tftp: improves check for alert app-layer data

diff --git a/tests/output-eve-tftp-01/test.yaml b/tests/output-eve-tftp-01/test.yaml
index b83cefc3ebb81d464060a09fca88c44fa1689d7d..814c80d54ba98c506be8de7cf6fa58c223be48b1 100644 (file)
--- a/tests/output-eve-tftp-01/test.yaml
+++ b/tests/output-eve-tftp-01/test.yaml
@@ -15,3 +15,9 @@ checks:
     count: 1
     match:
       event_type: alert
+- filter:
+    min-version: 8
+    count: 1
+    match:
+      event_type: alert
+      tftp.packet: "read"