]> git.ipfire.org Git - thirdparty/suricata-verify.git/commitdiff
quic: add test for encryption-handling bypass
authorPhilippe Antoine <pantoine@oisf.net>
Tue, 16 Dec 2025 21:40:59 +0000 (22:40 +0100)
committerVictor Julien <vjulien@oisf.net>
Wed, 14 Jan 2026 12:49:10 +0000 (12:49 +0000)
Ticket: 8116

tests/bypass-quic-enabled/README.md [new file with mode: 0644]
tests/bypass-quic-enabled/test.yaml [new file with mode: 0644]

diff --git a/tests/bypass-quic-enabled/README.md b/tests/bypass-quic-enabled/README.md
new file mode 100644 (file)
index 0000000..8ba1970
--- /dev/null
@@ -0,0 +1,11 @@
+# Test Description
+
+Tests that the encrypted part of the quic traffic is bypassed
+
+## PCAP
+
+reused
+
+## Related issues
+
+https://redmine.openinfosecfoundation.org/issues/8116
diff --git a/tests/bypass-quic-enabled/test.yaml b/tests/bypass-quic-enabled/test.yaml
new file mode 100644 (file)
index 0000000..1c29e26
--- /dev/null
@@ -0,0 +1,17 @@
+requires:
+    min-version: 9
+
+pcap: ../quic-v2/input.pcap
+
+args:
+- --set app-layer.protocols.quic.encryption-handling=bypass
+- --set stream.bypass=false
+
+checks:
+  - filter:
+      count: 1
+      match:
+        event_type: stats
+  - stats:
+      flow_bypassed.local_pkts: 13
+      flow_bypassed.local_bytes: 2634