From 4e9bed180fdb47a48048907c3ace4be5ce20fe65 Mon Sep 17 00:00:00 2001 From: Philippe Antoine Date: Sat, 19 Apr 2025 14:41:41 +0200 Subject: [PATCH] firewall: test that we drop packet with bad request line Ticket: 5739 --- .../ruletype-firewall-31-retrans-of-drop/test.yaml | 13 +++++++++---- 1 file changed, 9 insertions(+), 4 deletions(-) diff --git a/tests/firewall/ruletype-firewall-31-retrans-of-drop/test.yaml b/tests/firewall/ruletype-firewall-31-retrans-of-drop/test.yaml index 3bd0abaf1..0236c371a 100644 --- a/tests/firewall/ruletype-firewall-31-retrans-of-drop/test.yaml +++ b/tests/firewall/ruletype-firewall-31-retrans-of-drop/test.yaml @@ -76,9 +76,14 @@ checks: event_type: alert alert.signature_id: 206 - filter: - count: 4 + count: 6 match: event_type: drop +- filter: + count: 1 + match: + event_type: drop + pcap_cnt: 4 - filter: count: 1 match: @@ -92,7 +97,7 @@ checks: count: 1 match: event_type: stats - stats.ips.accepted: 5 - stats.ips.blocked: 4 + stats.ips.accepted: 3 + stats.ips.blocked: 6 stats.ips.drop_reason.default_app_policy: 1 - stats.ips.drop_reason.flow_drop: 3 + stats.ips.drop_reason.flow_drop: 5 -- 2.47.2