]> git.ipfire.org Git - thirdparty/suricata-verify.git/commit
tests: add test for max alert default & noalerts
authorShivani Bhardwaj <shivanib134@gmail.com>
Fri, 7 Jan 2022 10:20:02 +0000 (15:50 +0530)
committerVictor Julien <victor@inliniac.net>
Thu, 28 Jul 2022 10:20:16 +0000 (12:20 +0200)
commitd78a316cff89113e57a23c55038a3a2e76915802
tree3343a716f0049ae9195676c7b83de62f5ee3bb3a
parentf20b0a6516dd9b0ecd6101a1a31e9e53e81a1ff8
tests: add test for max alert default & noalerts

Since the default max alert value is 15 and we want to ensure that that
value is enforced if the configuration is set with something invalid,
this test has packet-max-alert set to 0 (which will fall back to 15,
the default). We have 15 'noalert' rules and 1 alert rule that gets
triggered.

Related to task #4942
tests/alert-max/alert-max-default/README.md [new file with mode: 0644]
tests/alert-max/alert-max-default/input.pcap [new file with mode: 0644]
tests/alert-max/alert-max-default/suricata.yaml [new file with mode: 0644]
tests/alert-max/alert-max-default/test.rules [new file with mode: 0644]
tests/alert-max/alert-max-default/test.yaml [new file with mode: 0644]
tests/alert-max/alert-max-default/writepcap.py [new file with mode: 0755]