tests: Add tests for issue 3490

diff --git a/tests/bug-3490/test.rules b/tests/bug-3490/test.rules
new file mode 100644 (file)
index 0000000..95078f9
--- /dev/null
+++ b/tests/bug-3490/test.rules
@@ -0,0 +1,2 @@
+alert snmp any any -> any any (msg:"SNMP test1"; snmp.version; sid:1000003;)
+alert snmp any any -> any any (msg:"SNMP test2"; snmp.pdu_type; sid:1000007;)

diff --git a/tests/bug-3490/test.yaml b/tests/bug-3490/test.yaml
new file mode 100644 (file)
index 0000000..cd526c1
--- /dev/null
+++ b/tests/bug-3490/test.yaml
@@ -0,0 +1,17 @@
+requires:
+  # No pcap required.
+  pcap: false
+
+exit-code: 1
+
+args:
+  - --engine-analysis
+
+checks:
+    - shell:
+        args: grep "snmp.pdu_type requires a value" suricata.log| wc -l | xargs
+        expect: 1
+
+    - shell:
+        args: grep "snmp.version requires a value" suricata.log| wc -l | xargs
+        expect: 1