From 0b1a8bb269434e7f150ac592886c9533aa0c5e01 Mon Sep 17 00:00:00 2001 From: Philippe Antoine Date: Wed, 24 Sep 2025 14:50:06 +0200 Subject: [PATCH] detect/integers: add check for count argument Ticket: 7211 --- tests/http2-window-index/test.rules | 2 ++ tests/http2-window-index/test.yaml | 6 ++++++ 2 files changed, 8 insertions(+) diff --git a/tests/http2-window-index/test.rules b/tests/http2-window-index/test.rules index fd65785d4..cc1e9083b 100644 --- a/tests/http2-window-index/test.rules +++ b/tests/http2-window-index/test.rules @@ -14,3 +14,5 @@ alert http2 any any -> any any (http2.window:32768,or_absent; sid:9; rev:1;) alert http2 any any -> any any (http2.window:123,oob_or 2; sid:10; rev:1;) alert http2 any any -> any any (http2.window:>36000,nb>1,1:-1; sid:11; rev:1;) + +alert http2 any any -> any any (http2.window:count>5; sid:12; rev:1;) diff --git a/tests/http2-window-index/test.yaml b/tests/http2-window-index/test.yaml index 463f633c2..abf863b75 100644 --- a/tests/http2-window-index/test.yaml +++ b/tests/http2-window-index/test.yaml @@ -52,3 +52,9 @@ checks: event_type: alert alert.signature_id: 11 http.http2.stream_id: 5 + - filter: + count: 1 + match: + event_type: alert + alert.signature_id: 12 + http.http2.stream_id: 5 -- 2.47.3