK1j7pdm|l2`LfcUzi&W1Zu=EvipigKn2}rMB1wwQqn~ ztEXIj#Aj(Q(GR5(fYxS^6Gq&S2($uaV&^+^&r~HsM!Z%dwH;tyT8tl>{;VQ%_9HJgF(}@C^g!dVT@m3`0K}FVk zgiyN>`(?2%m|ag6Dz)|H(nWgtbg5PrR@YX`#N><`y}Y`yY;k1?3^5JIoO5D#ARQDS zKytw}TY7H_M(o9U)hh>+W9!wm`kGLwmsbR|ZQ)M5Eg96N>594`G?*zS0KfL)^bklJ2sKnTl(?iB4h!jKu+7~ve6)HO8n_aAR}<;_&*T44jC#7}9f83D+1nDka#J>TF}Q2H%?Z*+Gu$jiA4Git zm3tqES<*BT4tYKhhfPtJHu_BfSC@OE;NX2A=9g#(6|cOVuF%-DDn`x!JJFi|byV~JC$Hx3?^>Gw(-%3; z(nME64FOYDOg4~qZWWtjQmHBUZ>Zo8O+m{u z+nS#0?~>#uNlGNyC+snjY?$BhVUlESR-oD?^JsjxFuH^$grp#mbtf|842~;n3mePc zaj|V&n(9f);OBnya~c}KiS9xnoR`m1-op=<@(+2X6XblQTCSZbRnLMev^IZMIA1wi z8Be$#qn6NOX}-Qzy=ayxuhy#<OV|*T)bj znqHvj68lD~vWj8Qa@|5~au39+OtF%R!e+yOmXTO7HEd%xd2q~zNoL_>MWV>M9l_O8 zsg#Wu3{R-}KLVQnqqlPO&#(D!efsD_sQD8=^=kgDB-Q+{y87ySE^}NT#ZA&jA~dTS z-}i37aa}^k6Ew}qnES~D0*W24x$m03vIUfS`Fw#IS@4;0vnJTw_3B318TxgwwvovN z9aV)PZ-I3XryaE=OWW*LOQcags5g`egTYVk7knTqS+K^&D7k$6)Dd-yryK_Xid`X6 zSC`0RkqzyMvf@R;X$S#)mQ?tUBfz|>!4S|_6^yx)b*g%S@{6VAn%!DP_hOOJeVX^t z-Bb2?AiM|u^`*QYdEzs4;KH`py~KdhIsk}ZcNCL*bvtf|eODPxRoM(qqm?|_!ucEf z5vwNmxCCA08<$XmTc1A^m0Q%Mc^|Sb?_&vLw(EEO_`9?J&7E5mfArQUSUVKf>xW_W zcM;Z<>W1~3KZ=C)77D9A3~Tq<^}Bu=Kl)NPth;}FYm|N3q4w!>UM;n2=b>=39QSiN zf>V~*YXmn7g^b{ZJc=v42l}GaUzB=MFVy3dc9Lp8+#ziZ6h-Rp+ZCOfAZ%v1OX6t8 zF4fNxy)QM;up1{6Q$t=RwQV~wr(H8t{m<}$?TVSRCjttc{g~^1Ptw{BJmL$t$gQT- zB4g*-j@`-8@Ec$xeB#~7Bn;9 z)|H?z*`)7kdlS44NmL>S)G%^DodZoF9dS#FY^>kE_u@cw1AQ)wxaLI+0Alb^z=Q^Y zxj8~t){VHQyQ~?>$AX87&fj(y1~q>oTJy_P^MBH-`QL2kp?v5mjvG~tc1BU7op2XC zP4y^#@NQ4YR#niS5-eN}RJYjz!r|47thUE!NnLo{Qhe!shmDNxLQ zjgcu51D6bGOGNvkNE4fAB2&s?8T^R@4Pe-_?Rb2xl^-8|xD8v`et}EQF$+PNXrq29Av_*T90rM@WLCCRE}paLR>CSs~E5f!n!`$j7Qhow*N zk|ng8n&7haHg$5mO@E!*wxFa`t$ord@8q5EGc(hkXPrXMH=29W*VHzOKE@PLoG_Dk z8#sE7?5YFO05Q>|ri^n1n*#$R)Brr2Q>qI~Gb{;r2EdydjW(h{>zJuxpyodjt@$6J zn*S4C&Hpw#4`u8790wqmRyT+lFemGS%`Q-ES#E$oC^@KrZ1(Y%-hrMo1D}i7s+!p< zvPkp0u^;D%B*T5p&c4Ywa1im1WWi4mRU>iHK#FJtEMzD>4rJIR$Raj?)F?D|NJ&)~ z*3tpH2)+P(88vjbi)s#3aBI*_IDp_0a=ubOv$jzurPYh%e5qP3t=2Ej!6OD}M}tUP z5(6mr`dt~|LxVL@F?Q{|B80P2uFju<2TP|b%a!^?Y}#U_zFMx;$l_X+l*oFiTCdD+ zESIWeeWSX*Rx76nsj=)L2TXWx(1f9$3bbxYhA4OSK)PH6<}#H!+Fh8iEXi9Kyr!eE z)dM4SdRK)p9I3!U<0iG|a5PcSE8o^+;9Nr;W(Nm|!xsq{c^at%$8lp68Q%HeF1Rjan%+H1yaWljCj7udOatmV`5QT-|Xc zRHY@iZBJtIUP%E7^Fs=r-wUd#cCkiNq-z0{9oKjDDV9?1_;q{K=b1Ki?!;V^nqFsY zFHg~`#2O^6JYL(bFlWpJ!{t{*6q-#KF|iha)roa3J~Jq5cI`c3RBdIm7`1$bkYcVQVXjgACuwd@r-N>QSd zi5ANqwo5iu8H9jkNMn{ZqsD~a(+a7_J=4g#9?iVH>pO7-HUCPq=D$QW|Hr+W{~z0V zC_j9H;|?>#Db`?w5ew}wXAXQ;iV(V^m6~8DYO$-ylO6LDJCpjXixpw1To)FXOJ*4w z#)GRH)#Y)oBkTG~U1QMK03gukB^dTVeS;~8mQu$7w&^GZR?g#ww~@w5bI^|)Tblwp zk6@cxs5fC8ce2#_a;;?;*DyU#8EC0dBV!?hQ2K40dp_Fz?(3 zOk=E({xXeq*z6@MvJvi~QxlENrQ-l$N;(~B7*FbK0Hs68rUc_)53D1$UICLf>FD5Y z|8T0#kgg_VX!;&`#x;F^PL{UKd3&495^N<-fXqZk4<=Ff3{_~?#e~4oV+l)FbvF}^ z+M<>FHC7@(Q~3!^Jh~_We_gLul;;AvL>Hmcc9|w}b2Z4uJ-&)uESDYvrJ1acD_hh? zT$kS{sjaw;(YPxZq$N+HZXXI+xnvWIU_ym0PAE-y#S4bgj#!yqoBn$P``*BN4@pXI z`9_1}Ny}rvo4yeth%{8!k3Z%ikY^Ck+!80l1>O}D^U5if0AYw@sZ2ua;?pi*b42Sh z!humVIcXL!FO7Tjg1b(ugcp}90VHQVYcmOI{x?Kx{w~%0AM&v{$gtKYUWXPnDKAsW~@VywMdO4Hy$$W0z~hJqT*3ffFQT%)ashnF^6w!>cg* zqOJ!BCo(DCqC&#Y(PHE{$+B;gljB1yt-0mN;^sM1XPD|Bbd;t72b!uSYdXUTnkeb^ z^aBC^s13itr6rh~#k_qTl$n#)8MhIpI8&P;ZYzm<@ZyrNQo2xCt&d|;sq-YNNC}A9 zbk$5}LZD)*Mp$gY)|~#jGQPUZ%T8^9?WP&AerpGscG4smRd)>XaG~R7y1G^8I2LrL z$p)EG7Gj!ZRRIy=n)eyOcXa#X0r^o$)X?i+XEfwbM0*m&PU*Ny0E zPqKqH?r@EZyuo(Q*cA`QT#2-EhPB=ZmJT3`Zf&mz=-~Vjj+)jANVdL)u^qKxFiJsf z7QaCfXp)a)i+fFIj68-)^ug?Cn-Nj-_d)YVv2e2=%$Jd|Ja zS1_V2RLjdHoZmeoSa;wuPI(XC z367c5H7G+7^Qj5CyxfV1Sym-(`haQkIuZrg3?&jkY{^Z>N(KOK4b^g_lTgaFWn?g> z$~I9_b<613!qu=TQqoCp(CAP-hrHgEFG<~9B>X1Mhyy5RU8@Px#+0cD3QZ(vm2G!q z0A+~-<_b9?-JpA(n2`K5wq^}%qc=X`M7+km<}qsiKZw@+SE%NH+N=5hjh%;b&x0H{ zg4gU0RnP4i_Z&)!AXO*aX^$yxk3lqhhdQt*Jj{ilnu}82c5xm0v!0}0nN7nNHtgtY zrzHbJ2+&qJXn@>dg;*2xD2uR$q3kMa`keHky=wG^b^(YnT3w(TEPvd3X0NKei@*Rz zXSAw1^nXC3hM32bP=iCB#P)<5c8-yi%=JW`P{gQFwqeGtb<}Mtvj?i~AmOxO97>k6 zy@!)s(F0Jpj^4GO-CgslqqVig-z)xs$95ZWw0_HUEE&*8Fdxn*S-U=6}Y{ zL;1u4$32fOosV!4DU89zLy{SbbWvB)lRG`8iA{N+3t%D`sm9pYL(X;JLcHR-B#F8% z^)|bbt0cxN%rF7*lzmjdl_f%_sp%fT;CAp{xVqfNC5HkAt0j1#tHJ$;TuGRPEKR~J zM5WG79cz3*b_f^dhB+Uoa(;Uwoqc32hynV?n0j8yPGlU_` zrtZb7cCoN+T=)!IXXIJl1x7mE*i1HUP?l5D>WXdMl~`#FvveANwOmD8dTcDclTN2I z{v2CsEBCF{bf%B4W5(uyE|nFDXCl}I8m|wpg2PI3{>2Uxgf84yWL(okdSXMPi>@#w z*58bfR@li134+DOF;Jg8$(}gIF1feBnW40s;mz$o96WFi-1d;%Z5GXW2s%E4iS2|J z;y4q6i!^X+QX28ZefV%VXL&s=hj$on-+a2=6LGe5p6-?5h)>*onLL24u34>i-!fNH zB|M#r+X>pCF6dKP4{oE~si^t?SG4ATGu8aQ4cb3w=b`+cZ*yEQYq;87snH!j0vbFS z)ZnGP8jR^DzNSWXsJJJB)}ADzVp!WJhQycZO#Phr1bf(8NGFMnj(}#_xCvFk{V^w; zEOB3Eyj!u_>(zB@n+~=?)Xku2!`i-=>J5J`Yzb=niouMNx#9l8kdcYm z*o0^2GJpOLG50gIUlRyQN6r7eXwCmP)%@@CYW@$~c__dA367)Wb1I^a-q_fL-f*yB zQ~fGhH-& z09`b%NpuGzv8&$@R16;>_=q7QnnWWInJ#F~QBGtZ`=erM0M@u-m^&`dcT~ACnrgru zux*N7BRMf5HB8YQpAVyGj-L)v?`?#-3Eq37Lj^y{&w1~O(AuFpo-p7Ru#=(9xmR!I z_ylTx?&|GPc_?q8c_?4=YW|Pgc_`U0aUAYyi_rGlN2h^GRl385j=@uX&^2)5_o!|H z7y*obux?_Th=nqKHeU?urfeY{VH<_how&(AJq=#`B>m*G2e4P@zKJiUeh3_k{N|K* zDDv#%-nUl~u$rt|TnWg}?_f7cMtivvU5S?wGQ%t~c3t+jv=f&Y?sL9<5N!593Eug{ zOQP~UK1lODCWrGqo}qatKmJp9zQ@0pUm6ALqZHP?!>~R~^HBb;;)d1#ek802U>-$m`y_jt9`b9NreKX?l4Q=5gX&9+$&42wdL7(^)^TO`=t zko*kW=R1?zzX>a8Tas22^)6Zg`x*b~B=t29SV7}|aVB*9pUynL<3FD<_e{_5)BC37 zhO$Y=7rIfvjX=pEKf1-+s6ZwUV?%ZE}j%STX>8B1fd9V6RGS(68|2jIceYirBp(&`Nn=*fi2 zaXw%eBV#tsKoXx9Iu5e^HARO zTO5a-Xfl4*%lJM97Zr0+wRQ4?0z*3PfiOG}sCm+JFp&cd~XO+-sr$Q3Jad&TZ5FA=;e zwOPlpFdv^w=OW}$)ow0voC!A&W@duL5l9pvjsCmA!g$#fMt^Br7NHB#D2kTFT!x)O zl*<$jAd9Nz?Pb*b_eN{}cT>&(gje%_(au9ze;vo|$t$ii#jfK}n+^>;=F`Pd1)A=r z`2xzbDQpK4=UhI=`aVAsAK{oBDa44UPE> zAJHYiZX&L;TfvjyUQ{P3qH{`yxio;DE@YoI6x3U8hH)F5dnn#~ctkcI5RpaIIzort zr^9t-=2$IgN_xZ6t|Ds)qO4Ghd4x{QO|wqTdm`d{zMv4eZ-Y%%frYyDTc?6AFxBBU z#xY;naNNJ>=SQBt4G5=MQj-Tq1T}v)TJyh$YW{b5HUA&mc__`NI4(r?0y-LpQ4+Ts z!)Vcx713Ei34^I~pLSJXhvP8n?9NPIZou@x2YkP0V-qp=CfHD;h4e!&!HT3E6ef247{`qLl z|4*sr|4pyv|B9W5@{=!f+$fw;U?IIiVLE~{`kJIm$_;C>+FY>!B-P~p^<{~CCOk1L zQ#hCbOYNbFeb}&tqN$jtqZG5)2ZHY03VDBVumJ8!e{XSVFHOA zZ?xH!M(^+EKcgd`oemY293Mb^Bqm);=eJ;b*eWzqv_V&Ly2evRwAjZ@@c^g1m}LQ( zVm2rs6V9wFCJt3V;dx-yd~P^8f||bynm-~B<~HTycAq_9f18cjw!2x#+kZ_3i#`x*Dzhs{Lf8?haUJ5_;{E?bSL-~Ry59QF0#-i-g_fh-waj%y8x}AqI_X>^+@9x|_yL&8XvMo$v3T!Z#F6=)# z@3mfTgs4Kc7%DZ{X+9zWz)4HN4e{I=DXxrlcP2YsJC@%$~lPyxGI|JQtpj8-aH^#DejKBg0o|7_JfYG})BH4b^x<>=xjWWz zl572V8#Vv0M{EAyrJDcEUd{hM?L3s9eVyZ8e6}v|VI5S+MTkDj))Tv3L9^1eF=MZx z_2+zL0yFw(kHv=ypkFrLXIle;4Zej7+;QEkrvq6uJmZUo@A+~%Z;xpWr{Ku)aLjoo zSPa5_@nTfoIMNd+MbV;ugqP%T${HTgwwJ-tHU*$X_k~2bKfcPrXM; zPk+m}1W-CvOCgH1Zln@eT`v%53&MAONP*Tb`RIY%ntsArOC{gS*c8XX$ztL-X= zxO1%p0^q?EnjV=#Gb2;TY?XWCHFfh5wB2O7c(NtqTJ&asBV5QA%~`=9lW^ayZYhC{ z#+lI38jVwLBR1OGcIOOK+WEM_3HE+wCLLrc#bOC^X0fuoOs?1oUI&l?QPTq3J5wCB zy)%2W18(R%wC)*XVp-NPm|zKm?$LLdEL$uJpE*APjzuzl2su#mKM<|?pQf7sidXZ0 z%g#gjkDukZk>nvnT#Ui{EFO^jok(GOsp*iEw_u6 zq7TO8W)f=mJ`i(~Wk+vz>Wl z4_hT`;xkZW+@-K8>FPjhNEKVxCVcw=`VR)ZvY*{*)V7MVD-E!Zq#Z-KX?Ly}qQe1p zu?c{2)A%UEjUNqP)cotwn*SN9`7e7l|99;?lsBX~Zf{TLp!glw)A3h`J`X%vh1GJl*Kxrd%c%rXL)MC-~vw9zKMQQ$m3FAlUd*pfLr`s>4|L#$G+|WeP6S{ z>&(>|_O1wzLEHI+Yo*5g+G+x?q@BeU%Aj{zHgo|)!S;#^^V!VMvl-8`2A=F)1JBU= z^khWM&cct%%KEZr*+(EIlM$FizzV^PAhdMC`H%8qbHbHjCoMNKgB_Mn7p}3xFwh*) zOKE@mQ1gqR`6KdB-cR#Te$T7<|H{rodF!V^^QS%i)s!{rmU($S!?+oXA`~}TJ z`IILQjjKYq2~X~XwCooRP*<|n*XYuhw_?_aNLWi7u;0aOa8rOL*zV5 zW73oGk;?^4bjHAE)D11wi4EO>%Xr9W&@I3EVJEXB0U^7zGv67rr#ge@sFu!%dZ&(_ z5t+ayQ736=XI@7vsai6R0Na$%y=lqqfkvN7(&Nsy=}|QgIKu4lgv|6ZtO{eXj)1Tu zYhxY5=+90~ZEtU<#O{^^WDu2RN>QiS1e)BOx=&Aaj9xc37kyqb>mTdzqU(BKvS(h; zp2iD1cQxv;-Nm}FR#~9u__{a!iw}|K9;-*#nZFak1@3<+eZTKK;gL>WHDe*x0j$0w zS8)e;gihImGVHY+w`v7+#!MAG!s)9AKO5GyfWl9)1h!{L&&@GM~aaO-RA?>&y6^&F zTlwh6Xk_A6kLJH{``uP#;@0OluIX8<=21p%p#yq~T@Vy$J5IZoUQDpAW}8Kf&jlUv z9C=Jw3?z_LrB*Cqietj3JECWc+!NlEE$JK@3W;?X0=XpZI!7b0WA|u^5P1?5jtoT?Mc1B>pOUu*8xUS^P~*(7^0RacR>f3r)0QC zj0A9i&;^dPWAcFj@a)7$D8Nn580O9^F6QZBQJy@TF}h`hz(hf#$x#BPZ(4Kedfb^1 z?x?yUVE(tzRn<#_zV~=TGR7$6JM?fY@GL~XtTztXF&#!{BLT4{6Kk;5s5*44j?MC(^6TAv<9Yb*;k@6~rd<3{V@58uI6 z;d?a**1}y^D6HdwuwHfb>Oa}$xJ*7x)JvFvkSP@N+36yAv`>n~;!O6);b)+R@1MMd zD**IDP{ZR#ze*c^i?88XsHFke9(vE)Iqm}hMFtY7iLnxU}n28`a!F#6ubmvZL-z_}pGo%!X@Am#qy z4}FwtAS9&R7rqCS%kV_+8U1v+km`ZtrFM39@DJX>{bjhuUK@$)=P9nQ@ZmZOHNAEH z?{M6^-@tJF{A;839{%OeBCh}Fl|EeGN^!j#IA+u07=-nWXpDf;kH18{+fO|T3r6a% Iev0G%KME;C{r~^~ literal 0 Hc-jL100001 diff --git a/tests/mime/mime-quoted-printable/suricata.yaml b/tests/mime/mime-quoted-printable/suricata.yaml new file mode 100644 index 000000000..18985d608 --- /dev/null +++ b/tests/mime/mime-quoted-printable/suricata.yaml @@ -0,0 +1,23 @@ +%YAML 1.1 +--- + +outputs: + - eve-log: + enabled: yes + filetype: regular #regular|syslog|unix_dgram|unix_stream|redis + filename: eve.json + types: + - files: + force-hash: [sha256] + - smtp: + extended: yes # enable this for extended logging information + + +app-layer: + protocols: + smtp: + enabled: yes + # Configure SMTP-MIME Decoder + mime: + decode-mime: yes + decode-quoted-printable: yes diff --git a/tests/mime/mime-quoted-printable/test.yaml b/tests/mime/mime-quoted-printable/test.yaml new file mode 100644 index 000000000..f69a45a34 --- /dev/null +++ b/tests/mime/mime-quoted-printable/test.yaml @@ -0,0 +1,14 @@ +requires: + min-version: 9 + +args: +- -k none + +checks: +- filter: + count: 1 + match: + event_type: fileinfo + fileinfo.filename: related.patch + fileinfo.size: 34224 + fileinfo.sha256: 359641873610597882317aee0f72104ed54fe8aa82d6fa323a5418e4529bd3b9 -- 2.47.3