From 85f124425edb86fcfeaf421cf094462e435f7d5c Mon Sep 17 00:00:00 2001 From: Philippe Antoine Date: Thu, 18 Sep 2025 10:30:21 +0200 Subject: [PATCH] http2: add check for http2.priority keyword Was missing coverage We do not have any pcaps with a stream changing its priority to test the index capability --- tests/http2-bugfixes/test.rules | 2 ++ tests/http2-bugfixes/test.yaml | 6 ++++++ 2 files changed, 8 insertions(+) diff --git a/tests/http2-bugfixes/test.rules b/tests/http2-bugfixes/test.rules index 27a0f66a6..00434f6b0 100644 --- a/tests/http2-bugfixes/test.rules +++ b/tests/http2-bugfixes/test.rules @@ -1 +1,3 @@ alert http2 any any -> any any (http.cookie; content:"VISITOR"; sid:10;) + +alert http2 any any -> any any (http2.priority: >250; sid:11;) diff --git a/tests/http2-bugfixes/test.yaml b/tests/http2-bugfixes/test.yaml index 9ddae92a8..b85d254a4 100644 --- a/tests/http2-bugfixes/test.yaml +++ b/tests/http2-bugfixes/test.yaml @@ -30,3 +30,9 @@ checks: match: event_type: alert alert.signature_id: 10 + - filter: + count: 1 + match: + event_type: alert + alert.signature_id: 11 + http.http2.request.priority: 255 -- 2.47.3