]> git.ipfire.org Git - thirdparty/suricata-verify.git/commitdiff
nfs3: add test for readdirplus records 699/head
authorSam Muhammed <ghostinthehive.vx@gmail.com>
Sat, 22 Jan 2022 14:30:58 +0000 (16:30 +0200)
committerVictor Julien <victor@inliniac.net>
Mon, 31 Jan 2022 19:53:31 +0000 (20:53 +0100)
Required for nfs3_records unittests
4e2edd44aa08f08286001701ec0860c6638625d5

Task #4866

tests/nfs3-readdirplus/README.md [new file with mode: 0644]
tests/nfs3-readdirplus/input.pcap [new file with mode: 0644]
tests/nfs3-readdirplus/test.yaml [new file with mode: 0644]

diff --git a/tests/nfs3-readdirplus/README.md b/tests/nfs3-readdirplus/README.md
new file mode 100644 (file)
index 0000000..59d3a44
--- /dev/null
@@ -0,0 +1,4 @@
+PCAP
+====
+
+PCAP by Victor Julien
diff --git a/tests/nfs3-readdirplus/input.pcap b/tests/nfs3-readdirplus/input.pcap
new file mode 100644 (file)
index 0000000..2f52dc5
Binary files /dev/null and b/tests/nfs3-readdirplus/input.pcap differ
diff --git a/tests/nfs3-readdirplus/test.yaml b/tests/nfs3-readdirplus/test.yaml
new file mode 100644 (file)
index 0000000..dbaefbd
--- /dev/null
@@ -0,0 +1,33 @@
+requires:
+  min-version: 6.0
+  files:
+    - rust/src/nfs/nfs3.rs
+
+args:
+- -k none
+- --set stream.midstream=true
+- --set app-layer.protocols.nfs.enabled=yes
+
+checks:
+  - filter:
+      count: 1
+      match:
+        event_type: nfs
+        dest_ip: 192.168.1.6
+        dest_port: 939
+        nfs.version: 3
+        nfs.status: OK
+        nfs.procedure: READDIRPLUS
+        nfs.type: response
+        nfs.filename: ""
+        nfs.hhash: 23ea69b6
+        nfs.id: 1
+        nfs.file_tx: false
+        proto: TCP
+        src_ip: 192.168.1.2
+        src_port: 2049
+        rpc.xid: 3391488638
+        rpc.status: ACCEPTED
+        rpc.auth_type: UNIX
+        rpc.creds.uid: 1000
+        rpc.creds.gid: 1000