]> git.ipfire.org Git - thirdparty/suricata-verify.git/commitdiff
Adds test about smb2 async read response
authorPhilippe Antoine <contact@catenacyber.fr>
Tue, 22 Nov 2022 20:45:52 +0000 (21:45 +0100)
committerPhilippe Antoine <contact@catenacyber.fr>
Tue, 22 Nov 2022 20:45:52 +0000 (21:45 +0100)
tests/smb2-async-read/README.md [new file with mode: 0644]
tests/smb2-async-read/input.pcap [new file with mode: 0644]
tests/smb2-async-read/test.yaml [new file with mode: 0644]

diff --git a/tests/smb2-async-read/README.md b/tests/smb2-async-read/README.md
new file mode 100644 (file)
index 0000000..7a70efd
--- /dev/null
@@ -0,0 +1,7 @@
+# Description
+
+Test SMB2 async response for read request
+
+# PCAP
+
+The pcap comes from https://redmine.openinfosecfoundation.org/issues/5161
diff --git a/tests/smb2-async-read/input.pcap b/tests/smb2-async-read/input.pcap
new file mode 100644 (file)
index 0000000..e7ff22d
Binary files /dev/null and b/tests/smb2-async-read/input.pcap differ
diff --git a/tests/smb2-async-read/test.yaml b/tests/smb2-async-read/test.yaml
new file mode 100644 (file)
index 0000000..03301a8
--- /dev/null
@@ -0,0 +1,12 @@
+requires:
+  min-version: 7
+
+# disables checksum verification
+args:
+- -k none
+
+checks:
+  - filter:
+      count: 1
+      match:
+        event_type: fileinfo