Move http-evader-* tests to http-evader folder

diff --git a/.gitignore b/.gitignore
index 03af0bd3b3a3e6e64f304006f408e47a5b090611..a7e80bfa0bdd89edcb33543be08e3e693c1a4676 100644 (file)
--- a/.gitignore
+++ b/.gitignore
@@ -1,3 +1,3 @@
-/tests/*/output
+output/
 /private
 *~

diff --git a/tests/http-evader-000/README.md b/tests/http-evader/http-evader-000/README.md
similarity index 100%
rename from tests/http-evader-000/README.md
rename to tests/http-evader/http-evader-000/README.md

diff --git a/tests/http-evader-000/input.pcap b/tests/http-evader/http-evader-000/input.pcap
similarity index 100%
rename from tests/http-evader-000/input.pcap
rename to tests/http-evader/http-evader-000/input.pcap

diff --git a/tests/http-evader-000/test.rules b/tests/http-evader/http-evader-000/test.rules
similarity index 100%
rename from tests/http-evader-000/test.rules
rename to tests/http-evader/http-evader-000/test.rules

diff --git a/tests/http-evader-000/test.yaml b/tests/http-evader/http-evader-000/test.yaml
similarity index 100%
rename from tests/http-evader-000/test.yaml
rename to tests/http-evader/http-evader-000/test.yaml

diff --git a/tests/http-evader-001/README.md b/tests/http-evader/http-evader-001/README.md
similarity index 100%
rename from tests/http-evader-001/README.md
rename to tests/http-evader/http-evader-001/README.md

diff --git a/tests/http-evader-001/input.pcap b/tests/http-evader/http-evader-001/input.pcap
similarity index 100%
rename from tests/http-evader-001/input.pcap
rename to tests/http-evader/http-evader-001/input.pcap

diff --git a/tests/http-evader-001/test.rules b/tests/http-evader/http-evader-001/test.rules
similarity index 100%
rename from tests/http-evader-001/test.rules
rename to tests/http-evader/http-evader-001/test.rules

diff --git a/tests/http-evader-001/test.yaml b/tests/http-evader/http-evader-001/test.yaml
similarity index 100%
rename from tests/http-evader-001/test.yaml
rename to tests/http-evader/http-evader-001/test.yaml

diff --git a/tests/http-evader-002/README.md b/tests/http-evader/http-evader-002/README.md
similarity index 100%
rename from tests/http-evader-002/README.md
rename to tests/http-evader/http-evader-002/README.md

diff --git a/tests/http-evader-002/input.pcap b/tests/http-evader/http-evader-002/input.pcap
similarity index 100%
rename from tests/http-evader-002/input.pcap
rename to tests/http-evader/http-evader-002/input.pcap

diff --git a/tests/http-evader-002/test.rules b/tests/http-evader/http-evader-002/test.rules
similarity index 100%
rename from tests/http-evader-002/test.rules
rename to tests/http-evader/http-evader-002/test.rules

diff --git a/tests/http-evader-002/test.yaml b/tests/http-evader/http-evader-002/test.yaml
similarity index 100%
rename from tests/http-evader-002/test.yaml
rename to tests/http-evader/http-evader-002/test.yaml

diff --git a/tests/http-evader-003/README.md b/tests/http-evader/http-evader-003/README.md
similarity index 100%
rename from tests/http-evader-003/README.md
rename to tests/http-evader/http-evader-003/README.md

diff --git a/tests/http-evader-003/input.pcap b/tests/http-evader/http-evader-003/input.pcap
similarity index 100%
rename from tests/http-evader-003/input.pcap
rename to tests/http-evader/http-evader-003/input.pcap

diff --git a/tests/http-evader-003/test.rules b/tests/http-evader/http-evader-003/test.rules
similarity index 100%
rename from tests/http-evader-003/test.rules
rename to tests/http-evader/http-evader-003/test.rules

diff --git a/tests/http-evader-003/test.yaml b/tests/http-evader/http-evader-003/test.yaml
similarity index 100%
rename from tests/http-evader-003/test.yaml
rename to tests/http-evader/http-evader-003/test.yaml

diff --git a/tests/http-evader-004/README.md b/tests/http-evader/http-evader-004/README.md
similarity index 100%
rename from tests/http-evader-004/README.md
rename to tests/http-evader/http-evader-004/README.md

diff --git a/tests/http-evader-004/input.pcap b/tests/http-evader/http-evader-004/input.pcap
similarity index 100%
rename from tests/http-evader-004/input.pcap
rename to tests/http-evader/http-evader-004/input.pcap

diff --git a/tests/http-evader-004/test.rules b/tests/http-evader/http-evader-004/test.rules
similarity index 100%
rename from tests/http-evader-004/test.rules
rename to tests/http-evader/http-evader-004/test.rules

diff --git a/tests/http-evader-004/test.yaml b/tests/http-evader/http-evader-004/test.yaml
similarity index 100%
rename from tests/http-evader-004/test.yaml
rename to tests/http-evader/http-evader-004/test.yaml

diff --git a/tests/http-evader-005/README.md b/tests/http-evader/http-evader-005/README.md
similarity index 100%
rename from tests/http-evader-005/README.md
rename to tests/http-evader/http-evader-005/README.md

diff --git a/tests/http-evader-005/input.pcap b/tests/http-evader/http-evader-005/input.pcap
similarity index 100%
rename from tests/http-evader-005/input.pcap
rename to tests/http-evader/http-evader-005/input.pcap

diff --git a/tests/http-evader-005/test.rules b/tests/http-evader/http-evader-005/test.rules
similarity index 100%
rename from tests/http-evader-005/test.rules
rename to tests/http-evader/http-evader-005/test.rules

diff --git a/tests/http-evader-005/test.yaml b/tests/http-evader/http-evader-005/test.yaml
similarity index 100%
rename from tests/http-evader-005/test.yaml
rename to tests/http-evader/http-evader-005/test.yaml

diff --git a/tests/http-evader-006/README.md b/tests/http-evader/http-evader-006/README.md
similarity index 100%
rename from tests/http-evader-006/README.md
rename to tests/http-evader/http-evader-006/README.md

diff --git a/tests/http-evader-006/input.pcap b/tests/http-evader/http-evader-006/input.pcap
similarity index 100%
rename from tests/http-evader-006/input.pcap
rename to tests/http-evader/http-evader-006/input.pcap

diff --git a/tests/http-evader-006/test.rules b/tests/http-evader/http-evader-006/test.rules
similarity index 100%
rename from tests/http-evader-006/test.rules
rename to tests/http-evader/http-evader-006/test.rules

diff --git a/tests/http-evader-006/test.yaml b/tests/http-evader/http-evader-006/test.yaml
similarity index 100%
rename from tests/http-evader-006/test.yaml
rename to tests/http-evader/http-evader-006/test.yaml

diff --git a/tests/http-evader-007/README.md b/tests/http-evader/http-evader-007/README.md
similarity index 100%
rename from tests/http-evader-007/README.md
rename to tests/http-evader/http-evader-007/README.md

diff --git a/tests/http-evader-007/input.pcap b/tests/http-evader/http-evader-007/input.pcap
similarity index 100%
rename from tests/http-evader-007/input.pcap
rename to tests/http-evader/http-evader-007/input.pcap

diff --git a/tests/http-evader-007/test.rules b/tests/http-evader/http-evader-007/test.rules
similarity index 100%
rename from tests/http-evader-007/test.rules
rename to tests/http-evader/http-evader-007/test.rules

diff --git a/tests/http-evader-007/test.yaml b/tests/http-evader/http-evader-007/test.yaml
similarity index 100%
rename from tests/http-evader-007/test.yaml
rename to tests/http-evader/http-evader-007/test.yaml

diff --git a/tests/http-evader-008/README.md b/tests/http-evader/http-evader-008/README.md
similarity index 100%
rename from tests/http-evader-008/README.md
rename to tests/http-evader/http-evader-008/README.md

diff --git a/tests/http-evader-008/input.pcap b/tests/http-evader/http-evader-008/input.pcap
similarity index 100%
rename from tests/http-evader-008/input.pcap
rename to tests/http-evader/http-evader-008/input.pcap

diff --git a/tests/http-evader-008/test.rules b/tests/http-evader/http-evader-008/test.rules
similarity index 100%
rename from tests/http-evader-008/test.rules
rename to tests/http-evader/http-evader-008/test.rules

diff --git a/tests/http-evader-008/test.yaml b/tests/http-evader/http-evader-008/test.yaml
similarity index 100%
rename from tests/http-evader-008/test.yaml
rename to tests/http-evader/http-evader-008/test.yaml

diff --git a/tests/http-evader-009/README.md b/tests/http-evader/http-evader-009/README.md
similarity index 100%
rename from tests/http-evader-009/README.md
rename to tests/http-evader/http-evader-009/README.md

diff --git a/tests/http-evader-009/input.pcap b/tests/http-evader/http-evader-009/input.pcap
similarity index 100%
rename from tests/http-evader-009/input.pcap
rename to tests/http-evader/http-evader-009/input.pcap

diff --git a/tests/http-evader-009/test.rules b/tests/http-evader/http-evader-009/test.rules
similarity index 100%
rename from tests/http-evader-009/test.rules
rename to tests/http-evader/http-evader-009/test.rules

diff --git a/tests/http-evader-009/test.yaml b/tests/http-evader/http-evader-009/test.yaml
similarity index 100%
rename from tests/http-evader-009/test.yaml
rename to tests/http-evader/http-evader-009/test.yaml

diff --git a/tests/http-evader-010/README.md b/tests/http-evader/http-evader-010/README.md
similarity index 100%
rename from tests/http-evader-010/README.md
rename to tests/http-evader/http-evader-010/README.md

diff --git a/tests/http-evader-010/input.pcap b/tests/http-evader/http-evader-010/input.pcap
similarity index 100%
rename from tests/http-evader-010/input.pcap
rename to tests/http-evader/http-evader-010/input.pcap

diff --git a/tests/http-evader-010/test.rules b/tests/http-evader/http-evader-010/test.rules
similarity index 100%
rename from tests/http-evader-010/test.rules
rename to tests/http-evader/http-evader-010/test.rules

diff --git a/tests/http-evader-010/test.yaml b/tests/http-evader/http-evader-010/test.yaml
similarity index 100%
rename from tests/http-evader-010/test.yaml
rename to tests/http-evader/http-evader-010/test.yaml

diff --git a/tests/http-evader-011/README.md b/tests/http-evader/http-evader-011/README.md
similarity index 100%
rename from tests/http-evader-011/README.md
rename to tests/http-evader/http-evader-011/README.md

diff --git a/tests/http-evader-011/input.pcap b/tests/http-evader/http-evader-011/input.pcap
similarity index 100%
rename from tests/http-evader-011/input.pcap
rename to tests/http-evader/http-evader-011/input.pcap

diff --git a/tests/http-evader-011/test.rules b/tests/http-evader/http-evader-011/test.rules
similarity index 100%
rename from tests/http-evader-011/test.rules
rename to tests/http-evader/http-evader-011/test.rules

diff --git a/tests/http-evader-011/test.yaml b/tests/http-evader/http-evader-011/test.yaml
similarity index 100%
rename from tests/http-evader-011/test.yaml
rename to tests/http-evader/http-evader-011/test.yaml

diff --git a/tests/http-evader-012/README.md b/tests/http-evader/http-evader-012/README.md
similarity index 100%
rename from tests/http-evader-012/README.md
rename to tests/http-evader/http-evader-012/README.md

diff --git a/tests/http-evader-012/input.pcap b/tests/http-evader/http-evader-012/input.pcap
similarity index 100%
rename from tests/http-evader-012/input.pcap
rename to tests/http-evader/http-evader-012/input.pcap

diff --git a/tests/http-evader-012/test.rules b/tests/http-evader/http-evader-012/test.rules
similarity index 100%
rename from tests/http-evader-012/test.rules
rename to tests/http-evader/http-evader-012/test.rules

diff --git a/tests/http-evader-012/test.yaml b/tests/http-evader/http-evader-012/test.yaml
similarity index 100%
rename from tests/http-evader-012/test.yaml
rename to tests/http-evader/http-evader-012/test.yaml

diff --git a/tests/http-evader-013/README.md b/tests/http-evader/http-evader-013/README.md
similarity index 100%
rename from tests/http-evader-013/README.md
rename to tests/http-evader/http-evader-013/README.md

diff --git a/tests/http-evader-013/input.pcap b/tests/http-evader/http-evader-013/input.pcap
similarity index 100%
rename from tests/http-evader-013/input.pcap
rename to tests/http-evader/http-evader-013/input.pcap

diff --git a/tests/http-evader-013/test.rules b/tests/http-evader/http-evader-013/test.rules
similarity index 100%
rename from tests/http-evader-013/test.rules
rename to tests/http-evader/http-evader-013/test.rules

diff --git a/tests/http-evader-013/test.yaml b/tests/http-evader/http-evader-013/test.yaml
similarity index 100%
rename from tests/http-evader-013/test.yaml
rename to tests/http-evader/http-evader-013/test.yaml

diff --git a/tests/http-evader-014/README.md b/tests/http-evader/http-evader-014/README.md
similarity index 100%
rename from tests/http-evader-014/README.md
rename to tests/http-evader/http-evader-014/README.md

diff --git a/tests/http-evader-014/input.pcap b/tests/http-evader/http-evader-014/input.pcap
similarity index 100%
rename from tests/http-evader-014/input.pcap
rename to tests/http-evader/http-evader-014/input.pcap

diff --git a/tests/http-evader-014/test.rules b/tests/http-evader/http-evader-014/test.rules
similarity index 100%
rename from tests/http-evader-014/test.rules
rename to tests/http-evader/http-evader-014/test.rules

diff --git a/tests/http-evader-014/test.yaml b/tests/http-evader/http-evader-014/test.yaml
similarity index 100%
rename from tests/http-evader-014/test.yaml
rename to tests/http-evader/http-evader-014/test.yaml

diff --git a/tests/http-evader-015/README.md b/tests/http-evader/http-evader-015/README.md
similarity index 100%
rename from tests/http-evader-015/README.md
rename to tests/http-evader/http-evader-015/README.md

diff --git a/tests/http-evader-015/input.pcap b/tests/http-evader/http-evader-015/input.pcap
similarity index 100%
rename from tests/http-evader-015/input.pcap
rename to tests/http-evader/http-evader-015/input.pcap

diff --git a/tests/http-evader-015/test.rules b/tests/http-evader/http-evader-015/test.rules
similarity index 100%
rename from tests/http-evader-015/test.rules
rename to tests/http-evader/http-evader-015/test.rules

diff --git a/tests/http-evader-015/test.yaml b/tests/http-evader/http-evader-015/test.yaml
similarity index 100%
rename from tests/http-evader-015/test.yaml
rename to tests/http-evader/http-evader-015/test.yaml

diff --git a/tests/http-evader-016/README.md b/tests/http-evader/http-evader-016/README.md
similarity index 100%
rename from tests/http-evader-016/README.md
rename to tests/http-evader/http-evader-016/README.md

diff --git a/tests/http-evader-016/input.pcap b/tests/http-evader/http-evader-016/input.pcap
similarity index 100%
rename from tests/http-evader-016/input.pcap
rename to tests/http-evader/http-evader-016/input.pcap

diff --git a/tests/http-evader-016/test.rules b/tests/http-evader/http-evader-016/test.rules
similarity index 100%
rename from tests/http-evader-016/test.rules
rename to tests/http-evader/http-evader-016/test.rules

diff --git a/tests/http-evader-016/test.yaml b/tests/http-evader/http-evader-016/test.yaml
similarity index 100%
rename from tests/http-evader-016/test.yaml
rename to tests/http-evader/http-evader-016/test.yaml

diff --git a/tests/http-evader-017/README.md b/tests/http-evader/http-evader-017/README.md
similarity index 100%
rename from tests/http-evader-017/README.md
rename to tests/http-evader/http-evader-017/README.md

diff --git a/tests/http-evader-017/input.pcap b/tests/http-evader/http-evader-017/input.pcap
similarity index 100%
rename from tests/http-evader-017/input.pcap
rename to tests/http-evader/http-evader-017/input.pcap

diff --git a/tests/http-evader-017/test.rules b/tests/http-evader/http-evader-017/test.rules
similarity index 100%
rename from tests/http-evader-017/test.rules
rename to tests/http-evader/http-evader-017/test.rules

diff --git a/tests/http-evader-017/test.yaml b/tests/http-evader/http-evader-017/test.yaml
similarity index 100%
rename from tests/http-evader-017/test.yaml
rename to tests/http-evader/http-evader-017/test.yaml

diff --git a/tests/http-evader-018/README.md b/tests/http-evader/http-evader-018/README.md
similarity index 100%
rename from tests/http-evader-018/README.md
rename to tests/http-evader/http-evader-018/README.md

diff --git a/tests/http-evader-018/input.pcap b/tests/http-evader/http-evader-018/input.pcap
similarity index 100%
rename from tests/http-evader-018/input.pcap
rename to tests/http-evader/http-evader-018/input.pcap

diff --git a/tests/http-evader-018/test.rules b/tests/http-evader/http-evader-018/test.rules
similarity index 100%
rename from tests/http-evader-018/test.rules
rename to tests/http-evader/http-evader-018/test.rules

diff --git a/tests/http-evader-018/test.yaml b/tests/http-evader/http-evader-018/test.yaml
similarity index 100%
rename from tests/http-evader-018/test.yaml
rename to tests/http-evader/http-evader-018/test.yaml

diff --git a/tests/http-evader-019/README.md b/tests/http-evader/http-evader-019/README.md
similarity index 100%
rename from tests/http-evader-019/README.md
rename to tests/http-evader/http-evader-019/README.md

diff --git a/tests/http-evader-019/input.pcap b/tests/http-evader/http-evader-019/input.pcap
similarity index 100%
rename from tests/http-evader-019/input.pcap
rename to tests/http-evader/http-evader-019/input.pcap

diff --git a/tests/http-evader-019/test.rules b/tests/http-evader/http-evader-019/test.rules
similarity index 100%
rename from tests/http-evader-019/test.rules
rename to tests/http-evader/http-evader-019/test.rules

diff --git a/tests/http-evader-019/test.yaml b/tests/http-evader/http-evader-019/test.yaml
similarity index 100%
rename from tests/http-evader-019/test.yaml
rename to tests/http-evader/http-evader-019/test.yaml

diff --git a/tests/http-evader-020/README.md b/tests/http-evader/http-evader-020/README.md
similarity index 100%
rename from tests/http-evader-020/README.md
rename to tests/http-evader/http-evader-020/README.md

diff --git a/tests/http-evader-020/input.pcap b/tests/http-evader/http-evader-020/input.pcap
similarity index 100%
rename from tests/http-evader-020/input.pcap
rename to tests/http-evader/http-evader-020/input.pcap

diff --git a/tests/http-evader-020/test.rules b/tests/http-evader/http-evader-020/test.rules
similarity index 100%
rename from tests/http-evader-020/test.rules
rename to tests/http-evader/http-evader-020/test.rules

diff --git a/tests/http-evader-020/test.yaml b/tests/http-evader/http-evader-020/test.yaml
similarity index 100%
rename from tests/http-evader-020/test.yaml
rename to tests/http-evader/http-evader-020/test.yaml

diff --git a/tests/http-evader-021/README.md b/tests/http-evader/http-evader-021/README.md
similarity index 100%
rename from tests/http-evader-021/README.md
rename to tests/http-evader/http-evader-021/README.md

diff --git a/tests/http-evader-021/input.pcap b/tests/http-evader/http-evader-021/input.pcap
similarity index 100%
rename from tests/http-evader-021/input.pcap
rename to tests/http-evader/http-evader-021/input.pcap

diff --git a/tests/http-evader-021/test.rules b/tests/http-evader/http-evader-021/test.rules
similarity index 100%
rename from tests/http-evader-021/test.rules
rename to tests/http-evader/http-evader-021/test.rules

diff --git a/tests/http-evader-021/test.yaml b/tests/http-evader/http-evader-021/test.yaml
similarity index 100%
rename from tests/http-evader-021/test.yaml
rename to tests/http-evader/http-evader-021/test.yaml

diff --git a/tests/http-evader-022/README.md b/tests/http-evader/http-evader-022/README.md
similarity index 100%
rename from tests/http-evader-022/README.md
rename to tests/http-evader/http-evader-022/README.md

diff --git a/tests/http-evader-022/input.pcap b/tests/http-evader/http-evader-022/input.pcap
similarity index 100%
rename from tests/http-evader-022/input.pcap
rename to tests/http-evader/http-evader-022/input.pcap

diff --git a/tests/http-evader-022/test.rules b/tests/http-evader/http-evader-022/test.rules
similarity index 100%
rename from tests/http-evader-022/test.rules
rename to tests/http-evader/http-evader-022/test.rules

diff --git a/tests/http-evader-022/test.yaml b/tests/http-evader/http-evader-022/test.yaml
similarity index 100%
rename from tests/http-evader-022/test.yaml
rename to tests/http-evader/http-evader-022/test.yaml

diff --git a/tests/http-evader-023/README.md b/tests/http-evader/http-evader-023/README.md
similarity index 100%
rename from tests/http-evader-023/README.md
rename to tests/http-evader/http-evader-023/README.md

diff --git a/tests/http-evader-023/input.pcap b/tests/http-evader/http-evader-023/input.pcap
similarity index 100%
rename from tests/http-evader-023/input.pcap
rename to tests/http-evader/http-evader-023/input.pcap

diff --git a/tests/http-evader-023/test.rules b/tests/http-evader/http-evader-023/test.rules
similarity index 100%
rename from tests/http-evader-023/test.rules
rename to tests/http-evader/http-evader-023/test.rules

diff --git a/tests/http-evader-023/test.yaml b/tests/http-evader/http-evader-023/test.yaml
similarity index 100%
rename from tests/http-evader-023/test.yaml
rename to tests/http-evader/http-evader-023/test.yaml

diff --git a/tests/http-evader-024/README.md b/tests/http-evader/http-evader-024/README.md
similarity index 100%
rename from tests/http-evader-024/README.md
rename to tests/http-evader/http-evader-024/README.md

diff --git a/tests/http-evader-024/input.pcap b/tests/http-evader/http-evader-024/input.pcap
similarity index 100%
rename from tests/http-evader-024/input.pcap
rename to tests/http-evader/http-evader-024/input.pcap

diff --git a/tests/http-evader-024/test.rules b/tests/http-evader/http-evader-024/test.rules
similarity index 100%
rename from tests/http-evader-024/test.rules
rename to tests/http-evader/http-evader-024/test.rules

diff --git a/tests/http-evader-024/test.yaml b/tests/http-evader/http-evader-024/test.yaml
similarity index 100%
rename from tests/http-evader-024/test.yaml
rename to tests/http-evader/http-evader-024/test.yaml

diff --git a/tests/http-evader-025/README.md b/tests/http-evader/http-evader-025/README.md
similarity index 100%
rename from tests/http-evader-025/README.md
rename to tests/http-evader/http-evader-025/README.md

diff --git a/tests/http-evader-025/input.pcap b/tests/http-evader/http-evader-025/input.pcap
similarity index 100%
rename from tests/http-evader-025/input.pcap
rename to tests/http-evader/http-evader-025/input.pcap

diff --git a/tests/http-evader-025/test.rules b/tests/http-evader/http-evader-025/test.rules
similarity index 100%
rename from tests/http-evader-025/test.rules
rename to tests/http-evader/http-evader-025/test.rules

diff --git a/tests/http-evader-025/test.yaml b/tests/http-evader/http-evader-025/test.yaml
similarity index 100%
rename from tests/http-evader-025/test.yaml
rename to tests/http-evader/http-evader-025/test.yaml

diff --git a/tests/http-evader-026/README.md b/tests/http-evader/http-evader-026/README.md
similarity index 100%
rename from tests/http-evader-026/README.md
rename to tests/http-evader/http-evader-026/README.md

diff --git a/tests/http-evader-026/input.pcap b/tests/http-evader/http-evader-026/input.pcap
similarity index 100%
rename from tests/http-evader-026/input.pcap
rename to tests/http-evader/http-evader-026/input.pcap

diff --git a/tests/http-evader-026/test.rules b/tests/http-evader/http-evader-026/test.rules
similarity index 100%
rename from tests/http-evader-026/test.rules
rename to tests/http-evader/http-evader-026/test.rules

diff --git a/tests/http-evader-026/test.yaml b/tests/http-evader/http-evader-026/test.yaml
similarity index 100%
rename from tests/http-evader-026/test.yaml
rename to tests/http-evader/http-evader-026/test.yaml

diff --git a/tests/http-evader-027/README.md b/tests/http-evader/http-evader-027/README.md
similarity index 100%
rename from tests/http-evader-027/README.md
rename to tests/http-evader/http-evader-027/README.md

diff --git a/tests/http-evader-027/input.pcap b/tests/http-evader/http-evader-027/input.pcap
similarity index 100%
rename from tests/http-evader-027/input.pcap
rename to tests/http-evader/http-evader-027/input.pcap

diff --git a/tests/http-evader-027/test.rules b/tests/http-evader/http-evader-027/test.rules
similarity index 100%
rename from tests/http-evader-027/test.rules
rename to tests/http-evader/http-evader-027/test.rules

diff --git a/tests/http-evader-027/test.yaml b/tests/http-evader/http-evader-027/test.yaml
similarity index 100%
rename from tests/http-evader-027/test.yaml
rename to tests/http-evader/http-evader-027/test.yaml

diff --git a/tests/http-evader-028/README.md b/tests/http-evader/http-evader-028/README.md
similarity index 100%
rename from tests/http-evader-028/README.md
rename to tests/http-evader/http-evader-028/README.md

diff --git a/tests/http-evader-028/input.pcap b/tests/http-evader/http-evader-028/input.pcap
similarity index 100%
rename from tests/http-evader-028/input.pcap
rename to tests/http-evader/http-evader-028/input.pcap

diff --git a/tests/http-evader-028/test.rules b/tests/http-evader/http-evader-028/test.rules
similarity index 100%
rename from tests/http-evader-028/test.rules
rename to tests/http-evader/http-evader-028/test.rules

diff --git a/tests/http-evader-028/test.yaml b/tests/http-evader/http-evader-028/test.yaml
similarity index 100%
rename from tests/http-evader-028/test.yaml
rename to tests/http-evader/http-evader-028/test.yaml

diff --git a/tests/http-evader-029/README.md b/tests/http-evader/http-evader-029/README.md
similarity index 100%
rename from tests/http-evader-029/README.md
rename to tests/http-evader/http-evader-029/README.md

diff --git a/tests/http-evader-029/input.pcap b/tests/http-evader/http-evader-029/input.pcap
similarity index 100%
rename from tests/http-evader-029/input.pcap
rename to tests/http-evader/http-evader-029/input.pcap

diff --git a/tests/http-evader-029/test.rules b/tests/http-evader/http-evader-029/test.rules
similarity index 100%
rename from tests/http-evader-029/test.rules
rename to tests/http-evader/http-evader-029/test.rules

diff --git a/tests/http-evader-029/test.yaml b/tests/http-evader/http-evader-029/test.yaml
similarity index 100%
rename from tests/http-evader-029/test.yaml
rename to tests/http-evader/http-evader-029/test.yaml

diff --git a/tests/http-evader-030/README.md b/tests/http-evader/http-evader-030/README.md
similarity index 100%
rename from tests/http-evader-030/README.md
rename to tests/http-evader/http-evader-030/README.md

diff --git a/tests/http-evader-030/input.pcap b/tests/http-evader/http-evader-030/input.pcap
similarity index 100%
rename from tests/http-evader-030/input.pcap
rename to tests/http-evader/http-evader-030/input.pcap

diff --git a/tests/http-evader-030/test.rules b/tests/http-evader/http-evader-030/test.rules
similarity index 100%
rename from tests/http-evader-030/test.rules
rename to tests/http-evader/http-evader-030/test.rules

diff --git a/tests/http-evader-030/test.yaml b/tests/http-evader/http-evader-030/test.yaml
similarity index 100%
rename from tests/http-evader-030/test.yaml
rename to tests/http-evader/http-evader-030/test.yaml

diff --git a/tests/http-evader-031/README.md b/tests/http-evader/http-evader-031/README.md
similarity index 100%
rename from tests/http-evader-031/README.md
rename to tests/http-evader/http-evader-031/README.md

diff --git a/tests/http-evader-031/input.pcap b/tests/http-evader/http-evader-031/input.pcap
similarity index 100%
rename from tests/http-evader-031/input.pcap
rename to tests/http-evader/http-evader-031/input.pcap

diff --git a/tests/http-evader-031/test.rules b/tests/http-evader/http-evader-031/test.rules
similarity index 100%
rename from tests/http-evader-031/test.rules
rename to tests/http-evader/http-evader-031/test.rules

diff --git a/tests/http-evader-031/test.yaml b/tests/http-evader/http-evader-031/test.yaml
similarity index 100%
rename from tests/http-evader-031/test.yaml
rename to tests/http-evader/http-evader-031/test.yaml

diff --git a/tests/http-evader-032/README.md b/tests/http-evader/http-evader-032/README.md
similarity index 100%
rename from tests/http-evader-032/README.md
rename to tests/http-evader/http-evader-032/README.md

diff --git a/tests/http-evader-032/input.pcap b/tests/http-evader/http-evader-032/input.pcap
similarity index 100%
rename from tests/http-evader-032/input.pcap
rename to tests/http-evader/http-evader-032/input.pcap

diff --git a/tests/http-evader-032/test.rules b/tests/http-evader/http-evader-032/test.rules
similarity index 100%
rename from tests/http-evader-032/test.rules
rename to tests/http-evader/http-evader-032/test.rules

diff --git a/tests/http-evader-032/test.yaml b/tests/http-evader/http-evader-032/test.yaml
similarity index 100%
rename from tests/http-evader-032/test.yaml
rename to tests/http-evader/http-evader-032/test.yaml

diff --git a/tests/http-evader-033/README.md b/tests/http-evader/http-evader-033/README.md
similarity index 100%
rename from tests/http-evader-033/README.md
rename to tests/http-evader/http-evader-033/README.md

diff --git a/tests/http-evader-033/input.pcap b/tests/http-evader/http-evader-033/input.pcap
similarity index 100%
rename from tests/http-evader-033/input.pcap
rename to tests/http-evader/http-evader-033/input.pcap

diff --git a/tests/http-evader-033/test.rules b/tests/http-evader/http-evader-033/test.rules
similarity index 100%
rename from tests/http-evader-033/test.rules
rename to tests/http-evader/http-evader-033/test.rules

diff --git a/tests/http-evader-033/test.yaml b/tests/http-evader/http-evader-033/test.yaml
similarity index 100%
rename from tests/http-evader-033/test.yaml
rename to tests/http-evader/http-evader-033/test.yaml

diff --git a/tests/http-evader-034/README.md b/tests/http-evader/http-evader-034/README.md
similarity index 100%
rename from tests/http-evader-034/README.md
rename to tests/http-evader/http-evader-034/README.md

diff --git a/tests/http-evader-034/input.pcap b/tests/http-evader/http-evader-034/input.pcap
similarity index 100%
rename from tests/http-evader-034/input.pcap
rename to tests/http-evader/http-evader-034/input.pcap

diff --git a/tests/http-evader-034/test.rules b/tests/http-evader/http-evader-034/test.rules
similarity index 100%
rename from tests/http-evader-034/test.rules
rename to tests/http-evader/http-evader-034/test.rules

diff --git a/tests/http-evader-034/test.yaml b/tests/http-evader/http-evader-034/test.yaml
similarity index 100%
rename from tests/http-evader-034/test.yaml
rename to tests/http-evader/http-evader-034/test.yaml

diff --git a/tests/http-evader-035/README.md b/tests/http-evader/http-evader-035/README.md
similarity index 100%
rename from tests/http-evader-035/README.md
rename to tests/http-evader/http-evader-035/README.md

diff --git a/tests/http-evader-035/input.pcap b/tests/http-evader/http-evader-035/input.pcap
similarity index 100%
rename from tests/http-evader-035/input.pcap
rename to tests/http-evader/http-evader-035/input.pcap

diff --git a/tests/http-evader-035/test.rules b/tests/http-evader/http-evader-035/test.rules
similarity index 100%
rename from tests/http-evader-035/test.rules
rename to tests/http-evader/http-evader-035/test.rules

diff --git a/tests/http-evader-035/test.yaml b/tests/http-evader/http-evader-035/test.yaml
similarity index 100%
rename from tests/http-evader-035/test.yaml
rename to tests/http-evader/http-evader-035/test.yaml

diff --git a/tests/http-evader-036/README.md b/tests/http-evader/http-evader-036/README.md
similarity index 100%
rename from tests/http-evader-036/README.md
rename to tests/http-evader/http-evader-036/README.md

diff --git a/tests/http-evader-036/input.pcap b/tests/http-evader/http-evader-036/input.pcap
similarity index 100%
rename from tests/http-evader-036/input.pcap
rename to tests/http-evader/http-evader-036/input.pcap

diff --git a/tests/http-evader-036/test.rules b/tests/http-evader/http-evader-036/test.rules
similarity index 100%
rename from tests/http-evader-036/test.rules
rename to tests/http-evader/http-evader-036/test.rules

diff --git a/tests/http-evader-036/test.yaml b/tests/http-evader/http-evader-036/test.yaml
similarity index 100%
rename from tests/http-evader-036/test.yaml
rename to tests/http-evader/http-evader-036/test.yaml

diff --git a/tests/http-evader-037/README.md b/tests/http-evader/http-evader-037/README.md
similarity index 100%
rename from tests/http-evader-037/README.md
rename to tests/http-evader/http-evader-037/README.md

diff --git a/tests/http-evader-037/input.pcap b/tests/http-evader/http-evader-037/input.pcap
similarity index 100%
rename from tests/http-evader-037/input.pcap
rename to tests/http-evader/http-evader-037/input.pcap

diff --git a/tests/http-evader-037/test.rules b/tests/http-evader/http-evader-037/test.rules
similarity index 100%
rename from tests/http-evader-037/test.rules
rename to tests/http-evader/http-evader-037/test.rules

diff --git a/tests/http-evader-037/test.yaml b/tests/http-evader/http-evader-037/test.yaml
similarity index 100%
rename from tests/http-evader-037/test.yaml
rename to tests/http-evader/http-evader-037/test.yaml

diff --git a/tests/http-evader-038/README.md b/tests/http-evader/http-evader-038/README.md
similarity index 100%
rename from tests/http-evader-038/README.md
rename to tests/http-evader/http-evader-038/README.md

diff --git a/tests/http-evader-038/input.pcap b/tests/http-evader/http-evader-038/input.pcap
similarity index 100%
rename from tests/http-evader-038/input.pcap
rename to tests/http-evader/http-evader-038/input.pcap

diff --git a/tests/http-evader-038/test.rules b/tests/http-evader/http-evader-038/test.rules
similarity index 100%
rename from tests/http-evader-038/test.rules
rename to tests/http-evader/http-evader-038/test.rules

diff --git a/tests/http-evader-038/test.yaml b/tests/http-evader/http-evader-038/test.yaml
similarity index 100%
rename from tests/http-evader-038/test.yaml
rename to tests/http-evader/http-evader-038/test.yaml

diff --git a/tests/http-evader-039/README.md b/tests/http-evader/http-evader-039/README.md
similarity index 100%
rename from tests/http-evader-039/README.md
rename to tests/http-evader/http-evader-039/README.md

diff --git a/tests/http-evader-039/input.pcap b/tests/http-evader/http-evader-039/input.pcap
similarity index 100%
rename from tests/http-evader-039/input.pcap
rename to tests/http-evader/http-evader-039/input.pcap

diff --git a/tests/http-evader-039/test.rules b/tests/http-evader/http-evader-039/test.rules
similarity index 100%
rename from tests/http-evader-039/test.rules
rename to tests/http-evader/http-evader-039/test.rules

diff --git a/tests/http-evader-039/test.yaml b/tests/http-evader/http-evader-039/test.yaml
similarity index 100%
rename from tests/http-evader-039/test.yaml
rename to tests/http-evader/http-evader-039/test.yaml

diff --git a/tests/http-evader-040/README.md b/tests/http-evader/http-evader-040/README.md
similarity index 100%
rename from tests/http-evader-040/README.md
rename to tests/http-evader/http-evader-040/README.md

diff --git a/tests/http-evader-040/input.pcap b/tests/http-evader/http-evader-040/input.pcap
similarity index 100%
rename from tests/http-evader-040/input.pcap
rename to tests/http-evader/http-evader-040/input.pcap

diff --git a/tests/http-evader-040/test.rules b/tests/http-evader/http-evader-040/test.rules
similarity index 100%
rename from tests/http-evader-040/test.rules
rename to tests/http-evader/http-evader-040/test.rules

diff --git a/tests/http-evader-040/test.yaml b/tests/http-evader/http-evader-040/test.yaml
similarity index 100%
rename from tests/http-evader-040/test.yaml
rename to tests/http-evader/http-evader-040/test.yaml

diff --git a/tests/http-evader-041/README.md b/tests/http-evader/http-evader-041/README.md
similarity index 100%
rename from tests/http-evader-041/README.md
rename to tests/http-evader/http-evader-041/README.md

diff --git a/tests/http-evader-041/input.pcap b/tests/http-evader/http-evader-041/input.pcap
similarity index 100%
rename from tests/http-evader-041/input.pcap
rename to tests/http-evader/http-evader-041/input.pcap

diff --git a/tests/http-evader-041/test.rules b/tests/http-evader/http-evader-041/test.rules
similarity index 100%
rename from tests/http-evader-041/test.rules
rename to tests/http-evader/http-evader-041/test.rules

diff --git a/tests/http-evader-041/test.yaml b/tests/http-evader/http-evader-041/test.yaml
similarity index 100%
rename from tests/http-evader-041/test.yaml
rename to tests/http-evader/http-evader-041/test.yaml

diff --git a/tests/http-evader-042/README.md b/tests/http-evader/http-evader-042/README.md
similarity index 100%
rename from tests/http-evader-042/README.md
rename to tests/http-evader/http-evader-042/README.md

diff --git a/tests/http-evader-042/input.pcap b/tests/http-evader/http-evader-042/input.pcap
similarity index 100%
rename from tests/http-evader-042/input.pcap
rename to tests/http-evader/http-evader-042/input.pcap

diff --git a/tests/http-evader-042/test.rules b/tests/http-evader/http-evader-042/test.rules
similarity index 100%
rename from tests/http-evader-042/test.rules
rename to tests/http-evader/http-evader-042/test.rules

diff --git a/tests/http-evader-042/test.yaml b/tests/http-evader/http-evader-042/test.yaml
similarity index 100%
rename from tests/http-evader-042/test.yaml
rename to tests/http-evader/http-evader-042/test.yaml

diff --git a/tests/http-evader-043/README.md b/tests/http-evader/http-evader-043/README.md
similarity index 100%
rename from tests/http-evader-043/README.md
rename to tests/http-evader/http-evader-043/README.md

diff --git a/tests/http-evader-043/input.pcap b/tests/http-evader/http-evader-043/input.pcap
similarity index 100%
rename from tests/http-evader-043/input.pcap
rename to tests/http-evader/http-evader-043/input.pcap

diff --git a/tests/http-evader-043/test.rules b/tests/http-evader/http-evader-043/test.rules
similarity index 100%
rename from tests/http-evader-043/test.rules
rename to tests/http-evader/http-evader-043/test.rules

diff --git a/tests/http-evader-043/test.yaml b/tests/http-evader/http-evader-043/test.yaml
similarity index 100%
rename from tests/http-evader-043/test.yaml
rename to tests/http-evader/http-evader-043/test.yaml

diff --git a/tests/http-evader-044/README.md b/tests/http-evader/http-evader-044/README.md
similarity index 100%
rename from tests/http-evader-044/README.md
rename to tests/http-evader/http-evader-044/README.md

diff --git a/tests/http-evader-044/input.pcap b/tests/http-evader/http-evader-044/input.pcap
similarity index 100%
rename from tests/http-evader-044/input.pcap
rename to tests/http-evader/http-evader-044/input.pcap

diff --git a/tests/http-evader-044/test.rules b/tests/http-evader/http-evader-044/test.rules
similarity index 100%
rename from tests/http-evader-044/test.rules
rename to tests/http-evader/http-evader-044/test.rules

diff --git a/tests/http-evader-044/test.yaml b/tests/http-evader/http-evader-044/test.yaml
similarity index 100%
rename from tests/http-evader-044/test.yaml
rename to tests/http-evader/http-evader-044/test.yaml

diff --git a/tests/http-evader-045/README.md b/tests/http-evader/http-evader-045/README.md
similarity index 100%
rename from tests/http-evader-045/README.md
rename to tests/http-evader/http-evader-045/README.md

diff --git a/tests/http-evader-045/input.pcap b/tests/http-evader/http-evader-045/input.pcap
similarity index 100%
rename from tests/http-evader-045/input.pcap
rename to tests/http-evader/http-evader-045/input.pcap

diff --git a/tests/http-evader-045/test.rules b/tests/http-evader/http-evader-045/test.rules
similarity index 100%
rename from tests/http-evader-045/test.rules
rename to tests/http-evader/http-evader-045/test.rules

diff --git a/tests/http-evader-045/test.yaml b/tests/http-evader/http-evader-045/test.yaml
similarity index 100%
rename from tests/http-evader-045/test.yaml
rename to tests/http-evader/http-evader-045/test.yaml

diff --git a/tests/http-evader-046/README.md b/tests/http-evader/http-evader-046/README.md
similarity index 100%
rename from tests/http-evader-046/README.md
rename to tests/http-evader/http-evader-046/README.md

diff --git a/tests/http-evader-046/input.pcap b/tests/http-evader/http-evader-046/input.pcap
similarity index 100%
rename from tests/http-evader-046/input.pcap
rename to tests/http-evader/http-evader-046/input.pcap

diff --git a/tests/http-evader-046/test.rules b/tests/http-evader/http-evader-046/test.rules
similarity index 100%
rename from tests/http-evader-046/test.rules
rename to tests/http-evader/http-evader-046/test.rules

diff --git a/tests/http-evader-046/test.yaml b/tests/http-evader/http-evader-046/test.yaml
similarity index 100%
rename from tests/http-evader-046/test.yaml
rename to tests/http-evader/http-evader-046/test.yaml

diff --git a/tests/http-evader-047/README.md b/tests/http-evader/http-evader-047/README.md
similarity index 100%
rename from tests/http-evader-047/README.md
rename to tests/http-evader/http-evader-047/README.md

diff --git a/tests/http-evader-047/input.pcap b/tests/http-evader/http-evader-047/input.pcap
similarity index 100%
rename from tests/http-evader-047/input.pcap
rename to tests/http-evader/http-evader-047/input.pcap

diff --git a/tests/http-evader-047/test.rules b/tests/http-evader/http-evader-047/test.rules
similarity index 100%
rename from tests/http-evader-047/test.rules
rename to tests/http-evader/http-evader-047/test.rules

diff --git a/tests/http-evader-047/test.yaml b/tests/http-evader/http-evader-047/test.yaml
similarity index 100%
rename from tests/http-evader-047/test.yaml
rename to tests/http-evader/http-evader-047/test.yaml

diff --git a/tests/http-evader-048/README.md b/tests/http-evader/http-evader-048/README.md
similarity index 100%
rename from tests/http-evader-048/README.md
rename to tests/http-evader/http-evader-048/README.md

diff --git a/tests/http-evader-048/input.pcap b/tests/http-evader/http-evader-048/input.pcap
similarity index 100%
rename from tests/http-evader-048/input.pcap
rename to tests/http-evader/http-evader-048/input.pcap

diff --git a/tests/http-evader-048/test.rules b/tests/http-evader/http-evader-048/test.rules
similarity index 100%
rename from tests/http-evader-048/test.rules
rename to tests/http-evader/http-evader-048/test.rules

diff --git a/tests/http-evader-048/test.yaml b/tests/http-evader/http-evader-048/test.yaml
similarity index 100%
rename from tests/http-evader-048/test.yaml
rename to tests/http-evader/http-evader-048/test.yaml

diff --git a/tests/http-evader-049/README.md b/tests/http-evader/http-evader-049/README.md
similarity index 100%
rename from tests/http-evader-049/README.md
rename to tests/http-evader/http-evader-049/README.md

diff --git a/tests/http-evader-049/input.pcap b/tests/http-evader/http-evader-049/input.pcap
similarity index 100%
rename from tests/http-evader-049/input.pcap
rename to tests/http-evader/http-evader-049/input.pcap

diff --git a/tests/http-evader-049/test.rules b/tests/http-evader/http-evader-049/test.rules
similarity index 100%
rename from tests/http-evader-049/test.rules
rename to tests/http-evader/http-evader-049/test.rules

diff --git a/tests/http-evader-049/test.yaml b/tests/http-evader/http-evader-049/test.yaml
similarity index 100%
rename from tests/http-evader-049/test.yaml
rename to tests/http-evader/http-evader-049/test.yaml

diff --git a/tests/http-evader-050/README.md b/tests/http-evader/http-evader-050/README.md
similarity index 100%
rename from tests/http-evader-050/README.md
rename to tests/http-evader/http-evader-050/README.md

diff --git a/tests/http-evader-050/input.pcap b/tests/http-evader/http-evader-050/input.pcap
similarity index 100%
rename from tests/http-evader-050/input.pcap
rename to tests/http-evader/http-evader-050/input.pcap

diff --git a/tests/http-evader-050/test.rules b/tests/http-evader/http-evader-050/test.rules
similarity index 100%
rename from tests/http-evader-050/test.rules
rename to tests/http-evader/http-evader-050/test.rules

diff --git a/tests/http-evader-050/test.yaml b/tests/http-evader/http-evader-050/test.yaml
similarity index 100%
rename from tests/http-evader-050/test.yaml
rename to tests/http-evader/http-evader-050/test.yaml

diff --git a/tests/http-evader-051/README.md b/tests/http-evader/http-evader-051/README.md
similarity index 100%
rename from tests/http-evader-051/README.md
rename to tests/http-evader/http-evader-051/README.md

diff --git a/tests/http-evader-051/input.pcap b/tests/http-evader/http-evader-051/input.pcap
similarity index 100%
rename from tests/http-evader-051/input.pcap
rename to tests/http-evader/http-evader-051/input.pcap

diff --git a/tests/http-evader-051/test.rules b/tests/http-evader/http-evader-051/test.rules
similarity index 100%
rename from tests/http-evader-051/test.rules
rename to tests/http-evader/http-evader-051/test.rules

diff --git a/tests/http-evader-051/test.yaml b/tests/http-evader/http-evader-051/test.yaml
similarity index 100%
rename from tests/http-evader-051/test.yaml
rename to tests/http-evader/http-evader-051/test.yaml

diff --git a/tests/http-evader-052/README.md b/tests/http-evader/http-evader-052/README.md
similarity index 100%
rename from tests/http-evader-052/README.md
rename to tests/http-evader/http-evader-052/README.md

diff --git a/tests/http-evader-052/input.pcap b/tests/http-evader/http-evader-052/input.pcap
similarity index 100%
rename from tests/http-evader-052/input.pcap
rename to tests/http-evader/http-evader-052/input.pcap

diff --git a/tests/http-evader-052/test.rules b/tests/http-evader/http-evader-052/test.rules
similarity index 100%
rename from tests/http-evader-052/test.rules
rename to tests/http-evader/http-evader-052/test.rules

diff --git a/tests/http-evader-052/test.yaml b/tests/http-evader/http-evader-052/test.yaml
similarity index 100%
rename from tests/http-evader-052/test.yaml
rename to tests/http-evader/http-evader-052/test.yaml

diff --git a/tests/http-evader-053/README.md b/tests/http-evader/http-evader-053/README.md
similarity index 100%
rename from tests/http-evader-053/README.md
rename to tests/http-evader/http-evader-053/README.md

diff --git a/tests/http-evader-053/input.pcap b/tests/http-evader/http-evader-053/input.pcap
similarity index 100%
rename from tests/http-evader-053/input.pcap
rename to tests/http-evader/http-evader-053/input.pcap

diff --git a/tests/http-evader-053/test.rules b/tests/http-evader/http-evader-053/test.rules
similarity index 100%
rename from tests/http-evader-053/test.rules
rename to tests/http-evader/http-evader-053/test.rules

diff --git a/tests/http-evader-053/test.yaml b/tests/http-evader/http-evader-053/test.yaml
similarity index 100%
rename from tests/http-evader-053/test.yaml
rename to tests/http-evader/http-evader-053/test.yaml

diff --git a/tests/http-evader-054/README.md b/tests/http-evader/http-evader-054/README.md
similarity index 100%
rename from tests/http-evader-054/README.md
rename to tests/http-evader/http-evader-054/README.md

diff --git a/tests/http-evader-054/input.pcap b/tests/http-evader/http-evader-054/input.pcap
similarity index 100%
rename from tests/http-evader-054/input.pcap
rename to tests/http-evader/http-evader-054/input.pcap

diff --git a/tests/http-evader-054/test.rules b/tests/http-evader/http-evader-054/test.rules
similarity index 100%
rename from tests/http-evader-054/test.rules
rename to tests/http-evader/http-evader-054/test.rules

diff --git a/tests/http-evader-054/test.yaml b/tests/http-evader/http-evader-054/test.yaml
similarity index 100%
rename from tests/http-evader-054/test.yaml
rename to tests/http-evader/http-evader-054/test.yaml

diff --git a/tests/http-evader-055/README.md b/tests/http-evader/http-evader-055/README.md
similarity index 100%
rename from tests/http-evader-055/README.md
rename to tests/http-evader/http-evader-055/README.md

diff --git a/tests/http-evader-055/input.pcap b/tests/http-evader/http-evader-055/input.pcap
similarity index 100%
rename from tests/http-evader-055/input.pcap
rename to tests/http-evader/http-evader-055/input.pcap

diff --git a/tests/http-evader-055/test.rules b/tests/http-evader/http-evader-055/test.rules
similarity index 100%
rename from tests/http-evader-055/test.rules
rename to tests/http-evader/http-evader-055/test.rules

diff --git a/tests/http-evader-055/test.yaml b/tests/http-evader/http-evader-055/test.yaml
similarity index 100%
rename from tests/http-evader-055/test.yaml
rename to tests/http-evader/http-evader-055/test.yaml

diff --git a/tests/http-evader-056/README.md b/tests/http-evader/http-evader-056/README.md
similarity index 100%
rename from tests/http-evader-056/README.md
rename to tests/http-evader/http-evader-056/README.md

diff --git a/tests/http-evader-056/input.pcap b/tests/http-evader/http-evader-056/input.pcap
similarity index 100%
rename from tests/http-evader-056/input.pcap
rename to tests/http-evader/http-evader-056/input.pcap

diff --git a/tests/http-evader-056/test.rules b/tests/http-evader/http-evader-056/test.rules
similarity index 100%
rename from tests/http-evader-056/test.rules
rename to tests/http-evader/http-evader-056/test.rules

diff --git a/tests/http-evader-056/test.yaml b/tests/http-evader/http-evader-056/test.yaml
similarity index 100%
rename from tests/http-evader-056/test.yaml
rename to tests/http-evader/http-evader-056/test.yaml

diff --git a/tests/http-evader-057/README.md b/tests/http-evader/http-evader-057/README.md
similarity index 100%
rename from tests/http-evader-057/README.md
rename to tests/http-evader/http-evader-057/README.md

diff --git a/tests/http-evader-057/input.pcap b/tests/http-evader/http-evader-057/input.pcap
similarity index 100%
rename from tests/http-evader-057/input.pcap
rename to tests/http-evader/http-evader-057/input.pcap

diff --git a/tests/http-evader-057/test.rules b/tests/http-evader/http-evader-057/test.rules
similarity index 100%
rename from tests/http-evader-057/test.rules
rename to tests/http-evader/http-evader-057/test.rules

diff --git a/tests/http-evader-057/test.yaml b/tests/http-evader/http-evader-057/test.yaml
similarity index 100%
rename from tests/http-evader-057/test.yaml
rename to tests/http-evader/http-evader-057/test.yaml

diff --git a/tests/http-evader-058/README.md b/tests/http-evader/http-evader-058/README.md
similarity index 100%
rename from tests/http-evader-058/README.md
rename to tests/http-evader/http-evader-058/README.md

diff --git a/tests/http-evader-058/input.pcap b/tests/http-evader/http-evader-058/input.pcap
similarity index 100%
rename from tests/http-evader-058/input.pcap
rename to tests/http-evader/http-evader-058/input.pcap

diff --git a/tests/http-evader-058/test.rules b/tests/http-evader/http-evader-058/test.rules
similarity index 100%
rename from tests/http-evader-058/test.rules
rename to tests/http-evader/http-evader-058/test.rules

diff --git a/tests/http-evader-058/test.yaml b/tests/http-evader/http-evader-058/test.yaml
similarity index 100%
rename from tests/http-evader-058/test.yaml
rename to tests/http-evader/http-evader-058/test.yaml

diff --git a/tests/http-evader-059/README.md b/tests/http-evader/http-evader-059/README.md
similarity index 100%
rename from tests/http-evader-059/README.md
rename to tests/http-evader/http-evader-059/README.md

diff --git a/tests/http-evader-059/input.pcap b/tests/http-evader/http-evader-059/input.pcap
similarity index 100%
rename from tests/http-evader-059/input.pcap
rename to tests/http-evader/http-evader-059/input.pcap

diff --git a/tests/http-evader-059/test.rules b/tests/http-evader/http-evader-059/test.rules
similarity index 100%
rename from tests/http-evader-059/test.rules
rename to tests/http-evader/http-evader-059/test.rules

diff --git a/tests/http-evader-059/test.yaml b/tests/http-evader/http-evader-059/test.yaml
similarity index 100%
rename from tests/http-evader-059/test.yaml
rename to tests/http-evader/http-evader-059/test.yaml

diff --git a/tests/http-evader-060/README.md b/tests/http-evader/http-evader-060/README.md
similarity index 100%
rename from tests/http-evader-060/README.md
rename to tests/http-evader/http-evader-060/README.md

diff --git a/tests/http-evader-060/input.pcap b/tests/http-evader/http-evader-060/input.pcap
similarity index 100%
rename from tests/http-evader-060/input.pcap
rename to tests/http-evader/http-evader-060/input.pcap

diff --git a/tests/http-evader-060/test.rules b/tests/http-evader/http-evader-060/test.rules
similarity index 100%
rename from tests/http-evader-060/test.rules
rename to tests/http-evader/http-evader-060/test.rules

diff --git a/tests/http-evader-060/test.yaml b/tests/http-evader/http-evader-060/test.yaml
similarity index 100%
rename from tests/http-evader-060/test.yaml
rename to tests/http-evader/http-evader-060/test.yaml

diff --git a/tests/http-evader-061/README.md b/tests/http-evader/http-evader-061/README.md
similarity index 100%
rename from tests/http-evader-061/README.md
rename to tests/http-evader/http-evader-061/README.md

diff --git a/tests/http-evader-061/input.pcap b/tests/http-evader/http-evader-061/input.pcap
similarity index 100%
rename from tests/http-evader-061/input.pcap
rename to tests/http-evader/http-evader-061/input.pcap

diff --git a/tests/http-evader-061/test.rules b/tests/http-evader/http-evader-061/test.rules
similarity index 100%
rename from tests/http-evader-061/test.rules
rename to tests/http-evader/http-evader-061/test.rules

diff --git a/tests/http-evader-061/test.yaml b/tests/http-evader/http-evader-061/test.yaml
similarity index 100%
rename from tests/http-evader-061/test.yaml
rename to tests/http-evader/http-evader-061/test.yaml

diff --git a/tests/http-evader-062/README.md b/tests/http-evader/http-evader-062/README.md
similarity index 100%
rename from tests/http-evader-062/README.md
rename to tests/http-evader/http-evader-062/README.md

diff --git a/tests/http-evader-062/input.pcap b/tests/http-evader/http-evader-062/input.pcap
similarity index 100%
rename from tests/http-evader-062/input.pcap
rename to tests/http-evader/http-evader-062/input.pcap

diff --git a/tests/http-evader-062/test.rules b/tests/http-evader/http-evader-062/test.rules
similarity index 100%
rename from tests/http-evader-062/test.rules
rename to tests/http-evader/http-evader-062/test.rules

diff --git a/tests/http-evader-062/test.yaml b/tests/http-evader/http-evader-062/test.yaml
similarity index 100%
rename from tests/http-evader-062/test.yaml
rename to tests/http-evader/http-evader-062/test.yaml

diff --git a/tests/http-evader-063/README.md b/tests/http-evader/http-evader-063/README.md
similarity index 100%
rename from tests/http-evader-063/README.md
rename to tests/http-evader/http-evader-063/README.md

diff --git a/tests/http-evader-063/input.pcap b/tests/http-evader/http-evader-063/input.pcap
similarity index 100%
rename from tests/http-evader-063/input.pcap
rename to tests/http-evader/http-evader-063/input.pcap

diff --git a/tests/http-evader-063/test.rules b/tests/http-evader/http-evader-063/test.rules
similarity index 100%
rename from tests/http-evader-063/test.rules
rename to tests/http-evader/http-evader-063/test.rules

diff --git a/tests/http-evader-063/test.yaml b/tests/http-evader/http-evader-063/test.yaml
similarity index 100%
rename from tests/http-evader-063/test.yaml
rename to tests/http-evader/http-evader-063/test.yaml

diff --git a/tests/http-evader-064/README.md b/tests/http-evader/http-evader-064/README.md
similarity index 100%
rename from tests/http-evader-064/README.md
rename to tests/http-evader/http-evader-064/README.md

diff --git a/tests/http-evader-064/input.pcap b/tests/http-evader/http-evader-064/input.pcap
similarity index 100%
rename from tests/http-evader-064/input.pcap
rename to tests/http-evader/http-evader-064/input.pcap

diff --git a/tests/http-evader-064/test.rules b/tests/http-evader/http-evader-064/test.rules
similarity index 100%
rename from tests/http-evader-064/test.rules
rename to tests/http-evader/http-evader-064/test.rules

diff --git a/tests/http-evader-064/test.yaml b/tests/http-evader/http-evader-064/test.yaml
similarity index 100%
rename from tests/http-evader-064/test.yaml
rename to tests/http-evader/http-evader-064/test.yaml

diff --git a/tests/http-evader-065/README.md b/tests/http-evader/http-evader-065/README.md
similarity index 100%
rename from tests/http-evader-065/README.md
rename to tests/http-evader/http-evader-065/README.md

diff --git a/tests/http-evader-065/input.pcap b/tests/http-evader/http-evader-065/input.pcap
similarity index 100%
rename from tests/http-evader-065/input.pcap
rename to tests/http-evader/http-evader-065/input.pcap

diff --git a/tests/http-evader-065/test.rules b/tests/http-evader/http-evader-065/test.rules
similarity index 100%
rename from tests/http-evader-065/test.rules
rename to tests/http-evader/http-evader-065/test.rules

diff --git a/tests/http-evader-065/test.yaml b/tests/http-evader/http-evader-065/test.yaml
similarity index 100%
rename from tests/http-evader-065/test.yaml
rename to tests/http-evader/http-evader-065/test.yaml

diff --git a/tests/http-evader-066/README.md b/tests/http-evader/http-evader-066/README.md
similarity index 100%
rename from tests/http-evader-066/README.md
rename to tests/http-evader/http-evader-066/README.md

diff --git a/tests/http-evader-066/input.pcap b/tests/http-evader/http-evader-066/input.pcap
similarity index 100%
rename from tests/http-evader-066/input.pcap
rename to tests/http-evader/http-evader-066/input.pcap

diff --git a/tests/http-evader-066/test.rules b/tests/http-evader/http-evader-066/test.rules
similarity index 100%
rename from tests/http-evader-066/test.rules
rename to tests/http-evader/http-evader-066/test.rules

diff --git a/tests/http-evader-066/test.yaml b/tests/http-evader/http-evader-066/test.yaml
similarity index 100%
rename from tests/http-evader-066/test.yaml
rename to tests/http-evader/http-evader-066/test.yaml

diff --git a/tests/http-evader-067/README.md b/tests/http-evader/http-evader-067/README.md
similarity index 100%
rename from tests/http-evader-067/README.md
rename to tests/http-evader/http-evader-067/README.md

diff --git a/tests/http-evader-067/input.pcap b/tests/http-evader/http-evader-067/input.pcap
similarity index 100%
rename from tests/http-evader-067/input.pcap
rename to tests/http-evader/http-evader-067/input.pcap

diff --git a/tests/http-evader-067/test.rules b/tests/http-evader/http-evader-067/test.rules
similarity index 100%
rename from tests/http-evader-067/test.rules
rename to tests/http-evader/http-evader-067/test.rules

diff --git a/tests/http-evader-067/test.yaml b/tests/http-evader/http-evader-067/test.yaml
similarity index 100%
rename from tests/http-evader-067/test.yaml
rename to tests/http-evader/http-evader-067/test.yaml

diff --git a/tests/http-evader-068/README.md b/tests/http-evader/http-evader-068/README.md
similarity index 100%
rename from tests/http-evader-068/README.md
rename to tests/http-evader/http-evader-068/README.md

diff --git a/tests/http-evader-068/input.pcap b/tests/http-evader/http-evader-068/input.pcap
similarity index 100%
rename from tests/http-evader-068/input.pcap
rename to tests/http-evader/http-evader-068/input.pcap

diff --git a/tests/http-evader-068/test.rules b/tests/http-evader/http-evader-068/test.rules
similarity index 100%
rename from tests/http-evader-068/test.rules
rename to tests/http-evader/http-evader-068/test.rules

diff --git a/tests/http-evader-068/test.yaml b/tests/http-evader/http-evader-068/test.yaml
similarity index 100%
rename from tests/http-evader-068/test.yaml
rename to tests/http-evader/http-evader-068/test.yaml

diff --git a/tests/http-evader-069/README.md b/tests/http-evader/http-evader-069/README.md
similarity index 100%
rename from tests/http-evader-069/README.md
rename to tests/http-evader/http-evader-069/README.md

diff --git a/tests/http-evader-069/input.pcap b/tests/http-evader/http-evader-069/input.pcap
similarity index 100%
rename from tests/http-evader-069/input.pcap
rename to tests/http-evader/http-evader-069/input.pcap

diff --git a/tests/http-evader-069/test.rules b/tests/http-evader/http-evader-069/test.rules
similarity index 100%
rename from tests/http-evader-069/test.rules
rename to tests/http-evader/http-evader-069/test.rules

diff --git a/tests/http-evader-069/test.yaml b/tests/http-evader/http-evader-069/test.yaml
similarity index 100%
rename from tests/http-evader-069/test.yaml
rename to tests/http-evader/http-evader-069/test.yaml

diff --git a/tests/http-evader-070/README.md b/tests/http-evader/http-evader-070/README.md
similarity index 100%
rename from tests/http-evader-070/README.md
rename to tests/http-evader/http-evader-070/README.md

diff --git a/tests/http-evader-070/input.pcap b/tests/http-evader/http-evader-070/input.pcap
similarity index 100%
rename from tests/http-evader-070/input.pcap
rename to tests/http-evader/http-evader-070/input.pcap

diff --git a/tests/http-evader-070/test.rules b/tests/http-evader/http-evader-070/test.rules
similarity index 100%
rename from tests/http-evader-070/test.rules
rename to tests/http-evader/http-evader-070/test.rules

diff --git a/tests/http-evader-070/test.yaml b/tests/http-evader/http-evader-070/test.yaml
similarity index 100%
rename from tests/http-evader-070/test.yaml
rename to tests/http-evader/http-evader-070/test.yaml

diff --git a/tests/http-evader-071/README.md b/tests/http-evader/http-evader-071/README.md
similarity index 100%
rename from tests/http-evader-071/README.md
rename to tests/http-evader/http-evader-071/README.md

diff --git a/tests/http-evader-071/input.pcap b/tests/http-evader/http-evader-071/input.pcap
similarity index 100%
rename from tests/http-evader-071/input.pcap
rename to tests/http-evader/http-evader-071/input.pcap

diff --git a/tests/http-evader-071/test.rules b/tests/http-evader/http-evader-071/test.rules
similarity index 100%
rename from tests/http-evader-071/test.rules
rename to tests/http-evader/http-evader-071/test.rules

diff --git a/tests/http-evader-071/test.yaml b/tests/http-evader/http-evader-071/test.yaml
similarity index 100%
rename from tests/http-evader-071/test.yaml
rename to tests/http-evader/http-evader-071/test.yaml

diff --git a/tests/http-evader-072/README.md b/tests/http-evader/http-evader-072/README.md
similarity index 100%
rename from tests/http-evader-072/README.md
rename to tests/http-evader/http-evader-072/README.md

diff --git a/tests/http-evader-072/input.pcap b/tests/http-evader/http-evader-072/input.pcap
similarity index 100%
rename from tests/http-evader-072/input.pcap
rename to tests/http-evader/http-evader-072/input.pcap

diff --git a/tests/http-evader-072/test.rules b/tests/http-evader/http-evader-072/test.rules
similarity index 100%
rename from tests/http-evader-072/test.rules
rename to tests/http-evader/http-evader-072/test.rules

diff --git a/tests/http-evader-072/test.yaml b/tests/http-evader/http-evader-072/test.yaml
similarity index 100%
rename from tests/http-evader-072/test.yaml
rename to tests/http-evader/http-evader-072/test.yaml

diff --git a/tests/http-evader-073/README.md b/tests/http-evader/http-evader-073/README.md
similarity index 100%
rename from tests/http-evader-073/README.md
rename to tests/http-evader/http-evader-073/README.md

diff --git a/tests/http-evader-073/input.pcap b/tests/http-evader/http-evader-073/input.pcap
similarity index 100%
rename from tests/http-evader-073/input.pcap
rename to tests/http-evader/http-evader-073/input.pcap

diff --git a/tests/http-evader-073/test.rules b/tests/http-evader/http-evader-073/test.rules
similarity index 100%
rename from tests/http-evader-073/test.rules
rename to tests/http-evader/http-evader-073/test.rules

diff --git a/tests/http-evader-073/test.yaml b/tests/http-evader/http-evader-073/test.yaml
similarity index 100%
rename from tests/http-evader-073/test.yaml
rename to tests/http-evader/http-evader-073/test.yaml

diff --git a/tests/http-evader-074/README.md b/tests/http-evader/http-evader-074/README.md
similarity index 100%
rename from tests/http-evader-074/README.md
rename to tests/http-evader/http-evader-074/README.md

diff --git a/tests/http-evader-074/input.pcap b/tests/http-evader/http-evader-074/input.pcap
similarity index 100%
rename from tests/http-evader-074/input.pcap
rename to tests/http-evader/http-evader-074/input.pcap

diff --git a/tests/http-evader-074/test.rules b/tests/http-evader/http-evader-074/test.rules
similarity index 100%
rename from tests/http-evader-074/test.rules
rename to tests/http-evader/http-evader-074/test.rules

diff --git a/tests/http-evader-074/test.yaml b/tests/http-evader/http-evader-074/test.yaml
similarity index 100%
rename from tests/http-evader-074/test.yaml
rename to tests/http-evader/http-evader-074/test.yaml

diff --git a/tests/http-evader-075/README.md b/tests/http-evader/http-evader-075/README.md
similarity index 100%
rename from tests/http-evader-075/README.md
rename to tests/http-evader/http-evader-075/README.md

diff --git a/tests/http-evader-075/input.pcap b/tests/http-evader/http-evader-075/input.pcap
similarity index 100%
rename from tests/http-evader-075/input.pcap
rename to tests/http-evader/http-evader-075/input.pcap

diff --git a/tests/http-evader-075/test.rules b/tests/http-evader/http-evader-075/test.rules
similarity index 100%
rename from tests/http-evader-075/test.rules
rename to tests/http-evader/http-evader-075/test.rules

diff --git a/tests/http-evader-075/test.yaml b/tests/http-evader/http-evader-075/test.yaml
similarity index 100%
rename from tests/http-evader-075/test.yaml
rename to tests/http-evader/http-evader-075/test.yaml

diff --git a/tests/http-evader-076/README.md b/tests/http-evader/http-evader-076/README.md
similarity index 100%
rename from tests/http-evader-076/README.md
rename to tests/http-evader/http-evader-076/README.md

diff --git a/tests/http-evader-076/input.pcap b/tests/http-evader/http-evader-076/input.pcap
similarity index 100%
rename from tests/http-evader-076/input.pcap
rename to tests/http-evader/http-evader-076/input.pcap

diff --git a/tests/http-evader-076/test.rules b/tests/http-evader/http-evader-076/test.rules
similarity index 100%
rename from tests/http-evader-076/test.rules
rename to tests/http-evader/http-evader-076/test.rules

diff --git a/tests/http-evader-076/test.yaml b/tests/http-evader/http-evader-076/test.yaml
similarity index 100%
rename from tests/http-evader-076/test.yaml
rename to tests/http-evader/http-evader-076/test.yaml

diff --git a/tests/http-evader-077/README.md b/tests/http-evader/http-evader-077/README.md
similarity index 100%
rename from tests/http-evader-077/README.md
rename to tests/http-evader/http-evader-077/README.md

diff --git a/tests/http-evader-077/input.pcap b/tests/http-evader/http-evader-077/input.pcap
similarity index 100%
rename from tests/http-evader-077/input.pcap
rename to tests/http-evader/http-evader-077/input.pcap

diff --git a/tests/http-evader-077/test.rules b/tests/http-evader/http-evader-077/test.rules
similarity index 100%
rename from tests/http-evader-077/test.rules
rename to tests/http-evader/http-evader-077/test.rules

diff --git a/tests/http-evader-077/test.yaml b/tests/http-evader/http-evader-077/test.yaml
similarity index 100%
rename from tests/http-evader-077/test.yaml
rename to tests/http-evader/http-evader-077/test.yaml

diff --git a/tests/http-evader-078/README.md b/tests/http-evader/http-evader-078/README.md
similarity index 100%
rename from tests/http-evader-078/README.md
rename to tests/http-evader/http-evader-078/README.md

diff --git a/tests/http-evader-078/input.pcap b/tests/http-evader/http-evader-078/input.pcap
similarity index 100%
rename from tests/http-evader-078/input.pcap
rename to tests/http-evader/http-evader-078/input.pcap

diff --git a/tests/http-evader-078/test.rules b/tests/http-evader/http-evader-078/test.rules
similarity index 100%
rename from tests/http-evader-078/test.rules
rename to tests/http-evader/http-evader-078/test.rules

diff --git a/tests/http-evader-078/test.yaml b/tests/http-evader/http-evader-078/test.yaml
similarity index 100%
rename from tests/http-evader-078/test.yaml
rename to tests/http-evader/http-evader-078/test.yaml

diff --git a/tests/http-evader-079/README.md b/tests/http-evader/http-evader-079/README.md
similarity index 100%
rename from tests/http-evader-079/README.md
rename to tests/http-evader/http-evader-079/README.md

diff --git a/tests/http-evader-079/input.pcap b/tests/http-evader/http-evader-079/input.pcap
similarity index 100%
rename from tests/http-evader-079/input.pcap
rename to tests/http-evader/http-evader-079/input.pcap

diff --git a/tests/http-evader-079/test.rules b/tests/http-evader/http-evader-079/test.rules
similarity index 100%
rename from tests/http-evader-079/test.rules
rename to tests/http-evader/http-evader-079/test.rules

diff --git a/tests/http-evader-079/test.yaml b/tests/http-evader/http-evader-079/test.yaml
similarity index 100%
rename from tests/http-evader-079/test.yaml
rename to tests/http-evader/http-evader-079/test.yaml

diff --git a/tests/http-evader-080/README.md b/tests/http-evader/http-evader-080/README.md
similarity index 100%
rename from tests/http-evader-080/README.md
rename to tests/http-evader/http-evader-080/README.md

diff --git a/tests/http-evader-080/input.pcap b/tests/http-evader/http-evader-080/input.pcap
similarity index 100%
rename from tests/http-evader-080/input.pcap
rename to tests/http-evader/http-evader-080/input.pcap

diff --git a/tests/http-evader-080/test.rules b/tests/http-evader/http-evader-080/test.rules
similarity index 100%
rename from tests/http-evader-080/test.rules
rename to tests/http-evader/http-evader-080/test.rules

diff --git a/tests/http-evader-080/test.yaml b/tests/http-evader/http-evader-080/test.yaml
similarity index 100%
rename from tests/http-evader-080/test.yaml
rename to tests/http-evader/http-evader-080/test.yaml

diff --git a/tests/http-evader-081/README.md b/tests/http-evader/http-evader-081/README.md
similarity index 100%
rename from tests/http-evader-081/README.md
rename to tests/http-evader/http-evader-081/README.md

diff --git a/tests/http-evader-081/input.pcap b/tests/http-evader/http-evader-081/input.pcap
similarity index 100%
rename from tests/http-evader-081/input.pcap
rename to tests/http-evader/http-evader-081/input.pcap

diff --git a/tests/http-evader-081/test.rules b/tests/http-evader/http-evader-081/test.rules
similarity index 100%
rename from tests/http-evader-081/test.rules
rename to tests/http-evader/http-evader-081/test.rules

diff --git a/tests/http-evader-081/test.yaml b/tests/http-evader/http-evader-081/test.yaml
similarity index 100%
rename from tests/http-evader-081/test.yaml
rename to tests/http-evader/http-evader-081/test.yaml

diff --git a/tests/http-evader-082/README.md b/tests/http-evader/http-evader-082/README.md
similarity index 100%
rename from tests/http-evader-082/README.md
rename to tests/http-evader/http-evader-082/README.md

diff --git a/tests/http-evader-082/input.pcap b/tests/http-evader/http-evader-082/input.pcap
similarity index 100%
rename from tests/http-evader-082/input.pcap
rename to tests/http-evader/http-evader-082/input.pcap

diff --git a/tests/http-evader-082/test.rules b/tests/http-evader/http-evader-082/test.rules
similarity index 100%
rename from tests/http-evader-082/test.rules
rename to tests/http-evader/http-evader-082/test.rules

diff --git a/tests/http-evader-082/test.yaml b/tests/http-evader/http-evader-082/test.yaml
similarity index 100%
rename from tests/http-evader-082/test.yaml
rename to tests/http-evader/http-evader-082/test.yaml

diff --git a/tests/http-evader-083/README.md b/tests/http-evader/http-evader-083/README.md
similarity index 100%
rename from tests/http-evader-083/README.md
rename to tests/http-evader/http-evader-083/README.md

diff --git a/tests/http-evader-083/input.pcap b/tests/http-evader/http-evader-083/input.pcap
similarity index 100%
rename from tests/http-evader-083/input.pcap
rename to tests/http-evader/http-evader-083/input.pcap

diff --git a/tests/http-evader-083/test.rules b/tests/http-evader/http-evader-083/test.rules
similarity index 100%
rename from tests/http-evader-083/test.rules
rename to tests/http-evader/http-evader-083/test.rules

diff --git a/tests/http-evader-083/test.yaml b/tests/http-evader/http-evader-083/test.yaml
similarity index 100%
rename from tests/http-evader-083/test.yaml
rename to tests/http-evader/http-evader-083/test.yaml

diff --git a/tests/http-evader-084/README.md b/tests/http-evader/http-evader-084/README.md
similarity index 100%
rename from tests/http-evader-084/README.md
rename to tests/http-evader/http-evader-084/README.md

diff --git a/tests/http-evader-084/input.pcap b/tests/http-evader/http-evader-084/input.pcap
similarity index 100%
rename from tests/http-evader-084/input.pcap
rename to tests/http-evader/http-evader-084/input.pcap

diff --git a/tests/http-evader-084/test.rules b/tests/http-evader/http-evader-084/test.rules
similarity index 100%
rename from tests/http-evader-084/test.rules
rename to tests/http-evader/http-evader-084/test.rules

diff --git a/tests/http-evader-084/test.yaml b/tests/http-evader/http-evader-084/test.yaml
similarity index 100%
rename from tests/http-evader-084/test.yaml
rename to tests/http-evader/http-evader-084/test.yaml

diff --git a/tests/http-evader-085/README.md b/tests/http-evader/http-evader-085/README.md
similarity index 100%
rename from tests/http-evader-085/README.md
rename to tests/http-evader/http-evader-085/README.md

diff --git a/tests/http-evader-085/input.pcap b/tests/http-evader/http-evader-085/input.pcap
similarity index 100%
rename from tests/http-evader-085/input.pcap
rename to tests/http-evader/http-evader-085/input.pcap

diff --git a/tests/http-evader-085/test.rules b/tests/http-evader/http-evader-085/test.rules
similarity index 100%
rename from tests/http-evader-085/test.rules
rename to tests/http-evader/http-evader-085/test.rules

diff --git a/tests/http-evader-085/test.yaml b/tests/http-evader/http-evader-085/test.yaml
similarity index 100%
rename from tests/http-evader-085/test.yaml
rename to tests/http-evader/http-evader-085/test.yaml

diff --git a/tests/http-evader-086/README.md b/tests/http-evader/http-evader-086/README.md
similarity index 100%
rename from tests/http-evader-086/README.md
rename to tests/http-evader/http-evader-086/README.md

diff --git a/tests/http-evader-086/input.pcap b/tests/http-evader/http-evader-086/input.pcap
similarity index 100%
rename from tests/http-evader-086/input.pcap
rename to tests/http-evader/http-evader-086/input.pcap

diff --git a/tests/http-evader-086/test.rules b/tests/http-evader/http-evader-086/test.rules
similarity index 100%
rename from tests/http-evader-086/test.rules
rename to tests/http-evader/http-evader-086/test.rules

diff --git a/tests/http-evader-086/test.yaml b/tests/http-evader/http-evader-086/test.yaml
similarity index 100%
rename from tests/http-evader-086/test.yaml
rename to tests/http-evader/http-evader-086/test.yaml

diff --git a/tests/http-evader-087/README.md b/tests/http-evader/http-evader-087/README.md
similarity index 100%
rename from tests/http-evader-087/README.md
rename to tests/http-evader/http-evader-087/README.md

diff --git a/tests/http-evader-087/input.pcap b/tests/http-evader/http-evader-087/input.pcap
similarity index 100%
rename from tests/http-evader-087/input.pcap
rename to tests/http-evader/http-evader-087/input.pcap

diff --git a/tests/http-evader-087/test.rules b/tests/http-evader/http-evader-087/test.rules
similarity index 100%
rename from tests/http-evader-087/test.rules
rename to tests/http-evader/http-evader-087/test.rules

diff --git a/tests/http-evader-087/test.yaml b/tests/http-evader/http-evader-087/test.yaml
similarity index 100%
rename from tests/http-evader-087/test.yaml
rename to tests/http-evader/http-evader-087/test.yaml

diff --git a/tests/http-evader-088/README.md b/tests/http-evader/http-evader-088/README.md
similarity index 100%
rename from tests/http-evader-088/README.md
rename to tests/http-evader/http-evader-088/README.md

diff --git a/tests/http-evader-088/input.pcap b/tests/http-evader/http-evader-088/input.pcap
similarity index 100%
rename from tests/http-evader-088/input.pcap
rename to tests/http-evader/http-evader-088/input.pcap

diff --git a/tests/http-evader-088/test.rules b/tests/http-evader/http-evader-088/test.rules
similarity index 100%
rename from tests/http-evader-088/test.rules
rename to tests/http-evader/http-evader-088/test.rules

diff --git a/tests/http-evader-088/test.yaml b/tests/http-evader/http-evader-088/test.yaml
similarity index 100%
rename from tests/http-evader-088/test.yaml
rename to tests/http-evader/http-evader-088/test.yaml

diff --git a/tests/http-evader-089/README.md b/tests/http-evader/http-evader-089/README.md
similarity index 100%
rename from tests/http-evader-089/README.md
rename to tests/http-evader/http-evader-089/README.md

diff --git a/tests/http-evader-089/input.pcap b/tests/http-evader/http-evader-089/input.pcap
similarity index 100%
rename from tests/http-evader-089/input.pcap
rename to tests/http-evader/http-evader-089/input.pcap

diff --git a/tests/http-evader-089/test.rules b/tests/http-evader/http-evader-089/test.rules
similarity index 100%
rename from tests/http-evader-089/test.rules
rename to tests/http-evader/http-evader-089/test.rules

diff --git a/tests/http-evader-089/test.yaml b/tests/http-evader/http-evader-089/test.yaml
similarity index 100%
rename from tests/http-evader-089/test.yaml
rename to tests/http-evader/http-evader-089/test.yaml

diff --git a/tests/http-evader-090/README.md b/tests/http-evader/http-evader-090/README.md
similarity index 100%
rename from tests/http-evader-090/README.md
rename to tests/http-evader/http-evader-090/README.md

diff --git a/tests/http-evader-090/input.pcap b/tests/http-evader/http-evader-090/input.pcap
similarity index 100%
rename from tests/http-evader-090/input.pcap
rename to tests/http-evader/http-evader-090/input.pcap

diff --git a/tests/http-evader-090/test.rules b/tests/http-evader/http-evader-090/test.rules
similarity index 100%
rename from tests/http-evader-090/test.rules
rename to tests/http-evader/http-evader-090/test.rules

diff --git a/tests/http-evader-090/test.yaml b/tests/http-evader/http-evader-090/test.yaml
similarity index 100%
rename from tests/http-evader-090/test.yaml
rename to tests/http-evader/http-evader-090/test.yaml

diff --git a/tests/http-evader-091/README.md b/tests/http-evader/http-evader-091/README.md
similarity index 100%
rename from tests/http-evader-091/README.md
rename to tests/http-evader/http-evader-091/README.md

diff --git a/tests/http-evader-091/input.pcap b/tests/http-evader/http-evader-091/input.pcap
similarity index 100%
rename from tests/http-evader-091/input.pcap
rename to tests/http-evader/http-evader-091/input.pcap

diff --git a/tests/http-evader-091/test.rules b/tests/http-evader/http-evader-091/test.rules
similarity index 100%
rename from tests/http-evader-091/test.rules
rename to tests/http-evader/http-evader-091/test.rules

diff --git a/tests/http-evader-091/test.yaml b/tests/http-evader/http-evader-091/test.yaml
similarity index 100%
rename from tests/http-evader-091/test.yaml
rename to tests/http-evader/http-evader-091/test.yaml

diff --git a/tests/http-evader-092/README.md b/tests/http-evader/http-evader-092/README.md
similarity index 100%
rename from tests/http-evader-092/README.md
rename to tests/http-evader/http-evader-092/README.md

diff --git a/tests/http-evader-092/input.pcap b/tests/http-evader/http-evader-092/input.pcap
similarity index 100%
rename from tests/http-evader-092/input.pcap
rename to tests/http-evader/http-evader-092/input.pcap

diff --git a/tests/http-evader-092/test.rules b/tests/http-evader/http-evader-092/test.rules
similarity index 100%
rename from tests/http-evader-092/test.rules
rename to tests/http-evader/http-evader-092/test.rules

diff --git a/tests/http-evader-092/test.yaml b/tests/http-evader/http-evader-092/test.yaml
similarity index 100%
rename from tests/http-evader-092/test.yaml
rename to tests/http-evader/http-evader-092/test.yaml

diff --git a/tests/http-evader-093/README.md b/tests/http-evader/http-evader-093/README.md
similarity index 100%
rename from tests/http-evader-093/README.md
rename to tests/http-evader/http-evader-093/README.md

diff --git a/tests/http-evader-093/input.pcap b/tests/http-evader/http-evader-093/input.pcap
similarity index 100%
rename from tests/http-evader-093/input.pcap
rename to tests/http-evader/http-evader-093/input.pcap

diff --git a/tests/http-evader-093/test.rules b/tests/http-evader/http-evader-093/test.rules
similarity index 100%
rename from tests/http-evader-093/test.rules
rename to tests/http-evader/http-evader-093/test.rules

diff --git a/tests/http-evader-093/test.yaml b/tests/http-evader/http-evader-093/test.yaml
similarity index 100%
rename from tests/http-evader-093/test.yaml
rename to tests/http-evader/http-evader-093/test.yaml

diff --git a/tests/http-evader-094/README.md b/tests/http-evader/http-evader-094/README.md
similarity index 100%
rename from tests/http-evader-094/README.md
rename to tests/http-evader/http-evader-094/README.md

diff --git a/tests/http-evader-094/input.pcap b/tests/http-evader/http-evader-094/input.pcap
similarity index 100%
rename from tests/http-evader-094/input.pcap
rename to tests/http-evader/http-evader-094/input.pcap

diff --git a/tests/http-evader-094/test.rules b/tests/http-evader/http-evader-094/test.rules
similarity index 100%
rename from tests/http-evader-094/test.rules
rename to tests/http-evader/http-evader-094/test.rules

diff --git a/tests/http-evader-094/test.yaml b/tests/http-evader/http-evader-094/test.yaml
similarity index 100%
rename from tests/http-evader-094/test.yaml
rename to tests/http-evader/http-evader-094/test.yaml

diff --git a/tests/http-evader-095/README.md b/tests/http-evader/http-evader-095/README.md
similarity index 100%
rename from tests/http-evader-095/README.md
rename to tests/http-evader/http-evader-095/README.md

diff --git a/tests/http-evader-095/input.pcap b/tests/http-evader/http-evader-095/input.pcap
similarity index 100%
rename from tests/http-evader-095/input.pcap
rename to tests/http-evader/http-evader-095/input.pcap

diff --git a/tests/http-evader-095/test.rules b/tests/http-evader/http-evader-095/test.rules
similarity index 100%
rename from tests/http-evader-095/test.rules
rename to tests/http-evader/http-evader-095/test.rules

diff --git a/tests/http-evader-095/test.yaml b/tests/http-evader/http-evader-095/test.yaml
similarity index 100%
rename from tests/http-evader-095/test.yaml
rename to tests/http-evader/http-evader-095/test.yaml

diff --git a/tests/http-evader-096/README.md b/tests/http-evader/http-evader-096/README.md
similarity index 100%
rename from tests/http-evader-096/README.md
rename to tests/http-evader/http-evader-096/README.md

diff --git a/tests/http-evader-096/input.pcap b/tests/http-evader/http-evader-096/input.pcap
similarity index 100%
rename from tests/http-evader-096/input.pcap
rename to tests/http-evader/http-evader-096/input.pcap

diff --git a/tests/http-evader-096/test.rules b/tests/http-evader/http-evader-096/test.rules
similarity index 100%
rename from tests/http-evader-096/test.rules
rename to tests/http-evader/http-evader-096/test.rules

diff --git a/tests/http-evader-096/test.yaml b/tests/http-evader/http-evader-096/test.yaml
similarity index 100%
rename from tests/http-evader-096/test.yaml
rename to tests/http-evader/http-evader-096/test.yaml

diff --git a/tests/http-evader-097/README.md b/tests/http-evader/http-evader-097/README.md
similarity index 100%
rename from tests/http-evader-097/README.md
rename to tests/http-evader/http-evader-097/README.md

diff --git a/tests/http-evader-097/input.pcap b/tests/http-evader/http-evader-097/input.pcap
similarity index 100%
rename from tests/http-evader-097/input.pcap
rename to tests/http-evader/http-evader-097/input.pcap

diff --git a/tests/http-evader-097/test.rules b/tests/http-evader/http-evader-097/test.rules
similarity index 100%
rename from tests/http-evader-097/test.rules
rename to tests/http-evader/http-evader-097/test.rules

diff --git a/tests/http-evader-097/test.yaml b/tests/http-evader/http-evader-097/test.yaml
similarity index 100%
rename from tests/http-evader-097/test.yaml
rename to tests/http-evader/http-evader-097/test.yaml

diff --git a/tests/http-evader-098/README.md b/tests/http-evader/http-evader-098/README.md
similarity index 100%
rename from tests/http-evader-098/README.md
rename to tests/http-evader/http-evader-098/README.md

diff --git a/tests/http-evader-098/input.pcap b/tests/http-evader/http-evader-098/input.pcap
similarity index 100%
rename from tests/http-evader-098/input.pcap
rename to tests/http-evader/http-evader-098/input.pcap

diff --git a/tests/http-evader-098/test.rules b/tests/http-evader/http-evader-098/test.rules
similarity index 100%
rename from tests/http-evader-098/test.rules
rename to tests/http-evader/http-evader-098/test.rules

diff --git a/tests/http-evader-098/test.yaml b/tests/http-evader/http-evader-098/test.yaml
similarity index 100%
rename from tests/http-evader-098/test.yaml
rename to tests/http-evader/http-evader-098/test.yaml

diff --git a/tests/http-evader-099/README.md b/tests/http-evader/http-evader-099/README.md
similarity index 100%
rename from tests/http-evader-099/README.md
rename to tests/http-evader/http-evader-099/README.md

diff --git a/tests/http-evader-099/input.pcap b/tests/http-evader/http-evader-099/input.pcap
similarity index 100%
rename from tests/http-evader-099/input.pcap
rename to tests/http-evader/http-evader-099/input.pcap

diff --git a/tests/http-evader-099/test.rules b/tests/http-evader/http-evader-099/test.rules
similarity index 100%
rename from tests/http-evader-099/test.rules
rename to tests/http-evader/http-evader-099/test.rules

diff --git a/tests/http-evader-099/test.yaml b/tests/http-evader/http-evader-099/test.yaml
similarity index 100%
rename from tests/http-evader-099/test.yaml
rename to tests/http-evader/http-evader-099/test.yaml

diff --git a/tests/http-evader-100/README.md b/tests/http-evader/http-evader-100/README.md
similarity index 100%
rename from tests/http-evader-100/README.md
rename to tests/http-evader/http-evader-100/README.md

diff --git a/tests/http-evader-100/input.pcap b/tests/http-evader/http-evader-100/input.pcap
similarity index 100%
rename from tests/http-evader-100/input.pcap
rename to tests/http-evader/http-evader-100/input.pcap

diff --git a/tests/http-evader-100/test.rules b/tests/http-evader/http-evader-100/test.rules
similarity index 100%
rename from tests/http-evader-100/test.rules
rename to tests/http-evader/http-evader-100/test.rules

diff --git a/tests/http-evader-100/test.yaml b/tests/http-evader/http-evader-100/test.yaml
similarity index 100%
rename from tests/http-evader-100/test.yaml
rename to tests/http-evader/http-evader-100/test.yaml

diff --git a/tests/http-evader-101/README.md b/tests/http-evader/http-evader-101/README.md
similarity index 100%
rename from tests/http-evader-101/README.md
rename to tests/http-evader/http-evader-101/README.md

diff --git a/tests/http-evader-101/input.pcap b/tests/http-evader/http-evader-101/input.pcap
similarity index 100%
rename from tests/http-evader-101/input.pcap
rename to tests/http-evader/http-evader-101/input.pcap

diff --git a/tests/http-evader-101/test.rules b/tests/http-evader/http-evader-101/test.rules
similarity index 100%
rename from tests/http-evader-101/test.rules
rename to tests/http-evader/http-evader-101/test.rules

diff --git a/tests/http-evader-101/test.yaml b/tests/http-evader/http-evader-101/test.yaml
similarity index 100%
rename from tests/http-evader-101/test.yaml
rename to tests/http-evader/http-evader-101/test.yaml

diff --git a/tests/http-evader-102/README.md b/tests/http-evader/http-evader-102/README.md
similarity index 100%
rename from tests/http-evader-102/README.md
rename to tests/http-evader/http-evader-102/README.md

diff --git a/tests/http-evader-102/input.pcap b/tests/http-evader/http-evader-102/input.pcap
similarity index 100%
rename from tests/http-evader-102/input.pcap
rename to tests/http-evader/http-evader-102/input.pcap

diff --git a/tests/http-evader-102/test.rules b/tests/http-evader/http-evader-102/test.rules
similarity index 100%
rename from tests/http-evader-102/test.rules
rename to tests/http-evader/http-evader-102/test.rules

diff --git a/tests/http-evader-102/test.yaml b/tests/http-evader/http-evader-102/test.yaml
similarity index 100%
rename from tests/http-evader-102/test.yaml
rename to tests/http-evader/http-evader-102/test.yaml

diff --git a/tests/http-evader-103/README.md b/tests/http-evader/http-evader-103/README.md
similarity index 100%
rename from tests/http-evader-103/README.md
rename to tests/http-evader/http-evader-103/README.md

diff --git a/tests/http-evader-103/input.pcap b/tests/http-evader/http-evader-103/input.pcap
similarity index 100%
rename from tests/http-evader-103/input.pcap
rename to tests/http-evader/http-evader-103/input.pcap

diff --git a/tests/http-evader-103/test.rules b/tests/http-evader/http-evader-103/test.rules
similarity index 100%
rename from tests/http-evader-103/test.rules
rename to tests/http-evader/http-evader-103/test.rules

diff --git a/tests/http-evader-103/test.yaml b/tests/http-evader/http-evader-103/test.yaml
similarity index 100%
rename from tests/http-evader-103/test.yaml
rename to tests/http-evader/http-evader-103/test.yaml

diff --git a/tests/http-evader-104/README.md b/tests/http-evader/http-evader-104/README.md
similarity index 100%
rename from tests/http-evader-104/README.md
rename to tests/http-evader/http-evader-104/README.md

diff --git a/tests/http-evader-104/input.pcap b/tests/http-evader/http-evader-104/input.pcap
similarity index 100%
rename from tests/http-evader-104/input.pcap
rename to tests/http-evader/http-evader-104/input.pcap

diff --git a/tests/http-evader-104/test.rules b/tests/http-evader/http-evader-104/test.rules
similarity index 100%
rename from tests/http-evader-104/test.rules
rename to tests/http-evader/http-evader-104/test.rules

diff --git a/tests/http-evader-104/test.yaml b/tests/http-evader/http-evader-104/test.yaml
similarity index 100%
rename from tests/http-evader-104/test.yaml
rename to tests/http-evader/http-evader-104/test.yaml

diff --git a/tests/http-evader-105/README.md b/tests/http-evader/http-evader-105/README.md
similarity index 100%
rename from tests/http-evader-105/README.md
rename to tests/http-evader/http-evader-105/README.md

diff --git a/tests/http-evader-105/input.pcap b/tests/http-evader/http-evader-105/input.pcap
similarity index 100%
rename from tests/http-evader-105/input.pcap
rename to tests/http-evader/http-evader-105/input.pcap

diff --git a/tests/http-evader-105/test.rules b/tests/http-evader/http-evader-105/test.rules
similarity index 100%
rename from tests/http-evader-105/test.rules
rename to tests/http-evader/http-evader-105/test.rules

diff --git a/tests/http-evader-105/test.yaml b/tests/http-evader/http-evader-105/test.yaml
similarity index 100%
rename from tests/http-evader-105/test.yaml
rename to tests/http-evader/http-evader-105/test.yaml

diff --git a/tests/http-evader-106/README.md b/tests/http-evader/http-evader-106/README.md
similarity index 100%
rename from tests/http-evader-106/README.md
rename to tests/http-evader/http-evader-106/README.md

diff --git a/tests/http-evader-106/input.pcap b/tests/http-evader/http-evader-106/input.pcap
similarity index 100%
rename from tests/http-evader-106/input.pcap
rename to tests/http-evader/http-evader-106/input.pcap

diff --git a/tests/http-evader-106/test.rules b/tests/http-evader/http-evader-106/test.rules
similarity index 100%
rename from tests/http-evader-106/test.rules
rename to tests/http-evader/http-evader-106/test.rules

diff --git a/tests/http-evader-106/test.yaml b/tests/http-evader/http-evader-106/test.yaml
similarity index 100%
rename from tests/http-evader-106/test.yaml
rename to tests/http-evader/http-evader-106/test.yaml

diff --git a/tests/http-evader-107/README.md b/tests/http-evader/http-evader-107/README.md
similarity index 100%
rename from tests/http-evader-107/README.md
rename to tests/http-evader/http-evader-107/README.md

diff --git a/tests/http-evader-107/input.pcap b/tests/http-evader/http-evader-107/input.pcap
similarity index 100%
rename from tests/http-evader-107/input.pcap
rename to tests/http-evader/http-evader-107/input.pcap

diff --git a/tests/http-evader-107/test.rules b/tests/http-evader/http-evader-107/test.rules
similarity index 100%
rename from tests/http-evader-107/test.rules
rename to tests/http-evader/http-evader-107/test.rules

diff --git a/tests/http-evader-107/test.yaml b/tests/http-evader/http-evader-107/test.yaml
similarity index 100%
rename from tests/http-evader-107/test.yaml
rename to tests/http-evader/http-evader-107/test.yaml

diff --git a/tests/http-evader-108/README.md b/tests/http-evader/http-evader-108/README.md
similarity index 100%
rename from tests/http-evader-108/README.md
rename to tests/http-evader/http-evader-108/README.md

diff --git a/tests/http-evader-108/input.pcap b/tests/http-evader/http-evader-108/input.pcap
similarity index 100%
rename from tests/http-evader-108/input.pcap
rename to tests/http-evader/http-evader-108/input.pcap

diff --git a/tests/http-evader-108/test.rules b/tests/http-evader/http-evader-108/test.rules
similarity index 100%
rename from tests/http-evader-108/test.rules
rename to tests/http-evader/http-evader-108/test.rules

diff --git a/tests/http-evader-108/test.yaml b/tests/http-evader/http-evader-108/test.yaml
similarity index 100%
rename from tests/http-evader-108/test.yaml
rename to tests/http-evader/http-evader-108/test.yaml

diff --git a/tests/http-evader-109/README.md b/tests/http-evader/http-evader-109/README.md
similarity index 100%
rename from tests/http-evader-109/README.md
rename to tests/http-evader/http-evader-109/README.md

diff --git a/tests/http-evader-109/input.pcap b/tests/http-evader/http-evader-109/input.pcap
similarity index 100%
rename from tests/http-evader-109/input.pcap
rename to tests/http-evader/http-evader-109/input.pcap

diff --git a/tests/http-evader-109/test.rules b/tests/http-evader/http-evader-109/test.rules
similarity index 100%
rename from tests/http-evader-109/test.rules
rename to tests/http-evader/http-evader-109/test.rules

diff --git a/tests/http-evader-109/test.yaml b/tests/http-evader/http-evader-109/test.yaml
similarity index 100%
rename from tests/http-evader-109/test.yaml
rename to tests/http-evader/http-evader-109/test.yaml

diff --git a/tests/http-evader-110/README.md b/tests/http-evader/http-evader-110/README.md
similarity index 100%
rename from tests/http-evader-110/README.md
rename to tests/http-evader/http-evader-110/README.md

diff --git a/tests/http-evader-110/input.pcap b/tests/http-evader/http-evader-110/input.pcap
similarity index 100%
rename from tests/http-evader-110/input.pcap
rename to tests/http-evader/http-evader-110/input.pcap

diff --git a/tests/http-evader-110/test.rules b/tests/http-evader/http-evader-110/test.rules
similarity index 100%
rename from tests/http-evader-110/test.rules
rename to tests/http-evader/http-evader-110/test.rules

diff --git a/tests/http-evader-110/test.yaml b/tests/http-evader/http-evader-110/test.yaml
similarity index 100%
rename from tests/http-evader-110/test.yaml
rename to tests/http-evader/http-evader-110/test.yaml

diff --git a/tests/http-evader-111/README.md b/tests/http-evader/http-evader-111/README.md
similarity index 100%
rename from tests/http-evader-111/README.md
rename to tests/http-evader/http-evader-111/README.md

diff --git a/tests/http-evader-111/input.pcap b/tests/http-evader/http-evader-111/input.pcap
similarity index 100%
rename from tests/http-evader-111/input.pcap
rename to tests/http-evader/http-evader-111/input.pcap

diff --git a/tests/http-evader-111/test.rules b/tests/http-evader/http-evader-111/test.rules
similarity index 100%
rename from tests/http-evader-111/test.rules
rename to tests/http-evader/http-evader-111/test.rules

diff --git a/tests/http-evader-111/test.yaml b/tests/http-evader/http-evader-111/test.yaml
similarity index 100%
rename from tests/http-evader-111/test.yaml
rename to tests/http-evader/http-evader-111/test.yaml

diff --git a/tests/http-evader-112/README.md b/tests/http-evader/http-evader-112/README.md
similarity index 100%
rename from tests/http-evader-112/README.md
rename to tests/http-evader/http-evader-112/README.md

diff --git a/tests/http-evader-112/input.pcap b/tests/http-evader/http-evader-112/input.pcap
similarity index 100%
rename from tests/http-evader-112/input.pcap
rename to tests/http-evader/http-evader-112/input.pcap

diff --git a/tests/http-evader-112/test.rules b/tests/http-evader/http-evader-112/test.rules
similarity index 100%
rename from tests/http-evader-112/test.rules
rename to tests/http-evader/http-evader-112/test.rules

diff --git a/tests/http-evader-112/test.yaml b/tests/http-evader/http-evader-112/test.yaml
similarity index 100%
rename from tests/http-evader-112/test.yaml
rename to tests/http-evader/http-evader-112/test.yaml

diff --git a/tests/http-evader-113/README.md b/tests/http-evader/http-evader-113/README.md
similarity index 100%
rename from tests/http-evader-113/README.md
rename to tests/http-evader/http-evader-113/README.md

diff --git a/tests/http-evader-113/input.pcap b/tests/http-evader/http-evader-113/input.pcap
similarity index 100%
rename from tests/http-evader-113/input.pcap
rename to tests/http-evader/http-evader-113/input.pcap

diff --git a/tests/http-evader-113/test.rules b/tests/http-evader/http-evader-113/test.rules
similarity index 100%
rename from tests/http-evader-113/test.rules
rename to tests/http-evader/http-evader-113/test.rules

diff --git a/tests/http-evader-113/test.yaml b/tests/http-evader/http-evader-113/test.yaml
similarity index 100%
rename from tests/http-evader-113/test.yaml
rename to tests/http-evader/http-evader-113/test.yaml

diff --git a/tests/http-evader-114/README.md b/tests/http-evader/http-evader-114/README.md
similarity index 100%
rename from tests/http-evader-114/README.md
rename to tests/http-evader/http-evader-114/README.md

diff --git a/tests/http-evader-114/input.pcap b/tests/http-evader/http-evader-114/input.pcap
similarity index 100%
rename from tests/http-evader-114/input.pcap
rename to tests/http-evader/http-evader-114/input.pcap

diff --git a/tests/http-evader-114/test.rules b/tests/http-evader/http-evader-114/test.rules
similarity index 100%
rename from tests/http-evader-114/test.rules
rename to tests/http-evader/http-evader-114/test.rules

diff --git a/tests/http-evader-114/test.yaml b/tests/http-evader/http-evader-114/test.yaml
similarity index 100%
rename from tests/http-evader-114/test.yaml
rename to tests/http-evader/http-evader-114/test.yaml

diff --git a/tests/http-evader-115/README.md b/tests/http-evader/http-evader-115/README.md
similarity index 100%
rename from tests/http-evader-115/README.md
rename to tests/http-evader/http-evader-115/README.md

diff --git a/tests/http-evader-115/input.pcap b/tests/http-evader/http-evader-115/input.pcap
similarity index 100%
rename from tests/http-evader-115/input.pcap
rename to tests/http-evader/http-evader-115/input.pcap

diff --git a/tests/http-evader-115/test.rules b/tests/http-evader/http-evader-115/test.rules
similarity index 100%
rename from tests/http-evader-115/test.rules
rename to tests/http-evader/http-evader-115/test.rules

diff --git a/tests/http-evader-115/test.yaml b/tests/http-evader/http-evader-115/test.yaml
similarity index 100%
rename from tests/http-evader-115/test.yaml
rename to tests/http-evader/http-evader-115/test.yaml

diff --git a/tests/http-evader-116/README.md b/tests/http-evader/http-evader-116/README.md
similarity index 100%
rename from tests/http-evader-116/README.md
rename to tests/http-evader/http-evader-116/README.md

diff --git a/tests/http-evader-116/input.pcap b/tests/http-evader/http-evader-116/input.pcap
similarity index 100%
rename from tests/http-evader-116/input.pcap
rename to tests/http-evader/http-evader-116/input.pcap

diff --git a/tests/http-evader-116/test.rules b/tests/http-evader/http-evader-116/test.rules
similarity index 100%
rename from tests/http-evader-116/test.rules
rename to tests/http-evader/http-evader-116/test.rules

diff --git a/tests/http-evader-116/test.yaml b/tests/http-evader/http-evader-116/test.yaml
similarity index 100%
rename from tests/http-evader-116/test.yaml
rename to tests/http-evader/http-evader-116/test.yaml

diff --git a/tests/http-evader-117/README.md b/tests/http-evader/http-evader-117/README.md
similarity index 100%
rename from tests/http-evader-117/README.md
rename to tests/http-evader/http-evader-117/README.md

diff --git a/tests/http-evader-117/input.pcap b/tests/http-evader/http-evader-117/input.pcap
similarity index 100%
rename from tests/http-evader-117/input.pcap
rename to tests/http-evader/http-evader-117/input.pcap

diff --git a/tests/http-evader-117/test.rules b/tests/http-evader/http-evader-117/test.rules
similarity index 100%
rename from tests/http-evader-117/test.rules
rename to tests/http-evader/http-evader-117/test.rules

diff --git a/tests/http-evader-117/test.yaml b/tests/http-evader/http-evader-117/test.yaml
similarity index 100%
rename from tests/http-evader-117/test.yaml
rename to tests/http-evader/http-evader-117/test.yaml

diff --git a/tests/http-evader-118/README.md b/tests/http-evader/http-evader-118/README.md
similarity index 100%
rename from tests/http-evader-118/README.md
rename to tests/http-evader/http-evader-118/README.md

diff --git a/tests/http-evader-118/input.pcap b/tests/http-evader/http-evader-118/input.pcap
similarity index 100%
rename from tests/http-evader-118/input.pcap
rename to tests/http-evader/http-evader-118/input.pcap

diff --git a/tests/http-evader-118/test.rules b/tests/http-evader/http-evader-118/test.rules
similarity index 100%
rename from tests/http-evader-118/test.rules
rename to tests/http-evader/http-evader-118/test.rules

diff --git a/tests/http-evader-118/test.yaml b/tests/http-evader/http-evader-118/test.yaml
similarity index 100%
rename from tests/http-evader-118/test.yaml
rename to tests/http-evader/http-evader-118/test.yaml

diff --git a/tests/http-evader-119/README.md b/tests/http-evader/http-evader-119/README.md
similarity index 100%
rename from tests/http-evader-119/README.md
rename to tests/http-evader/http-evader-119/README.md

diff --git a/tests/http-evader-119/input.pcap b/tests/http-evader/http-evader-119/input.pcap
similarity index 100%
rename from tests/http-evader-119/input.pcap
rename to tests/http-evader/http-evader-119/input.pcap

diff --git a/tests/http-evader-119/test.rules b/tests/http-evader/http-evader-119/test.rules
similarity index 100%
rename from tests/http-evader-119/test.rules
rename to tests/http-evader/http-evader-119/test.rules

diff --git a/tests/http-evader-119/test.yaml b/tests/http-evader/http-evader-119/test.yaml
similarity index 100%
rename from tests/http-evader-119/test.yaml
rename to tests/http-evader/http-evader-119/test.yaml

diff --git a/tests/http-evader-120/README.md b/tests/http-evader/http-evader-120/README.md
similarity index 100%
rename from tests/http-evader-120/README.md
rename to tests/http-evader/http-evader-120/README.md

diff --git a/tests/http-evader-120/input.pcap b/tests/http-evader/http-evader-120/input.pcap
similarity index 100%
rename from tests/http-evader-120/input.pcap
rename to tests/http-evader/http-evader-120/input.pcap

diff --git a/tests/http-evader-120/test.rules b/tests/http-evader/http-evader-120/test.rules
similarity index 100%
rename from tests/http-evader-120/test.rules
rename to tests/http-evader/http-evader-120/test.rules

diff --git a/tests/http-evader-120/test.yaml b/tests/http-evader/http-evader-120/test.yaml
similarity index 100%
rename from tests/http-evader-120/test.yaml
rename to tests/http-evader/http-evader-120/test.yaml

diff --git a/tests/http-evader-121/README.md b/tests/http-evader/http-evader-121/README.md
similarity index 100%
rename from tests/http-evader-121/README.md
rename to tests/http-evader/http-evader-121/README.md

diff --git a/tests/http-evader-121/input.pcap b/tests/http-evader/http-evader-121/input.pcap
similarity index 100%
rename from tests/http-evader-121/input.pcap
rename to tests/http-evader/http-evader-121/input.pcap

diff --git a/tests/http-evader-121/test.rules b/tests/http-evader/http-evader-121/test.rules
similarity index 100%
rename from tests/http-evader-121/test.rules
rename to tests/http-evader/http-evader-121/test.rules

diff --git a/tests/http-evader-121/test.yaml b/tests/http-evader/http-evader-121/test.yaml
similarity index 100%
rename from tests/http-evader-121/test.yaml
rename to tests/http-evader/http-evader-121/test.yaml

diff --git a/tests/http-evader-122/README.md b/tests/http-evader/http-evader-122/README.md
similarity index 100%
rename from tests/http-evader-122/README.md
rename to tests/http-evader/http-evader-122/README.md

diff --git a/tests/http-evader-122/input.pcap b/tests/http-evader/http-evader-122/input.pcap
similarity index 100%
rename from tests/http-evader-122/input.pcap
rename to tests/http-evader/http-evader-122/input.pcap

diff --git a/tests/http-evader-122/test.rules b/tests/http-evader/http-evader-122/test.rules
similarity index 100%
rename from tests/http-evader-122/test.rules
rename to tests/http-evader/http-evader-122/test.rules

diff --git a/tests/http-evader-122/test.yaml b/tests/http-evader/http-evader-122/test.yaml
similarity index 100%
rename from tests/http-evader-122/test.yaml
rename to tests/http-evader/http-evader-122/test.yaml

diff --git a/tests/http-evader-123/README.md b/tests/http-evader/http-evader-123/README.md
similarity index 100%
rename from tests/http-evader-123/README.md
rename to tests/http-evader/http-evader-123/README.md

diff --git a/tests/http-evader-123/input.pcap b/tests/http-evader/http-evader-123/input.pcap
similarity index 100%
rename from tests/http-evader-123/input.pcap
rename to tests/http-evader/http-evader-123/input.pcap

diff --git a/tests/http-evader-123/test.rules b/tests/http-evader/http-evader-123/test.rules
similarity index 100%
rename from tests/http-evader-123/test.rules
rename to tests/http-evader/http-evader-123/test.rules

diff --git a/tests/http-evader-123/test.yaml b/tests/http-evader/http-evader-123/test.yaml
similarity index 100%
rename from tests/http-evader-123/test.yaml
rename to tests/http-evader/http-evader-123/test.yaml

diff --git a/tests/http-evader-124/README.md b/tests/http-evader/http-evader-124/README.md
similarity index 100%
rename from tests/http-evader-124/README.md
rename to tests/http-evader/http-evader-124/README.md

diff --git a/tests/http-evader-124/input.pcap b/tests/http-evader/http-evader-124/input.pcap
similarity index 100%
rename from tests/http-evader-124/input.pcap
rename to tests/http-evader/http-evader-124/input.pcap

diff --git a/tests/http-evader-124/test.rules b/tests/http-evader/http-evader-124/test.rules
similarity index 100%
rename from tests/http-evader-124/test.rules
rename to tests/http-evader/http-evader-124/test.rules

diff --git a/tests/http-evader-124/test.yaml b/tests/http-evader/http-evader-124/test.yaml
similarity index 100%
rename from tests/http-evader-124/test.yaml
rename to tests/http-evader/http-evader-124/test.yaml

diff --git a/tests/http-evader-125/README.md b/tests/http-evader/http-evader-125/README.md
similarity index 100%
rename from tests/http-evader-125/README.md
rename to tests/http-evader/http-evader-125/README.md

diff --git a/tests/http-evader-125/input.pcap b/tests/http-evader/http-evader-125/input.pcap
similarity index 100%
rename from tests/http-evader-125/input.pcap
rename to tests/http-evader/http-evader-125/input.pcap

diff --git a/tests/http-evader-125/test.rules b/tests/http-evader/http-evader-125/test.rules
similarity index 100%
rename from tests/http-evader-125/test.rules
rename to tests/http-evader/http-evader-125/test.rules

diff --git a/tests/http-evader-125/test.yaml b/tests/http-evader/http-evader-125/test.yaml
similarity index 100%
rename from tests/http-evader-125/test.yaml
rename to tests/http-evader/http-evader-125/test.yaml

diff --git a/tests/http-evader-126/README.md b/tests/http-evader/http-evader-126/README.md
similarity index 100%
rename from tests/http-evader-126/README.md
rename to tests/http-evader/http-evader-126/README.md

diff --git a/tests/http-evader-126/input.pcap b/tests/http-evader/http-evader-126/input.pcap
similarity index 100%
rename from tests/http-evader-126/input.pcap
rename to tests/http-evader/http-evader-126/input.pcap

diff --git a/tests/http-evader-126/test.rules b/tests/http-evader/http-evader-126/test.rules
similarity index 100%
rename from tests/http-evader-126/test.rules
rename to tests/http-evader/http-evader-126/test.rules

diff --git a/tests/http-evader-126/test.yaml b/tests/http-evader/http-evader-126/test.yaml
similarity index 100%
rename from tests/http-evader-126/test.yaml
rename to tests/http-evader/http-evader-126/test.yaml

diff --git a/tests/http-evader-127/README.md b/tests/http-evader/http-evader-127/README.md
similarity index 100%
rename from tests/http-evader-127/README.md
rename to tests/http-evader/http-evader-127/README.md

diff --git a/tests/http-evader-127/input.pcap b/tests/http-evader/http-evader-127/input.pcap
similarity index 100%
rename from tests/http-evader-127/input.pcap
rename to tests/http-evader/http-evader-127/input.pcap

diff --git a/tests/http-evader-127/test.rules b/tests/http-evader/http-evader-127/test.rules
similarity index 100%
rename from tests/http-evader-127/test.rules
rename to tests/http-evader/http-evader-127/test.rules

diff --git a/tests/http-evader-127/test.yaml b/tests/http-evader/http-evader-127/test.yaml
similarity index 100%
rename from tests/http-evader-127/test.yaml
rename to tests/http-evader/http-evader-127/test.yaml

diff --git a/tests/http-evader-128/README.md b/tests/http-evader/http-evader-128/README.md
similarity index 100%
rename from tests/http-evader-128/README.md
rename to tests/http-evader/http-evader-128/README.md

diff --git a/tests/http-evader-128/input.pcap b/tests/http-evader/http-evader-128/input.pcap
similarity index 100%
rename from tests/http-evader-128/input.pcap
rename to tests/http-evader/http-evader-128/input.pcap

diff --git a/tests/http-evader-128/test.rules b/tests/http-evader/http-evader-128/test.rules
similarity index 100%
rename from tests/http-evader-128/test.rules
rename to tests/http-evader/http-evader-128/test.rules

diff --git a/tests/http-evader-128/test.yaml b/tests/http-evader/http-evader-128/test.yaml
similarity index 100%
rename from tests/http-evader-128/test.yaml
rename to tests/http-evader/http-evader-128/test.yaml

diff --git a/tests/http-evader-129/README.md b/tests/http-evader/http-evader-129/README.md
similarity index 100%
rename from tests/http-evader-129/README.md
rename to tests/http-evader/http-evader-129/README.md

diff --git a/tests/http-evader-129/input.pcap b/tests/http-evader/http-evader-129/input.pcap
similarity index 100%
rename from tests/http-evader-129/input.pcap
rename to tests/http-evader/http-evader-129/input.pcap

diff --git a/tests/http-evader-129/test.rules b/tests/http-evader/http-evader-129/test.rules
similarity index 100%
rename from tests/http-evader-129/test.rules
rename to tests/http-evader/http-evader-129/test.rules

diff --git a/tests/http-evader-129/test.yaml b/tests/http-evader/http-evader-129/test.yaml
similarity index 100%
rename from tests/http-evader-129/test.yaml
rename to tests/http-evader/http-evader-129/test.yaml

diff --git a/tests/http-evader-130/README.md b/tests/http-evader/http-evader-130/README.md
similarity index 100%
rename from tests/http-evader-130/README.md
rename to tests/http-evader/http-evader-130/README.md

diff --git a/tests/http-evader-130/input.pcap b/tests/http-evader/http-evader-130/input.pcap
similarity index 100%
rename from tests/http-evader-130/input.pcap
rename to tests/http-evader/http-evader-130/input.pcap

diff --git a/tests/http-evader-130/test.rules b/tests/http-evader/http-evader-130/test.rules
similarity index 100%
rename from tests/http-evader-130/test.rules
rename to tests/http-evader/http-evader-130/test.rules

diff --git a/tests/http-evader-130/test.yaml b/tests/http-evader/http-evader-130/test.yaml
similarity index 100%
rename from tests/http-evader-130/test.yaml
rename to tests/http-evader/http-evader-130/test.yaml

diff --git a/tests/http-evader-131/README.md b/tests/http-evader/http-evader-131/README.md
similarity index 100%
rename from tests/http-evader-131/README.md
rename to tests/http-evader/http-evader-131/README.md

diff --git a/tests/http-evader-131/input.pcap b/tests/http-evader/http-evader-131/input.pcap
similarity index 100%
rename from tests/http-evader-131/input.pcap
rename to tests/http-evader/http-evader-131/input.pcap

diff --git a/tests/http-evader-131/test.rules b/tests/http-evader/http-evader-131/test.rules
similarity index 100%
rename from tests/http-evader-131/test.rules
rename to tests/http-evader/http-evader-131/test.rules

diff --git a/tests/http-evader-131/test.yaml b/tests/http-evader/http-evader-131/test.yaml
similarity index 100%
rename from tests/http-evader-131/test.yaml
rename to tests/http-evader/http-evader-131/test.yaml

diff --git a/tests/http-evader-132/README.md b/tests/http-evader/http-evader-132/README.md
similarity index 100%
rename from tests/http-evader-132/README.md
rename to tests/http-evader/http-evader-132/README.md

diff --git a/tests/http-evader-132/input.pcap b/tests/http-evader/http-evader-132/input.pcap
similarity index 100%
rename from tests/http-evader-132/input.pcap
rename to tests/http-evader/http-evader-132/input.pcap

diff --git a/tests/http-evader-132/test.rules b/tests/http-evader/http-evader-132/test.rules
similarity index 100%
rename from tests/http-evader-132/test.rules
rename to tests/http-evader/http-evader-132/test.rules

diff --git a/tests/http-evader-132/test.yaml b/tests/http-evader/http-evader-132/test.yaml
similarity index 100%
rename from tests/http-evader-132/test.yaml
rename to tests/http-evader/http-evader-132/test.yaml

diff --git a/tests/http-evader-133/README.md b/tests/http-evader/http-evader-133/README.md
similarity index 100%
rename from tests/http-evader-133/README.md
rename to tests/http-evader/http-evader-133/README.md

diff --git a/tests/http-evader-133/input.pcap b/tests/http-evader/http-evader-133/input.pcap
similarity index 100%
rename from tests/http-evader-133/input.pcap
rename to tests/http-evader/http-evader-133/input.pcap

diff --git a/tests/http-evader-133/test.rules b/tests/http-evader/http-evader-133/test.rules
similarity index 100%
rename from tests/http-evader-133/test.rules
rename to tests/http-evader/http-evader-133/test.rules

diff --git a/tests/http-evader-133/test.yaml b/tests/http-evader/http-evader-133/test.yaml
similarity index 100%
rename from tests/http-evader-133/test.yaml
rename to tests/http-evader/http-evader-133/test.yaml

diff --git a/tests/http-evader-134/README.md b/tests/http-evader/http-evader-134/README.md
similarity index 100%
rename from tests/http-evader-134/README.md
rename to tests/http-evader/http-evader-134/README.md

diff --git a/tests/http-evader-134/input.pcap b/tests/http-evader/http-evader-134/input.pcap
similarity index 100%
rename from tests/http-evader-134/input.pcap
rename to tests/http-evader/http-evader-134/input.pcap

diff --git a/tests/http-evader-134/test.rules b/tests/http-evader/http-evader-134/test.rules
similarity index 100%
rename from tests/http-evader-134/test.rules
rename to tests/http-evader/http-evader-134/test.rules

diff --git a/tests/http-evader-134/test.yaml b/tests/http-evader/http-evader-134/test.yaml
similarity index 100%
rename from tests/http-evader-134/test.yaml
rename to tests/http-evader/http-evader-134/test.yaml

diff --git a/tests/http-evader-135/README.md b/tests/http-evader/http-evader-135/README.md
similarity index 100%
rename from tests/http-evader-135/README.md
rename to tests/http-evader/http-evader-135/README.md

diff --git a/tests/http-evader-135/input.pcap b/tests/http-evader/http-evader-135/input.pcap
similarity index 100%
rename from tests/http-evader-135/input.pcap
rename to tests/http-evader/http-evader-135/input.pcap

diff --git a/tests/http-evader-135/test.rules b/tests/http-evader/http-evader-135/test.rules
similarity index 100%
rename from tests/http-evader-135/test.rules
rename to tests/http-evader/http-evader-135/test.rules

diff --git a/tests/http-evader-135/test.yaml b/tests/http-evader/http-evader-135/test.yaml
similarity index 100%
rename from tests/http-evader-135/test.yaml
rename to tests/http-evader/http-evader-135/test.yaml

diff --git a/tests/http-evader-136/README.md b/tests/http-evader/http-evader-136/README.md
similarity index 100%
rename from tests/http-evader-136/README.md
rename to tests/http-evader/http-evader-136/README.md

diff --git a/tests/http-evader-136/input.pcap b/tests/http-evader/http-evader-136/input.pcap
similarity index 100%
rename from tests/http-evader-136/input.pcap
rename to tests/http-evader/http-evader-136/input.pcap

diff --git a/tests/http-evader-136/test.rules b/tests/http-evader/http-evader-136/test.rules
similarity index 100%
rename from tests/http-evader-136/test.rules
rename to tests/http-evader/http-evader-136/test.rules

diff --git a/tests/http-evader-136/test.yaml b/tests/http-evader/http-evader-136/test.yaml
similarity index 100%
rename from tests/http-evader-136/test.yaml
rename to tests/http-evader/http-evader-136/test.yaml

diff --git a/tests/http-evader-137/README.md b/tests/http-evader/http-evader-137/README.md
similarity index 100%
rename from tests/http-evader-137/README.md
rename to tests/http-evader/http-evader-137/README.md

diff --git a/tests/http-evader-137/input.pcap b/tests/http-evader/http-evader-137/input.pcap
similarity index 100%
rename from tests/http-evader-137/input.pcap
rename to tests/http-evader/http-evader-137/input.pcap

diff --git a/tests/http-evader-137/test.rules b/tests/http-evader/http-evader-137/test.rules
similarity index 100%
rename from tests/http-evader-137/test.rules
rename to tests/http-evader/http-evader-137/test.rules

diff --git a/tests/http-evader-137/test.yaml b/tests/http-evader/http-evader-137/test.yaml
similarity index 100%
rename from tests/http-evader-137/test.yaml
rename to tests/http-evader/http-evader-137/test.yaml

diff --git a/tests/http-evader-138/README.md b/tests/http-evader/http-evader-138/README.md
similarity index 100%
rename from tests/http-evader-138/README.md
rename to tests/http-evader/http-evader-138/README.md

diff --git a/tests/http-evader-138/input.pcap b/tests/http-evader/http-evader-138/input.pcap
similarity index 100%
rename from tests/http-evader-138/input.pcap
rename to tests/http-evader/http-evader-138/input.pcap

diff --git a/tests/http-evader-138/test.rules b/tests/http-evader/http-evader-138/test.rules
similarity index 100%
rename from tests/http-evader-138/test.rules
rename to tests/http-evader/http-evader-138/test.rules

diff --git a/tests/http-evader-138/test.yaml b/tests/http-evader/http-evader-138/test.yaml
similarity index 100%
rename from tests/http-evader-138/test.yaml
rename to tests/http-evader/http-evader-138/test.yaml

diff --git a/tests/http-evader-139/README.md b/tests/http-evader/http-evader-139/README.md
similarity index 100%
rename from tests/http-evader-139/README.md
rename to tests/http-evader/http-evader-139/README.md

diff --git a/tests/http-evader-139/input.pcap b/tests/http-evader/http-evader-139/input.pcap
similarity index 100%
rename from tests/http-evader-139/input.pcap
rename to tests/http-evader/http-evader-139/input.pcap

diff --git a/tests/http-evader-139/test.rules b/tests/http-evader/http-evader-139/test.rules
similarity index 100%
rename from tests/http-evader-139/test.rules
rename to tests/http-evader/http-evader-139/test.rules

diff --git a/tests/http-evader-139/test.yaml b/tests/http-evader/http-evader-139/test.yaml
similarity index 100%
rename from tests/http-evader-139/test.yaml
rename to tests/http-evader/http-evader-139/test.yaml

diff --git a/tests/http-evader-140/README.md b/tests/http-evader/http-evader-140/README.md
similarity index 100%
rename from tests/http-evader-140/README.md
rename to tests/http-evader/http-evader-140/README.md

diff --git a/tests/http-evader-140/input.pcap b/tests/http-evader/http-evader-140/input.pcap
similarity index 100%
rename from tests/http-evader-140/input.pcap
rename to tests/http-evader/http-evader-140/input.pcap

diff --git a/tests/http-evader-140/test.rules b/tests/http-evader/http-evader-140/test.rules
similarity index 100%
rename from tests/http-evader-140/test.rules
rename to tests/http-evader/http-evader-140/test.rules

diff --git a/tests/http-evader-140/test.yaml b/tests/http-evader/http-evader-140/test.yaml
similarity index 100%
rename from tests/http-evader-140/test.yaml
rename to tests/http-evader/http-evader-140/test.yaml

diff --git a/tests/http-evader-141/README.md b/tests/http-evader/http-evader-141/README.md
similarity index 100%
rename from tests/http-evader-141/README.md
rename to tests/http-evader/http-evader-141/README.md

diff --git a/tests/http-evader-141/input.pcap b/tests/http-evader/http-evader-141/input.pcap
similarity index 100%
rename from tests/http-evader-141/input.pcap
rename to tests/http-evader/http-evader-141/input.pcap

diff --git a/tests/http-evader-141/test.rules b/tests/http-evader/http-evader-141/test.rules
similarity index 100%
rename from tests/http-evader-141/test.rules
rename to tests/http-evader/http-evader-141/test.rules

diff --git a/tests/http-evader-141/test.yaml b/tests/http-evader/http-evader-141/test.yaml
similarity index 100%
rename from tests/http-evader-141/test.yaml
rename to tests/http-evader/http-evader-141/test.yaml

diff --git a/tests/http-evader-142/README.md b/tests/http-evader/http-evader-142/README.md
similarity index 100%
rename from tests/http-evader-142/README.md
rename to tests/http-evader/http-evader-142/README.md

diff --git a/tests/http-evader-142/input.pcap b/tests/http-evader/http-evader-142/input.pcap
similarity index 100%
rename from tests/http-evader-142/input.pcap
rename to tests/http-evader/http-evader-142/input.pcap

diff --git a/tests/http-evader-142/test.rules b/tests/http-evader/http-evader-142/test.rules
similarity index 100%
rename from tests/http-evader-142/test.rules
rename to tests/http-evader/http-evader-142/test.rules

diff --git a/tests/http-evader-142/test.yaml b/tests/http-evader/http-evader-142/test.yaml
similarity index 100%
rename from tests/http-evader-142/test.yaml
rename to tests/http-evader/http-evader-142/test.yaml

diff --git a/tests/http-evader-143/README.md b/tests/http-evader/http-evader-143/README.md
similarity index 100%
rename from tests/http-evader-143/README.md
rename to tests/http-evader/http-evader-143/README.md

diff --git a/tests/http-evader-143/input.pcap b/tests/http-evader/http-evader-143/input.pcap
similarity index 100%
rename from tests/http-evader-143/input.pcap
rename to tests/http-evader/http-evader-143/input.pcap

diff --git a/tests/http-evader-143/test.rules b/tests/http-evader/http-evader-143/test.rules
similarity index 100%
rename from tests/http-evader-143/test.rules
rename to tests/http-evader/http-evader-143/test.rules

diff --git a/tests/http-evader-143/test.yaml b/tests/http-evader/http-evader-143/test.yaml
similarity index 100%
rename from tests/http-evader-143/test.yaml
rename to tests/http-evader/http-evader-143/test.yaml

diff --git a/tests/http-evader-144/README.md b/tests/http-evader/http-evader-144/README.md
similarity index 100%
rename from tests/http-evader-144/README.md
rename to tests/http-evader/http-evader-144/README.md

diff --git a/tests/http-evader-144/input.pcap b/tests/http-evader/http-evader-144/input.pcap
similarity index 100%
rename from tests/http-evader-144/input.pcap
rename to tests/http-evader/http-evader-144/input.pcap

diff --git a/tests/http-evader-144/test.rules b/tests/http-evader/http-evader-144/test.rules
similarity index 100%
rename from tests/http-evader-144/test.rules
rename to tests/http-evader/http-evader-144/test.rules

diff --git a/tests/http-evader-144/test.yaml b/tests/http-evader/http-evader-144/test.yaml
similarity index 100%
rename from tests/http-evader-144/test.yaml
rename to tests/http-evader/http-evader-144/test.yaml

diff --git a/tests/http-evader-145/README.md b/tests/http-evader/http-evader-145/README.md
similarity index 100%
rename from tests/http-evader-145/README.md
rename to tests/http-evader/http-evader-145/README.md

diff --git a/tests/http-evader-145/input.pcap b/tests/http-evader/http-evader-145/input.pcap
similarity index 100%
rename from tests/http-evader-145/input.pcap
rename to tests/http-evader/http-evader-145/input.pcap

diff --git a/tests/http-evader-145/test.rules b/tests/http-evader/http-evader-145/test.rules
similarity index 100%
rename from tests/http-evader-145/test.rules
rename to tests/http-evader/http-evader-145/test.rules

diff --git a/tests/http-evader-145/test.yaml b/tests/http-evader/http-evader-145/test.yaml
similarity index 100%
rename from tests/http-evader-145/test.yaml
rename to tests/http-evader/http-evader-145/test.yaml

diff --git a/tests/http-evader-146/README.md b/tests/http-evader/http-evader-146/README.md
similarity index 100%
rename from tests/http-evader-146/README.md
rename to tests/http-evader/http-evader-146/README.md

diff --git a/tests/http-evader-146/input.pcap b/tests/http-evader/http-evader-146/input.pcap
similarity index 100%
rename from tests/http-evader-146/input.pcap
rename to tests/http-evader/http-evader-146/input.pcap

diff --git a/tests/http-evader-146/test.rules b/tests/http-evader/http-evader-146/test.rules
similarity index 100%
rename from tests/http-evader-146/test.rules
rename to tests/http-evader/http-evader-146/test.rules

diff --git a/tests/http-evader-146/test.yaml b/tests/http-evader/http-evader-146/test.yaml
similarity index 100%
rename from tests/http-evader-146/test.yaml
rename to tests/http-evader/http-evader-146/test.yaml

diff --git a/tests/http-evader-147/README.md b/tests/http-evader/http-evader-147/README.md
similarity index 100%
rename from tests/http-evader-147/README.md
rename to tests/http-evader/http-evader-147/README.md

diff --git a/tests/http-evader-147/input.pcap b/tests/http-evader/http-evader-147/input.pcap
similarity index 100%
rename from tests/http-evader-147/input.pcap
rename to tests/http-evader/http-evader-147/input.pcap

diff --git a/tests/http-evader-147/test.rules b/tests/http-evader/http-evader-147/test.rules
similarity index 100%
rename from tests/http-evader-147/test.rules
rename to tests/http-evader/http-evader-147/test.rules

diff --git a/tests/http-evader-147/test.yaml b/tests/http-evader/http-evader-147/test.yaml
similarity index 100%
rename from tests/http-evader-147/test.yaml
rename to tests/http-evader/http-evader-147/test.yaml

diff --git a/tests/http-evader-148/README.md b/tests/http-evader/http-evader-148/README.md
similarity index 100%
rename from tests/http-evader-148/README.md
rename to tests/http-evader/http-evader-148/README.md

diff --git a/tests/http-evader-148/input.pcap b/tests/http-evader/http-evader-148/input.pcap
similarity index 100%
rename from tests/http-evader-148/input.pcap
rename to tests/http-evader/http-evader-148/input.pcap

diff --git a/tests/http-evader-148/test.rules b/tests/http-evader/http-evader-148/test.rules
similarity index 100%
rename from tests/http-evader-148/test.rules
rename to tests/http-evader/http-evader-148/test.rules

diff --git a/tests/http-evader-148/test.yaml b/tests/http-evader/http-evader-148/test.yaml
similarity index 100%
rename from tests/http-evader-148/test.yaml
rename to tests/http-evader/http-evader-148/test.yaml

diff --git a/tests/http-evader-149/README.md b/tests/http-evader/http-evader-149/README.md
similarity index 100%
rename from tests/http-evader-149/README.md
rename to tests/http-evader/http-evader-149/README.md

diff --git a/tests/http-evader-149/input.pcap b/tests/http-evader/http-evader-149/input.pcap
similarity index 100%
rename from tests/http-evader-149/input.pcap
rename to tests/http-evader/http-evader-149/input.pcap

diff --git a/tests/http-evader-149/test.rules b/tests/http-evader/http-evader-149/test.rules
similarity index 100%
rename from tests/http-evader-149/test.rules
rename to tests/http-evader/http-evader-149/test.rules

diff --git a/tests/http-evader-149/test.yaml b/tests/http-evader/http-evader-149/test.yaml
similarity index 100%
rename from tests/http-evader-149/test.yaml
rename to tests/http-evader/http-evader-149/test.yaml

diff --git a/tests/http-evader-150/README.md b/tests/http-evader/http-evader-150/README.md
similarity index 100%
rename from tests/http-evader-150/README.md
rename to tests/http-evader/http-evader-150/README.md

diff --git a/tests/http-evader-150/input.pcap b/tests/http-evader/http-evader-150/input.pcap
similarity index 100%
rename from tests/http-evader-150/input.pcap
rename to tests/http-evader/http-evader-150/input.pcap

diff --git a/tests/http-evader-150/test.rules b/tests/http-evader/http-evader-150/test.rules
similarity index 100%
rename from tests/http-evader-150/test.rules
rename to tests/http-evader/http-evader-150/test.rules

diff --git a/tests/http-evader-150/test.yaml b/tests/http-evader/http-evader-150/test.yaml
similarity index 100%
rename from tests/http-evader-150/test.yaml
rename to tests/http-evader/http-evader-150/test.yaml

diff --git a/tests/http-evader-151/README.md b/tests/http-evader/http-evader-151/README.md
similarity index 100%
rename from tests/http-evader-151/README.md
rename to tests/http-evader/http-evader-151/README.md

diff --git a/tests/http-evader-151/input.pcap b/tests/http-evader/http-evader-151/input.pcap
similarity index 100%
rename from tests/http-evader-151/input.pcap
rename to tests/http-evader/http-evader-151/input.pcap

diff --git a/tests/http-evader-151/test.rules b/tests/http-evader/http-evader-151/test.rules
similarity index 100%
rename from tests/http-evader-151/test.rules
rename to tests/http-evader/http-evader-151/test.rules

diff --git a/tests/http-evader-151/test.yaml b/tests/http-evader/http-evader-151/test.yaml
similarity index 100%
rename from tests/http-evader-151/test.yaml
rename to tests/http-evader/http-evader-151/test.yaml

diff --git a/tests/http-evader-152/README.md b/tests/http-evader/http-evader-152/README.md
similarity index 100%
rename from tests/http-evader-152/README.md
rename to tests/http-evader/http-evader-152/README.md

diff --git a/tests/http-evader-152/input.pcap b/tests/http-evader/http-evader-152/input.pcap
similarity index 100%
rename from tests/http-evader-152/input.pcap
rename to tests/http-evader/http-evader-152/input.pcap

diff --git a/tests/http-evader-152/test.rules b/tests/http-evader/http-evader-152/test.rules
similarity index 100%
rename from tests/http-evader-152/test.rules
rename to tests/http-evader/http-evader-152/test.rules

diff --git a/tests/http-evader-152/test.yaml b/tests/http-evader/http-evader-152/test.yaml
similarity index 100%
rename from tests/http-evader-152/test.yaml
rename to tests/http-evader/http-evader-152/test.yaml

diff --git a/tests/http-evader-153/README.md b/tests/http-evader/http-evader-153/README.md
similarity index 100%
rename from tests/http-evader-153/README.md
rename to tests/http-evader/http-evader-153/README.md

diff --git a/tests/http-evader-153/input.pcap b/tests/http-evader/http-evader-153/input.pcap
similarity index 100%
rename from tests/http-evader-153/input.pcap
rename to tests/http-evader/http-evader-153/input.pcap

diff --git a/tests/http-evader-153/test.rules b/tests/http-evader/http-evader-153/test.rules
similarity index 100%
rename from tests/http-evader-153/test.rules
rename to tests/http-evader/http-evader-153/test.rules

diff --git a/tests/http-evader-153/test.yaml b/tests/http-evader/http-evader-153/test.yaml
similarity index 100%
rename from tests/http-evader-153/test.yaml
rename to tests/http-evader/http-evader-153/test.yaml

diff --git a/tests/http-evader-154/README.md b/tests/http-evader/http-evader-154/README.md
similarity index 100%
rename from tests/http-evader-154/README.md
rename to tests/http-evader/http-evader-154/README.md

diff --git a/tests/http-evader-154/input.pcap b/tests/http-evader/http-evader-154/input.pcap
similarity index 100%
rename from tests/http-evader-154/input.pcap
rename to tests/http-evader/http-evader-154/input.pcap

diff --git a/tests/http-evader-154/test.rules b/tests/http-evader/http-evader-154/test.rules
similarity index 100%
rename from tests/http-evader-154/test.rules
rename to tests/http-evader/http-evader-154/test.rules

diff --git a/tests/http-evader-154/test.yaml b/tests/http-evader/http-evader-154/test.yaml
similarity index 100%
rename from tests/http-evader-154/test.yaml
rename to tests/http-evader/http-evader-154/test.yaml

diff --git a/tests/http-evader-155/README.md b/tests/http-evader/http-evader-155/README.md
similarity index 100%
rename from tests/http-evader-155/README.md
rename to tests/http-evader/http-evader-155/README.md

diff --git a/tests/http-evader-155/input.pcap b/tests/http-evader/http-evader-155/input.pcap
similarity index 100%
rename from tests/http-evader-155/input.pcap
rename to tests/http-evader/http-evader-155/input.pcap

diff --git a/tests/http-evader-155/test.rules b/tests/http-evader/http-evader-155/test.rules
similarity index 100%
rename from tests/http-evader-155/test.rules
rename to tests/http-evader/http-evader-155/test.rules

diff --git a/tests/http-evader-155/test.yaml b/tests/http-evader/http-evader-155/test.yaml
similarity index 100%
rename from tests/http-evader-155/test.yaml
rename to tests/http-evader/http-evader-155/test.yaml

diff --git a/tests/http-evader-156/README.md b/tests/http-evader/http-evader-156/README.md
similarity index 100%
rename from tests/http-evader-156/README.md
rename to tests/http-evader/http-evader-156/README.md

diff --git a/tests/http-evader-156/input.pcap b/tests/http-evader/http-evader-156/input.pcap
similarity index 100%
rename from tests/http-evader-156/input.pcap
rename to tests/http-evader/http-evader-156/input.pcap

diff --git a/tests/http-evader-156/test.rules b/tests/http-evader/http-evader-156/test.rules
similarity index 100%
rename from tests/http-evader-156/test.rules
rename to tests/http-evader/http-evader-156/test.rules

diff --git a/tests/http-evader-156/test.yaml b/tests/http-evader/http-evader-156/test.yaml
similarity index 100%
rename from tests/http-evader-156/test.yaml
rename to tests/http-evader/http-evader-156/test.yaml

diff --git a/tests/http-evader-157/README.md b/tests/http-evader/http-evader-157/README.md
similarity index 100%
rename from tests/http-evader-157/README.md
rename to tests/http-evader/http-evader-157/README.md

diff --git a/tests/http-evader-157/input.pcap b/tests/http-evader/http-evader-157/input.pcap
similarity index 100%
rename from tests/http-evader-157/input.pcap
rename to tests/http-evader/http-evader-157/input.pcap

diff --git a/tests/http-evader-157/test.rules b/tests/http-evader/http-evader-157/test.rules
similarity index 100%
rename from tests/http-evader-157/test.rules
rename to tests/http-evader/http-evader-157/test.rules

diff --git a/tests/http-evader-157/test.yaml b/tests/http-evader/http-evader-157/test.yaml
similarity index 100%
rename from tests/http-evader-157/test.yaml
rename to tests/http-evader/http-evader-157/test.yaml

diff --git a/tests/http-evader-158/README.md b/tests/http-evader/http-evader-158/README.md
similarity index 100%
rename from tests/http-evader-158/README.md
rename to tests/http-evader/http-evader-158/README.md

diff --git a/tests/http-evader-158/input.pcap b/tests/http-evader/http-evader-158/input.pcap
similarity index 100%
rename from tests/http-evader-158/input.pcap
rename to tests/http-evader/http-evader-158/input.pcap

diff --git a/tests/http-evader-158/test.rules b/tests/http-evader/http-evader-158/test.rules
similarity index 100%
rename from tests/http-evader-158/test.rules
rename to tests/http-evader/http-evader-158/test.rules

diff --git a/tests/http-evader-158/test.yaml b/tests/http-evader/http-evader-158/test.yaml
similarity index 100%
rename from tests/http-evader-158/test.yaml
rename to tests/http-evader/http-evader-158/test.yaml

diff --git a/tests/http-evader-159/README.md b/tests/http-evader/http-evader-159/README.md
similarity index 100%
rename from tests/http-evader-159/README.md
rename to tests/http-evader/http-evader-159/README.md

diff --git a/tests/http-evader-159/input.pcap b/tests/http-evader/http-evader-159/input.pcap
similarity index 100%
rename from tests/http-evader-159/input.pcap
rename to tests/http-evader/http-evader-159/input.pcap

diff --git a/tests/http-evader-159/test.rules b/tests/http-evader/http-evader-159/test.rules
similarity index 100%
rename from tests/http-evader-159/test.rules
rename to tests/http-evader/http-evader-159/test.rules

diff --git a/tests/http-evader-159/test.yaml b/tests/http-evader/http-evader-159/test.yaml
similarity index 100%
rename from tests/http-evader-159/test.yaml
rename to tests/http-evader/http-evader-159/test.yaml

diff --git a/tests/http-evader-160/README.md b/tests/http-evader/http-evader-160/README.md
similarity index 100%
rename from tests/http-evader-160/README.md
rename to tests/http-evader/http-evader-160/README.md

diff --git a/tests/http-evader-160/input.pcap b/tests/http-evader/http-evader-160/input.pcap
similarity index 100%
rename from tests/http-evader-160/input.pcap
rename to tests/http-evader/http-evader-160/input.pcap

diff --git a/tests/http-evader-160/test.rules b/tests/http-evader/http-evader-160/test.rules
similarity index 100%
rename from tests/http-evader-160/test.rules
rename to tests/http-evader/http-evader-160/test.rules

diff --git a/tests/http-evader-160/test.yaml b/tests/http-evader/http-evader-160/test.yaml
similarity index 100%
rename from tests/http-evader-160/test.yaml
rename to tests/http-evader/http-evader-160/test.yaml

diff --git a/tests/http-evader-161/README.md b/tests/http-evader/http-evader-161/README.md
similarity index 100%
rename from tests/http-evader-161/README.md
rename to tests/http-evader/http-evader-161/README.md

diff --git a/tests/http-evader-161/input.pcap b/tests/http-evader/http-evader-161/input.pcap
similarity index 100%
rename from tests/http-evader-161/input.pcap
rename to tests/http-evader/http-evader-161/input.pcap

diff --git a/tests/http-evader-161/test.rules b/tests/http-evader/http-evader-161/test.rules
similarity index 100%
rename from tests/http-evader-161/test.rules
rename to tests/http-evader/http-evader-161/test.rules

diff --git a/tests/http-evader-161/test.yaml b/tests/http-evader/http-evader-161/test.yaml
similarity index 100%
rename from tests/http-evader-161/test.yaml
rename to tests/http-evader/http-evader-161/test.yaml

diff --git a/tests/http-evader-162/README.md b/tests/http-evader/http-evader-162/README.md
similarity index 100%
rename from tests/http-evader-162/README.md
rename to tests/http-evader/http-evader-162/README.md

diff --git a/tests/http-evader-162/input.pcap b/tests/http-evader/http-evader-162/input.pcap
similarity index 100%
rename from tests/http-evader-162/input.pcap
rename to tests/http-evader/http-evader-162/input.pcap

diff --git a/tests/http-evader-162/test.rules b/tests/http-evader/http-evader-162/test.rules
similarity index 100%
rename from tests/http-evader-162/test.rules
rename to tests/http-evader/http-evader-162/test.rules

diff --git a/tests/http-evader-162/test.yaml b/tests/http-evader/http-evader-162/test.yaml
similarity index 100%
rename from tests/http-evader-162/test.yaml
rename to tests/http-evader/http-evader-162/test.yaml

diff --git a/tests/http-evader-163/README.md b/tests/http-evader/http-evader-163/README.md
similarity index 100%
rename from tests/http-evader-163/README.md
rename to tests/http-evader/http-evader-163/README.md

diff --git a/tests/http-evader-163/input.pcap b/tests/http-evader/http-evader-163/input.pcap
similarity index 100%
rename from tests/http-evader-163/input.pcap
rename to tests/http-evader/http-evader-163/input.pcap

diff --git a/tests/http-evader-163/test.rules b/tests/http-evader/http-evader-163/test.rules
similarity index 100%
rename from tests/http-evader-163/test.rules
rename to tests/http-evader/http-evader-163/test.rules

diff --git a/tests/http-evader-163/test.yaml b/tests/http-evader/http-evader-163/test.yaml
similarity index 100%
rename from tests/http-evader-163/test.yaml
rename to tests/http-evader/http-evader-163/test.yaml

diff --git a/tests/http-evader-164/README.md b/tests/http-evader/http-evader-164/README.md
similarity index 100%
rename from tests/http-evader-164/README.md
rename to tests/http-evader/http-evader-164/README.md

diff --git a/tests/http-evader-164/input.pcap b/tests/http-evader/http-evader-164/input.pcap
similarity index 100%
rename from tests/http-evader-164/input.pcap
rename to tests/http-evader/http-evader-164/input.pcap

diff --git a/tests/http-evader-164/test.rules b/tests/http-evader/http-evader-164/test.rules
similarity index 100%
rename from tests/http-evader-164/test.rules
rename to tests/http-evader/http-evader-164/test.rules

diff --git a/tests/http-evader-164/test.yaml b/tests/http-evader/http-evader-164/test.yaml
similarity index 100%
rename from tests/http-evader-164/test.yaml
rename to tests/http-evader/http-evader-164/test.yaml

diff --git a/tests/http-evader-165/README.md b/tests/http-evader/http-evader-165/README.md
similarity index 100%
rename from tests/http-evader-165/README.md
rename to tests/http-evader/http-evader-165/README.md

diff --git a/tests/http-evader-165/input.pcap b/tests/http-evader/http-evader-165/input.pcap
similarity index 100%
rename from tests/http-evader-165/input.pcap
rename to tests/http-evader/http-evader-165/input.pcap

diff --git a/tests/http-evader-165/test.rules b/tests/http-evader/http-evader-165/test.rules
similarity index 100%
rename from tests/http-evader-165/test.rules
rename to tests/http-evader/http-evader-165/test.rules

diff --git a/tests/http-evader-165/test.yaml b/tests/http-evader/http-evader-165/test.yaml
similarity index 100%
rename from tests/http-evader-165/test.yaml
rename to tests/http-evader/http-evader-165/test.yaml

diff --git a/tests/http-evader-166/README.md b/tests/http-evader/http-evader-166/README.md
similarity index 100%
rename from tests/http-evader-166/README.md
rename to tests/http-evader/http-evader-166/README.md

diff --git a/tests/http-evader-166/input.pcap b/tests/http-evader/http-evader-166/input.pcap
similarity index 100%
rename from tests/http-evader-166/input.pcap
rename to tests/http-evader/http-evader-166/input.pcap

diff --git a/tests/http-evader-166/test.rules b/tests/http-evader/http-evader-166/test.rules
similarity index 100%
rename from tests/http-evader-166/test.rules
rename to tests/http-evader/http-evader-166/test.rules

diff --git a/tests/http-evader-166/test.yaml b/tests/http-evader/http-evader-166/test.yaml
similarity index 100%
rename from tests/http-evader-166/test.yaml
rename to tests/http-evader/http-evader-166/test.yaml

diff --git a/tests/http-evader-167/README.md b/tests/http-evader/http-evader-167/README.md
similarity index 100%
rename from tests/http-evader-167/README.md
rename to tests/http-evader/http-evader-167/README.md

diff --git a/tests/http-evader-167/input.pcap b/tests/http-evader/http-evader-167/input.pcap
similarity index 100%
rename from tests/http-evader-167/input.pcap
rename to tests/http-evader/http-evader-167/input.pcap

diff --git a/tests/http-evader-167/test.rules b/tests/http-evader/http-evader-167/test.rules
similarity index 100%
rename from tests/http-evader-167/test.rules
rename to tests/http-evader/http-evader-167/test.rules

diff --git a/tests/http-evader-167/test.yaml b/tests/http-evader/http-evader-167/test.yaml
similarity index 100%
rename from tests/http-evader-167/test.yaml
rename to tests/http-evader/http-evader-167/test.yaml

diff --git a/tests/http-evader-168/README.md b/tests/http-evader/http-evader-168/README.md
similarity index 100%
rename from tests/http-evader-168/README.md
rename to tests/http-evader/http-evader-168/README.md

diff --git a/tests/http-evader-168/input.pcap b/tests/http-evader/http-evader-168/input.pcap
similarity index 100%
rename from tests/http-evader-168/input.pcap
rename to tests/http-evader/http-evader-168/input.pcap

diff --git a/tests/http-evader-168/test.rules b/tests/http-evader/http-evader-168/test.rules
similarity index 100%
rename from tests/http-evader-168/test.rules
rename to tests/http-evader/http-evader-168/test.rules

diff --git a/tests/http-evader-168/test.yaml b/tests/http-evader/http-evader-168/test.yaml
similarity index 100%
rename from tests/http-evader-168/test.yaml
rename to tests/http-evader/http-evader-168/test.yaml

diff --git a/tests/http-evader-169/README.md b/tests/http-evader/http-evader-169/README.md
similarity index 100%
rename from tests/http-evader-169/README.md
rename to tests/http-evader/http-evader-169/README.md

diff --git a/tests/http-evader-169/input.pcap b/tests/http-evader/http-evader-169/input.pcap
similarity index 100%
rename from tests/http-evader-169/input.pcap
rename to tests/http-evader/http-evader-169/input.pcap

diff --git a/tests/http-evader-169/test.rules b/tests/http-evader/http-evader-169/test.rules
similarity index 100%
rename from tests/http-evader-169/test.rules
rename to tests/http-evader/http-evader-169/test.rules

diff --git a/tests/http-evader-169/test.yaml b/tests/http-evader/http-evader-169/test.yaml
similarity index 100%
rename from tests/http-evader-169/test.yaml
rename to tests/http-evader/http-evader-169/test.yaml

diff --git a/tests/http-evader-170/README.md b/tests/http-evader/http-evader-170/README.md
similarity index 100%
rename from tests/http-evader-170/README.md
rename to tests/http-evader/http-evader-170/README.md

diff --git a/tests/http-evader-170/input.pcap b/tests/http-evader/http-evader-170/input.pcap
similarity index 100%
rename from tests/http-evader-170/input.pcap
rename to tests/http-evader/http-evader-170/input.pcap

diff --git a/tests/http-evader-170/test.rules b/tests/http-evader/http-evader-170/test.rules
similarity index 100%
rename from tests/http-evader-170/test.rules
rename to tests/http-evader/http-evader-170/test.rules

diff --git a/tests/http-evader-170/test.yaml b/tests/http-evader/http-evader-170/test.yaml
similarity index 100%
rename from tests/http-evader-170/test.yaml
rename to tests/http-evader/http-evader-170/test.yaml

diff --git a/tests/http-evader-171/README.md b/tests/http-evader/http-evader-171/README.md
similarity index 100%
rename from tests/http-evader-171/README.md
rename to tests/http-evader/http-evader-171/README.md

diff --git a/tests/http-evader-171/input.pcap b/tests/http-evader/http-evader-171/input.pcap
similarity index 100%
rename from tests/http-evader-171/input.pcap
rename to tests/http-evader/http-evader-171/input.pcap

diff --git a/tests/http-evader-171/test.rules b/tests/http-evader/http-evader-171/test.rules
similarity index 100%
rename from tests/http-evader-171/test.rules
rename to tests/http-evader/http-evader-171/test.rules

diff --git a/tests/http-evader-171/test.yaml b/tests/http-evader/http-evader-171/test.yaml
similarity index 100%
rename from tests/http-evader-171/test.yaml
rename to tests/http-evader/http-evader-171/test.yaml

diff --git a/tests/http-evader-172/README.md b/tests/http-evader/http-evader-172/README.md
similarity index 100%
rename from tests/http-evader-172/README.md
rename to tests/http-evader/http-evader-172/README.md

diff --git a/tests/http-evader-172/input.pcap b/tests/http-evader/http-evader-172/input.pcap
similarity index 100%
rename from tests/http-evader-172/input.pcap
rename to tests/http-evader/http-evader-172/input.pcap

diff --git a/tests/http-evader-172/test.rules b/tests/http-evader/http-evader-172/test.rules
similarity index 100%
rename from tests/http-evader-172/test.rules
rename to tests/http-evader/http-evader-172/test.rules

diff --git a/tests/http-evader-172/test.yaml b/tests/http-evader/http-evader-172/test.yaml
similarity index 100%
rename from tests/http-evader-172/test.yaml
rename to tests/http-evader/http-evader-172/test.yaml

diff --git a/tests/http-evader-173/README.md b/tests/http-evader/http-evader-173/README.md
similarity index 100%
rename from tests/http-evader-173/README.md
rename to tests/http-evader/http-evader-173/README.md

diff --git a/tests/http-evader-173/input.pcap b/tests/http-evader/http-evader-173/input.pcap
similarity index 100%
rename from tests/http-evader-173/input.pcap
rename to tests/http-evader/http-evader-173/input.pcap

diff --git a/tests/http-evader-173/test.rules b/tests/http-evader/http-evader-173/test.rules
similarity index 100%
rename from tests/http-evader-173/test.rules
rename to tests/http-evader/http-evader-173/test.rules

diff --git a/tests/http-evader-173/test.yaml b/tests/http-evader/http-evader-173/test.yaml
similarity index 100%
rename from tests/http-evader-173/test.yaml
rename to tests/http-evader/http-evader-173/test.yaml

diff --git a/tests/http-evader-174/README.md b/tests/http-evader/http-evader-174/README.md
similarity index 100%
rename from tests/http-evader-174/README.md
rename to tests/http-evader/http-evader-174/README.md

diff --git a/tests/http-evader-174/input.pcap b/tests/http-evader/http-evader-174/input.pcap
similarity index 100%
rename from tests/http-evader-174/input.pcap
rename to tests/http-evader/http-evader-174/input.pcap

diff --git a/tests/http-evader-174/test.rules b/tests/http-evader/http-evader-174/test.rules
similarity index 100%
rename from tests/http-evader-174/test.rules
rename to tests/http-evader/http-evader-174/test.rules

diff --git a/tests/http-evader-174/test.yaml b/tests/http-evader/http-evader-174/test.yaml
similarity index 100%
rename from tests/http-evader-174/test.yaml
rename to tests/http-evader/http-evader-174/test.yaml

diff --git a/tests/http-evader-175/README.md b/tests/http-evader/http-evader-175/README.md
similarity index 100%
rename from tests/http-evader-175/README.md
rename to tests/http-evader/http-evader-175/README.md

diff --git a/tests/http-evader-175/input.pcap b/tests/http-evader/http-evader-175/input.pcap
similarity index 100%
rename from tests/http-evader-175/input.pcap
rename to tests/http-evader/http-evader-175/input.pcap

diff --git a/tests/http-evader-175/test.rules b/tests/http-evader/http-evader-175/test.rules
similarity index 100%
rename from tests/http-evader-175/test.rules
rename to tests/http-evader/http-evader-175/test.rules

diff --git a/tests/http-evader-175/test.yaml b/tests/http-evader/http-evader-175/test.yaml
similarity index 100%
rename from tests/http-evader-175/test.yaml
rename to tests/http-evader/http-evader-175/test.yaml

diff --git a/tests/http-evader-176/README.md b/tests/http-evader/http-evader-176/README.md
similarity index 100%
rename from tests/http-evader-176/README.md
rename to tests/http-evader/http-evader-176/README.md

diff --git a/tests/http-evader-176/input.pcap b/tests/http-evader/http-evader-176/input.pcap
similarity index 100%
rename from tests/http-evader-176/input.pcap
rename to tests/http-evader/http-evader-176/input.pcap

diff --git a/tests/http-evader-176/test.rules b/tests/http-evader/http-evader-176/test.rules
similarity index 100%
rename from tests/http-evader-176/test.rules
rename to tests/http-evader/http-evader-176/test.rules

diff --git a/tests/http-evader-176/test.yaml b/tests/http-evader/http-evader-176/test.yaml
similarity index 100%
rename from tests/http-evader-176/test.yaml
rename to tests/http-evader/http-evader-176/test.yaml

diff --git a/tests/http-evader-177/README.md b/tests/http-evader/http-evader-177/README.md
similarity index 100%
rename from tests/http-evader-177/README.md
rename to tests/http-evader/http-evader-177/README.md

diff --git a/tests/http-evader-177/input.pcap b/tests/http-evader/http-evader-177/input.pcap
similarity index 100%
rename from tests/http-evader-177/input.pcap
rename to tests/http-evader/http-evader-177/input.pcap

diff --git a/tests/http-evader-177/test.rules b/tests/http-evader/http-evader-177/test.rules
similarity index 100%
rename from tests/http-evader-177/test.rules
rename to tests/http-evader/http-evader-177/test.rules

diff --git a/tests/http-evader-177/test.yaml b/tests/http-evader/http-evader-177/test.yaml
similarity index 100%
rename from tests/http-evader-177/test.yaml
rename to tests/http-evader/http-evader-177/test.yaml

diff --git a/tests/http-evader-178/README.md b/tests/http-evader/http-evader-178/README.md
similarity index 100%
rename from tests/http-evader-178/README.md
rename to tests/http-evader/http-evader-178/README.md

diff --git a/tests/http-evader-178/input.pcap b/tests/http-evader/http-evader-178/input.pcap
similarity index 100%
rename from tests/http-evader-178/input.pcap
rename to tests/http-evader/http-evader-178/input.pcap

diff --git a/tests/http-evader-178/test.rules b/tests/http-evader/http-evader-178/test.rules
similarity index 100%
rename from tests/http-evader-178/test.rules
rename to tests/http-evader/http-evader-178/test.rules

diff --git a/tests/http-evader-178/test.yaml b/tests/http-evader/http-evader-178/test.yaml
similarity index 100%
rename from tests/http-evader-178/test.yaml
rename to tests/http-evader/http-evader-178/test.yaml

diff --git a/tests/http-evader-179/README.md b/tests/http-evader/http-evader-179/README.md
similarity index 100%
rename from tests/http-evader-179/README.md
rename to tests/http-evader/http-evader-179/README.md

diff --git a/tests/http-evader-179/input.pcap b/tests/http-evader/http-evader-179/input.pcap
similarity index 100%
rename from tests/http-evader-179/input.pcap
rename to tests/http-evader/http-evader-179/input.pcap

diff --git a/tests/http-evader-179/test.rules b/tests/http-evader/http-evader-179/test.rules
similarity index 100%
rename from tests/http-evader-179/test.rules
rename to tests/http-evader/http-evader-179/test.rules

diff --git a/tests/http-evader-179/test.yaml b/tests/http-evader/http-evader-179/test.yaml
similarity index 100%
rename from tests/http-evader-179/test.yaml
rename to tests/http-evader/http-evader-179/test.yaml

diff --git a/tests/http-evader-180/README.md b/tests/http-evader/http-evader-180/README.md
similarity index 100%
rename from tests/http-evader-180/README.md
rename to tests/http-evader/http-evader-180/README.md

diff --git a/tests/http-evader-180/input.pcap b/tests/http-evader/http-evader-180/input.pcap
similarity index 100%
rename from tests/http-evader-180/input.pcap
rename to tests/http-evader/http-evader-180/input.pcap

diff --git a/tests/http-evader-180/test.rules b/tests/http-evader/http-evader-180/test.rules
similarity index 100%
rename from tests/http-evader-180/test.rules
rename to tests/http-evader/http-evader-180/test.rules

diff --git a/tests/http-evader-180/test.yaml b/tests/http-evader/http-evader-180/test.yaml
similarity index 100%
rename from tests/http-evader-180/test.yaml
rename to tests/http-evader/http-evader-180/test.yaml

diff --git a/tests/http-evader-181/README.md b/tests/http-evader/http-evader-181/README.md
similarity index 100%
rename from tests/http-evader-181/README.md
rename to tests/http-evader/http-evader-181/README.md

diff --git a/tests/http-evader-181/input.pcap b/tests/http-evader/http-evader-181/input.pcap
similarity index 100%
rename from tests/http-evader-181/input.pcap
rename to tests/http-evader/http-evader-181/input.pcap

diff --git a/tests/http-evader-181/test.rules b/tests/http-evader/http-evader-181/test.rules
similarity index 100%
rename from tests/http-evader-181/test.rules
rename to tests/http-evader/http-evader-181/test.rules

diff --git a/tests/http-evader-181/test.yaml b/tests/http-evader/http-evader-181/test.yaml
similarity index 100%
rename from tests/http-evader-181/test.yaml
rename to tests/http-evader/http-evader-181/test.yaml

diff --git a/tests/http-evader-182/README.md b/tests/http-evader/http-evader-182/README.md
similarity index 100%
rename from tests/http-evader-182/README.md
rename to tests/http-evader/http-evader-182/README.md

diff --git a/tests/http-evader-182/input.pcap b/tests/http-evader/http-evader-182/input.pcap
similarity index 100%
rename from tests/http-evader-182/input.pcap
rename to tests/http-evader/http-evader-182/input.pcap

diff --git a/tests/http-evader-182/test.rules b/tests/http-evader/http-evader-182/test.rules
similarity index 100%
rename from tests/http-evader-182/test.rules
rename to tests/http-evader/http-evader-182/test.rules

diff --git a/tests/http-evader-182/test.yaml b/tests/http-evader/http-evader-182/test.yaml
similarity index 100%
rename from tests/http-evader-182/test.yaml
rename to tests/http-evader/http-evader-182/test.yaml

diff --git a/tests/http-evader-183/README.md b/tests/http-evader/http-evader-183/README.md
similarity index 100%
rename from tests/http-evader-183/README.md
rename to tests/http-evader/http-evader-183/README.md

diff --git a/tests/http-evader-183/input.pcap b/tests/http-evader/http-evader-183/input.pcap
similarity index 100%
rename from tests/http-evader-183/input.pcap
rename to tests/http-evader/http-evader-183/input.pcap

diff --git a/tests/http-evader-183/test.rules b/tests/http-evader/http-evader-183/test.rules
similarity index 100%
rename from tests/http-evader-183/test.rules
rename to tests/http-evader/http-evader-183/test.rules

diff --git a/tests/http-evader-183/test.yaml b/tests/http-evader/http-evader-183/test.yaml
similarity index 100%
rename from tests/http-evader-183/test.yaml
rename to tests/http-evader/http-evader-183/test.yaml

diff --git a/tests/http-evader-184/README.md b/tests/http-evader/http-evader-184/README.md
similarity index 100%
rename from tests/http-evader-184/README.md
rename to tests/http-evader/http-evader-184/README.md

diff --git a/tests/http-evader-184/input.pcap b/tests/http-evader/http-evader-184/input.pcap
similarity index 100%
rename from tests/http-evader-184/input.pcap
rename to tests/http-evader/http-evader-184/input.pcap

diff --git a/tests/http-evader-184/test.rules b/tests/http-evader/http-evader-184/test.rules
similarity index 100%
rename from tests/http-evader-184/test.rules
rename to tests/http-evader/http-evader-184/test.rules

diff --git a/tests/http-evader-184/test.yaml b/tests/http-evader/http-evader-184/test.yaml
similarity index 100%
rename from tests/http-evader-184/test.yaml
rename to tests/http-evader/http-evader-184/test.yaml

diff --git a/tests/http-evader-185/README.md b/tests/http-evader/http-evader-185/README.md
similarity index 100%
rename from tests/http-evader-185/README.md
rename to tests/http-evader/http-evader-185/README.md

diff --git a/tests/http-evader-185/input.pcap b/tests/http-evader/http-evader-185/input.pcap
similarity index 100%
rename from tests/http-evader-185/input.pcap
rename to tests/http-evader/http-evader-185/input.pcap

diff --git a/tests/http-evader-185/test.rules b/tests/http-evader/http-evader-185/test.rules
similarity index 100%
rename from tests/http-evader-185/test.rules
rename to tests/http-evader/http-evader-185/test.rules

diff --git a/tests/http-evader-185/test.yaml b/tests/http-evader/http-evader-185/test.yaml
similarity index 100%
rename from tests/http-evader-185/test.yaml
rename to tests/http-evader/http-evader-185/test.yaml

diff --git a/tests/http-evader-186/README.md b/tests/http-evader/http-evader-186/README.md
similarity index 100%
rename from tests/http-evader-186/README.md
rename to tests/http-evader/http-evader-186/README.md

diff --git a/tests/http-evader-186/input.pcap b/tests/http-evader/http-evader-186/input.pcap
similarity index 100%
rename from tests/http-evader-186/input.pcap
rename to tests/http-evader/http-evader-186/input.pcap

diff --git a/tests/http-evader-186/test.rules b/tests/http-evader/http-evader-186/test.rules
similarity index 100%
rename from tests/http-evader-186/test.rules
rename to tests/http-evader/http-evader-186/test.rules

diff --git a/tests/http-evader-186/test.yaml b/tests/http-evader/http-evader-186/test.yaml
similarity index 100%
rename from tests/http-evader-186/test.yaml
rename to tests/http-evader/http-evader-186/test.yaml

diff --git a/tests/http-evader-187/README.md b/tests/http-evader/http-evader-187/README.md
similarity index 100%
rename from tests/http-evader-187/README.md
rename to tests/http-evader/http-evader-187/README.md

diff --git a/tests/http-evader-187/input.pcap b/tests/http-evader/http-evader-187/input.pcap
similarity index 100%
rename from tests/http-evader-187/input.pcap
rename to tests/http-evader/http-evader-187/input.pcap

diff --git a/tests/http-evader-187/test.rules b/tests/http-evader/http-evader-187/test.rules
similarity index 100%
rename from tests/http-evader-187/test.rules
rename to tests/http-evader/http-evader-187/test.rules

diff --git a/tests/http-evader-187/test.yaml b/tests/http-evader/http-evader-187/test.yaml
similarity index 100%
rename from tests/http-evader-187/test.yaml
rename to tests/http-evader/http-evader-187/test.yaml

diff --git a/tests/http-evader-188/README.md b/tests/http-evader/http-evader-188/README.md
similarity index 100%
rename from tests/http-evader-188/README.md
rename to tests/http-evader/http-evader-188/README.md

diff --git a/tests/http-evader-188/input.pcap b/tests/http-evader/http-evader-188/input.pcap
similarity index 100%
rename from tests/http-evader-188/input.pcap
rename to tests/http-evader/http-evader-188/input.pcap

diff --git a/tests/http-evader-188/test.rules b/tests/http-evader/http-evader-188/test.rules
similarity index 100%
rename from tests/http-evader-188/test.rules
rename to tests/http-evader/http-evader-188/test.rules

diff --git a/tests/http-evader-188/test.yaml b/tests/http-evader/http-evader-188/test.yaml
similarity index 100%
rename from tests/http-evader-188/test.yaml
rename to tests/http-evader/http-evader-188/test.yaml

diff --git a/tests/http-evader-189/README.md b/tests/http-evader/http-evader-189/README.md
similarity index 100%
rename from tests/http-evader-189/README.md
rename to tests/http-evader/http-evader-189/README.md

diff --git a/tests/http-evader-189/input.pcap b/tests/http-evader/http-evader-189/input.pcap
similarity index 100%
rename from tests/http-evader-189/input.pcap
rename to tests/http-evader/http-evader-189/input.pcap

diff --git a/tests/http-evader-189/test.rules b/tests/http-evader/http-evader-189/test.rules
similarity index 100%
rename from tests/http-evader-189/test.rules
rename to tests/http-evader/http-evader-189/test.rules

diff --git a/tests/http-evader-189/test.yaml b/tests/http-evader/http-evader-189/test.yaml
similarity index 100%
rename from tests/http-evader-189/test.yaml
rename to tests/http-evader/http-evader-189/test.yaml

diff --git a/tests/http-evader-190/README.md b/tests/http-evader/http-evader-190/README.md
similarity index 100%
rename from tests/http-evader-190/README.md
rename to tests/http-evader/http-evader-190/README.md

diff --git a/tests/http-evader-190/input.pcap b/tests/http-evader/http-evader-190/input.pcap
similarity index 100%
rename from tests/http-evader-190/input.pcap
rename to tests/http-evader/http-evader-190/input.pcap

diff --git a/tests/http-evader-190/test.rules b/tests/http-evader/http-evader-190/test.rules
similarity index 100%
rename from tests/http-evader-190/test.rules
rename to tests/http-evader/http-evader-190/test.rules

diff --git a/tests/http-evader-190/test.yaml b/tests/http-evader/http-evader-190/test.yaml
similarity index 100%
rename from tests/http-evader-190/test.yaml
rename to tests/http-evader/http-evader-190/test.yaml

diff --git a/tests/http-evader-191/README.md b/tests/http-evader/http-evader-191/README.md
similarity index 100%
rename from tests/http-evader-191/README.md
rename to tests/http-evader/http-evader-191/README.md

diff --git a/tests/http-evader-191/input.pcap b/tests/http-evader/http-evader-191/input.pcap
similarity index 100%
rename from tests/http-evader-191/input.pcap
rename to tests/http-evader/http-evader-191/input.pcap

diff --git a/tests/http-evader-191/test.rules b/tests/http-evader/http-evader-191/test.rules
similarity index 100%
rename from tests/http-evader-191/test.rules
rename to tests/http-evader/http-evader-191/test.rules

diff --git a/tests/http-evader-191/test.yaml b/tests/http-evader/http-evader-191/test.yaml
similarity index 100%
rename from tests/http-evader-191/test.yaml
rename to tests/http-evader/http-evader-191/test.yaml

diff --git a/tests/http-evader-192/README.md b/tests/http-evader/http-evader-192/README.md
similarity index 100%
rename from tests/http-evader-192/README.md
rename to tests/http-evader/http-evader-192/README.md

diff --git a/tests/http-evader-192/input.pcap b/tests/http-evader/http-evader-192/input.pcap
similarity index 100%
rename from tests/http-evader-192/input.pcap
rename to tests/http-evader/http-evader-192/input.pcap

diff --git a/tests/http-evader-192/test.rules b/tests/http-evader/http-evader-192/test.rules
similarity index 100%
rename from tests/http-evader-192/test.rules
rename to tests/http-evader/http-evader-192/test.rules

diff --git a/tests/http-evader-192/test.yaml b/tests/http-evader/http-evader-192/test.yaml
similarity index 100%
rename from tests/http-evader-192/test.yaml
rename to tests/http-evader/http-evader-192/test.yaml

diff --git a/tests/http-evader-193/README.md b/tests/http-evader/http-evader-193/README.md
similarity index 100%
rename from tests/http-evader-193/README.md
rename to tests/http-evader/http-evader-193/README.md

diff --git a/tests/http-evader-193/input.pcap b/tests/http-evader/http-evader-193/input.pcap
similarity index 100%
rename from tests/http-evader-193/input.pcap
rename to tests/http-evader/http-evader-193/input.pcap

diff --git a/tests/http-evader-193/test.rules b/tests/http-evader/http-evader-193/test.rules
similarity index 100%
rename from tests/http-evader-193/test.rules
rename to tests/http-evader/http-evader-193/test.rules

diff --git a/tests/http-evader-193/test.yaml b/tests/http-evader/http-evader-193/test.yaml
similarity index 100%
rename from tests/http-evader-193/test.yaml
rename to tests/http-evader/http-evader-193/test.yaml

diff --git a/tests/http-evader-194/README.md b/tests/http-evader/http-evader-194/README.md
similarity index 100%
rename from tests/http-evader-194/README.md
rename to tests/http-evader/http-evader-194/README.md

diff --git a/tests/http-evader-194/input.pcap b/tests/http-evader/http-evader-194/input.pcap
similarity index 100%
rename from tests/http-evader-194/input.pcap
rename to tests/http-evader/http-evader-194/input.pcap

diff --git a/tests/http-evader-194/test.rules b/tests/http-evader/http-evader-194/test.rules
similarity index 100%
rename from tests/http-evader-194/test.rules
rename to tests/http-evader/http-evader-194/test.rules

diff --git a/tests/http-evader-194/test.yaml b/tests/http-evader/http-evader-194/test.yaml
similarity index 100%
rename from tests/http-evader-194/test.yaml
rename to tests/http-evader/http-evader-194/test.yaml

diff --git a/tests/http-evader-195/README.md b/tests/http-evader/http-evader-195/README.md
similarity index 100%
rename from tests/http-evader-195/README.md
rename to tests/http-evader/http-evader-195/README.md

diff --git a/tests/http-evader-195/input.pcap b/tests/http-evader/http-evader-195/input.pcap
similarity index 100%
rename from tests/http-evader-195/input.pcap
rename to tests/http-evader/http-evader-195/input.pcap

diff --git a/tests/http-evader-195/test.rules b/tests/http-evader/http-evader-195/test.rules
similarity index 100%
rename from tests/http-evader-195/test.rules
rename to tests/http-evader/http-evader-195/test.rules

diff --git a/tests/http-evader-195/test.yaml b/tests/http-evader/http-evader-195/test.yaml
similarity index 100%
rename from tests/http-evader-195/test.yaml
rename to tests/http-evader/http-evader-195/test.yaml

diff --git a/tests/http-evader-196/README.md b/tests/http-evader/http-evader-196/README.md
similarity index 100%
rename from tests/http-evader-196/README.md
rename to tests/http-evader/http-evader-196/README.md

diff --git a/tests/http-evader-196/input.pcap b/tests/http-evader/http-evader-196/input.pcap
similarity index 100%
rename from tests/http-evader-196/input.pcap
rename to tests/http-evader/http-evader-196/input.pcap

diff --git a/tests/http-evader-196/test.rules b/tests/http-evader/http-evader-196/test.rules
similarity index 100%
rename from tests/http-evader-196/test.rules
rename to tests/http-evader/http-evader-196/test.rules

diff --git a/tests/http-evader-196/test.yaml b/tests/http-evader/http-evader-196/test.yaml
similarity index 100%
rename from tests/http-evader-196/test.yaml
rename to tests/http-evader/http-evader-196/test.yaml

diff --git a/tests/http-evader-197/README.md b/tests/http-evader/http-evader-197/README.md
similarity index 100%
rename from tests/http-evader-197/README.md
rename to tests/http-evader/http-evader-197/README.md

diff --git a/tests/http-evader-197/input.pcap b/tests/http-evader/http-evader-197/input.pcap
similarity index 100%
rename from tests/http-evader-197/input.pcap
rename to tests/http-evader/http-evader-197/input.pcap

diff --git a/tests/http-evader-197/test.rules b/tests/http-evader/http-evader-197/test.rules
similarity index 100%
rename from tests/http-evader-197/test.rules
rename to tests/http-evader/http-evader-197/test.rules

diff --git a/tests/http-evader-197/test.yaml b/tests/http-evader/http-evader-197/test.yaml
similarity index 100%
rename from tests/http-evader-197/test.yaml
rename to tests/http-evader/http-evader-197/test.yaml

diff --git a/tests/http-evader-198/README.md b/tests/http-evader/http-evader-198/README.md
similarity index 100%
rename from tests/http-evader-198/README.md
rename to tests/http-evader/http-evader-198/README.md

diff --git a/tests/http-evader-198/input.pcap b/tests/http-evader/http-evader-198/input.pcap
similarity index 100%
rename from tests/http-evader-198/input.pcap
rename to tests/http-evader/http-evader-198/input.pcap

diff --git a/tests/http-evader-198/test.rules b/tests/http-evader/http-evader-198/test.rules
similarity index 100%
rename from tests/http-evader-198/test.rules
rename to tests/http-evader/http-evader-198/test.rules

diff --git a/tests/http-evader-198/test.yaml b/tests/http-evader/http-evader-198/test.yaml
similarity index 100%
rename from tests/http-evader-198/test.yaml
rename to tests/http-evader/http-evader-198/test.yaml

diff --git a/tests/http-evader-199/README.md b/tests/http-evader/http-evader-199/README.md
similarity index 100%
rename from tests/http-evader-199/README.md
rename to tests/http-evader/http-evader-199/README.md

diff --git a/tests/http-evader-199/input.pcap b/tests/http-evader/http-evader-199/input.pcap
similarity index 100%
rename from tests/http-evader-199/input.pcap
rename to tests/http-evader/http-evader-199/input.pcap

diff --git a/tests/http-evader-199/test.rules b/tests/http-evader/http-evader-199/test.rules
similarity index 100%
rename from tests/http-evader-199/test.rules
rename to tests/http-evader/http-evader-199/test.rules

diff --git a/tests/http-evader-199/test.yaml b/tests/http-evader/http-evader-199/test.yaml
similarity index 100%
rename from tests/http-evader-199/test.yaml
rename to tests/http-evader/http-evader-199/test.yaml

diff --git a/tests/http-evader-200/README.md b/tests/http-evader/http-evader-200/README.md
similarity index 100%
rename from tests/http-evader-200/README.md
rename to tests/http-evader/http-evader-200/README.md

diff --git a/tests/http-evader-200/input.pcap b/tests/http-evader/http-evader-200/input.pcap
similarity index 100%
rename from tests/http-evader-200/input.pcap
rename to tests/http-evader/http-evader-200/input.pcap

diff --git a/tests/http-evader-200/test.rules b/tests/http-evader/http-evader-200/test.rules
similarity index 100%
rename from tests/http-evader-200/test.rules
rename to tests/http-evader/http-evader-200/test.rules

diff --git a/tests/http-evader-200/test.yaml b/tests/http-evader/http-evader-200/test.yaml
similarity index 100%
rename from tests/http-evader-200/test.yaml
rename to tests/http-evader/http-evader-200/test.yaml

diff --git a/tests/http-evader-201/README.md b/tests/http-evader/http-evader-201/README.md
similarity index 100%
rename from tests/http-evader-201/README.md
rename to tests/http-evader/http-evader-201/README.md

diff --git a/tests/http-evader-201/input.pcap b/tests/http-evader/http-evader-201/input.pcap
similarity index 100%
rename from tests/http-evader-201/input.pcap
rename to tests/http-evader/http-evader-201/input.pcap

diff --git a/tests/http-evader-201/test.rules b/tests/http-evader/http-evader-201/test.rules
similarity index 100%
rename from tests/http-evader-201/test.rules
rename to tests/http-evader/http-evader-201/test.rules

diff --git a/tests/http-evader-201/test.yaml b/tests/http-evader/http-evader-201/test.yaml
similarity index 100%
rename from tests/http-evader-201/test.yaml
rename to tests/http-evader/http-evader-201/test.yaml

diff --git a/tests/http-evader-202/README.md b/tests/http-evader/http-evader-202/README.md
similarity index 100%
rename from tests/http-evader-202/README.md
rename to tests/http-evader/http-evader-202/README.md

diff --git a/tests/http-evader-202/input.pcap b/tests/http-evader/http-evader-202/input.pcap
similarity index 100%
rename from tests/http-evader-202/input.pcap
rename to tests/http-evader/http-evader-202/input.pcap

diff --git a/tests/http-evader-202/test.rules b/tests/http-evader/http-evader-202/test.rules
similarity index 100%
rename from tests/http-evader-202/test.rules
rename to tests/http-evader/http-evader-202/test.rules

diff --git a/tests/http-evader-202/test.yaml b/tests/http-evader/http-evader-202/test.yaml
similarity index 100%
rename from tests/http-evader-202/test.yaml
rename to tests/http-evader/http-evader-202/test.yaml

diff --git a/tests/http-evader-203/README.md b/tests/http-evader/http-evader-203/README.md
similarity index 100%
rename from tests/http-evader-203/README.md
rename to tests/http-evader/http-evader-203/README.md

diff --git a/tests/http-evader-203/input.pcap b/tests/http-evader/http-evader-203/input.pcap
similarity index 100%
rename from tests/http-evader-203/input.pcap
rename to tests/http-evader/http-evader-203/input.pcap

diff --git a/tests/http-evader-203/test.rules b/tests/http-evader/http-evader-203/test.rules
similarity index 100%
rename from tests/http-evader-203/test.rules
rename to tests/http-evader/http-evader-203/test.rules

diff --git a/tests/http-evader-203/test.yaml b/tests/http-evader/http-evader-203/test.yaml
similarity index 100%
rename from tests/http-evader-203/test.yaml
rename to tests/http-evader/http-evader-203/test.yaml

diff --git a/tests/http-evader-204/README.md b/tests/http-evader/http-evader-204/README.md
similarity index 100%
rename from tests/http-evader-204/README.md
rename to tests/http-evader/http-evader-204/README.md

diff --git a/tests/http-evader-204/input.pcap b/tests/http-evader/http-evader-204/input.pcap
similarity index 100%
rename from tests/http-evader-204/input.pcap
rename to tests/http-evader/http-evader-204/input.pcap

diff --git a/tests/http-evader-204/test.rules b/tests/http-evader/http-evader-204/test.rules
similarity index 100%
rename from tests/http-evader-204/test.rules
rename to tests/http-evader/http-evader-204/test.rules

diff --git a/tests/http-evader-204/test.yaml b/tests/http-evader/http-evader-204/test.yaml
similarity index 100%
rename from tests/http-evader-204/test.yaml
rename to tests/http-evader/http-evader-204/test.yaml

diff --git a/tests/http-evader-205/README.md b/tests/http-evader/http-evader-205/README.md
similarity index 100%
rename from tests/http-evader-205/README.md
rename to tests/http-evader/http-evader-205/README.md

diff --git a/tests/http-evader-205/input.pcap b/tests/http-evader/http-evader-205/input.pcap
similarity index 100%
rename from tests/http-evader-205/input.pcap
rename to tests/http-evader/http-evader-205/input.pcap

diff --git a/tests/http-evader-205/test.rules b/tests/http-evader/http-evader-205/test.rules
similarity index 100%
rename from tests/http-evader-205/test.rules
rename to tests/http-evader/http-evader-205/test.rules

diff --git a/tests/http-evader-205/test.yaml b/tests/http-evader/http-evader-205/test.yaml
similarity index 100%
rename from tests/http-evader-205/test.yaml
rename to tests/http-evader/http-evader-205/test.yaml

diff --git a/tests/http-evader-206/README.md b/tests/http-evader/http-evader-206/README.md
similarity index 100%
rename from tests/http-evader-206/README.md
rename to tests/http-evader/http-evader-206/README.md

diff --git a/tests/http-evader-206/input.pcap b/tests/http-evader/http-evader-206/input.pcap
similarity index 100%
rename from tests/http-evader-206/input.pcap
rename to tests/http-evader/http-evader-206/input.pcap

diff --git a/tests/http-evader-206/test.rules b/tests/http-evader/http-evader-206/test.rules
similarity index 100%
rename from tests/http-evader-206/test.rules
rename to tests/http-evader/http-evader-206/test.rules

diff --git a/tests/http-evader-206/test.yaml b/tests/http-evader/http-evader-206/test.yaml
similarity index 100%
rename from tests/http-evader-206/test.yaml
rename to tests/http-evader/http-evader-206/test.yaml

diff --git a/tests/http-evader-207/README.md b/tests/http-evader/http-evader-207/README.md
similarity index 100%
rename from tests/http-evader-207/README.md
rename to tests/http-evader/http-evader-207/README.md

diff --git a/tests/http-evader-207/input.pcap b/tests/http-evader/http-evader-207/input.pcap
similarity index 100%
rename from tests/http-evader-207/input.pcap
rename to tests/http-evader/http-evader-207/input.pcap

diff --git a/tests/http-evader-207/test.rules b/tests/http-evader/http-evader-207/test.rules
similarity index 100%
rename from tests/http-evader-207/test.rules
rename to tests/http-evader/http-evader-207/test.rules

diff --git a/tests/http-evader-207/test.yaml b/tests/http-evader/http-evader-207/test.yaml
similarity index 100%
rename from tests/http-evader-207/test.yaml
rename to tests/http-evader/http-evader-207/test.yaml

diff --git a/tests/http-evader-208/README.md b/tests/http-evader/http-evader-208/README.md
similarity index 100%
rename from tests/http-evader-208/README.md
rename to tests/http-evader/http-evader-208/README.md

diff --git a/tests/http-evader-208/input.pcap b/tests/http-evader/http-evader-208/input.pcap
similarity index 100%
rename from tests/http-evader-208/input.pcap
rename to tests/http-evader/http-evader-208/input.pcap

diff --git a/tests/http-evader-208/test.rules b/tests/http-evader/http-evader-208/test.rules
similarity index 100%
rename from tests/http-evader-208/test.rules
rename to tests/http-evader/http-evader-208/test.rules

diff --git a/tests/http-evader-208/test.yaml b/tests/http-evader/http-evader-208/test.yaml
similarity index 100%
rename from tests/http-evader-208/test.yaml
rename to tests/http-evader/http-evader-208/test.yaml

diff --git a/tests/http-evader-209/README.md b/tests/http-evader/http-evader-209/README.md
similarity index 100%
rename from tests/http-evader-209/README.md
rename to tests/http-evader/http-evader-209/README.md

diff --git a/tests/http-evader-209/input.pcap b/tests/http-evader/http-evader-209/input.pcap
similarity index 100%
rename from tests/http-evader-209/input.pcap
rename to tests/http-evader/http-evader-209/input.pcap

diff --git a/tests/http-evader-209/test.rules b/tests/http-evader/http-evader-209/test.rules
similarity index 100%
rename from tests/http-evader-209/test.rules
rename to tests/http-evader/http-evader-209/test.rules

diff --git a/tests/http-evader-209/test.yaml b/tests/http-evader/http-evader-209/test.yaml
similarity index 100%
rename from tests/http-evader-209/test.yaml
rename to tests/http-evader/http-evader-209/test.yaml

diff --git a/tests/http-evader-210/README.md b/tests/http-evader/http-evader-210/README.md
similarity index 100%
rename from tests/http-evader-210/README.md
rename to tests/http-evader/http-evader-210/README.md

diff --git a/tests/http-evader-210/input.pcap b/tests/http-evader/http-evader-210/input.pcap
similarity index 100%
rename from tests/http-evader-210/input.pcap
rename to tests/http-evader/http-evader-210/input.pcap

diff --git a/tests/http-evader-210/test.rules b/tests/http-evader/http-evader-210/test.rules
similarity index 100%
rename from tests/http-evader-210/test.rules
rename to tests/http-evader/http-evader-210/test.rules

diff --git a/tests/http-evader-210/test.yaml b/tests/http-evader/http-evader-210/test.yaml
similarity index 100%
rename from tests/http-evader-210/test.yaml
rename to tests/http-evader/http-evader-210/test.yaml

diff --git a/tests/http-evader-211/README.md b/tests/http-evader/http-evader-211/README.md
similarity index 100%
rename from tests/http-evader-211/README.md
rename to tests/http-evader/http-evader-211/README.md

diff --git a/tests/http-evader-211/input.pcap b/tests/http-evader/http-evader-211/input.pcap
similarity index 100%
rename from tests/http-evader-211/input.pcap
rename to tests/http-evader/http-evader-211/input.pcap

diff --git a/tests/http-evader-211/test.rules b/tests/http-evader/http-evader-211/test.rules
similarity index 100%
rename from tests/http-evader-211/test.rules
rename to tests/http-evader/http-evader-211/test.rules

diff --git a/tests/http-evader-211/test.yaml b/tests/http-evader/http-evader-211/test.yaml
similarity index 100%
rename from tests/http-evader-211/test.yaml
rename to tests/http-evader/http-evader-211/test.yaml

diff --git a/tests/http-evader-212/README.md b/tests/http-evader/http-evader-212/README.md
similarity index 100%
rename from tests/http-evader-212/README.md
rename to tests/http-evader/http-evader-212/README.md

diff --git a/tests/http-evader-212/input.pcap b/tests/http-evader/http-evader-212/input.pcap
similarity index 100%
rename from tests/http-evader-212/input.pcap
rename to tests/http-evader/http-evader-212/input.pcap

diff --git a/tests/http-evader-212/test.rules b/tests/http-evader/http-evader-212/test.rules
similarity index 100%
rename from tests/http-evader-212/test.rules
rename to tests/http-evader/http-evader-212/test.rules

diff --git a/tests/http-evader-212/test.yaml b/tests/http-evader/http-evader-212/test.yaml
similarity index 100%
rename from tests/http-evader-212/test.yaml
rename to tests/http-evader/http-evader-212/test.yaml

diff --git a/tests/http-evader-213/README.md b/tests/http-evader/http-evader-213/README.md
similarity index 100%
rename from tests/http-evader-213/README.md
rename to tests/http-evader/http-evader-213/README.md

diff --git a/tests/http-evader-213/input.pcap b/tests/http-evader/http-evader-213/input.pcap
similarity index 100%
rename from tests/http-evader-213/input.pcap
rename to tests/http-evader/http-evader-213/input.pcap

diff --git a/tests/http-evader-213/test.rules b/tests/http-evader/http-evader-213/test.rules
similarity index 100%
rename from tests/http-evader-213/test.rules
rename to tests/http-evader/http-evader-213/test.rules

diff --git a/tests/http-evader-213/test.yaml b/tests/http-evader/http-evader-213/test.yaml
similarity index 100%
rename from tests/http-evader-213/test.yaml
rename to tests/http-evader/http-evader-213/test.yaml

diff --git a/tests/http-evader-214/README.md b/tests/http-evader/http-evader-214/README.md
similarity index 100%
rename from tests/http-evader-214/README.md
rename to tests/http-evader/http-evader-214/README.md

diff --git a/tests/http-evader-214/input.pcap b/tests/http-evader/http-evader-214/input.pcap
similarity index 100%
rename from tests/http-evader-214/input.pcap
rename to tests/http-evader/http-evader-214/input.pcap

diff --git a/tests/http-evader-214/test.rules b/tests/http-evader/http-evader-214/test.rules
similarity index 100%
rename from tests/http-evader-214/test.rules
rename to tests/http-evader/http-evader-214/test.rules

diff --git a/tests/http-evader-214/test.yaml b/tests/http-evader/http-evader-214/test.yaml
similarity index 100%
rename from tests/http-evader-214/test.yaml
rename to tests/http-evader/http-evader-214/test.yaml

diff --git a/tests/http-evader-215/README.md b/tests/http-evader/http-evader-215/README.md
similarity index 100%
rename from tests/http-evader-215/README.md
rename to tests/http-evader/http-evader-215/README.md

diff --git a/tests/http-evader-215/input.pcap b/tests/http-evader/http-evader-215/input.pcap
similarity index 100%
rename from tests/http-evader-215/input.pcap
rename to tests/http-evader/http-evader-215/input.pcap

diff --git a/tests/http-evader-215/test.rules b/tests/http-evader/http-evader-215/test.rules
similarity index 100%
rename from tests/http-evader-215/test.rules
rename to tests/http-evader/http-evader-215/test.rules

diff --git a/tests/http-evader-215/test.yaml b/tests/http-evader/http-evader-215/test.yaml
similarity index 100%
rename from tests/http-evader-215/test.yaml
rename to tests/http-evader/http-evader-215/test.yaml

diff --git a/tests/http-evader-216/README.md b/tests/http-evader/http-evader-216/README.md
similarity index 100%
rename from tests/http-evader-216/README.md
rename to tests/http-evader/http-evader-216/README.md

diff --git a/tests/http-evader-216/input.pcap b/tests/http-evader/http-evader-216/input.pcap
similarity index 100%
rename from tests/http-evader-216/input.pcap
rename to tests/http-evader/http-evader-216/input.pcap

diff --git a/tests/http-evader-216/test.rules b/tests/http-evader/http-evader-216/test.rules
similarity index 100%
rename from tests/http-evader-216/test.rules
rename to tests/http-evader/http-evader-216/test.rules

diff --git a/tests/http-evader-216/test.yaml b/tests/http-evader/http-evader-216/test.yaml
similarity index 100%
rename from tests/http-evader-216/test.yaml
rename to tests/http-evader/http-evader-216/test.yaml

diff --git a/tests/http-evader-217/README.md b/tests/http-evader/http-evader-217/README.md
similarity index 100%
rename from tests/http-evader-217/README.md
rename to tests/http-evader/http-evader-217/README.md

diff --git a/tests/http-evader-217/input.pcap b/tests/http-evader/http-evader-217/input.pcap
similarity index 100%
rename from tests/http-evader-217/input.pcap
rename to tests/http-evader/http-evader-217/input.pcap

diff --git a/tests/http-evader-217/test.rules b/tests/http-evader/http-evader-217/test.rules
similarity index 100%
rename from tests/http-evader-217/test.rules
rename to tests/http-evader/http-evader-217/test.rules

diff --git a/tests/http-evader-217/test.yaml b/tests/http-evader/http-evader-217/test.yaml
similarity index 100%
rename from tests/http-evader-217/test.yaml
rename to tests/http-evader/http-evader-217/test.yaml

diff --git a/tests/http-evader-218/README.md b/tests/http-evader/http-evader-218/README.md
similarity index 100%
rename from tests/http-evader-218/README.md
rename to tests/http-evader/http-evader-218/README.md

diff --git a/tests/http-evader-218/input.pcap b/tests/http-evader/http-evader-218/input.pcap
similarity index 100%
rename from tests/http-evader-218/input.pcap
rename to tests/http-evader/http-evader-218/input.pcap

diff --git a/tests/http-evader-218/test.rules b/tests/http-evader/http-evader-218/test.rules
similarity index 100%
rename from tests/http-evader-218/test.rules
rename to tests/http-evader/http-evader-218/test.rules

diff --git a/tests/http-evader-218/test.yaml b/tests/http-evader/http-evader-218/test.yaml
similarity index 100%
rename from tests/http-evader-218/test.yaml
rename to tests/http-evader/http-evader-218/test.yaml

diff --git a/tests/http-evader-219/README.md b/tests/http-evader/http-evader-219/README.md
similarity index 100%
rename from tests/http-evader-219/README.md
rename to tests/http-evader/http-evader-219/README.md

diff --git a/tests/http-evader-219/input.pcap b/tests/http-evader/http-evader-219/input.pcap
similarity index 100%
rename from tests/http-evader-219/input.pcap
rename to tests/http-evader/http-evader-219/input.pcap

diff --git a/tests/http-evader-219/test.rules b/tests/http-evader/http-evader-219/test.rules
similarity index 100%
rename from tests/http-evader-219/test.rules
rename to tests/http-evader/http-evader-219/test.rules

diff --git a/tests/http-evader-219/test.yaml b/tests/http-evader/http-evader-219/test.yaml
similarity index 100%
rename from tests/http-evader-219/test.yaml
rename to tests/http-evader/http-evader-219/test.yaml

diff --git a/tests/http-evader-220/README.md b/tests/http-evader/http-evader-220/README.md
similarity index 100%
rename from tests/http-evader-220/README.md
rename to tests/http-evader/http-evader-220/README.md

diff --git a/tests/http-evader-220/input.pcap b/tests/http-evader/http-evader-220/input.pcap
similarity index 100%
rename from tests/http-evader-220/input.pcap
rename to tests/http-evader/http-evader-220/input.pcap

diff --git a/tests/http-evader-220/test.rules b/tests/http-evader/http-evader-220/test.rules
similarity index 100%
rename from tests/http-evader-220/test.rules
rename to tests/http-evader/http-evader-220/test.rules

diff --git a/tests/http-evader-220/test.yaml b/tests/http-evader/http-evader-220/test.yaml
similarity index 100%
rename from tests/http-evader-220/test.yaml
rename to tests/http-evader/http-evader-220/test.yaml

diff --git a/tests/http-evader-221/README.md b/tests/http-evader/http-evader-221/README.md
similarity index 100%
rename from tests/http-evader-221/README.md
rename to tests/http-evader/http-evader-221/README.md

diff --git a/tests/http-evader-221/input.pcap b/tests/http-evader/http-evader-221/input.pcap
similarity index 100%
rename from tests/http-evader-221/input.pcap
rename to tests/http-evader/http-evader-221/input.pcap

diff --git a/tests/http-evader-221/test.rules b/tests/http-evader/http-evader-221/test.rules
similarity index 100%
rename from tests/http-evader-221/test.rules
rename to tests/http-evader/http-evader-221/test.rules

diff --git a/tests/http-evader-221/test.yaml b/tests/http-evader/http-evader-221/test.yaml
similarity index 100%
rename from tests/http-evader-221/test.yaml
rename to tests/http-evader/http-evader-221/test.yaml

diff --git a/tests/http-evader-222/README.md b/tests/http-evader/http-evader-222/README.md
similarity index 100%
rename from tests/http-evader-222/README.md
rename to tests/http-evader/http-evader-222/README.md

diff --git a/tests/http-evader-222/input.pcap b/tests/http-evader/http-evader-222/input.pcap
similarity index 100%
rename from tests/http-evader-222/input.pcap
rename to tests/http-evader/http-evader-222/input.pcap

diff --git a/tests/http-evader-222/test.rules b/tests/http-evader/http-evader-222/test.rules
similarity index 100%
rename from tests/http-evader-222/test.rules
rename to tests/http-evader/http-evader-222/test.rules

diff --git a/tests/http-evader-222/test.yaml b/tests/http-evader/http-evader-222/test.yaml
similarity index 100%
rename from tests/http-evader-222/test.yaml
rename to tests/http-evader/http-evader-222/test.yaml

diff --git a/tests/http-evader-223/README.md b/tests/http-evader/http-evader-223/README.md
similarity index 100%
rename from tests/http-evader-223/README.md
rename to tests/http-evader/http-evader-223/README.md

diff --git a/tests/http-evader-223/input.pcap b/tests/http-evader/http-evader-223/input.pcap
similarity index 100%
rename from tests/http-evader-223/input.pcap
rename to tests/http-evader/http-evader-223/input.pcap

diff --git a/tests/http-evader-223/test.rules b/tests/http-evader/http-evader-223/test.rules
similarity index 100%
rename from tests/http-evader-223/test.rules
rename to tests/http-evader/http-evader-223/test.rules

diff --git a/tests/http-evader-223/test.yaml b/tests/http-evader/http-evader-223/test.yaml
similarity index 100%
rename from tests/http-evader-223/test.yaml
rename to tests/http-evader/http-evader-223/test.yaml

diff --git a/tests/http-evader-224/README.md b/tests/http-evader/http-evader-224/README.md
similarity index 100%
rename from tests/http-evader-224/README.md
rename to tests/http-evader/http-evader-224/README.md

diff --git a/tests/http-evader-224/input.pcap b/tests/http-evader/http-evader-224/input.pcap
similarity index 100%
rename from tests/http-evader-224/input.pcap
rename to tests/http-evader/http-evader-224/input.pcap

diff --git a/tests/http-evader-224/test.rules b/tests/http-evader/http-evader-224/test.rules
similarity index 100%
rename from tests/http-evader-224/test.rules
rename to tests/http-evader/http-evader-224/test.rules

diff --git a/tests/http-evader-224/test.yaml b/tests/http-evader/http-evader-224/test.yaml
similarity index 100%
rename from tests/http-evader-224/test.yaml
rename to tests/http-evader/http-evader-224/test.yaml

diff --git a/tests/http-evader-225/README.md b/tests/http-evader/http-evader-225/README.md
similarity index 100%
rename from tests/http-evader-225/README.md
rename to tests/http-evader/http-evader-225/README.md

diff --git a/tests/http-evader-225/input.pcap b/tests/http-evader/http-evader-225/input.pcap
similarity index 100%
rename from tests/http-evader-225/input.pcap
rename to tests/http-evader/http-evader-225/input.pcap

diff --git a/tests/http-evader-225/test.rules b/tests/http-evader/http-evader-225/test.rules
similarity index 100%
rename from tests/http-evader-225/test.rules
rename to tests/http-evader/http-evader-225/test.rules

diff --git a/tests/http-evader-225/test.yaml b/tests/http-evader/http-evader-225/test.yaml
similarity index 100%
rename from tests/http-evader-225/test.yaml
rename to tests/http-evader/http-evader-225/test.yaml

diff --git a/tests/http-evader-226/README.md b/tests/http-evader/http-evader-226/README.md
similarity index 100%
rename from tests/http-evader-226/README.md
rename to tests/http-evader/http-evader-226/README.md

diff --git a/tests/http-evader-226/input.pcap b/tests/http-evader/http-evader-226/input.pcap
similarity index 100%
rename from tests/http-evader-226/input.pcap
rename to tests/http-evader/http-evader-226/input.pcap

diff --git a/tests/http-evader-226/test.rules b/tests/http-evader/http-evader-226/test.rules
similarity index 100%
rename from tests/http-evader-226/test.rules
rename to tests/http-evader/http-evader-226/test.rules

diff --git a/tests/http-evader-226/test.yaml b/tests/http-evader/http-evader-226/test.yaml
similarity index 100%
rename from tests/http-evader-226/test.yaml
rename to tests/http-evader/http-evader-226/test.yaml

diff --git a/tests/http-evader-227/README.md b/tests/http-evader/http-evader-227/README.md
similarity index 100%
rename from tests/http-evader-227/README.md
rename to tests/http-evader/http-evader-227/README.md

diff --git a/tests/http-evader-227/input.pcap b/tests/http-evader/http-evader-227/input.pcap
similarity index 100%
rename from tests/http-evader-227/input.pcap
rename to tests/http-evader/http-evader-227/input.pcap

diff --git a/tests/http-evader-227/test.rules b/tests/http-evader/http-evader-227/test.rules
similarity index 100%
rename from tests/http-evader-227/test.rules
rename to tests/http-evader/http-evader-227/test.rules

diff --git a/tests/http-evader-227/test.yaml b/tests/http-evader/http-evader-227/test.yaml
similarity index 100%
rename from tests/http-evader-227/test.yaml
rename to tests/http-evader/http-evader-227/test.yaml

diff --git a/tests/http-evader-228/README.md b/tests/http-evader/http-evader-228/README.md
similarity index 100%
rename from tests/http-evader-228/README.md
rename to tests/http-evader/http-evader-228/README.md

diff --git a/tests/http-evader-228/input.pcap b/tests/http-evader/http-evader-228/input.pcap
similarity index 100%
rename from tests/http-evader-228/input.pcap
rename to tests/http-evader/http-evader-228/input.pcap

diff --git a/tests/http-evader-228/test.rules b/tests/http-evader/http-evader-228/test.rules
similarity index 100%
rename from tests/http-evader-228/test.rules
rename to tests/http-evader/http-evader-228/test.rules

diff --git a/tests/http-evader-228/test.yaml b/tests/http-evader/http-evader-228/test.yaml
similarity index 100%
rename from tests/http-evader-228/test.yaml
rename to tests/http-evader/http-evader-228/test.yaml

diff --git a/tests/http-evader-229/README.md b/tests/http-evader/http-evader-229/README.md
similarity index 100%
rename from tests/http-evader-229/README.md
rename to tests/http-evader/http-evader-229/README.md

diff --git a/tests/http-evader-229/input.pcap b/tests/http-evader/http-evader-229/input.pcap
similarity index 100%
rename from tests/http-evader-229/input.pcap
rename to tests/http-evader/http-evader-229/input.pcap

diff --git a/tests/http-evader-229/test.rules b/tests/http-evader/http-evader-229/test.rules
similarity index 100%
rename from tests/http-evader-229/test.rules
rename to tests/http-evader/http-evader-229/test.rules

diff --git a/tests/http-evader-229/test.yaml b/tests/http-evader/http-evader-229/test.yaml
similarity index 100%
rename from tests/http-evader-229/test.yaml
rename to tests/http-evader/http-evader-229/test.yaml

diff --git a/tests/http-evader-230/README.md b/tests/http-evader/http-evader-230/README.md
similarity index 100%
rename from tests/http-evader-230/README.md
rename to tests/http-evader/http-evader-230/README.md

diff --git a/tests/http-evader-230/input.pcap b/tests/http-evader/http-evader-230/input.pcap
similarity index 100%
rename from tests/http-evader-230/input.pcap
rename to tests/http-evader/http-evader-230/input.pcap

diff --git a/tests/http-evader-230/test.rules b/tests/http-evader/http-evader-230/test.rules
similarity index 100%
rename from tests/http-evader-230/test.rules
rename to tests/http-evader/http-evader-230/test.rules

diff --git a/tests/http-evader-230/test.yaml b/tests/http-evader/http-evader-230/test.yaml
similarity index 100%
rename from tests/http-evader-230/test.yaml
rename to tests/http-evader/http-evader-230/test.yaml

diff --git a/tests/http-evader-231/README.md b/tests/http-evader/http-evader-231/README.md
similarity index 100%
rename from tests/http-evader-231/README.md
rename to tests/http-evader/http-evader-231/README.md

diff --git a/tests/http-evader-231/input.pcap b/tests/http-evader/http-evader-231/input.pcap
similarity index 100%
rename from tests/http-evader-231/input.pcap
rename to tests/http-evader/http-evader-231/input.pcap

diff --git a/tests/http-evader-231/test.rules b/tests/http-evader/http-evader-231/test.rules
similarity index 100%
rename from tests/http-evader-231/test.rules
rename to tests/http-evader/http-evader-231/test.rules

diff --git a/tests/http-evader-231/test.yaml b/tests/http-evader/http-evader-231/test.yaml
similarity index 100%
rename from tests/http-evader-231/test.yaml
rename to tests/http-evader/http-evader-231/test.yaml

diff --git a/tests/http-evader-232/README.md b/tests/http-evader/http-evader-232/README.md
similarity index 100%
rename from tests/http-evader-232/README.md
rename to tests/http-evader/http-evader-232/README.md

diff --git a/tests/http-evader-232/input.pcap b/tests/http-evader/http-evader-232/input.pcap
similarity index 100%
rename from tests/http-evader-232/input.pcap
rename to tests/http-evader/http-evader-232/input.pcap

diff --git a/tests/http-evader-232/test.rules b/tests/http-evader/http-evader-232/test.rules
similarity index 100%
rename from tests/http-evader-232/test.rules
rename to tests/http-evader/http-evader-232/test.rules

diff --git a/tests/http-evader-232/test.yaml b/tests/http-evader/http-evader-232/test.yaml
similarity index 100%
rename from tests/http-evader-232/test.yaml
rename to tests/http-evader/http-evader-232/test.yaml

diff --git a/tests/http-evader-233/README.md b/tests/http-evader/http-evader-233/README.md
similarity index 100%
rename from tests/http-evader-233/README.md
rename to tests/http-evader/http-evader-233/README.md

diff --git a/tests/http-evader-233/input.pcap b/tests/http-evader/http-evader-233/input.pcap
similarity index 100%
rename from tests/http-evader-233/input.pcap
rename to tests/http-evader/http-evader-233/input.pcap

diff --git a/tests/http-evader-233/test.rules b/tests/http-evader/http-evader-233/test.rules
similarity index 100%
rename from tests/http-evader-233/test.rules
rename to tests/http-evader/http-evader-233/test.rules

diff --git a/tests/http-evader-233/test.yaml b/tests/http-evader/http-evader-233/test.yaml
similarity index 100%
rename from tests/http-evader-233/test.yaml
rename to tests/http-evader/http-evader-233/test.yaml

diff --git a/tests/http-evader-234/README.md b/tests/http-evader/http-evader-234/README.md
similarity index 100%
rename from tests/http-evader-234/README.md
rename to tests/http-evader/http-evader-234/README.md

diff --git a/tests/http-evader-234/input.pcap b/tests/http-evader/http-evader-234/input.pcap
similarity index 100%
rename from tests/http-evader-234/input.pcap
rename to tests/http-evader/http-evader-234/input.pcap

diff --git a/tests/http-evader-234/test.rules b/tests/http-evader/http-evader-234/test.rules
similarity index 100%
rename from tests/http-evader-234/test.rules
rename to tests/http-evader/http-evader-234/test.rules

diff --git a/tests/http-evader-234/test.yaml b/tests/http-evader/http-evader-234/test.yaml
similarity index 100%
rename from tests/http-evader-234/test.yaml
rename to tests/http-evader/http-evader-234/test.yaml

diff --git a/tests/http-evader-235/README.md b/tests/http-evader/http-evader-235/README.md
similarity index 100%
rename from tests/http-evader-235/README.md
rename to tests/http-evader/http-evader-235/README.md

diff --git a/tests/http-evader-235/input.pcap b/tests/http-evader/http-evader-235/input.pcap
similarity index 100%
rename from tests/http-evader-235/input.pcap
rename to tests/http-evader/http-evader-235/input.pcap

diff --git a/tests/http-evader-235/test.rules b/tests/http-evader/http-evader-235/test.rules
similarity index 100%
rename from tests/http-evader-235/test.rules
rename to tests/http-evader/http-evader-235/test.rules

diff --git a/tests/http-evader-235/test.yaml b/tests/http-evader/http-evader-235/test.yaml
similarity index 100%
rename from tests/http-evader-235/test.yaml
rename to tests/http-evader/http-evader-235/test.yaml

diff --git a/tests/http-evader-236/README.md b/tests/http-evader/http-evader-236/README.md
similarity index 100%
rename from tests/http-evader-236/README.md
rename to tests/http-evader/http-evader-236/README.md

diff --git a/tests/http-evader-236/input.pcap b/tests/http-evader/http-evader-236/input.pcap
similarity index 100%
rename from tests/http-evader-236/input.pcap
rename to tests/http-evader/http-evader-236/input.pcap

diff --git a/tests/http-evader-236/test.rules b/tests/http-evader/http-evader-236/test.rules
similarity index 100%
rename from tests/http-evader-236/test.rules
rename to tests/http-evader/http-evader-236/test.rules

diff --git a/tests/http-evader-236/test.yaml b/tests/http-evader/http-evader-236/test.yaml
similarity index 100%
rename from tests/http-evader-236/test.yaml
rename to tests/http-evader/http-evader-236/test.yaml

diff --git a/tests/http-evader-237/README.md b/tests/http-evader/http-evader-237/README.md
similarity index 100%
rename from tests/http-evader-237/README.md
rename to tests/http-evader/http-evader-237/README.md

diff --git a/tests/http-evader-237/input.pcap b/tests/http-evader/http-evader-237/input.pcap
similarity index 100%
rename from tests/http-evader-237/input.pcap
rename to tests/http-evader/http-evader-237/input.pcap

diff --git a/tests/http-evader-237/test.rules b/tests/http-evader/http-evader-237/test.rules
similarity index 100%
rename from tests/http-evader-237/test.rules
rename to tests/http-evader/http-evader-237/test.rules

diff --git a/tests/http-evader-237/test.yaml b/tests/http-evader/http-evader-237/test.yaml
similarity index 100%
rename from tests/http-evader-237/test.yaml
rename to tests/http-evader/http-evader-237/test.yaml

diff --git a/tests/http-evader-238/README.md b/tests/http-evader/http-evader-238/README.md
similarity index 100%
rename from tests/http-evader-238/README.md
rename to tests/http-evader/http-evader-238/README.md

diff --git a/tests/http-evader-238/input.pcap b/tests/http-evader/http-evader-238/input.pcap
similarity index 100%
rename from tests/http-evader-238/input.pcap
rename to tests/http-evader/http-evader-238/input.pcap

diff --git a/tests/http-evader-238/test.rules b/tests/http-evader/http-evader-238/test.rules
similarity index 100%
rename from tests/http-evader-238/test.rules
rename to tests/http-evader/http-evader-238/test.rules

diff --git a/tests/http-evader-238/test.yaml b/tests/http-evader/http-evader-238/test.yaml
similarity index 100%
rename from tests/http-evader-238/test.yaml
rename to tests/http-evader/http-evader-238/test.yaml

diff --git a/tests/http-evader-239/README.md b/tests/http-evader/http-evader-239/README.md
similarity index 100%
rename from tests/http-evader-239/README.md
rename to tests/http-evader/http-evader-239/README.md

diff --git a/tests/http-evader-239/input.pcap b/tests/http-evader/http-evader-239/input.pcap
similarity index 100%
rename from tests/http-evader-239/input.pcap
rename to tests/http-evader/http-evader-239/input.pcap

diff --git a/tests/http-evader-239/test.rules b/tests/http-evader/http-evader-239/test.rules
similarity index 100%
rename from tests/http-evader-239/test.rules
rename to tests/http-evader/http-evader-239/test.rules

diff --git a/tests/http-evader-239/test.yaml b/tests/http-evader/http-evader-239/test.yaml
similarity index 100%
rename from tests/http-evader-239/test.yaml
rename to tests/http-evader/http-evader-239/test.yaml

diff --git a/tests/http-evader-240/README.md b/tests/http-evader/http-evader-240/README.md
similarity index 100%
rename from tests/http-evader-240/README.md
rename to tests/http-evader/http-evader-240/README.md

diff --git a/tests/http-evader-240/input.pcap b/tests/http-evader/http-evader-240/input.pcap
similarity index 100%
rename from tests/http-evader-240/input.pcap
rename to tests/http-evader/http-evader-240/input.pcap

diff --git a/tests/http-evader-240/test.rules b/tests/http-evader/http-evader-240/test.rules
similarity index 100%
rename from tests/http-evader-240/test.rules
rename to tests/http-evader/http-evader-240/test.rules

diff --git a/tests/http-evader-240/test.yaml b/tests/http-evader/http-evader-240/test.yaml
similarity index 100%
rename from tests/http-evader-240/test.yaml
rename to tests/http-evader/http-evader-240/test.yaml

diff --git a/tests/http-evader-241/README.md b/tests/http-evader/http-evader-241/README.md
similarity index 100%
rename from tests/http-evader-241/README.md
rename to tests/http-evader/http-evader-241/README.md

diff --git a/tests/http-evader-241/input.pcap b/tests/http-evader/http-evader-241/input.pcap
similarity index 100%
rename from tests/http-evader-241/input.pcap
rename to tests/http-evader/http-evader-241/input.pcap

diff --git a/tests/http-evader-241/test.rules b/tests/http-evader/http-evader-241/test.rules
similarity index 100%
rename from tests/http-evader-241/test.rules
rename to tests/http-evader/http-evader-241/test.rules

diff --git a/tests/http-evader-241/test.yaml b/tests/http-evader/http-evader-241/test.yaml
similarity index 100%
rename from tests/http-evader-241/test.yaml
rename to tests/http-evader/http-evader-241/test.yaml

diff --git a/tests/http-evader-242/README.md b/tests/http-evader/http-evader-242/README.md
similarity index 100%
rename from tests/http-evader-242/README.md
rename to tests/http-evader/http-evader-242/README.md

diff --git a/tests/http-evader-242/input.pcap b/tests/http-evader/http-evader-242/input.pcap
similarity index 100%
rename from tests/http-evader-242/input.pcap
rename to tests/http-evader/http-evader-242/input.pcap

diff --git a/tests/http-evader-242/test.rules b/tests/http-evader/http-evader-242/test.rules
similarity index 100%
rename from tests/http-evader-242/test.rules
rename to tests/http-evader/http-evader-242/test.rules

diff --git a/tests/http-evader-242/test.yaml b/tests/http-evader/http-evader-242/test.yaml
similarity index 100%
rename from tests/http-evader-242/test.yaml
rename to tests/http-evader/http-evader-242/test.yaml

diff --git a/tests/http-evader-243/README.md b/tests/http-evader/http-evader-243/README.md
similarity index 100%
rename from tests/http-evader-243/README.md
rename to tests/http-evader/http-evader-243/README.md

diff --git a/tests/http-evader-243/input.pcap b/tests/http-evader/http-evader-243/input.pcap
similarity index 100%
rename from tests/http-evader-243/input.pcap
rename to tests/http-evader/http-evader-243/input.pcap

diff --git a/tests/http-evader-243/test.rules b/tests/http-evader/http-evader-243/test.rules
similarity index 100%
rename from tests/http-evader-243/test.rules
rename to tests/http-evader/http-evader-243/test.rules

diff --git a/tests/http-evader-243/test.yaml b/tests/http-evader/http-evader-243/test.yaml
similarity index 100%
rename from tests/http-evader-243/test.yaml
rename to tests/http-evader/http-evader-243/test.yaml

diff --git a/tests/http-evader-244/README.md b/tests/http-evader/http-evader-244/README.md
similarity index 100%
rename from tests/http-evader-244/README.md
rename to tests/http-evader/http-evader-244/README.md

diff --git a/tests/http-evader-244/input.pcap b/tests/http-evader/http-evader-244/input.pcap
similarity index 100%
rename from tests/http-evader-244/input.pcap
rename to tests/http-evader/http-evader-244/input.pcap

diff --git a/tests/http-evader-244/test.rules b/tests/http-evader/http-evader-244/test.rules
similarity index 100%
rename from tests/http-evader-244/test.rules
rename to tests/http-evader/http-evader-244/test.rules

diff --git a/tests/http-evader-244/test.yaml b/tests/http-evader/http-evader-244/test.yaml
similarity index 100%
rename from tests/http-evader-244/test.yaml
rename to tests/http-evader/http-evader-244/test.yaml

diff --git a/tests/http-evader-245/README.md b/tests/http-evader/http-evader-245/README.md
similarity index 100%
rename from tests/http-evader-245/README.md
rename to tests/http-evader/http-evader-245/README.md

diff --git a/tests/http-evader-245/input.pcap b/tests/http-evader/http-evader-245/input.pcap
similarity index 100%
rename from tests/http-evader-245/input.pcap
rename to tests/http-evader/http-evader-245/input.pcap

diff --git a/tests/http-evader-245/test.rules b/tests/http-evader/http-evader-245/test.rules
similarity index 100%
rename from tests/http-evader-245/test.rules
rename to tests/http-evader/http-evader-245/test.rules

diff --git a/tests/http-evader-245/test.yaml b/tests/http-evader/http-evader-245/test.yaml
similarity index 100%
rename from tests/http-evader-245/test.yaml
rename to tests/http-evader/http-evader-245/test.yaml

diff --git a/tests/http-evader-246/README.md b/tests/http-evader/http-evader-246/README.md
similarity index 100%
rename from tests/http-evader-246/README.md
rename to tests/http-evader/http-evader-246/README.md

diff --git a/tests/http-evader-246/input.pcap b/tests/http-evader/http-evader-246/input.pcap
similarity index 100%
rename from tests/http-evader-246/input.pcap
rename to tests/http-evader/http-evader-246/input.pcap

diff --git a/tests/http-evader-246/test.rules b/tests/http-evader/http-evader-246/test.rules
similarity index 100%
rename from tests/http-evader-246/test.rules
rename to tests/http-evader/http-evader-246/test.rules

diff --git a/tests/http-evader-246/test.yaml b/tests/http-evader/http-evader-246/test.yaml
similarity index 100%
rename from tests/http-evader-246/test.yaml
rename to tests/http-evader/http-evader-246/test.yaml

diff --git a/tests/http-evader-247/README.md b/tests/http-evader/http-evader-247/README.md
similarity index 100%
rename from tests/http-evader-247/README.md
rename to tests/http-evader/http-evader-247/README.md

diff --git a/tests/http-evader-247/input.pcap b/tests/http-evader/http-evader-247/input.pcap
similarity index 100%
rename from tests/http-evader-247/input.pcap
rename to tests/http-evader/http-evader-247/input.pcap

diff --git a/tests/http-evader-247/test.rules b/tests/http-evader/http-evader-247/test.rules
similarity index 100%
rename from tests/http-evader-247/test.rules
rename to tests/http-evader/http-evader-247/test.rules

diff --git a/tests/http-evader-247/test.yaml b/tests/http-evader/http-evader-247/test.yaml
similarity index 100%
rename from tests/http-evader-247/test.yaml
rename to tests/http-evader/http-evader-247/test.yaml

diff --git a/tests/http-evader-248/README.md b/tests/http-evader/http-evader-248/README.md
similarity index 100%
rename from tests/http-evader-248/README.md
rename to tests/http-evader/http-evader-248/README.md

diff --git a/tests/http-evader-248/input.pcap b/tests/http-evader/http-evader-248/input.pcap
similarity index 100%
rename from tests/http-evader-248/input.pcap
rename to tests/http-evader/http-evader-248/input.pcap

diff --git a/tests/http-evader-248/test.rules b/tests/http-evader/http-evader-248/test.rules
similarity index 100%
rename from tests/http-evader-248/test.rules
rename to tests/http-evader/http-evader-248/test.rules

diff --git a/tests/http-evader-248/test.yaml b/tests/http-evader/http-evader-248/test.yaml
similarity index 100%
rename from tests/http-evader-248/test.yaml
rename to tests/http-evader/http-evader-248/test.yaml

diff --git a/tests/http-evader-249/README.md b/tests/http-evader/http-evader-249/README.md
similarity index 100%
rename from tests/http-evader-249/README.md
rename to tests/http-evader/http-evader-249/README.md

diff --git a/tests/http-evader-249/input.pcap b/tests/http-evader/http-evader-249/input.pcap
similarity index 100%
rename from tests/http-evader-249/input.pcap
rename to tests/http-evader/http-evader-249/input.pcap

diff --git a/tests/http-evader-249/test.rules b/tests/http-evader/http-evader-249/test.rules
similarity index 100%
rename from tests/http-evader-249/test.rules
rename to tests/http-evader/http-evader-249/test.rules

diff --git a/tests/http-evader-249/test.yaml b/tests/http-evader/http-evader-249/test.yaml
similarity index 100%
rename from tests/http-evader-249/test.yaml
rename to tests/http-evader/http-evader-249/test.yaml

diff --git a/tests/http-evader-250/README.md b/tests/http-evader/http-evader-250/README.md
similarity index 100%
rename from tests/http-evader-250/README.md
rename to tests/http-evader/http-evader-250/README.md

diff --git a/tests/http-evader-250/input.pcap b/tests/http-evader/http-evader-250/input.pcap
similarity index 100%
rename from tests/http-evader-250/input.pcap
rename to tests/http-evader/http-evader-250/input.pcap

diff --git a/tests/http-evader-250/test.rules b/tests/http-evader/http-evader-250/test.rules
similarity index 100%
rename from tests/http-evader-250/test.rules
rename to tests/http-evader/http-evader-250/test.rules

diff --git a/tests/http-evader-250/test.yaml b/tests/http-evader/http-evader-250/test.yaml
similarity index 100%
rename from tests/http-evader-250/test.yaml
rename to tests/http-evader/http-evader-250/test.yaml

diff --git a/tests/http-evader-251/README.md b/tests/http-evader/http-evader-251/README.md
similarity index 100%
rename from tests/http-evader-251/README.md
rename to tests/http-evader/http-evader-251/README.md

diff --git a/tests/http-evader-251/input.pcap b/tests/http-evader/http-evader-251/input.pcap
similarity index 100%
rename from tests/http-evader-251/input.pcap
rename to tests/http-evader/http-evader-251/input.pcap

diff --git a/tests/http-evader-251/test.rules b/tests/http-evader/http-evader-251/test.rules
similarity index 100%
rename from tests/http-evader-251/test.rules
rename to tests/http-evader/http-evader-251/test.rules

diff --git a/tests/http-evader-251/test.yaml b/tests/http-evader/http-evader-251/test.yaml
similarity index 100%
rename from tests/http-evader-251/test.yaml
rename to tests/http-evader/http-evader-251/test.yaml

diff --git a/tests/http-evader-252/README.md b/tests/http-evader/http-evader-252/README.md
similarity index 100%
rename from tests/http-evader-252/README.md
rename to tests/http-evader/http-evader-252/README.md

diff --git a/tests/http-evader-252/input.pcap b/tests/http-evader/http-evader-252/input.pcap
similarity index 100%
rename from tests/http-evader-252/input.pcap
rename to tests/http-evader/http-evader-252/input.pcap

diff --git a/tests/http-evader-252/test.rules b/tests/http-evader/http-evader-252/test.rules
similarity index 100%
rename from tests/http-evader-252/test.rules
rename to tests/http-evader/http-evader-252/test.rules

diff --git a/tests/http-evader-252/test.yaml b/tests/http-evader/http-evader-252/test.yaml
similarity index 100%
rename from tests/http-evader-252/test.yaml
rename to tests/http-evader/http-evader-252/test.yaml

diff --git a/tests/http-evader-253/README.md b/tests/http-evader/http-evader-253/README.md
similarity index 100%
rename from tests/http-evader-253/README.md
rename to tests/http-evader/http-evader-253/README.md

diff --git a/tests/http-evader-253/input.pcap b/tests/http-evader/http-evader-253/input.pcap
similarity index 100%
rename from tests/http-evader-253/input.pcap
rename to tests/http-evader/http-evader-253/input.pcap

diff --git a/tests/http-evader-253/test.rules b/tests/http-evader/http-evader-253/test.rules
similarity index 100%
rename from tests/http-evader-253/test.rules
rename to tests/http-evader/http-evader-253/test.rules

diff --git a/tests/http-evader-253/test.yaml b/tests/http-evader/http-evader-253/test.yaml
similarity index 100%
rename from tests/http-evader-253/test.yaml
rename to tests/http-evader/http-evader-253/test.yaml

diff --git a/tests/http-evader-254/README.md b/tests/http-evader/http-evader-254/README.md
similarity index 100%
rename from tests/http-evader-254/README.md
rename to tests/http-evader/http-evader-254/README.md

diff --git a/tests/http-evader-254/input.pcap b/tests/http-evader/http-evader-254/input.pcap
similarity index 100%
rename from tests/http-evader-254/input.pcap
rename to tests/http-evader/http-evader-254/input.pcap

diff --git a/tests/http-evader-254/test.rules b/tests/http-evader/http-evader-254/test.rules
similarity index 100%
rename from tests/http-evader-254/test.rules
rename to tests/http-evader/http-evader-254/test.rules

diff --git a/tests/http-evader-254/test.yaml b/tests/http-evader/http-evader-254/test.yaml
similarity index 100%
rename from tests/http-evader-254/test.yaml
rename to tests/http-evader/http-evader-254/test.yaml

diff --git a/tests/http-evader-255/README.md b/tests/http-evader/http-evader-255/README.md
similarity index 100%
rename from tests/http-evader-255/README.md
rename to tests/http-evader/http-evader-255/README.md

diff --git a/tests/http-evader-255/input.pcap b/tests/http-evader/http-evader-255/input.pcap
similarity index 100%
rename from tests/http-evader-255/input.pcap
rename to tests/http-evader/http-evader-255/input.pcap

diff --git a/tests/http-evader-255/test.rules b/tests/http-evader/http-evader-255/test.rules
similarity index 100%
rename from tests/http-evader-255/test.rules
rename to tests/http-evader/http-evader-255/test.rules

diff --git a/tests/http-evader-255/test.yaml b/tests/http-evader/http-evader-255/test.yaml
similarity index 100%
rename from tests/http-evader-255/test.yaml
rename to tests/http-evader/http-evader-255/test.yaml

diff --git a/tests/http-evader-256/README.md b/tests/http-evader/http-evader-256/README.md
similarity index 100%
rename from tests/http-evader-256/README.md
rename to tests/http-evader/http-evader-256/README.md

diff --git a/tests/http-evader-256/input.pcap b/tests/http-evader/http-evader-256/input.pcap
similarity index 100%
rename from tests/http-evader-256/input.pcap
rename to tests/http-evader/http-evader-256/input.pcap

diff --git a/tests/http-evader-256/test.rules b/tests/http-evader/http-evader-256/test.rules
similarity index 100%
rename from tests/http-evader-256/test.rules
rename to tests/http-evader/http-evader-256/test.rules

diff --git a/tests/http-evader-256/test.yaml b/tests/http-evader/http-evader-256/test.yaml
similarity index 100%
rename from tests/http-evader-256/test.yaml
rename to tests/http-evader/http-evader-256/test.yaml

diff --git a/tests/http-evader-257/README.md b/tests/http-evader/http-evader-257/README.md
similarity index 100%
rename from tests/http-evader-257/README.md
rename to tests/http-evader/http-evader-257/README.md

diff --git a/tests/http-evader-257/input.pcap b/tests/http-evader/http-evader-257/input.pcap
similarity index 100%
rename from tests/http-evader-257/input.pcap
rename to tests/http-evader/http-evader-257/input.pcap

diff --git a/tests/http-evader-257/test.rules b/tests/http-evader/http-evader-257/test.rules
similarity index 100%
rename from tests/http-evader-257/test.rules
rename to tests/http-evader/http-evader-257/test.rules

diff --git a/tests/http-evader-257/test.yaml b/tests/http-evader/http-evader-257/test.yaml
similarity index 100%
rename from tests/http-evader-257/test.yaml
rename to tests/http-evader/http-evader-257/test.yaml

diff --git a/tests/http-evader-258/README.md b/tests/http-evader/http-evader-258/README.md
similarity index 100%
rename from tests/http-evader-258/README.md
rename to tests/http-evader/http-evader-258/README.md

diff --git a/tests/http-evader-258/input.pcap b/tests/http-evader/http-evader-258/input.pcap
similarity index 100%
rename from tests/http-evader-258/input.pcap
rename to tests/http-evader/http-evader-258/input.pcap

diff --git a/tests/http-evader-258/test.rules b/tests/http-evader/http-evader-258/test.rules
similarity index 100%
rename from tests/http-evader-258/test.rules
rename to tests/http-evader/http-evader-258/test.rules

diff --git a/tests/http-evader-258/test.yaml b/tests/http-evader/http-evader-258/test.yaml
similarity index 100%
rename from tests/http-evader-258/test.yaml
rename to tests/http-evader/http-evader-258/test.yaml

diff --git a/tests/http-evader-259/README.md b/tests/http-evader/http-evader-259/README.md
similarity index 100%
rename from tests/http-evader-259/README.md
rename to tests/http-evader/http-evader-259/README.md

diff --git a/tests/http-evader-259/input.pcap b/tests/http-evader/http-evader-259/input.pcap
similarity index 100%
rename from tests/http-evader-259/input.pcap
rename to tests/http-evader/http-evader-259/input.pcap

diff --git a/tests/http-evader-259/test.rules b/tests/http-evader/http-evader-259/test.rules
similarity index 100%
rename from tests/http-evader-259/test.rules
rename to tests/http-evader/http-evader-259/test.rules

diff --git a/tests/http-evader-259/test.yaml b/tests/http-evader/http-evader-259/test.yaml
similarity index 100%
rename from tests/http-evader-259/test.yaml
rename to tests/http-evader/http-evader-259/test.yaml

diff --git a/tests/http-evader-260/README.md b/tests/http-evader/http-evader-260/README.md
similarity index 100%
rename from tests/http-evader-260/README.md
rename to tests/http-evader/http-evader-260/README.md

diff --git a/tests/http-evader-260/input.pcap b/tests/http-evader/http-evader-260/input.pcap
similarity index 100%
rename from tests/http-evader-260/input.pcap
rename to tests/http-evader/http-evader-260/input.pcap

diff --git a/tests/http-evader-260/test.rules b/tests/http-evader/http-evader-260/test.rules
similarity index 100%
rename from tests/http-evader-260/test.rules
rename to tests/http-evader/http-evader-260/test.rules

diff --git a/tests/http-evader-260/test.yaml b/tests/http-evader/http-evader-260/test.yaml
similarity index 100%
rename from tests/http-evader-260/test.yaml
rename to tests/http-evader/http-evader-260/test.yaml

diff --git a/tests/http-evader-261/README.md b/tests/http-evader/http-evader-261/README.md
similarity index 100%
rename from tests/http-evader-261/README.md
rename to tests/http-evader/http-evader-261/README.md

diff --git a/tests/http-evader-261/input.pcap b/tests/http-evader/http-evader-261/input.pcap
similarity index 100%
rename from tests/http-evader-261/input.pcap
rename to tests/http-evader/http-evader-261/input.pcap

diff --git a/tests/http-evader-261/test.rules b/tests/http-evader/http-evader-261/test.rules
similarity index 100%
rename from tests/http-evader-261/test.rules
rename to tests/http-evader/http-evader-261/test.rules

diff --git a/tests/http-evader-261/test.yaml b/tests/http-evader/http-evader-261/test.yaml
similarity index 100%
rename from tests/http-evader-261/test.yaml
rename to tests/http-evader/http-evader-261/test.yaml

diff --git a/tests/http-evader-262/README.md b/tests/http-evader/http-evader-262/README.md
similarity index 100%
rename from tests/http-evader-262/README.md
rename to tests/http-evader/http-evader-262/README.md

diff --git a/tests/http-evader-262/input.pcap b/tests/http-evader/http-evader-262/input.pcap
similarity index 100%
rename from tests/http-evader-262/input.pcap
rename to tests/http-evader/http-evader-262/input.pcap

diff --git a/tests/http-evader-262/test.rules b/tests/http-evader/http-evader-262/test.rules
similarity index 100%
rename from tests/http-evader-262/test.rules
rename to tests/http-evader/http-evader-262/test.rules

diff --git a/tests/http-evader-262/test.yaml b/tests/http-evader/http-evader-262/test.yaml
similarity index 100%
rename from tests/http-evader-262/test.yaml
rename to tests/http-evader/http-evader-262/test.yaml

diff --git a/tests/http-evader-263/README.md b/tests/http-evader/http-evader-263/README.md
similarity index 100%
rename from tests/http-evader-263/README.md
rename to tests/http-evader/http-evader-263/README.md

diff --git a/tests/http-evader-263/input.pcap b/tests/http-evader/http-evader-263/input.pcap
similarity index 100%
rename from tests/http-evader-263/input.pcap
rename to tests/http-evader/http-evader-263/input.pcap

diff --git a/tests/http-evader-263/test.rules b/tests/http-evader/http-evader-263/test.rules
similarity index 100%
rename from tests/http-evader-263/test.rules
rename to tests/http-evader/http-evader-263/test.rules

diff --git a/tests/http-evader-263/test.yaml b/tests/http-evader/http-evader-263/test.yaml
similarity index 100%
rename from tests/http-evader-263/test.yaml
rename to tests/http-evader/http-evader-263/test.yaml

diff --git a/tests/http-evader-264/README.md b/tests/http-evader/http-evader-264/README.md
similarity index 100%
rename from tests/http-evader-264/README.md
rename to tests/http-evader/http-evader-264/README.md

diff --git a/tests/http-evader-264/input.pcap b/tests/http-evader/http-evader-264/input.pcap
similarity index 100%
rename from tests/http-evader-264/input.pcap
rename to tests/http-evader/http-evader-264/input.pcap

diff --git a/tests/http-evader-264/test.rules b/tests/http-evader/http-evader-264/test.rules
similarity index 100%
rename from tests/http-evader-264/test.rules
rename to tests/http-evader/http-evader-264/test.rules

diff --git a/tests/http-evader-264/test.yaml b/tests/http-evader/http-evader-264/test.yaml
similarity index 100%
rename from tests/http-evader-264/test.yaml
rename to tests/http-evader/http-evader-264/test.yaml

diff --git a/tests/http-evader-265/README.md b/tests/http-evader/http-evader-265/README.md
similarity index 100%
rename from tests/http-evader-265/README.md
rename to tests/http-evader/http-evader-265/README.md

diff --git a/tests/http-evader-265/input.pcap b/tests/http-evader/http-evader-265/input.pcap
similarity index 100%
rename from tests/http-evader-265/input.pcap
rename to tests/http-evader/http-evader-265/input.pcap

diff --git a/tests/http-evader-265/test.rules b/tests/http-evader/http-evader-265/test.rules
similarity index 100%
rename from tests/http-evader-265/test.rules
rename to tests/http-evader/http-evader-265/test.rules

diff --git a/tests/http-evader-265/test.yaml b/tests/http-evader/http-evader-265/test.yaml
similarity index 100%
rename from tests/http-evader-265/test.yaml
rename to tests/http-evader/http-evader-265/test.yaml

diff --git a/tests/http-evader-266/README.md b/tests/http-evader/http-evader-266/README.md
similarity index 100%
rename from tests/http-evader-266/README.md
rename to tests/http-evader/http-evader-266/README.md

diff --git a/tests/http-evader-266/input.pcap b/tests/http-evader/http-evader-266/input.pcap
similarity index 100%
rename from tests/http-evader-266/input.pcap
rename to tests/http-evader/http-evader-266/input.pcap

diff --git a/tests/http-evader-266/test.rules b/tests/http-evader/http-evader-266/test.rules
similarity index 100%
rename from tests/http-evader-266/test.rules
rename to tests/http-evader/http-evader-266/test.rules

diff --git a/tests/http-evader-266/test.yaml b/tests/http-evader/http-evader-266/test.yaml
similarity index 100%
rename from tests/http-evader-266/test.yaml
rename to tests/http-evader/http-evader-266/test.yaml

diff --git a/tests/http-evader-267/README.md b/tests/http-evader/http-evader-267/README.md
similarity index 100%
rename from tests/http-evader-267/README.md
rename to tests/http-evader/http-evader-267/README.md

diff --git a/tests/http-evader-267/input.pcap b/tests/http-evader/http-evader-267/input.pcap
similarity index 100%
rename from tests/http-evader-267/input.pcap
rename to tests/http-evader/http-evader-267/input.pcap

diff --git a/tests/http-evader-267/test.rules b/tests/http-evader/http-evader-267/test.rules
similarity index 100%
rename from tests/http-evader-267/test.rules
rename to tests/http-evader/http-evader-267/test.rules

diff --git a/tests/http-evader-267/test.yaml b/tests/http-evader/http-evader-267/test.yaml
similarity index 100%
rename from tests/http-evader-267/test.yaml
rename to tests/http-evader/http-evader-267/test.yaml

diff --git a/tests/http-evader-268/README.md b/tests/http-evader/http-evader-268/README.md
similarity index 100%
rename from tests/http-evader-268/README.md
rename to tests/http-evader/http-evader-268/README.md

diff --git a/tests/http-evader-268/input.pcap b/tests/http-evader/http-evader-268/input.pcap
similarity index 100%
rename from tests/http-evader-268/input.pcap
rename to tests/http-evader/http-evader-268/input.pcap

diff --git a/tests/http-evader-268/test.rules b/tests/http-evader/http-evader-268/test.rules
similarity index 100%
rename from tests/http-evader-268/test.rules
rename to tests/http-evader/http-evader-268/test.rules

diff --git a/tests/http-evader-268/test.yaml b/tests/http-evader/http-evader-268/test.yaml
similarity index 100%
rename from tests/http-evader-268/test.yaml
rename to tests/http-evader/http-evader-268/test.yaml

diff --git a/tests/http-evader-269/README.md b/tests/http-evader/http-evader-269/README.md
similarity index 100%
rename from tests/http-evader-269/README.md
rename to tests/http-evader/http-evader-269/README.md

diff --git a/tests/http-evader-269/input.pcap b/tests/http-evader/http-evader-269/input.pcap
similarity index 100%
rename from tests/http-evader-269/input.pcap
rename to tests/http-evader/http-evader-269/input.pcap

diff --git a/tests/http-evader-269/test.rules b/tests/http-evader/http-evader-269/test.rules
similarity index 100%
rename from tests/http-evader-269/test.rules
rename to tests/http-evader/http-evader-269/test.rules

diff --git a/tests/http-evader-269/test.yaml b/tests/http-evader/http-evader-269/test.yaml
similarity index 100%
rename from tests/http-evader-269/test.yaml
rename to tests/http-evader/http-evader-269/test.yaml

diff --git a/tests/http-evader-270/README.md b/tests/http-evader/http-evader-270/README.md
similarity index 100%
rename from tests/http-evader-270/README.md
rename to tests/http-evader/http-evader-270/README.md

diff --git a/tests/http-evader-270/input.pcap b/tests/http-evader/http-evader-270/input.pcap
similarity index 100%
rename from tests/http-evader-270/input.pcap
rename to tests/http-evader/http-evader-270/input.pcap

diff --git a/tests/http-evader-270/test.rules b/tests/http-evader/http-evader-270/test.rules
similarity index 100%
rename from tests/http-evader-270/test.rules
rename to tests/http-evader/http-evader-270/test.rules

diff --git a/tests/http-evader-270/test.yaml b/tests/http-evader/http-evader-270/test.yaml
similarity index 100%
rename from tests/http-evader-270/test.yaml
rename to tests/http-evader/http-evader-270/test.yaml

diff --git a/tests/http-evader-271/README.md b/tests/http-evader/http-evader-271/README.md
similarity index 100%
rename from tests/http-evader-271/README.md
rename to tests/http-evader/http-evader-271/README.md

diff --git a/tests/http-evader-271/input.pcap b/tests/http-evader/http-evader-271/input.pcap
similarity index 100%
rename from tests/http-evader-271/input.pcap
rename to tests/http-evader/http-evader-271/input.pcap

diff --git a/tests/http-evader-271/test.rules b/tests/http-evader/http-evader-271/test.rules
similarity index 100%
rename from tests/http-evader-271/test.rules
rename to tests/http-evader/http-evader-271/test.rules

diff --git a/tests/http-evader-271/test.yaml b/tests/http-evader/http-evader-271/test.yaml
similarity index 100%
rename from tests/http-evader-271/test.yaml
rename to tests/http-evader/http-evader-271/test.yaml

diff --git a/tests/http-evader-272/README.md b/tests/http-evader/http-evader-272/README.md
similarity index 100%
rename from tests/http-evader-272/README.md
rename to tests/http-evader/http-evader-272/README.md

diff --git a/tests/http-evader-272/input.pcap b/tests/http-evader/http-evader-272/input.pcap
similarity index 100%
rename from tests/http-evader-272/input.pcap
rename to tests/http-evader/http-evader-272/input.pcap

diff --git a/tests/http-evader-272/test.rules b/tests/http-evader/http-evader-272/test.rules
similarity index 100%
rename from tests/http-evader-272/test.rules
rename to tests/http-evader/http-evader-272/test.rules

diff --git a/tests/http-evader-272/test.yaml b/tests/http-evader/http-evader-272/test.yaml
similarity index 100%
rename from tests/http-evader-272/test.yaml
rename to tests/http-evader/http-evader-272/test.yaml

diff --git a/tests/http-evader-273/README.md b/tests/http-evader/http-evader-273/README.md
similarity index 100%
rename from tests/http-evader-273/README.md
rename to tests/http-evader/http-evader-273/README.md

diff --git a/tests/http-evader-273/input.pcap b/tests/http-evader/http-evader-273/input.pcap
similarity index 100%
rename from tests/http-evader-273/input.pcap
rename to tests/http-evader/http-evader-273/input.pcap

diff --git a/tests/http-evader-273/test.rules b/tests/http-evader/http-evader-273/test.rules
similarity index 100%
rename from tests/http-evader-273/test.rules
rename to tests/http-evader/http-evader-273/test.rules

diff --git a/tests/http-evader-273/test.yaml b/tests/http-evader/http-evader-273/test.yaml
similarity index 100%
rename from tests/http-evader-273/test.yaml
rename to tests/http-evader/http-evader-273/test.yaml

diff --git a/tests/http-evader-274/README.md b/tests/http-evader/http-evader-274/README.md
similarity index 100%
rename from tests/http-evader-274/README.md
rename to tests/http-evader/http-evader-274/README.md

diff --git a/tests/http-evader-274/input.pcap b/tests/http-evader/http-evader-274/input.pcap
similarity index 100%
rename from tests/http-evader-274/input.pcap
rename to tests/http-evader/http-evader-274/input.pcap

diff --git a/tests/http-evader-274/test.rules b/tests/http-evader/http-evader-274/test.rules
similarity index 100%
rename from tests/http-evader-274/test.rules
rename to tests/http-evader/http-evader-274/test.rules

diff --git a/tests/http-evader-274/test.yaml b/tests/http-evader/http-evader-274/test.yaml
similarity index 100%
rename from tests/http-evader-274/test.yaml
rename to tests/http-evader/http-evader-274/test.yaml

diff --git a/tests/http-evader-275/README.md b/tests/http-evader/http-evader-275/README.md
similarity index 100%
rename from tests/http-evader-275/README.md
rename to tests/http-evader/http-evader-275/README.md

diff --git a/tests/http-evader-275/input.pcap b/tests/http-evader/http-evader-275/input.pcap
similarity index 100%
rename from tests/http-evader-275/input.pcap
rename to tests/http-evader/http-evader-275/input.pcap

diff --git a/tests/http-evader-275/test.rules b/tests/http-evader/http-evader-275/test.rules
similarity index 100%
rename from tests/http-evader-275/test.rules
rename to tests/http-evader/http-evader-275/test.rules

diff --git a/tests/http-evader-275/test.yaml b/tests/http-evader/http-evader-275/test.yaml
similarity index 100%
rename from tests/http-evader-275/test.yaml
rename to tests/http-evader/http-evader-275/test.yaml

diff --git a/tests/http-evader-276/README.md b/tests/http-evader/http-evader-276/README.md
similarity index 100%
rename from tests/http-evader-276/README.md
rename to tests/http-evader/http-evader-276/README.md

diff --git a/tests/http-evader-276/input.pcap b/tests/http-evader/http-evader-276/input.pcap
similarity index 100%
rename from tests/http-evader-276/input.pcap
rename to tests/http-evader/http-evader-276/input.pcap

diff --git a/tests/http-evader-276/test.rules b/tests/http-evader/http-evader-276/test.rules
similarity index 100%
rename from tests/http-evader-276/test.rules
rename to tests/http-evader/http-evader-276/test.rules

diff --git a/tests/http-evader-276/test.yaml b/tests/http-evader/http-evader-276/test.yaml
similarity index 100%
rename from tests/http-evader-276/test.yaml
rename to tests/http-evader/http-evader-276/test.yaml

diff --git a/tests/http-evader-277/README.md b/tests/http-evader/http-evader-277/README.md
similarity index 100%
rename from tests/http-evader-277/README.md
rename to tests/http-evader/http-evader-277/README.md

diff --git a/tests/http-evader-277/input.pcap b/tests/http-evader/http-evader-277/input.pcap
similarity index 100%
rename from tests/http-evader-277/input.pcap
rename to tests/http-evader/http-evader-277/input.pcap

diff --git a/tests/http-evader-277/test.rules b/tests/http-evader/http-evader-277/test.rules
similarity index 100%
rename from tests/http-evader-277/test.rules
rename to tests/http-evader/http-evader-277/test.rules

diff --git a/tests/http-evader-277/test.yaml b/tests/http-evader/http-evader-277/test.yaml
similarity index 100%
rename from tests/http-evader-277/test.yaml
rename to tests/http-evader/http-evader-277/test.yaml

diff --git a/tests/http-evader-278/README.md b/tests/http-evader/http-evader-278/README.md
similarity index 100%
rename from tests/http-evader-278/README.md
rename to tests/http-evader/http-evader-278/README.md

diff --git a/tests/http-evader-278/input.pcap b/tests/http-evader/http-evader-278/input.pcap
similarity index 100%
rename from tests/http-evader-278/input.pcap
rename to tests/http-evader/http-evader-278/input.pcap

diff --git a/tests/http-evader-278/test.rules b/tests/http-evader/http-evader-278/test.rules
similarity index 100%
rename from tests/http-evader-278/test.rules
rename to tests/http-evader/http-evader-278/test.rules

diff --git a/tests/http-evader-278/test.yaml b/tests/http-evader/http-evader-278/test.yaml
similarity index 100%
rename from tests/http-evader-278/test.yaml
rename to tests/http-evader/http-evader-278/test.yaml

diff --git a/tests/http-evader-279/README.md b/tests/http-evader/http-evader-279/README.md
similarity index 100%
rename from tests/http-evader-279/README.md
rename to tests/http-evader/http-evader-279/README.md

diff --git a/tests/http-evader-279/input.pcap b/tests/http-evader/http-evader-279/input.pcap
similarity index 100%
rename from tests/http-evader-279/input.pcap
rename to tests/http-evader/http-evader-279/input.pcap

diff --git a/tests/http-evader-279/test.rules b/tests/http-evader/http-evader-279/test.rules
similarity index 100%
rename from tests/http-evader-279/test.rules
rename to tests/http-evader/http-evader-279/test.rules

diff --git a/tests/http-evader-279/test.yaml b/tests/http-evader/http-evader-279/test.yaml
similarity index 100%
rename from tests/http-evader-279/test.yaml
rename to tests/http-evader/http-evader-279/test.yaml

diff --git a/tests/http-evader-280/README.md b/tests/http-evader/http-evader-280/README.md
similarity index 100%
rename from tests/http-evader-280/README.md
rename to tests/http-evader/http-evader-280/README.md

diff --git a/tests/http-evader-280/input.pcap b/tests/http-evader/http-evader-280/input.pcap
similarity index 100%
rename from tests/http-evader-280/input.pcap
rename to tests/http-evader/http-evader-280/input.pcap

diff --git a/tests/http-evader-280/test.rules b/tests/http-evader/http-evader-280/test.rules
similarity index 100%
rename from tests/http-evader-280/test.rules
rename to tests/http-evader/http-evader-280/test.rules

diff --git a/tests/http-evader-280/test.yaml b/tests/http-evader/http-evader-280/test.yaml
similarity index 100%
rename from tests/http-evader-280/test.yaml
rename to tests/http-evader/http-evader-280/test.yaml

diff --git a/tests/http-evader-281/README.md b/tests/http-evader/http-evader-281/README.md
similarity index 100%
rename from tests/http-evader-281/README.md
rename to tests/http-evader/http-evader-281/README.md

diff --git a/tests/http-evader-281/input.pcap b/tests/http-evader/http-evader-281/input.pcap
similarity index 100%
rename from tests/http-evader-281/input.pcap
rename to tests/http-evader/http-evader-281/input.pcap

diff --git a/tests/http-evader-281/test.rules b/tests/http-evader/http-evader-281/test.rules
similarity index 100%
rename from tests/http-evader-281/test.rules
rename to tests/http-evader/http-evader-281/test.rules

diff --git a/tests/http-evader-281/test.yaml b/tests/http-evader/http-evader-281/test.yaml
similarity index 100%
rename from tests/http-evader-281/test.yaml
rename to tests/http-evader/http-evader-281/test.yaml

diff --git a/tests/http-evader-282/README.md b/tests/http-evader/http-evader-282/README.md
similarity index 100%
rename from tests/http-evader-282/README.md
rename to tests/http-evader/http-evader-282/README.md

diff --git a/tests/http-evader-282/input.pcap b/tests/http-evader/http-evader-282/input.pcap
similarity index 100%
rename from tests/http-evader-282/input.pcap
rename to tests/http-evader/http-evader-282/input.pcap

diff --git a/tests/http-evader-282/test.rules b/tests/http-evader/http-evader-282/test.rules
similarity index 100%
rename from tests/http-evader-282/test.rules
rename to tests/http-evader/http-evader-282/test.rules

diff --git a/tests/http-evader-282/test.yaml b/tests/http-evader/http-evader-282/test.yaml
similarity index 100%
rename from tests/http-evader-282/test.yaml
rename to tests/http-evader/http-evader-282/test.yaml

diff --git a/tests/http-evader-283/README.md b/tests/http-evader/http-evader-283/README.md
similarity index 100%
rename from tests/http-evader-283/README.md
rename to tests/http-evader/http-evader-283/README.md

diff --git a/tests/http-evader-283/input.pcap b/tests/http-evader/http-evader-283/input.pcap
similarity index 100%
rename from tests/http-evader-283/input.pcap
rename to tests/http-evader/http-evader-283/input.pcap

diff --git a/tests/http-evader-283/test.rules b/tests/http-evader/http-evader-283/test.rules
similarity index 100%
rename from tests/http-evader-283/test.rules
rename to tests/http-evader/http-evader-283/test.rules

diff --git a/tests/http-evader-283/test.yaml b/tests/http-evader/http-evader-283/test.yaml
similarity index 100%
rename from tests/http-evader-283/test.yaml
rename to tests/http-evader/http-evader-283/test.yaml

diff --git a/tests/http-evader-284/README.md b/tests/http-evader/http-evader-284/README.md
similarity index 100%
rename from tests/http-evader-284/README.md
rename to tests/http-evader/http-evader-284/README.md

diff --git a/tests/http-evader-284/input.pcap b/tests/http-evader/http-evader-284/input.pcap
similarity index 100%
rename from tests/http-evader-284/input.pcap
rename to tests/http-evader/http-evader-284/input.pcap

diff --git a/tests/http-evader-284/test.rules b/tests/http-evader/http-evader-284/test.rules
similarity index 100%
rename from tests/http-evader-284/test.rules
rename to tests/http-evader/http-evader-284/test.rules

diff --git a/tests/http-evader-284/test.yaml b/tests/http-evader/http-evader-284/test.yaml
similarity index 100%
rename from tests/http-evader-284/test.yaml
rename to tests/http-evader/http-evader-284/test.yaml

diff --git a/tests/http-evader-285/README.md b/tests/http-evader/http-evader-285/README.md
similarity index 100%
rename from tests/http-evader-285/README.md
rename to tests/http-evader/http-evader-285/README.md

diff --git a/tests/http-evader-285/input.pcap b/tests/http-evader/http-evader-285/input.pcap
similarity index 100%
rename from tests/http-evader-285/input.pcap
rename to tests/http-evader/http-evader-285/input.pcap

diff --git a/tests/http-evader-285/test.rules b/tests/http-evader/http-evader-285/test.rules
similarity index 100%
rename from tests/http-evader-285/test.rules
rename to tests/http-evader/http-evader-285/test.rules

diff --git a/tests/http-evader-285/test.yaml b/tests/http-evader/http-evader-285/test.yaml
similarity index 100%
rename from tests/http-evader-285/test.yaml
rename to tests/http-evader/http-evader-285/test.yaml

diff --git a/tests/http-evader-286/README.md b/tests/http-evader/http-evader-286/README.md
similarity index 100%
rename from tests/http-evader-286/README.md
rename to tests/http-evader/http-evader-286/README.md

diff --git a/tests/http-evader-286/input.pcap b/tests/http-evader/http-evader-286/input.pcap
similarity index 100%
rename from tests/http-evader-286/input.pcap
rename to tests/http-evader/http-evader-286/input.pcap

diff --git a/tests/http-evader-286/test.rules b/tests/http-evader/http-evader-286/test.rules
similarity index 100%
rename from tests/http-evader-286/test.rules
rename to tests/http-evader/http-evader-286/test.rules

diff --git a/tests/http-evader-286/test.yaml b/tests/http-evader/http-evader-286/test.yaml
similarity index 100%
rename from tests/http-evader-286/test.yaml
rename to tests/http-evader/http-evader-286/test.yaml

diff --git a/tests/http-evader-287/README.md b/tests/http-evader/http-evader-287/README.md
similarity index 100%
rename from tests/http-evader-287/README.md
rename to tests/http-evader/http-evader-287/README.md

diff --git a/tests/http-evader-287/input.pcap b/tests/http-evader/http-evader-287/input.pcap
similarity index 100%
rename from tests/http-evader-287/input.pcap
rename to tests/http-evader/http-evader-287/input.pcap

diff --git a/tests/http-evader-287/test.rules b/tests/http-evader/http-evader-287/test.rules
similarity index 100%
rename from tests/http-evader-287/test.rules
rename to tests/http-evader/http-evader-287/test.rules

diff --git a/tests/http-evader-287/test.yaml b/tests/http-evader/http-evader-287/test.yaml
similarity index 100%
rename from tests/http-evader-287/test.yaml
rename to tests/http-evader/http-evader-287/test.yaml

diff --git a/tests/http-evader-288/README.md b/tests/http-evader/http-evader-288/README.md
similarity index 100%
rename from tests/http-evader-288/README.md
rename to tests/http-evader/http-evader-288/README.md

diff --git a/tests/http-evader-288/input.pcap b/tests/http-evader/http-evader-288/input.pcap
similarity index 100%
rename from tests/http-evader-288/input.pcap
rename to tests/http-evader/http-evader-288/input.pcap

diff --git a/tests/http-evader-288/test.rules b/tests/http-evader/http-evader-288/test.rules
similarity index 100%
rename from tests/http-evader-288/test.rules
rename to tests/http-evader/http-evader-288/test.rules

diff --git a/tests/http-evader-288/test.yaml b/tests/http-evader/http-evader-288/test.yaml
similarity index 100%
rename from tests/http-evader-288/test.yaml
rename to tests/http-evader/http-evader-288/test.yaml

diff --git a/tests/http-evader-289/README.md b/tests/http-evader/http-evader-289/README.md
similarity index 100%
rename from tests/http-evader-289/README.md
rename to tests/http-evader/http-evader-289/README.md

diff --git a/tests/http-evader-289/input.pcap b/tests/http-evader/http-evader-289/input.pcap
similarity index 100%
rename from tests/http-evader-289/input.pcap
rename to tests/http-evader/http-evader-289/input.pcap

diff --git a/tests/http-evader-289/test.rules b/tests/http-evader/http-evader-289/test.rules
similarity index 100%
rename from tests/http-evader-289/test.rules
rename to tests/http-evader/http-evader-289/test.rules

diff --git a/tests/http-evader-289/test.yaml b/tests/http-evader/http-evader-289/test.yaml
similarity index 100%
rename from tests/http-evader-289/test.yaml
rename to tests/http-evader/http-evader-289/test.yaml

diff --git a/tests/http-evader-290/README.md b/tests/http-evader/http-evader-290/README.md
similarity index 100%
rename from tests/http-evader-290/README.md
rename to tests/http-evader/http-evader-290/README.md

diff --git a/tests/http-evader-290/input.pcap b/tests/http-evader/http-evader-290/input.pcap
similarity index 100%
rename from tests/http-evader-290/input.pcap
rename to tests/http-evader/http-evader-290/input.pcap

diff --git a/tests/http-evader-290/test.rules b/tests/http-evader/http-evader-290/test.rules
similarity index 100%
rename from tests/http-evader-290/test.rules
rename to tests/http-evader/http-evader-290/test.rules

diff --git a/tests/http-evader-290/test.yaml b/tests/http-evader/http-evader-290/test.yaml
similarity index 100%
rename from tests/http-evader-290/test.yaml
rename to tests/http-evader/http-evader-290/test.yaml

diff --git a/tests/http-evader-291/README.md b/tests/http-evader/http-evader-291/README.md
similarity index 100%
rename from tests/http-evader-291/README.md
rename to tests/http-evader/http-evader-291/README.md

diff --git a/tests/http-evader-291/input.pcap b/tests/http-evader/http-evader-291/input.pcap
similarity index 100%
rename from tests/http-evader-291/input.pcap
rename to tests/http-evader/http-evader-291/input.pcap

diff --git a/tests/http-evader-291/test.rules b/tests/http-evader/http-evader-291/test.rules
similarity index 100%
rename from tests/http-evader-291/test.rules
rename to tests/http-evader/http-evader-291/test.rules

diff --git a/tests/http-evader-291/test.yaml b/tests/http-evader/http-evader-291/test.yaml
similarity index 100%
rename from tests/http-evader-291/test.yaml
rename to tests/http-evader/http-evader-291/test.yaml

diff --git a/tests/http-evader-292/README.md b/tests/http-evader/http-evader-292/README.md
similarity index 100%
rename from tests/http-evader-292/README.md
rename to tests/http-evader/http-evader-292/README.md

diff --git a/tests/http-evader-292/input.pcap b/tests/http-evader/http-evader-292/input.pcap
similarity index 100%
rename from tests/http-evader-292/input.pcap
rename to tests/http-evader/http-evader-292/input.pcap

diff --git a/tests/http-evader-292/test.rules b/tests/http-evader/http-evader-292/test.rules
similarity index 100%
rename from tests/http-evader-292/test.rules
rename to tests/http-evader/http-evader-292/test.rules

diff --git a/tests/http-evader-292/test.yaml b/tests/http-evader/http-evader-292/test.yaml
similarity index 100%
rename from tests/http-evader-292/test.yaml
rename to tests/http-evader/http-evader-292/test.yaml

diff --git a/tests/http-evader-293/README.md b/tests/http-evader/http-evader-293/README.md
similarity index 100%
rename from tests/http-evader-293/README.md
rename to tests/http-evader/http-evader-293/README.md

diff --git a/tests/http-evader-293/input.pcap b/tests/http-evader/http-evader-293/input.pcap
similarity index 100%
rename from tests/http-evader-293/input.pcap
rename to tests/http-evader/http-evader-293/input.pcap

diff --git a/tests/http-evader-293/test.rules b/tests/http-evader/http-evader-293/test.rules
similarity index 100%
rename from tests/http-evader-293/test.rules
rename to tests/http-evader/http-evader-293/test.rules

diff --git a/tests/http-evader-293/test.yaml b/tests/http-evader/http-evader-293/test.yaml
similarity index 100%
rename from tests/http-evader-293/test.yaml
rename to tests/http-evader/http-evader-293/test.yaml

diff --git a/tests/http-evader-294/README.md b/tests/http-evader/http-evader-294/README.md
similarity index 100%
rename from tests/http-evader-294/README.md
rename to tests/http-evader/http-evader-294/README.md

diff --git a/tests/http-evader-294/input.pcap b/tests/http-evader/http-evader-294/input.pcap
similarity index 100%
rename from tests/http-evader-294/input.pcap
rename to tests/http-evader/http-evader-294/input.pcap

diff --git a/tests/http-evader-294/test.rules b/tests/http-evader/http-evader-294/test.rules
similarity index 100%
rename from tests/http-evader-294/test.rules
rename to tests/http-evader/http-evader-294/test.rules

diff --git a/tests/http-evader-294/test.yaml b/tests/http-evader/http-evader-294/test.yaml
similarity index 100%
rename from tests/http-evader-294/test.yaml
rename to tests/http-evader/http-evader-294/test.yaml

diff --git a/tests/http-evader-295/README.md b/tests/http-evader/http-evader-295/README.md
similarity index 100%
rename from tests/http-evader-295/README.md
rename to tests/http-evader/http-evader-295/README.md

diff --git a/tests/http-evader-295/input.pcap b/tests/http-evader/http-evader-295/input.pcap
similarity index 100%
rename from tests/http-evader-295/input.pcap
rename to tests/http-evader/http-evader-295/input.pcap

diff --git a/tests/http-evader-295/test.rules b/tests/http-evader/http-evader-295/test.rules
similarity index 100%
rename from tests/http-evader-295/test.rules
rename to tests/http-evader/http-evader-295/test.rules

diff --git a/tests/http-evader-295/test.yaml b/tests/http-evader/http-evader-295/test.yaml
similarity index 100%
rename from tests/http-evader-295/test.yaml
rename to tests/http-evader/http-evader-295/test.yaml

diff --git a/tests/http-evader-296/README.md b/tests/http-evader/http-evader-296/README.md
similarity index 100%
rename from tests/http-evader-296/README.md
rename to tests/http-evader/http-evader-296/README.md

diff --git a/tests/http-evader-296/input.pcap b/tests/http-evader/http-evader-296/input.pcap
similarity index 100%
rename from tests/http-evader-296/input.pcap
rename to tests/http-evader/http-evader-296/input.pcap

diff --git a/tests/http-evader-296/test.rules b/tests/http-evader/http-evader-296/test.rules
similarity index 100%
rename from tests/http-evader-296/test.rules
rename to tests/http-evader/http-evader-296/test.rules

diff --git a/tests/http-evader-296/test.yaml b/tests/http-evader/http-evader-296/test.yaml
similarity index 100%
rename from tests/http-evader-296/test.yaml
rename to tests/http-evader/http-evader-296/test.yaml

diff --git a/tests/http-evader-297/README.md b/tests/http-evader/http-evader-297/README.md
similarity index 100%
rename from tests/http-evader-297/README.md
rename to tests/http-evader/http-evader-297/README.md

diff --git a/tests/http-evader-297/input.pcap b/tests/http-evader/http-evader-297/input.pcap
similarity index 100%
rename from tests/http-evader-297/input.pcap
rename to tests/http-evader/http-evader-297/input.pcap

diff --git a/tests/http-evader-297/test.rules b/tests/http-evader/http-evader-297/test.rules
similarity index 100%
rename from tests/http-evader-297/test.rules
rename to tests/http-evader/http-evader-297/test.rules

diff --git a/tests/http-evader-297/test.yaml b/tests/http-evader/http-evader-297/test.yaml
similarity index 100%
rename from tests/http-evader-297/test.yaml
rename to tests/http-evader/http-evader-297/test.yaml

diff --git a/tests/http-evader-298/README.md b/tests/http-evader/http-evader-298/README.md
similarity index 100%
rename from tests/http-evader-298/README.md
rename to tests/http-evader/http-evader-298/README.md

diff --git a/tests/http-evader-298/input.pcap b/tests/http-evader/http-evader-298/input.pcap
similarity index 100%
rename from tests/http-evader-298/input.pcap
rename to tests/http-evader/http-evader-298/input.pcap

diff --git a/tests/http-evader-298/test.rules b/tests/http-evader/http-evader-298/test.rules
similarity index 100%
rename from tests/http-evader-298/test.rules
rename to tests/http-evader/http-evader-298/test.rules

diff --git a/tests/http-evader-298/test.yaml b/tests/http-evader/http-evader-298/test.yaml
similarity index 100%
rename from tests/http-evader-298/test.yaml
rename to tests/http-evader/http-evader-298/test.yaml

diff --git a/tests/http-evader-299/README.md b/tests/http-evader/http-evader-299/README.md
similarity index 100%
rename from tests/http-evader-299/README.md
rename to tests/http-evader/http-evader-299/README.md

diff --git a/tests/http-evader-299/input.pcap b/tests/http-evader/http-evader-299/input.pcap
similarity index 100%
rename from tests/http-evader-299/input.pcap
rename to tests/http-evader/http-evader-299/input.pcap

diff --git a/tests/http-evader-299/test.rules b/tests/http-evader/http-evader-299/test.rules
similarity index 100%
rename from tests/http-evader-299/test.rules
rename to tests/http-evader/http-evader-299/test.rules

diff --git a/tests/http-evader-299/test.yaml b/tests/http-evader/http-evader-299/test.yaml
similarity index 100%
rename from tests/http-evader-299/test.yaml
rename to tests/http-evader/http-evader-299/test.yaml

diff --git a/tests/http-evader-300/README.md b/tests/http-evader/http-evader-300/README.md
similarity index 100%
rename from tests/http-evader-300/README.md
rename to tests/http-evader/http-evader-300/README.md

diff --git a/tests/http-evader-300/input.pcap b/tests/http-evader/http-evader-300/input.pcap
similarity index 100%
rename from tests/http-evader-300/input.pcap
rename to tests/http-evader/http-evader-300/input.pcap

diff --git a/tests/http-evader-300/test.rules b/tests/http-evader/http-evader-300/test.rules
similarity index 100%
rename from tests/http-evader-300/test.rules
rename to tests/http-evader/http-evader-300/test.rules

diff --git a/tests/http-evader-300/test.yaml b/tests/http-evader/http-evader-300/test.yaml
similarity index 100%
rename from tests/http-evader-300/test.yaml
rename to tests/http-evader/http-evader-300/test.yaml

diff --git a/tests/http-evader-301/README.md b/tests/http-evader/http-evader-301/README.md
similarity index 100%
rename from tests/http-evader-301/README.md
rename to tests/http-evader/http-evader-301/README.md

diff --git a/tests/http-evader-301/input.pcap b/tests/http-evader/http-evader-301/input.pcap
similarity index 100%
rename from tests/http-evader-301/input.pcap
rename to tests/http-evader/http-evader-301/input.pcap

diff --git a/tests/http-evader-301/test.rules b/tests/http-evader/http-evader-301/test.rules
similarity index 100%
rename from tests/http-evader-301/test.rules
rename to tests/http-evader/http-evader-301/test.rules

diff --git a/tests/http-evader-301/test.yaml b/tests/http-evader/http-evader-301/test.yaml
similarity index 100%
rename from tests/http-evader-301/test.yaml
rename to tests/http-evader/http-evader-301/test.yaml

diff --git a/tests/http-evader-302/README.md b/tests/http-evader/http-evader-302/README.md
similarity index 100%
rename from tests/http-evader-302/README.md
rename to tests/http-evader/http-evader-302/README.md

diff --git a/tests/http-evader-302/input.pcap b/tests/http-evader/http-evader-302/input.pcap
similarity index 100%
rename from tests/http-evader-302/input.pcap
rename to tests/http-evader/http-evader-302/input.pcap

diff --git a/tests/http-evader-302/test.rules b/tests/http-evader/http-evader-302/test.rules
similarity index 100%
rename from tests/http-evader-302/test.rules
rename to tests/http-evader/http-evader-302/test.rules

diff --git a/tests/http-evader-302/test.yaml b/tests/http-evader/http-evader-302/test.yaml
similarity index 100%
rename from tests/http-evader-302/test.yaml
rename to tests/http-evader/http-evader-302/test.yaml

diff --git a/tests/http-evader-303/README.md b/tests/http-evader/http-evader-303/README.md
similarity index 100%
rename from tests/http-evader-303/README.md
rename to tests/http-evader/http-evader-303/README.md

diff --git a/tests/http-evader-303/input.pcap b/tests/http-evader/http-evader-303/input.pcap
similarity index 100%
rename from tests/http-evader-303/input.pcap
rename to tests/http-evader/http-evader-303/input.pcap

diff --git a/tests/http-evader-303/test.rules b/tests/http-evader/http-evader-303/test.rules
similarity index 100%
rename from tests/http-evader-303/test.rules
rename to tests/http-evader/http-evader-303/test.rules

diff --git a/tests/http-evader-303/test.yaml b/tests/http-evader/http-evader-303/test.yaml
similarity index 100%
rename from tests/http-evader-303/test.yaml
rename to tests/http-evader/http-evader-303/test.yaml

diff --git a/tests/http-evader-304/README.md b/tests/http-evader/http-evader-304/README.md
similarity index 100%
rename from tests/http-evader-304/README.md
rename to tests/http-evader/http-evader-304/README.md

diff --git a/tests/http-evader-304/input.pcap b/tests/http-evader/http-evader-304/input.pcap
similarity index 100%
rename from tests/http-evader-304/input.pcap
rename to tests/http-evader/http-evader-304/input.pcap

diff --git a/tests/http-evader-304/test.rules b/tests/http-evader/http-evader-304/test.rules
similarity index 100%
rename from tests/http-evader-304/test.rules
rename to tests/http-evader/http-evader-304/test.rules

diff --git a/tests/http-evader-304/test.yaml b/tests/http-evader/http-evader-304/test.yaml
similarity index 100%
rename from tests/http-evader-304/test.yaml
rename to tests/http-evader/http-evader-304/test.yaml

diff --git a/tests/http-evader-305/README.md b/tests/http-evader/http-evader-305/README.md
similarity index 100%
rename from tests/http-evader-305/README.md
rename to tests/http-evader/http-evader-305/README.md

diff --git a/tests/http-evader-305/input.pcap b/tests/http-evader/http-evader-305/input.pcap
similarity index 100%
rename from tests/http-evader-305/input.pcap
rename to tests/http-evader/http-evader-305/input.pcap

diff --git a/tests/http-evader-305/test.rules b/tests/http-evader/http-evader-305/test.rules
similarity index 100%
rename from tests/http-evader-305/test.rules
rename to tests/http-evader/http-evader-305/test.rules

diff --git a/tests/http-evader-305/test.yaml b/tests/http-evader/http-evader-305/test.yaml
similarity index 100%
rename from tests/http-evader-305/test.yaml
rename to tests/http-evader/http-evader-305/test.yaml

diff --git a/tests/http-evader-306/README.md b/tests/http-evader/http-evader-306/README.md
similarity index 100%
rename from tests/http-evader-306/README.md
rename to tests/http-evader/http-evader-306/README.md

diff --git a/tests/http-evader-306/input.pcap b/tests/http-evader/http-evader-306/input.pcap
similarity index 100%
rename from tests/http-evader-306/input.pcap
rename to tests/http-evader/http-evader-306/input.pcap

diff --git a/tests/http-evader-306/test.rules b/tests/http-evader/http-evader-306/test.rules
similarity index 100%
rename from tests/http-evader-306/test.rules
rename to tests/http-evader/http-evader-306/test.rules

diff --git a/tests/http-evader-306/test.yaml b/tests/http-evader/http-evader-306/test.yaml
similarity index 100%
rename from tests/http-evader-306/test.yaml
rename to tests/http-evader/http-evader-306/test.yaml

diff --git a/tests/http-evader-307/README.md b/tests/http-evader/http-evader-307/README.md
similarity index 100%
rename from tests/http-evader-307/README.md
rename to tests/http-evader/http-evader-307/README.md

diff --git a/tests/http-evader-307/input.pcap b/tests/http-evader/http-evader-307/input.pcap
similarity index 100%
rename from tests/http-evader-307/input.pcap
rename to tests/http-evader/http-evader-307/input.pcap

diff --git a/tests/http-evader-307/test.rules b/tests/http-evader/http-evader-307/test.rules
similarity index 100%
rename from tests/http-evader-307/test.rules
rename to tests/http-evader/http-evader-307/test.rules

diff --git a/tests/http-evader-307/test.yaml b/tests/http-evader/http-evader-307/test.yaml
similarity index 100%
rename from tests/http-evader-307/test.yaml
rename to tests/http-evader/http-evader-307/test.yaml

diff --git a/tests/http-evader-308/README.md b/tests/http-evader/http-evader-308/README.md
similarity index 100%
rename from tests/http-evader-308/README.md
rename to tests/http-evader/http-evader-308/README.md

diff --git a/tests/http-evader-308/input.pcap b/tests/http-evader/http-evader-308/input.pcap
similarity index 100%
rename from tests/http-evader-308/input.pcap
rename to tests/http-evader/http-evader-308/input.pcap

diff --git a/tests/http-evader-308/test.rules b/tests/http-evader/http-evader-308/test.rules
similarity index 100%
rename from tests/http-evader-308/test.rules
rename to tests/http-evader/http-evader-308/test.rules

diff --git a/tests/http-evader-308/test.yaml b/tests/http-evader/http-evader-308/test.yaml
similarity index 100%
rename from tests/http-evader-308/test.yaml
rename to tests/http-evader/http-evader-308/test.yaml

diff --git a/tests/http-evader-309/README.md b/tests/http-evader/http-evader-309/README.md
similarity index 100%
rename from tests/http-evader-309/README.md
rename to tests/http-evader/http-evader-309/README.md

diff --git a/tests/http-evader-309/input.pcap b/tests/http-evader/http-evader-309/input.pcap
similarity index 100%
rename from tests/http-evader-309/input.pcap
rename to tests/http-evader/http-evader-309/input.pcap

diff --git a/tests/http-evader-309/test.rules b/tests/http-evader/http-evader-309/test.rules
similarity index 100%
rename from tests/http-evader-309/test.rules
rename to tests/http-evader/http-evader-309/test.rules

diff --git a/tests/http-evader-309/test.yaml b/tests/http-evader/http-evader-309/test.yaml
similarity index 100%
rename from tests/http-evader-309/test.yaml
rename to tests/http-evader/http-evader-309/test.yaml

diff --git a/tests/http-evader-310/README.md b/tests/http-evader/http-evader-310/README.md
similarity index 100%
rename from tests/http-evader-310/README.md
rename to tests/http-evader/http-evader-310/README.md

diff --git a/tests/http-evader-310/input.pcap b/tests/http-evader/http-evader-310/input.pcap
similarity index 100%
rename from tests/http-evader-310/input.pcap
rename to tests/http-evader/http-evader-310/input.pcap

diff --git a/tests/http-evader-310/test.rules b/tests/http-evader/http-evader-310/test.rules
similarity index 100%
rename from tests/http-evader-310/test.rules
rename to tests/http-evader/http-evader-310/test.rules

diff --git a/tests/http-evader-310/test.yaml b/tests/http-evader/http-evader-310/test.yaml
similarity index 100%
rename from tests/http-evader-310/test.yaml
rename to tests/http-evader/http-evader-310/test.yaml

diff --git a/tests/http-evader-311/README.md b/tests/http-evader/http-evader-311/README.md
similarity index 100%
rename from tests/http-evader-311/README.md
rename to tests/http-evader/http-evader-311/README.md

diff --git a/tests/http-evader-311/input.pcap b/tests/http-evader/http-evader-311/input.pcap
similarity index 100%
rename from tests/http-evader-311/input.pcap
rename to tests/http-evader/http-evader-311/input.pcap

diff --git a/tests/http-evader-311/test.rules b/tests/http-evader/http-evader-311/test.rules
similarity index 100%
rename from tests/http-evader-311/test.rules
rename to tests/http-evader/http-evader-311/test.rules

diff --git a/tests/http-evader-311/test.yaml b/tests/http-evader/http-evader-311/test.yaml
similarity index 100%
rename from tests/http-evader-311/test.yaml
rename to tests/http-evader/http-evader-311/test.yaml

diff --git a/tests/http-evader-312/README.md b/tests/http-evader/http-evader-312/README.md
similarity index 100%
rename from tests/http-evader-312/README.md
rename to tests/http-evader/http-evader-312/README.md

diff --git a/tests/http-evader-312/input.pcap b/tests/http-evader/http-evader-312/input.pcap
similarity index 100%
rename from tests/http-evader-312/input.pcap
rename to tests/http-evader/http-evader-312/input.pcap

diff --git a/tests/http-evader-312/test.rules b/tests/http-evader/http-evader-312/test.rules
similarity index 100%
rename from tests/http-evader-312/test.rules
rename to tests/http-evader/http-evader-312/test.rules

diff --git a/tests/http-evader-312/test.yaml b/tests/http-evader/http-evader-312/test.yaml
similarity index 100%
rename from tests/http-evader-312/test.yaml
rename to tests/http-evader/http-evader-312/test.yaml

diff --git a/tests/http-evader-313/README.md b/tests/http-evader/http-evader-313/README.md
similarity index 100%
rename from tests/http-evader-313/README.md
rename to tests/http-evader/http-evader-313/README.md

diff --git a/tests/http-evader-313/input.pcap b/tests/http-evader/http-evader-313/input.pcap
similarity index 100%
rename from tests/http-evader-313/input.pcap
rename to tests/http-evader/http-evader-313/input.pcap

diff --git a/tests/http-evader-313/test.rules b/tests/http-evader/http-evader-313/test.rules
similarity index 100%
rename from tests/http-evader-313/test.rules
rename to tests/http-evader/http-evader-313/test.rules

diff --git a/tests/http-evader-313/test.yaml b/tests/http-evader/http-evader-313/test.yaml
similarity index 100%
rename from tests/http-evader-313/test.yaml
rename to tests/http-evader/http-evader-313/test.yaml

diff --git a/tests/http-evader-314/README.md b/tests/http-evader/http-evader-314/README.md
similarity index 100%
rename from tests/http-evader-314/README.md
rename to tests/http-evader/http-evader-314/README.md

diff --git a/tests/http-evader-314/input.pcap b/tests/http-evader/http-evader-314/input.pcap
similarity index 100%
rename from tests/http-evader-314/input.pcap
rename to tests/http-evader/http-evader-314/input.pcap

diff --git a/tests/http-evader-314/test.rules b/tests/http-evader/http-evader-314/test.rules
similarity index 100%
rename from tests/http-evader-314/test.rules
rename to tests/http-evader/http-evader-314/test.rules

diff --git a/tests/http-evader-314/test.yaml b/tests/http-evader/http-evader-314/test.yaml
similarity index 100%
rename from tests/http-evader-314/test.yaml
rename to tests/http-evader/http-evader-314/test.yaml

diff --git a/tests/http-evader-315/README.md b/tests/http-evader/http-evader-315/README.md
similarity index 100%
rename from tests/http-evader-315/README.md
rename to tests/http-evader/http-evader-315/README.md

diff --git a/tests/http-evader-315/input.pcap b/tests/http-evader/http-evader-315/input.pcap
similarity index 100%
rename from tests/http-evader-315/input.pcap
rename to tests/http-evader/http-evader-315/input.pcap

diff --git a/tests/http-evader-315/test.rules b/tests/http-evader/http-evader-315/test.rules
similarity index 100%
rename from tests/http-evader-315/test.rules
rename to tests/http-evader/http-evader-315/test.rules

diff --git a/tests/http-evader-315/test.yaml b/tests/http-evader/http-evader-315/test.yaml
similarity index 100%
rename from tests/http-evader-315/test.yaml
rename to tests/http-evader/http-evader-315/test.yaml

diff --git a/tests/http-evader-316/README.md b/tests/http-evader/http-evader-316/README.md
similarity index 100%
rename from tests/http-evader-316/README.md
rename to tests/http-evader/http-evader-316/README.md

diff --git a/tests/http-evader-316/input.pcap b/tests/http-evader/http-evader-316/input.pcap
similarity index 100%
rename from tests/http-evader-316/input.pcap
rename to tests/http-evader/http-evader-316/input.pcap

diff --git a/tests/http-evader-316/test.rules b/tests/http-evader/http-evader-316/test.rules
similarity index 100%
rename from tests/http-evader-316/test.rules
rename to tests/http-evader/http-evader-316/test.rules

diff --git a/tests/http-evader-316/test.yaml b/tests/http-evader/http-evader-316/test.yaml
similarity index 100%
rename from tests/http-evader-316/test.yaml
rename to tests/http-evader/http-evader-316/test.yaml

diff --git a/tests/http-evader-317/README.md b/tests/http-evader/http-evader-317/README.md
similarity index 100%
rename from tests/http-evader-317/README.md
rename to tests/http-evader/http-evader-317/README.md

diff --git a/tests/http-evader-317/input.pcap b/tests/http-evader/http-evader-317/input.pcap
similarity index 100%
rename from tests/http-evader-317/input.pcap
rename to tests/http-evader/http-evader-317/input.pcap

diff --git a/tests/http-evader-317/test.rules b/tests/http-evader/http-evader-317/test.rules
similarity index 100%
rename from tests/http-evader-317/test.rules
rename to tests/http-evader/http-evader-317/test.rules

diff --git a/tests/http-evader-317/test.yaml b/tests/http-evader/http-evader-317/test.yaml
similarity index 100%
rename from tests/http-evader-317/test.yaml
rename to tests/http-evader/http-evader-317/test.yaml

diff --git a/tests/http-evader-318/README.md b/tests/http-evader/http-evader-318/README.md
similarity index 100%
rename from tests/http-evader-318/README.md
rename to tests/http-evader/http-evader-318/README.md

diff --git a/tests/http-evader-318/input.pcap b/tests/http-evader/http-evader-318/input.pcap
similarity index 100%
rename from tests/http-evader-318/input.pcap
rename to tests/http-evader/http-evader-318/input.pcap

diff --git a/tests/http-evader-318/test.rules b/tests/http-evader/http-evader-318/test.rules
similarity index 100%
rename from tests/http-evader-318/test.rules
rename to tests/http-evader/http-evader-318/test.rules

diff --git a/tests/http-evader-318/test.yaml b/tests/http-evader/http-evader-318/test.yaml
similarity index 100%
rename from tests/http-evader-318/test.yaml
rename to tests/http-evader/http-evader-318/test.yaml

diff --git a/tests/http-evader-319/README.md b/tests/http-evader/http-evader-319/README.md
similarity index 100%
rename from tests/http-evader-319/README.md
rename to tests/http-evader/http-evader-319/README.md

diff --git a/tests/http-evader-319/input.pcap b/tests/http-evader/http-evader-319/input.pcap
similarity index 100%
rename from tests/http-evader-319/input.pcap
rename to tests/http-evader/http-evader-319/input.pcap

diff --git a/tests/http-evader-319/test.rules b/tests/http-evader/http-evader-319/test.rules
similarity index 100%
rename from tests/http-evader-319/test.rules
rename to tests/http-evader/http-evader-319/test.rules

diff --git a/tests/http-evader-319/test.yaml b/tests/http-evader/http-evader-319/test.yaml
similarity index 100%
rename from tests/http-evader-319/test.yaml
rename to tests/http-evader/http-evader-319/test.yaml

diff --git a/tests/http-evader-320/README.md b/tests/http-evader/http-evader-320/README.md
similarity index 100%
rename from tests/http-evader-320/README.md
rename to tests/http-evader/http-evader-320/README.md

diff --git a/tests/http-evader-320/input.pcap b/tests/http-evader/http-evader-320/input.pcap
similarity index 100%
rename from tests/http-evader-320/input.pcap
rename to tests/http-evader/http-evader-320/input.pcap

diff --git a/tests/http-evader-320/test.rules b/tests/http-evader/http-evader-320/test.rules
similarity index 100%
rename from tests/http-evader-320/test.rules
rename to tests/http-evader/http-evader-320/test.rules

diff --git a/tests/http-evader-320/test.yaml b/tests/http-evader/http-evader-320/test.yaml
similarity index 100%
rename from tests/http-evader-320/test.yaml
rename to tests/http-evader/http-evader-320/test.yaml

diff --git a/tests/http-evader-321/README.md b/tests/http-evader/http-evader-321/README.md
similarity index 100%
rename from tests/http-evader-321/README.md
rename to tests/http-evader/http-evader-321/README.md

diff --git a/tests/http-evader-321/input.pcap b/tests/http-evader/http-evader-321/input.pcap
similarity index 100%
rename from tests/http-evader-321/input.pcap
rename to tests/http-evader/http-evader-321/input.pcap

diff --git a/tests/http-evader-321/test.rules b/tests/http-evader/http-evader-321/test.rules
similarity index 100%
rename from tests/http-evader-321/test.rules
rename to tests/http-evader/http-evader-321/test.rules

diff --git a/tests/http-evader-321/test.yaml b/tests/http-evader/http-evader-321/test.yaml
similarity index 100%
rename from tests/http-evader-321/test.yaml
rename to tests/http-evader/http-evader-321/test.yaml

diff --git a/tests/http-evader-322/README.md b/tests/http-evader/http-evader-322/README.md
similarity index 100%
rename from tests/http-evader-322/README.md
rename to tests/http-evader/http-evader-322/README.md

diff --git a/tests/http-evader-322/input.pcap b/tests/http-evader/http-evader-322/input.pcap
similarity index 100%
rename from tests/http-evader-322/input.pcap
rename to tests/http-evader/http-evader-322/input.pcap

diff --git a/tests/http-evader-322/test.rules b/tests/http-evader/http-evader-322/test.rules
similarity index 100%
rename from tests/http-evader-322/test.rules
rename to tests/http-evader/http-evader-322/test.rules

diff --git a/tests/http-evader-322/test.yaml b/tests/http-evader/http-evader-322/test.yaml
similarity index 100%
rename from tests/http-evader-322/test.yaml
rename to tests/http-evader/http-evader-322/test.yaml

diff --git a/tests/http-evader-323/README.md b/tests/http-evader/http-evader-323/README.md
similarity index 100%
rename from tests/http-evader-323/README.md
rename to tests/http-evader/http-evader-323/README.md

diff --git a/tests/http-evader-323/input.pcap b/tests/http-evader/http-evader-323/input.pcap
similarity index 100%
rename from tests/http-evader-323/input.pcap
rename to tests/http-evader/http-evader-323/input.pcap

diff --git a/tests/http-evader-323/test.rules b/tests/http-evader/http-evader-323/test.rules
similarity index 100%
rename from tests/http-evader-323/test.rules
rename to tests/http-evader/http-evader-323/test.rules

diff --git a/tests/http-evader-323/test.yaml b/tests/http-evader/http-evader-323/test.yaml
similarity index 100%
rename from tests/http-evader-323/test.yaml
rename to tests/http-evader/http-evader-323/test.yaml

diff --git a/tests/http-evader-324/README.md b/tests/http-evader/http-evader-324/README.md
similarity index 100%
rename from tests/http-evader-324/README.md
rename to tests/http-evader/http-evader-324/README.md

diff --git a/tests/http-evader-324/input.pcap b/tests/http-evader/http-evader-324/input.pcap
similarity index 100%
rename from tests/http-evader-324/input.pcap
rename to tests/http-evader/http-evader-324/input.pcap

diff --git a/tests/http-evader-324/test.rules b/tests/http-evader/http-evader-324/test.rules
similarity index 100%
rename from tests/http-evader-324/test.rules
rename to tests/http-evader/http-evader-324/test.rules

diff --git a/tests/http-evader-324/test.yaml b/tests/http-evader/http-evader-324/test.yaml
similarity index 100%
rename from tests/http-evader-324/test.yaml
rename to tests/http-evader/http-evader-324/test.yaml

diff --git a/tests/http-evader-325/README.md b/tests/http-evader/http-evader-325/README.md
similarity index 100%
rename from tests/http-evader-325/README.md
rename to tests/http-evader/http-evader-325/README.md

diff --git a/tests/http-evader-325/input.pcap b/tests/http-evader/http-evader-325/input.pcap
similarity index 100%
rename from tests/http-evader-325/input.pcap
rename to tests/http-evader/http-evader-325/input.pcap

diff --git a/tests/http-evader-325/test.rules b/tests/http-evader/http-evader-325/test.rules
similarity index 100%
rename from tests/http-evader-325/test.rules
rename to tests/http-evader/http-evader-325/test.rules

diff --git a/tests/http-evader-325/test.yaml b/tests/http-evader/http-evader-325/test.yaml
similarity index 100%
rename from tests/http-evader-325/test.yaml
rename to tests/http-evader/http-evader-325/test.yaml

diff --git a/tests/http-evader-326/README.md b/tests/http-evader/http-evader-326/README.md
similarity index 100%
rename from tests/http-evader-326/README.md
rename to tests/http-evader/http-evader-326/README.md

diff --git a/tests/http-evader-326/input.pcap b/tests/http-evader/http-evader-326/input.pcap
similarity index 100%
rename from tests/http-evader-326/input.pcap
rename to tests/http-evader/http-evader-326/input.pcap

diff --git a/tests/http-evader-326/test.rules b/tests/http-evader/http-evader-326/test.rules
similarity index 100%
rename from tests/http-evader-326/test.rules
rename to tests/http-evader/http-evader-326/test.rules

diff --git a/tests/http-evader-326/test.yaml b/tests/http-evader/http-evader-326/test.yaml
similarity index 100%
rename from tests/http-evader-326/test.yaml
rename to tests/http-evader/http-evader-326/test.yaml

diff --git a/tests/http-evader-327/README.md b/tests/http-evader/http-evader-327/README.md
similarity index 100%
rename from tests/http-evader-327/README.md
rename to tests/http-evader/http-evader-327/README.md

diff --git a/tests/http-evader-327/input.pcap b/tests/http-evader/http-evader-327/input.pcap
similarity index 100%
rename from tests/http-evader-327/input.pcap
rename to tests/http-evader/http-evader-327/input.pcap

diff --git a/tests/http-evader-327/test.rules b/tests/http-evader/http-evader-327/test.rules
similarity index 100%
rename from tests/http-evader-327/test.rules
rename to tests/http-evader/http-evader-327/test.rules

diff --git a/tests/http-evader-327/test.yaml b/tests/http-evader/http-evader-327/test.yaml
similarity index 100%
rename from tests/http-evader-327/test.yaml
rename to tests/http-evader/http-evader-327/test.yaml

diff --git a/tests/http-evader-328/README.md b/tests/http-evader/http-evader-328/README.md
similarity index 100%
rename from tests/http-evader-328/README.md
rename to tests/http-evader/http-evader-328/README.md

diff --git a/tests/http-evader-328/input.pcap b/tests/http-evader/http-evader-328/input.pcap
similarity index 100%
rename from tests/http-evader-328/input.pcap
rename to tests/http-evader/http-evader-328/input.pcap

diff --git a/tests/http-evader-328/test.rules b/tests/http-evader/http-evader-328/test.rules
similarity index 100%
rename from tests/http-evader-328/test.rules
rename to tests/http-evader/http-evader-328/test.rules

diff --git a/tests/http-evader-328/test.yaml b/tests/http-evader/http-evader-328/test.yaml
similarity index 100%
rename from tests/http-evader-328/test.yaml
rename to tests/http-evader/http-evader-328/test.yaml

diff --git a/tests/http-evader-329/README.md b/tests/http-evader/http-evader-329/README.md
similarity index 100%
rename from tests/http-evader-329/README.md
rename to tests/http-evader/http-evader-329/README.md

diff --git a/tests/http-evader-329/input.pcap b/tests/http-evader/http-evader-329/input.pcap
similarity index 100%
rename from tests/http-evader-329/input.pcap
rename to tests/http-evader/http-evader-329/input.pcap

diff --git a/tests/http-evader-329/test.rules b/tests/http-evader/http-evader-329/test.rules
similarity index 100%
rename from tests/http-evader-329/test.rules
rename to tests/http-evader/http-evader-329/test.rules

diff --git a/tests/http-evader-329/test.yaml b/tests/http-evader/http-evader-329/test.yaml
similarity index 100%
rename from tests/http-evader-329/test.yaml
rename to tests/http-evader/http-evader-329/test.yaml

diff --git a/tests/http-evader-330/README.md b/tests/http-evader/http-evader-330/README.md
similarity index 100%
rename from tests/http-evader-330/README.md
rename to tests/http-evader/http-evader-330/README.md

diff --git a/tests/http-evader-330/input.pcap b/tests/http-evader/http-evader-330/input.pcap
similarity index 100%
rename from tests/http-evader-330/input.pcap
rename to tests/http-evader/http-evader-330/input.pcap

diff --git a/tests/http-evader-330/test.rules b/tests/http-evader/http-evader-330/test.rules
similarity index 100%
rename from tests/http-evader-330/test.rules
rename to tests/http-evader/http-evader-330/test.rules

diff --git a/tests/http-evader-330/test.yaml b/tests/http-evader/http-evader-330/test.yaml
similarity index 100%
rename from tests/http-evader-330/test.yaml
rename to tests/http-evader/http-evader-330/test.yaml

diff --git a/tests/http-evader-331/README.md b/tests/http-evader/http-evader-331/README.md
similarity index 100%
rename from tests/http-evader-331/README.md
rename to tests/http-evader/http-evader-331/README.md

diff --git a/tests/http-evader-331/input.pcap b/tests/http-evader/http-evader-331/input.pcap
similarity index 100%
rename from tests/http-evader-331/input.pcap
rename to tests/http-evader/http-evader-331/input.pcap

diff --git a/tests/http-evader-331/test.rules b/tests/http-evader/http-evader-331/test.rules
similarity index 100%
rename from tests/http-evader-331/test.rules
rename to tests/http-evader/http-evader-331/test.rules

diff --git a/tests/http-evader-331/test.yaml b/tests/http-evader/http-evader-331/test.yaml
similarity index 100%
rename from tests/http-evader-331/test.yaml
rename to tests/http-evader/http-evader-331/test.yaml

diff --git a/tests/http-evader-332/README.md b/tests/http-evader/http-evader-332/README.md
similarity index 100%
rename from tests/http-evader-332/README.md
rename to tests/http-evader/http-evader-332/README.md

diff --git a/tests/http-evader-332/input.pcap b/tests/http-evader/http-evader-332/input.pcap
similarity index 100%
rename from tests/http-evader-332/input.pcap
rename to tests/http-evader/http-evader-332/input.pcap

diff --git a/tests/http-evader-332/test.rules b/tests/http-evader/http-evader-332/test.rules
similarity index 100%
rename from tests/http-evader-332/test.rules
rename to tests/http-evader/http-evader-332/test.rules

diff --git a/tests/http-evader-332/test.yaml b/tests/http-evader/http-evader-332/test.yaml
similarity index 100%
rename from tests/http-evader-332/test.yaml
rename to tests/http-evader/http-evader-332/test.yaml

diff --git a/tests/http-evader-333/README.md b/tests/http-evader/http-evader-333/README.md
similarity index 100%
rename from tests/http-evader-333/README.md
rename to tests/http-evader/http-evader-333/README.md

diff --git a/tests/http-evader-333/input.pcap b/tests/http-evader/http-evader-333/input.pcap
similarity index 100%
rename from tests/http-evader-333/input.pcap
rename to tests/http-evader/http-evader-333/input.pcap

diff --git a/tests/http-evader-333/test.rules b/tests/http-evader/http-evader-333/test.rules
similarity index 100%
rename from tests/http-evader-333/test.rules
rename to tests/http-evader/http-evader-333/test.rules

diff --git a/tests/http-evader-333/test.yaml b/tests/http-evader/http-evader-333/test.yaml
similarity index 100%
rename from tests/http-evader-333/test.yaml
rename to tests/http-evader/http-evader-333/test.yaml

diff --git a/tests/http-evader-334/README.md b/tests/http-evader/http-evader-334/README.md
similarity index 100%
rename from tests/http-evader-334/README.md
rename to tests/http-evader/http-evader-334/README.md

diff --git a/tests/http-evader-334/input.pcap b/tests/http-evader/http-evader-334/input.pcap
similarity index 100%
rename from tests/http-evader-334/input.pcap
rename to tests/http-evader/http-evader-334/input.pcap

diff --git a/tests/http-evader-334/test.rules b/tests/http-evader/http-evader-334/test.rules
similarity index 100%
rename from tests/http-evader-334/test.rules
rename to tests/http-evader/http-evader-334/test.rules

diff --git a/tests/http-evader-334/test.yaml b/tests/http-evader/http-evader-334/test.yaml
similarity index 100%
rename from tests/http-evader-334/test.yaml
rename to tests/http-evader/http-evader-334/test.yaml

diff --git a/tests/http-evader-335/README.md b/tests/http-evader/http-evader-335/README.md
similarity index 100%
rename from tests/http-evader-335/README.md
rename to tests/http-evader/http-evader-335/README.md

diff --git a/tests/http-evader-335/input.pcap b/tests/http-evader/http-evader-335/input.pcap
similarity index 100%
rename from tests/http-evader-335/input.pcap
rename to tests/http-evader/http-evader-335/input.pcap

diff --git a/tests/http-evader-335/test.rules b/tests/http-evader/http-evader-335/test.rules
similarity index 100%
rename from tests/http-evader-335/test.rules
rename to tests/http-evader/http-evader-335/test.rules

diff --git a/tests/http-evader-335/test.yaml b/tests/http-evader/http-evader-335/test.yaml
similarity index 100%
rename from tests/http-evader-335/test.yaml
rename to tests/http-evader/http-evader-335/test.yaml

diff --git a/tests/http-evader-336/README.md b/tests/http-evader/http-evader-336/README.md
similarity index 100%
rename from tests/http-evader-336/README.md
rename to tests/http-evader/http-evader-336/README.md

diff --git a/tests/http-evader-336/input.pcap b/tests/http-evader/http-evader-336/input.pcap
similarity index 100%
rename from tests/http-evader-336/input.pcap
rename to tests/http-evader/http-evader-336/input.pcap

diff --git a/tests/http-evader-336/test.rules b/tests/http-evader/http-evader-336/test.rules
similarity index 100%
rename from tests/http-evader-336/test.rules
rename to tests/http-evader/http-evader-336/test.rules

diff --git a/tests/http-evader-336/test.yaml b/tests/http-evader/http-evader-336/test.yaml
similarity index 100%
rename from tests/http-evader-336/test.yaml
rename to tests/http-evader/http-evader-336/test.yaml

diff --git a/tests/http-evader-337/README.md b/tests/http-evader/http-evader-337/README.md
similarity index 100%
rename from tests/http-evader-337/README.md
rename to tests/http-evader/http-evader-337/README.md

diff --git a/tests/http-evader-337/input.pcap b/tests/http-evader/http-evader-337/input.pcap
similarity index 100%
rename from tests/http-evader-337/input.pcap
rename to tests/http-evader/http-evader-337/input.pcap

diff --git a/tests/http-evader-337/test.rules b/tests/http-evader/http-evader-337/test.rules
similarity index 100%
rename from tests/http-evader-337/test.rules
rename to tests/http-evader/http-evader-337/test.rules

diff --git a/tests/http-evader-337/test.yaml b/tests/http-evader/http-evader-337/test.yaml
similarity index 100%
rename from tests/http-evader-337/test.yaml
rename to tests/http-evader/http-evader-337/test.yaml

diff --git a/tests/http-evader-338/README.md b/tests/http-evader/http-evader-338/README.md
similarity index 100%
rename from tests/http-evader-338/README.md
rename to tests/http-evader/http-evader-338/README.md

diff --git a/tests/http-evader-338/input.pcap b/tests/http-evader/http-evader-338/input.pcap
similarity index 100%
rename from tests/http-evader-338/input.pcap
rename to tests/http-evader/http-evader-338/input.pcap

diff --git a/tests/http-evader-338/test.rules b/tests/http-evader/http-evader-338/test.rules
similarity index 100%
rename from tests/http-evader-338/test.rules
rename to tests/http-evader/http-evader-338/test.rules

diff --git a/tests/http-evader-338/test.yaml b/tests/http-evader/http-evader-338/test.yaml
similarity index 100%
rename from tests/http-evader-338/test.yaml
rename to tests/http-evader/http-evader-338/test.yaml

diff --git a/tests/http-evader-339/README.md b/tests/http-evader/http-evader-339/README.md
similarity index 100%
rename from tests/http-evader-339/README.md
rename to tests/http-evader/http-evader-339/README.md

diff --git a/tests/http-evader-339/input.pcap b/tests/http-evader/http-evader-339/input.pcap
similarity index 100%
rename from tests/http-evader-339/input.pcap
rename to tests/http-evader/http-evader-339/input.pcap

diff --git a/tests/http-evader-339/test.rules b/tests/http-evader/http-evader-339/test.rules
similarity index 100%
rename from tests/http-evader-339/test.rules
rename to tests/http-evader/http-evader-339/test.rules

diff --git a/tests/http-evader-339/test.yaml b/tests/http-evader/http-evader-339/test.yaml
similarity index 100%
rename from tests/http-evader-339/test.yaml
rename to tests/http-evader/http-evader-339/test.yaml

diff --git a/tests/http-evader-340/README.md b/tests/http-evader/http-evader-340/README.md
similarity index 100%
rename from tests/http-evader-340/README.md
rename to tests/http-evader/http-evader-340/README.md

diff --git a/tests/http-evader-340/input.pcap b/tests/http-evader/http-evader-340/input.pcap
similarity index 100%
rename from tests/http-evader-340/input.pcap
rename to tests/http-evader/http-evader-340/input.pcap

diff --git a/tests/http-evader-340/test.rules b/tests/http-evader/http-evader-340/test.rules
similarity index 100%
rename from tests/http-evader-340/test.rules
rename to tests/http-evader/http-evader-340/test.rules

diff --git a/tests/http-evader-340/test.yaml b/tests/http-evader/http-evader-340/test.yaml
similarity index 100%
rename from tests/http-evader-340/test.yaml
rename to tests/http-evader/http-evader-340/test.yaml

diff --git a/tests/http-evader-341/README.md b/tests/http-evader/http-evader-341/README.md
similarity index 100%
rename from tests/http-evader-341/README.md
rename to tests/http-evader/http-evader-341/README.md

diff --git a/tests/http-evader-341/input.pcap b/tests/http-evader/http-evader-341/input.pcap
similarity index 100%
rename from tests/http-evader-341/input.pcap
rename to tests/http-evader/http-evader-341/input.pcap

diff --git a/tests/http-evader-341/test.rules b/tests/http-evader/http-evader-341/test.rules
similarity index 100%
rename from tests/http-evader-341/test.rules
rename to tests/http-evader/http-evader-341/test.rules

diff --git a/tests/http-evader-341/test.yaml b/tests/http-evader/http-evader-341/test.yaml
similarity index 100%
rename from tests/http-evader-341/test.yaml
rename to tests/http-evader/http-evader-341/test.yaml

diff --git a/tests/http-evader-342/README.md b/tests/http-evader/http-evader-342/README.md
similarity index 100%
rename from tests/http-evader-342/README.md
rename to tests/http-evader/http-evader-342/README.md

diff --git a/tests/http-evader-342/input.pcap b/tests/http-evader/http-evader-342/input.pcap
similarity index 100%
rename from tests/http-evader-342/input.pcap
rename to tests/http-evader/http-evader-342/input.pcap

diff --git a/tests/http-evader-342/test.rules b/tests/http-evader/http-evader-342/test.rules
similarity index 100%
rename from tests/http-evader-342/test.rules
rename to tests/http-evader/http-evader-342/test.rules

diff --git a/tests/http-evader-342/test.yaml b/tests/http-evader/http-evader-342/test.yaml
similarity index 100%
rename from tests/http-evader-342/test.yaml
rename to tests/http-evader/http-evader-342/test.yaml

diff --git a/tests/http-evader-343/README.md b/tests/http-evader/http-evader-343/README.md
similarity index 100%
rename from tests/http-evader-343/README.md
rename to tests/http-evader/http-evader-343/README.md

diff --git a/tests/http-evader-343/input.pcap b/tests/http-evader/http-evader-343/input.pcap
similarity index 100%
rename from tests/http-evader-343/input.pcap
rename to tests/http-evader/http-evader-343/input.pcap

diff --git a/tests/http-evader-343/test.rules b/tests/http-evader/http-evader-343/test.rules
similarity index 100%
rename from tests/http-evader-343/test.rules
rename to tests/http-evader/http-evader-343/test.rules

diff --git a/tests/http-evader-343/test.yaml b/tests/http-evader/http-evader-343/test.yaml
similarity index 100%
rename from tests/http-evader-343/test.yaml
rename to tests/http-evader/http-evader-343/test.yaml

diff --git a/tests/http-evader-344/README.md b/tests/http-evader/http-evader-344/README.md
similarity index 100%
rename from tests/http-evader-344/README.md
rename to tests/http-evader/http-evader-344/README.md

diff --git a/tests/http-evader-344/input.pcap b/tests/http-evader/http-evader-344/input.pcap
similarity index 100%
rename from tests/http-evader-344/input.pcap
rename to tests/http-evader/http-evader-344/input.pcap

diff --git a/tests/http-evader-344/test.rules b/tests/http-evader/http-evader-344/test.rules
similarity index 100%
rename from tests/http-evader-344/test.rules
rename to tests/http-evader/http-evader-344/test.rules

diff --git a/tests/http-evader-344/test.yaml b/tests/http-evader/http-evader-344/test.yaml
similarity index 100%
rename from tests/http-evader-344/test.yaml
rename to tests/http-evader/http-evader-344/test.yaml

diff --git a/tests/http-evader-345/README.md b/tests/http-evader/http-evader-345/README.md
similarity index 100%
rename from tests/http-evader-345/README.md
rename to tests/http-evader/http-evader-345/README.md

diff --git a/tests/http-evader-345/input.pcap b/tests/http-evader/http-evader-345/input.pcap
similarity index 100%
rename from tests/http-evader-345/input.pcap
rename to tests/http-evader/http-evader-345/input.pcap

diff --git a/tests/http-evader-345/test.rules b/tests/http-evader/http-evader-345/test.rules
similarity index 100%
rename from tests/http-evader-345/test.rules
rename to tests/http-evader/http-evader-345/test.rules

diff --git a/tests/http-evader-345/test.yaml b/tests/http-evader/http-evader-345/test.yaml
similarity index 100%
rename from tests/http-evader-345/test.yaml
rename to tests/http-evader/http-evader-345/test.yaml

diff --git a/tests/http-evader-346/README.md b/tests/http-evader/http-evader-346/README.md
similarity index 100%
rename from tests/http-evader-346/README.md
rename to tests/http-evader/http-evader-346/README.md

diff --git a/tests/http-evader-346/input.pcap b/tests/http-evader/http-evader-346/input.pcap
similarity index 100%
rename from tests/http-evader-346/input.pcap
rename to tests/http-evader/http-evader-346/input.pcap

diff --git a/tests/http-evader-346/test.rules b/tests/http-evader/http-evader-346/test.rules
similarity index 100%
rename from tests/http-evader-346/test.rules
rename to tests/http-evader/http-evader-346/test.rules

diff --git a/tests/http-evader-346/test.yaml b/tests/http-evader/http-evader-346/test.yaml
similarity index 100%
rename from tests/http-evader-346/test.yaml
rename to tests/http-evader/http-evader-346/test.yaml

diff --git a/tests/http-evader-347/README.md b/tests/http-evader/http-evader-347/README.md
similarity index 100%
rename from tests/http-evader-347/README.md
rename to tests/http-evader/http-evader-347/README.md

diff --git a/tests/http-evader-347/input.pcap b/tests/http-evader/http-evader-347/input.pcap
similarity index 100%
rename from tests/http-evader-347/input.pcap
rename to tests/http-evader/http-evader-347/input.pcap

diff --git a/tests/http-evader-347/test.rules b/tests/http-evader/http-evader-347/test.rules
similarity index 100%
rename from tests/http-evader-347/test.rules
rename to tests/http-evader/http-evader-347/test.rules

diff --git a/tests/http-evader-347/test.yaml b/tests/http-evader/http-evader-347/test.yaml
similarity index 100%
rename from tests/http-evader-347/test.yaml
rename to tests/http-evader/http-evader-347/test.yaml

diff --git a/tests/http-evader-348/README.md b/tests/http-evader/http-evader-348/README.md
similarity index 100%
rename from tests/http-evader-348/README.md
rename to tests/http-evader/http-evader-348/README.md

diff --git a/tests/http-evader-348/input.pcap b/tests/http-evader/http-evader-348/input.pcap
similarity index 100%
rename from tests/http-evader-348/input.pcap
rename to tests/http-evader/http-evader-348/input.pcap

diff --git a/tests/http-evader-348/test.rules b/tests/http-evader/http-evader-348/test.rules
similarity index 100%
rename from tests/http-evader-348/test.rules
rename to tests/http-evader/http-evader-348/test.rules

diff --git a/tests/http-evader-348/test.yaml b/tests/http-evader/http-evader-348/test.yaml
similarity index 100%
rename from tests/http-evader-348/test.yaml
rename to tests/http-evader/http-evader-348/test.yaml

diff --git a/tests/http-evader-349/README.md b/tests/http-evader/http-evader-349/README.md
similarity index 100%
rename from tests/http-evader-349/README.md
rename to tests/http-evader/http-evader-349/README.md

diff --git a/tests/http-evader-349/input.pcap b/tests/http-evader/http-evader-349/input.pcap
similarity index 100%
rename from tests/http-evader-349/input.pcap
rename to tests/http-evader/http-evader-349/input.pcap

diff --git a/tests/http-evader-349/test.rules b/tests/http-evader/http-evader-349/test.rules
similarity index 100%
rename from tests/http-evader-349/test.rules
rename to tests/http-evader/http-evader-349/test.rules

diff --git a/tests/http-evader-349/test.yaml b/tests/http-evader/http-evader-349/test.yaml
similarity index 100%
rename from tests/http-evader-349/test.yaml
rename to tests/http-evader/http-evader-349/test.yaml

diff --git a/tests/http-evader-350/README.md b/tests/http-evader/http-evader-350/README.md
similarity index 100%
rename from tests/http-evader-350/README.md
rename to tests/http-evader/http-evader-350/README.md

diff --git a/tests/http-evader-350/input.pcap b/tests/http-evader/http-evader-350/input.pcap
similarity index 100%
rename from tests/http-evader-350/input.pcap
rename to tests/http-evader/http-evader-350/input.pcap

diff --git a/tests/http-evader-350/test.rules b/tests/http-evader/http-evader-350/test.rules
similarity index 100%
rename from tests/http-evader-350/test.rules
rename to tests/http-evader/http-evader-350/test.rules

diff --git a/tests/http-evader-350/test.yaml b/tests/http-evader/http-evader-350/test.yaml
similarity index 100%
rename from tests/http-evader-350/test.yaml
rename to tests/http-evader/http-evader-350/test.yaml

diff --git a/tests/http-evader-351/README.md b/tests/http-evader/http-evader-351/README.md
similarity index 100%
rename from tests/http-evader-351/README.md
rename to tests/http-evader/http-evader-351/README.md

diff --git a/tests/http-evader-351/input.pcap b/tests/http-evader/http-evader-351/input.pcap
similarity index 100%
rename from tests/http-evader-351/input.pcap
rename to tests/http-evader/http-evader-351/input.pcap

diff --git a/tests/http-evader-351/test.rules b/tests/http-evader/http-evader-351/test.rules
similarity index 100%
rename from tests/http-evader-351/test.rules
rename to tests/http-evader/http-evader-351/test.rules

diff --git a/tests/http-evader-351/test.yaml b/tests/http-evader/http-evader-351/test.yaml
similarity index 100%
rename from tests/http-evader-351/test.yaml
rename to tests/http-evader/http-evader-351/test.yaml

diff --git a/tests/http-evader-352/README.md b/tests/http-evader/http-evader-352/README.md
similarity index 100%
rename from tests/http-evader-352/README.md
rename to tests/http-evader/http-evader-352/README.md

diff --git a/tests/http-evader-352/input.pcap b/tests/http-evader/http-evader-352/input.pcap
similarity index 100%
rename from tests/http-evader-352/input.pcap
rename to tests/http-evader/http-evader-352/input.pcap

diff --git a/tests/http-evader-352/test.rules b/tests/http-evader/http-evader-352/test.rules
similarity index 100%
rename from tests/http-evader-352/test.rules
rename to tests/http-evader/http-evader-352/test.rules

diff --git a/tests/http-evader-352/test.yaml b/tests/http-evader/http-evader-352/test.yaml
similarity index 100%
rename from tests/http-evader-352/test.yaml
rename to tests/http-evader/http-evader-352/test.yaml

diff --git a/tests/http-evader-353/README.md b/tests/http-evader/http-evader-353/README.md
similarity index 100%
rename from tests/http-evader-353/README.md
rename to tests/http-evader/http-evader-353/README.md

diff --git a/tests/http-evader-353/input.pcap b/tests/http-evader/http-evader-353/input.pcap
similarity index 100%
rename from tests/http-evader-353/input.pcap
rename to tests/http-evader/http-evader-353/input.pcap

diff --git a/tests/http-evader-353/test.rules b/tests/http-evader/http-evader-353/test.rules
similarity index 100%
rename from tests/http-evader-353/test.rules
rename to tests/http-evader/http-evader-353/test.rules

diff --git a/tests/http-evader-353/test.yaml b/tests/http-evader/http-evader-353/test.yaml
similarity index 100%
rename from tests/http-evader-353/test.yaml
rename to tests/http-evader/http-evader-353/test.yaml

diff --git a/tests/http-evader-354/README.md b/tests/http-evader/http-evader-354/README.md
similarity index 100%
rename from tests/http-evader-354/README.md
rename to tests/http-evader/http-evader-354/README.md

diff --git a/tests/http-evader-354/input.pcap b/tests/http-evader/http-evader-354/input.pcap
similarity index 100%
rename from tests/http-evader-354/input.pcap
rename to tests/http-evader/http-evader-354/input.pcap

diff --git a/tests/http-evader-354/test.rules b/tests/http-evader/http-evader-354/test.rules
similarity index 100%
rename from tests/http-evader-354/test.rules
rename to tests/http-evader/http-evader-354/test.rules

diff --git a/tests/http-evader-354/test.yaml b/tests/http-evader/http-evader-354/test.yaml
similarity index 100%
rename from tests/http-evader-354/test.yaml
rename to tests/http-evader/http-evader-354/test.yaml

diff --git a/tests/http-evader-355/README.md b/tests/http-evader/http-evader-355/README.md
similarity index 100%
rename from tests/http-evader-355/README.md
rename to tests/http-evader/http-evader-355/README.md

diff --git a/tests/http-evader-355/input.pcap b/tests/http-evader/http-evader-355/input.pcap
similarity index 100%
rename from tests/http-evader-355/input.pcap
rename to tests/http-evader/http-evader-355/input.pcap

diff --git a/tests/http-evader-355/test.rules b/tests/http-evader/http-evader-355/test.rules
similarity index 100%
rename from tests/http-evader-355/test.rules
rename to tests/http-evader/http-evader-355/test.rules

diff --git a/tests/http-evader-355/test.yaml b/tests/http-evader/http-evader-355/test.yaml
similarity index 100%
rename from tests/http-evader-355/test.yaml
rename to tests/http-evader/http-evader-355/test.yaml

diff --git a/tests/http-evader-356/README.md b/tests/http-evader/http-evader-356/README.md
similarity index 100%
rename from tests/http-evader-356/README.md
rename to tests/http-evader/http-evader-356/README.md

diff --git a/tests/http-evader-356/input.pcap b/tests/http-evader/http-evader-356/input.pcap
similarity index 100%
rename from tests/http-evader-356/input.pcap
rename to tests/http-evader/http-evader-356/input.pcap

diff --git a/tests/http-evader-356/test.rules b/tests/http-evader/http-evader-356/test.rules
similarity index 100%
rename from tests/http-evader-356/test.rules
rename to tests/http-evader/http-evader-356/test.rules

diff --git a/tests/http-evader-356/test.yaml b/tests/http-evader/http-evader-356/test.yaml
similarity index 100%
rename from tests/http-evader-356/test.yaml
rename to tests/http-evader/http-evader-356/test.yaml

diff --git a/tests/http-evader-357/README.md b/tests/http-evader/http-evader-357/README.md
similarity index 100%
rename from tests/http-evader-357/README.md
rename to tests/http-evader/http-evader-357/README.md

diff --git a/tests/http-evader-357/input.pcap b/tests/http-evader/http-evader-357/input.pcap
similarity index 100%
rename from tests/http-evader-357/input.pcap
rename to tests/http-evader/http-evader-357/input.pcap

diff --git a/tests/http-evader-357/test.rules b/tests/http-evader/http-evader-357/test.rules
similarity index 100%
rename from tests/http-evader-357/test.rules
rename to tests/http-evader/http-evader-357/test.rules

diff --git a/tests/http-evader-357/test.yaml b/tests/http-evader/http-evader-357/test.yaml
similarity index 100%
rename from tests/http-evader-357/test.yaml
rename to tests/http-evader/http-evader-357/test.yaml

diff --git a/tests/http-evader-358/README.md b/tests/http-evader/http-evader-358/README.md
similarity index 100%
rename from tests/http-evader-358/README.md
rename to tests/http-evader/http-evader-358/README.md

diff --git a/tests/http-evader-358/input.pcap b/tests/http-evader/http-evader-358/input.pcap
similarity index 100%
rename from tests/http-evader-358/input.pcap
rename to tests/http-evader/http-evader-358/input.pcap

diff --git a/tests/http-evader-358/test.rules b/tests/http-evader/http-evader-358/test.rules
similarity index 100%
rename from tests/http-evader-358/test.rules
rename to tests/http-evader/http-evader-358/test.rules

diff --git a/tests/http-evader-358/test.yaml b/tests/http-evader/http-evader-358/test.yaml
similarity index 100%
rename from tests/http-evader-358/test.yaml
rename to tests/http-evader/http-evader-358/test.yaml

diff --git a/tests/http-evader-359/README.md b/tests/http-evader/http-evader-359/README.md
similarity index 100%
rename from tests/http-evader-359/README.md
rename to tests/http-evader/http-evader-359/README.md

diff --git a/tests/http-evader-359/input.pcap b/tests/http-evader/http-evader-359/input.pcap
similarity index 100%
rename from tests/http-evader-359/input.pcap
rename to tests/http-evader/http-evader-359/input.pcap

diff --git a/tests/http-evader-359/test.rules b/tests/http-evader/http-evader-359/test.rules
similarity index 100%
rename from tests/http-evader-359/test.rules
rename to tests/http-evader/http-evader-359/test.rules

diff --git a/tests/http-evader-359/test.yaml b/tests/http-evader/http-evader-359/test.yaml
similarity index 100%
rename from tests/http-evader-359/test.yaml
rename to tests/http-evader/http-evader-359/test.yaml

diff --git a/tests/http-evader-360/README.md b/tests/http-evader/http-evader-360/README.md
similarity index 100%
rename from tests/http-evader-360/README.md
rename to tests/http-evader/http-evader-360/README.md

diff --git a/tests/http-evader-360/input.pcap b/tests/http-evader/http-evader-360/input.pcap
similarity index 100%
rename from tests/http-evader-360/input.pcap
rename to tests/http-evader/http-evader-360/input.pcap

diff --git a/tests/http-evader-360/test.rules b/tests/http-evader/http-evader-360/test.rules
similarity index 100%
rename from tests/http-evader-360/test.rules
rename to tests/http-evader/http-evader-360/test.rules

diff --git a/tests/http-evader-360/test.yaml b/tests/http-evader/http-evader-360/test.yaml
similarity index 100%
rename from tests/http-evader-360/test.yaml
rename to tests/http-evader/http-evader-360/test.yaml

diff --git a/tests/http-evader-361/README.md b/tests/http-evader/http-evader-361/README.md
similarity index 100%
rename from tests/http-evader-361/README.md
rename to tests/http-evader/http-evader-361/README.md

diff --git a/tests/http-evader-361/input.pcap b/tests/http-evader/http-evader-361/input.pcap
similarity index 100%
rename from tests/http-evader-361/input.pcap
rename to tests/http-evader/http-evader-361/input.pcap

diff --git a/tests/http-evader-361/test.rules b/tests/http-evader/http-evader-361/test.rules
similarity index 100%
rename from tests/http-evader-361/test.rules
rename to tests/http-evader/http-evader-361/test.rules

diff --git a/tests/http-evader-361/test.yaml b/tests/http-evader/http-evader-361/test.yaml
similarity index 100%
rename from tests/http-evader-361/test.yaml
rename to tests/http-evader/http-evader-361/test.yaml

diff --git a/tests/http-evader-362/README.md b/tests/http-evader/http-evader-362/README.md
similarity index 100%
rename from tests/http-evader-362/README.md
rename to tests/http-evader/http-evader-362/README.md

diff --git a/tests/http-evader-362/input.pcap b/tests/http-evader/http-evader-362/input.pcap
similarity index 100%
rename from tests/http-evader-362/input.pcap
rename to tests/http-evader/http-evader-362/input.pcap

diff --git a/tests/http-evader-362/test.rules b/tests/http-evader/http-evader-362/test.rules
similarity index 100%
rename from tests/http-evader-362/test.rules
rename to tests/http-evader/http-evader-362/test.rules

diff --git a/tests/http-evader-362/test.yaml b/tests/http-evader/http-evader-362/test.yaml
similarity index 100%
rename from tests/http-evader-362/test.yaml
rename to tests/http-evader/http-evader-362/test.yaml

diff --git a/tests/http-evader-363/README.md b/tests/http-evader/http-evader-363/README.md
similarity index 100%
rename from tests/http-evader-363/README.md
rename to tests/http-evader/http-evader-363/README.md

diff --git a/tests/http-evader-363/input.pcap b/tests/http-evader/http-evader-363/input.pcap
similarity index 100%
rename from tests/http-evader-363/input.pcap
rename to tests/http-evader/http-evader-363/input.pcap

diff --git a/tests/http-evader-363/test.rules b/tests/http-evader/http-evader-363/test.rules
similarity index 100%
rename from tests/http-evader-363/test.rules
rename to tests/http-evader/http-evader-363/test.rules

diff --git a/tests/http-evader-363/test.yaml b/tests/http-evader/http-evader-363/test.yaml
similarity index 100%
rename from tests/http-evader-363/test.yaml
rename to tests/http-evader/http-evader-363/test.yaml

diff --git a/tests/http-evader-364/README.md b/tests/http-evader/http-evader-364/README.md
similarity index 100%
rename from tests/http-evader-364/README.md
rename to tests/http-evader/http-evader-364/README.md

diff --git a/tests/http-evader-364/input.pcap b/tests/http-evader/http-evader-364/input.pcap
similarity index 100%
rename from tests/http-evader-364/input.pcap
rename to tests/http-evader/http-evader-364/input.pcap

diff --git a/tests/http-evader-364/test.rules b/tests/http-evader/http-evader-364/test.rules
similarity index 100%
rename from tests/http-evader-364/test.rules
rename to tests/http-evader/http-evader-364/test.rules

diff --git a/tests/http-evader-364/test.yaml b/tests/http-evader/http-evader-364/test.yaml
similarity index 100%
rename from tests/http-evader-364/test.yaml
rename to tests/http-evader/http-evader-364/test.yaml

diff --git a/tests/http-evader-365/README.md b/tests/http-evader/http-evader-365/README.md
similarity index 100%
rename from tests/http-evader-365/README.md
rename to tests/http-evader/http-evader-365/README.md

diff --git a/tests/http-evader-365/input.pcap b/tests/http-evader/http-evader-365/input.pcap
similarity index 100%
rename from tests/http-evader-365/input.pcap
rename to tests/http-evader/http-evader-365/input.pcap

diff --git a/tests/http-evader-365/test.rules b/tests/http-evader/http-evader-365/test.rules
similarity index 100%
rename from tests/http-evader-365/test.rules
rename to tests/http-evader/http-evader-365/test.rules

diff --git a/tests/http-evader-365/test.yaml b/tests/http-evader/http-evader-365/test.yaml
similarity index 100%
rename from tests/http-evader-365/test.yaml
rename to tests/http-evader/http-evader-365/test.yaml

diff --git a/tests/http-evader-366/README.md b/tests/http-evader/http-evader-366/README.md
similarity index 100%
rename from tests/http-evader-366/README.md
rename to tests/http-evader/http-evader-366/README.md

diff --git a/tests/http-evader-366/input.pcap b/tests/http-evader/http-evader-366/input.pcap
similarity index 100%
rename from tests/http-evader-366/input.pcap
rename to tests/http-evader/http-evader-366/input.pcap

diff --git a/tests/http-evader-366/test.rules b/tests/http-evader/http-evader-366/test.rules
similarity index 100%
rename from tests/http-evader-366/test.rules
rename to tests/http-evader/http-evader-366/test.rules

diff --git a/tests/http-evader-366/test.yaml b/tests/http-evader/http-evader-366/test.yaml
similarity index 100%
rename from tests/http-evader-366/test.yaml
rename to tests/http-evader/http-evader-366/test.yaml

diff --git a/tests/http-evader-367/README.md b/tests/http-evader/http-evader-367/README.md
similarity index 100%
rename from tests/http-evader-367/README.md
rename to tests/http-evader/http-evader-367/README.md

diff --git a/tests/http-evader-367/input.pcap b/tests/http-evader/http-evader-367/input.pcap
similarity index 100%
rename from tests/http-evader-367/input.pcap
rename to tests/http-evader/http-evader-367/input.pcap

diff --git a/tests/http-evader-367/test.rules b/tests/http-evader/http-evader-367/test.rules
similarity index 100%
rename from tests/http-evader-367/test.rules
rename to tests/http-evader/http-evader-367/test.rules

diff --git a/tests/http-evader-367/test.yaml b/tests/http-evader/http-evader-367/test.yaml
similarity index 100%
rename from tests/http-evader-367/test.yaml
rename to tests/http-evader/http-evader-367/test.yaml

diff --git a/tests/http-evader-368/README.md b/tests/http-evader/http-evader-368/README.md
similarity index 100%
rename from tests/http-evader-368/README.md
rename to tests/http-evader/http-evader-368/README.md

diff --git a/tests/http-evader-368/input.pcap b/tests/http-evader/http-evader-368/input.pcap
similarity index 100%
rename from tests/http-evader-368/input.pcap
rename to tests/http-evader/http-evader-368/input.pcap

diff --git a/tests/http-evader-368/test.rules b/tests/http-evader/http-evader-368/test.rules
similarity index 100%
rename from tests/http-evader-368/test.rules
rename to tests/http-evader/http-evader-368/test.rules

diff --git a/tests/http-evader-368/test.yaml b/tests/http-evader/http-evader-368/test.yaml
similarity index 100%
rename from tests/http-evader-368/test.yaml
rename to tests/http-evader/http-evader-368/test.yaml

diff --git a/tests/http-evader-369/README.md b/tests/http-evader/http-evader-369/README.md
similarity index 100%
rename from tests/http-evader-369/README.md
rename to tests/http-evader/http-evader-369/README.md

diff --git a/tests/http-evader-369/input.pcap b/tests/http-evader/http-evader-369/input.pcap
similarity index 100%
rename from tests/http-evader-369/input.pcap
rename to tests/http-evader/http-evader-369/input.pcap

diff --git a/tests/http-evader-369/test.rules b/tests/http-evader/http-evader-369/test.rules
similarity index 100%
rename from tests/http-evader-369/test.rules
rename to tests/http-evader/http-evader-369/test.rules

diff --git a/tests/http-evader-369/test.yaml b/tests/http-evader/http-evader-369/test.yaml
similarity index 100%
rename from tests/http-evader-369/test.yaml
rename to tests/http-evader/http-evader-369/test.yaml

diff --git a/tests/http-evader-370/README.md b/tests/http-evader/http-evader-370/README.md
similarity index 100%
rename from tests/http-evader-370/README.md
rename to tests/http-evader/http-evader-370/README.md

diff --git a/tests/http-evader-370/input.pcap b/tests/http-evader/http-evader-370/input.pcap
similarity index 100%
rename from tests/http-evader-370/input.pcap
rename to tests/http-evader/http-evader-370/input.pcap

diff --git a/tests/http-evader-370/test.rules b/tests/http-evader/http-evader-370/test.rules
similarity index 100%
rename from tests/http-evader-370/test.rules
rename to tests/http-evader/http-evader-370/test.rules

diff --git a/tests/http-evader-370/test.yaml b/tests/http-evader/http-evader-370/test.yaml
similarity index 100%
rename from tests/http-evader-370/test.yaml
rename to tests/http-evader/http-evader-370/test.yaml

diff --git a/tests/http-evader-371/README.md b/tests/http-evader/http-evader-371/README.md
similarity index 100%
rename from tests/http-evader-371/README.md
rename to tests/http-evader/http-evader-371/README.md

diff --git a/tests/http-evader-371/input.pcap b/tests/http-evader/http-evader-371/input.pcap
similarity index 100%
rename from tests/http-evader-371/input.pcap
rename to tests/http-evader/http-evader-371/input.pcap

diff --git a/tests/http-evader-371/test.rules b/tests/http-evader/http-evader-371/test.rules
similarity index 100%
rename from tests/http-evader-371/test.rules
rename to tests/http-evader/http-evader-371/test.rules

diff --git a/tests/http-evader-371/test.yaml b/tests/http-evader/http-evader-371/test.yaml
similarity index 100%
rename from tests/http-evader-371/test.yaml
rename to tests/http-evader/http-evader-371/test.yaml

diff --git a/tests/http-evader-372/README.md b/tests/http-evader/http-evader-372/README.md
similarity index 100%
rename from tests/http-evader-372/README.md
rename to tests/http-evader/http-evader-372/README.md

diff --git a/tests/http-evader-372/input.pcap b/tests/http-evader/http-evader-372/input.pcap
similarity index 100%
rename from tests/http-evader-372/input.pcap
rename to tests/http-evader/http-evader-372/input.pcap

diff --git a/tests/http-evader-372/test.rules b/tests/http-evader/http-evader-372/test.rules
similarity index 100%
rename from tests/http-evader-372/test.rules
rename to tests/http-evader/http-evader-372/test.rules

diff --git a/tests/http-evader-372/test.yaml b/tests/http-evader/http-evader-372/test.yaml
similarity index 100%
rename from tests/http-evader-372/test.yaml
rename to tests/http-evader/http-evader-372/test.yaml

diff --git a/tests/http-evader-373/README.md b/tests/http-evader/http-evader-373/README.md
similarity index 100%
rename from tests/http-evader-373/README.md
rename to tests/http-evader/http-evader-373/README.md

diff --git a/tests/http-evader-373/input.pcap b/tests/http-evader/http-evader-373/input.pcap
similarity index 100%
rename from tests/http-evader-373/input.pcap
rename to tests/http-evader/http-evader-373/input.pcap

diff --git a/tests/http-evader-373/test.rules b/tests/http-evader/http-evader-373/test.rules
similarity index 100%
rename from tests/http-evader-373/test.rules
rename to tests/http-evader/http-evader-373/test.rules

diff --git a/tests/http-evader-373/test.yaml b/tests/http-evader/http-evader-373/test.yaml
similarity index 100%
rename from tests/http-evader-373/test.yaml
rename to tests/http-evader/http-evader-373/test.yaml

diff --git a/tests/http-evader-374/README.md b/tests/http-evader/http-evader-374/README.md
similarity index 100%
rename from tests/http-evader-374/README.md
rename to tests/http-evader/http-evader-374/README.md

diff --git a/tests/http-evader-374/input.pcap b/tests/http-evader/http-evader-374/input.pcap
similarity index 100%
rename from tests/http-evader-374/input.pcap
rename to tests/http-evader/http-evader-374/input.pcap

diff --git a/tests/http-evader-374/test.rules b/tests/http-evader/http-evader-374/test.rules
similarity index 100%
rename from tests/http-evader-374/test.rules
rename to tests/http-evader/http-evader-374/test.rules

diff --git a/tests/http-evader-374/test.yaml b/tests/http-evader/http-evader-374/test.yaml
similarity index 100%
rename from tests/http-evader-374/test.yaml
rename to tests/http-evader/http-evader-374/test.yaml

diff --git a/tests/http-evader-375/README.md b/tests/http-evader/http-evader-375/README.md
similarity index 100%
rename from tests/http-evader-375/README.md
rename to tests/http-evader/http-evader-375/README.md

diff --git a/tests/http-evader-375/input.pcap b/tests/http-evader/http-evader-375/input.pcap
similarity index 100%
rename from tests/http-evader-375/input.pcap
rename to tests/http-evader/http-evader-375/input.pcap

diff --git a/tests/http-evader-375/test.rules b/tests/http-evader/http-evader-375/test.rules
similarity index 100%
rename from tests/http-evader-375/test.rules
rename to tests/http-evader/http-evader-375/test.rules

diff --git a/tests/http-evader-375/test.yaml b/tests/http-evader/http-evader-375/test.yaml
similarity index 100%
rename from tests/http-evader-375/test.yaml
rename to tests/http-evader/http-evader-375/test.yaml

diff --git a/tests/http-evader-376/README.md b/tests/http-evader/http-evader-376/README.md
similarity index 100%
rename from tests/http-evader-376/README.md
rename to tests/http-evader/http-evader-376/README.md

diff --git a/tests/http-evader-376/input.pcap b/tests/http-evader/http-evader-376/input.pcap
similarity index 100%
rename from tests/http-evader-376/input.pcap
rename to tests/http-evader/http-evader-376/input.pcap

diff --git a/tests/http-evader-376/test.rules b/tests/http-evader/http-evader-376/test.rules
similarity index 100%
rename from tests/http-evader-376/test.rules
rename to tests/http-evader/http-evader-376/test.rules

diff --git a/tests/http-evader-376/test.yaml b/tests/http-evader/http-evader-376/test.yaml
similarity index 100%
rename from tests/http-evader-376/test.yaml
rename to tests/http-evader/http-evader-376/test.yaml

diff --git a/tests/http-evader-377/README.md b/tests/http-evader/http-evader-377/README.md
similarity index 100%
rename from tests/http-evader-377/README.md
rename to tests/http-evader/http-evader-377/README.md

diff --git a/tests/http-evader-377/input.pcap b/tests/http-evader/http-evader-377/input.pcap
similarity index 100%
rename from tests/http-evader-377/input.pcap
rename to tests/http-evader/http-evader-377/input.pcap

diff --git a/tests/http-evader-377/test.rules b/tests/http-evader/http-evader-377/test.rules
similarity index 100%
rename from tests/http-evader-377/test.rules
rename to tests/http-evader/http-evader-377/test.rules

diff --git a/tests/http-evader-377/test.yaml b/tests/http-evader/http-evader-377/test.yaml
similarity index 100%
rename from tests/http-evader-377/test.yaml
rename to tests/http-evader/http-evader-377/test.yaml

diff --git a/tests/http-evader-378/README.md b/tests/http-evader/http-evader-378/README.md
similarity index 100%
rename from tests/http-evader-378/README.md
rename to tests/http-evader/http-evader-378/README.md

diff --git a/tests/http-evader-378/input.pcap b/tests/http-evader/http-evader-378/input.pcap
similarity index 100%
rename from tests/http-evader-378/input.pcap
rename to tests/http-evader/http-evader-378/input.pcap

diff --git a/tests/http-evader-378/test.rules b/tests/http-evader/http-evader-378/test.rules
similarity index 100%
rename from tests/http-evader-378/test.rules
rename to tests/http-evader/http-evader-378/test.rules

diff --git a/tests/http-evader-378/test.yaml b/tests/http-evader/http-evader-378/test.yaml
similarity index 100%
rename from tests/http-evader-378/test.yaml
rename to tests/http-evader/http-evader-378/test.yaml

diff --git a/tests/http-evader-379/README.md b/tests/http-evader/http-evader-379/README.md
similarity index 100%
rename from tests/http-evader-379/README.md
rename to tests/http-evader/http-evader-379/README.md

diff --git a/tests/http-evader-379/input.pcap b/tests/http-evader/http-evader-379/input.pcap
similarity index 100%
rename from tests/http-evader-379/input.pcap
rename to tests/http-evader/http-evader-379/input.pcap

diff --git a/tests/http-evader-379/test.rules b/tests/http-evader/http-evader-379/test.rules
similarity index 100%
rename from tests/http-evader-379/test.rules
rename to tests/http-evader/http-evader-379/test.rules

diff --git a/tests/http-evader-379/test.yaml b/tests/http-evader/http-evader-379/test.yaml
similarity index 100%
rename from tests/http-evader-379/test.yaml
rename to tests/http-evader/http-evader-379/test.yaml

diff --git a/tests/http-evader-380/README.md b/tests/http-evader/http-evader-380/README.md
similarity index 100%
rename from tests/http-evader-380/README.md
rename to tests/http-evader/http-evader-380/README.md

diff --git a/tests/http-evader-380/input.pcap b/tests/http-evader/http-evader-380/input.pcap
similarity index 100%
rename from tests/http-evader-380/input.pcap
rename to tests/http-evader/http-evader-380/input.pcap

diff --git a/tests/http-evader-380/test.rules b/tests/http-evader/http-evader-380/test.rules
similarity index 100%
rename from tests/http-evader-380/test.rules
rename to tests/http-evader/http-evader-380/test.rules

diff --git a/tests/http-evader-380/test.yaml b/tests/http-evader/http-evader-380/test.yaml
similarity index 100%
rename from tests/http-evader-380/test.yaml
rename to tests/http-evader/http-evader-380/test.yaml

diff --git a/tests/http-evader-381/README.md b/tests/http-evader/http-evader-381/README.md
similarity index 100%
rename from tests/http-evader-381/README.md
rename to tests/http-evader/http-evader-381/README.md

diff --git a/tests/http-evader-381/input.pcap b/tests/http-evader/http-evader-381/input.pcap
similarity index 100%
rename from tests/http-evader-381/input.pcap
rename to tests/http-evader/http-evader-381/input.pcap

diff --git a/tests/http-evader-381/test.rules b/tests/http-evader/http-evader-381/test.rules
similarity index 100%
rename from tests/http-evader-381/test.rules
rename to tests/http-evader/http-evader-381/test.rules

diff --git a/tests/http-evader-381/test.yaml b/tests/http-evader/http-evader-381/test.yaml
similarity index 100%
rename from tests/http-evader-381/test.yaml
rename to tests/http-evader/http-evader-381/test.yaml

diff --git a/tests/http-evader-382/README.md b/tests/http-evader/http-evader-382/README.md
similarity index 100%
rename from tests/http-evader-382/README.md
rename to tests/http-evader/http-evader-382/README.md

diff --git a/tests/http-evader-382/input.pcap b/tests/http-evader/http-evader-382/input.pcap
similarity index 100%
rename from tests/http-evader-382/input.pcap
rename to tests/http-evader/http-evader-382/input.pcap

diff --git a/tests/http-evader-382/test.rules b/tests/http-evader/http-evader-382/test.rules
similarity index 100%
rename from tests/http-evader-382/test.rules
rename to tests/http-evader/http-evader-382/test.rules

diff --git a/tests/http-evader-382/test.yaml b/tests/http-evader/http-evader-382/test.yaml
similarity index 100%
rename from tests/http-evader-382/test.yaml
rename to tests/http-evader/http-evader-382/test.yaml

diff --git a/tests/http-evader-383/README.md b/tests/http-evader/http-evader-383/README.md
similarity index 100%
rename from tests/http-evader-383/README.md
rename to tests/http-evader/http-evader-383/README.md

diff --git a/tests/http-evader-383/input.pcap b/tests/http-evader/http-evader-383/input.pcap
similarity index 100%
rename from tests/http-evader-383/input.pcap
rename to tests/http-evader/http-evader-383/input.pcap

diff --git a/tests/http-evader-383/test.rules b/tests/http-evader/http-evader-383/test.rules
similarity index 100%
rename from tests/http-evader-383/test.rules
rename to tests/http-evader/http-evader-383/test.rules

diff --git a/tests/http-evader-383/test.yaml b/tests/http-evader/http-evader-383/test.yaml
similarity index 100%
rename from tests/http-evader-383/test.yaml
rename to tests/http-evader/http-evader-383/test.yaml

diff --git a/tests/http-evader-384/README.md b/tests/http-evader/http-evader-384/README.md
similarity index 100%
rename from tests/http-evader-384/README.md
rename to tests/http-evader/http-evader-384/README.md

diff --git a/tests/http-evader-384/input.pcap b/tests/http-evader/http-evader-384/input.pcap
similarity index 100%
rename from tests/http-evader-384/input.pcap
rename to tests/http-evader/http-evader-384/input.pcap

diff --git a/tests/http-evader-384/test.rules b/tests/http-evader/http-evader-384/test.rules
similarity index 100%
rename from tests/http-evader-384/test.rules
rename to tests/http-evader/http-evader-384/test.rules

diff --git a/tests/http-evader-384/test.yaml b/tests/http-evader/http-evader-384/test.yaml
similarity index 100%
rename from tests/http-evader-384/test.yaml
rename to tests/http-evader/http-evader-384/test.yaml

diff --git a/tests/http-evader-385/README.md b/tests/http-evader/http-evader-385/README.md
similarity index 100%
rename from tests/http-evader-385/README.md
rename to tests/http-evader/http-evader-385/README.md

diff --git a/tests/http-evader-385/input.pcap b/tests/http-evader/http-evader-385/input.pcap
similarity index 100%
rename from tests/http-evader-385/input.pcap
rename to tests/http-evader/http-evader-385/input.pcap

diff --git a/tests/http-evader-385/test.rules b/tests/http-evader/http-evader-385/test.rules
similarity index 100%
rename from tests/http-evader-385/test.rules
rename to tests/http-evader/http-evader-385/test.rules

diff --git a/tests/http-evader-385/test.yaml b/tests/http-evader/http-evader-385/test.yaml
similarity index 100%
rename from tests/http-evader-385/test.yaml
rename to tests/http-evader/http-evader-385/test.yaml

diff --git a/tests/http-evader-386/README.md b/tests/http-evader/http-evader-386/README.md
similarity index 100%
rename from tests/http-evader-386/README.md
rename to tests/http-evader/http-evader-386/README.md

diff --git a/tests/http-evader-386/input.pcap b/tests/http-evader/http-evader-386/input.pcap
similarity index 100%
rename from tests/http-evader-386/input.pcap
rename to tests/http-evader/http-evader-386/input.pcap

diff --git a/tests/http-evader-386/test.rules b/tests/http-evader/http-evader-386/test.rules
similarity index 100%
rename from tests/http-evader-386/test.rules
rename to tests/http-evader/http-evader-386/test.rules

diff --git a/tests/http-evader-386/test.yaml b/tests/http-evader/http-evader-386/test.yaml
similarity index 100%
rename from tests/http-evader-386/test.yaml
rename to tests/http-evader/http-evader-386/test.yaml

diff --git a/tests/http-evader-387/README.md b/tests/http-evader/http-evader-387/README.md
similarity index 100%
rename from tests/http-evader-387/README.md
rename to tests/http-evader/http-evader-387/README.md

diff --git a/tests/http-evader-387/input.pcap b/tests/http-evader/http-evader-387/input.pcap
similarity index 100%
rename from tests/http-evader-387/input.pcap
rename to tests/http-evader/http-evader-387/input.pcap

diff --git a/tests/http-evader-387/test.rules b/tests/http-evader/http-evader-387/test.rules
similarity index 100%
rename from tests/http-evader-387/test.rules
rename to tests/http-evader/http-evader-387/test.rules

diff --git a/tests/http-evader-387/test.yaml b/tests/http-evader/http-evader-387/test.yaml
similarity index 100%
rename from tests/http-evader-387/test.yaml
rename to tests/http-evader/http-evader-387/test.yaml

diff --git a/tests/http-evader-388/README.md b/tests/http-evader/http-evader-388/README.md
similarity index 100%
rename from tests/http-evader-388/README.md
rename to tests/http-evader/http-evader-388/README.md

diff --git a/tests/http-evader-388/input.pcap b/tests/http-evader/http-evader-388/input.pcap
similarity index 100%
rename from tests/http-evader-388/input.pcap
rename to tests/http-evader/http-evader-388/input.pcap

diff --git a/tests/http-evader-388/test.rules b/tests/http-evader/http-evader-388/test.rules
similarity index 100%
rename from tests/http-evader-388/test.rules
rename to tests/http-evader/http-evader-388/test.rules

diff --git a/tests/http-evader-388/test.yaml b/tests/http-evader/http-evader-388/test.yaml
similarity index 100%
rename from tests/http-evader-388/test.yaml
rename to tests/http-evader/http-evader-388/test.yaml

diff --git a/tests/http-evader-389/README.md b/tests/http-evader/http-evader-389/README.md
similarity index 100%
rename from tests/http-evader-389/README.md
rename to tests/http-evader/http-evader-389/README.md

diff --git a/tests/http-evader-389/input.pcap b/tests/http-evader/http-evader-389/input.pcap
similarity index 100%
rename from tests/http-evader-389/input.pcap
rename to tests/http-evader/http-evader-389/input.pcap

diff --git a/tests/http-evader-389/test.rules b/tests/http-evader/http-evader-389/test.rules
similarity index 100%
rename from tests/http-evader-389/test.rules
rename to tests/http-evader/http-evader-389/test.rules

diff --git a/tests/http-evader-389/test.yaml b/tests/http-evader/http-evader-389/test.yaml
similarity index 100%
rename from tests/http-evader-389/test.yaml
rename to tests/http-evader/http-evader-389/test.yaml

diff --git a/tests/http-evader-390/README.md b/tests/http-evader/http-evader-390/README.md
similarity index 100%
rename from tests/http-evader-390/README.md
rename to tests/http-evader/http-evader-390/README.md

diff --git a/tests/http-evader-390/input.pcap b/tests/http-evader/http-evader-390/input.pcap
similarity index 100%
rename from tests/http-evader-390/input.pcap
rename to tests/http-evader/http-evader-390/input.pcap

diff --git a/tests/http-evader-390/test.rules b/tests/http-evader/http-evader-390/test.rules
similarity index 100%
rename from tests/http-evader-390/test.rules
rename to tests/http-evader/http-evader-390/test.rules

diff --git a/tests/http-evader-390/test.yaml b/tests/http-evader/http-evader-390/test.yaml
similarity index 100%
rename from tests/http-evader-390/test.yaml
rename to tests/http-evader/http-evader-390/test.yaml

diff --git a/tests/http-evader-391/README.md b/tests/http-evader/http-evader-391/README.md
similarity index 100%
rename from tests/http-evader-391/README.md
rename to tests/http-evader/http-evader-391/README.md

diff --git a/tests/http-evader-391/input.pcap b/tests/http-evader/http-evader-391/input.pcap
similarity index 100%
rename from tests/http-evader-391/input.pcap
rename to tests/http-evader/http-evader-391/input.pcap

diff --git a/tests/http-evader-391/test.rules b/tests/http-evader/http-evader-391/test.rules
similarity index 100%
rename from tests/http-evader-391/test.rules
rename to tests/http-evader/http-evader-391/test.rules

diff --git a/tests/http-evader-391/test.yaml b/tests/http-evader/http-evader-391/test.yaml
similarity index 100%
rename from tests/http-evader-391/test.yaml
rename to tests/http-evader/http-evader-391/test.yaml

diff --git a/tests/http-evader-392/README.md b/tests/http-evader/http-evader-392/README.md
similarity index 100%
rename from tests/http-evader-392/README.md
rename to tests/http-evader/http-evader-392/README.md

diff --git a/tests/http-evader-392/input.pcap b/tests/http-evader/http-evader-392/input.pcap
similarity index 100%
rename from tests/http-evader-392/input.pcap
rename to tests/http-evader/http-evader-392/input.pcap

diff --git a/tests/http-evader-392/test.rules b/tests/http-evader/http-evader-392/test.rules
similarity index 100%
rename from tests/http-evader-392/test.rules
rename to tests/http-evader/http-evader-392/test.rules

diff --git a/tests/http-evader-392/test.yaml b/tests/http-evader/http-evader-392/test.yaml
similarity index 100%
rename from tests/http-evader-392/test.yaml
rename to tests/http-evader/http-evader-392/test.yaml

diff --git a/tests/http-evader-393/README.md b/tests/http-evader/http-evader-393/README.md
similarity index 100%
rename from tests/http-evader-393/README.md
rename to tests/http-evader/http-evader-393/README.md

diff --git a/tests/http-evader-393/input.pcap b/tests/http-evader/http-evader-393/input.pcap
similarity index 100%
rename from tests/http-evader-393/input.pcap
rename to tests/http-evader/http-evader-393/input.pcap

diff --git a/tests/http-evader-393/test.rules b/tests/http-evader/http-evader-393/test.rules
similarity index 100%
rename from tests/http-evader-393/test.rules
rename to tests/http-evader/http-evader-393/test.rules

diff --git a/tests/http-evader-393/test.yaml b/tests/http-evader/http-evader-393/test.yaml
similarity index 100%
rename from tests/http-evader-393/test.yaml
rename to tests/http-evader/http-evader-393/test.yaml

diff --git a/tests/http-evader-394/README.md b/tests/http-evader/http-evader-394/README.md
similarity index 100%
rename from tests/http-evader-394/README.md
rename to tests/http-evader/http-evader-394/README.md

diff --git a/tests/http-evader-394/input.pcap b/tests/http-evader/http-evader-394/input.pcap
similarity index 100%
rename from tests/http-evader-394/input.pcap
rename to tests/http-evader/http-evader-394/input.pcap

diff --git a/tests/http-evader-394/test.rules b/tests/http-evader/http-evader-394/test.rules
similarity index 100%
rename from tests/http-evader-394/test.rules
rename to tests/http-evader/http-evader-394/test.rules

diff --git a/tests/http-evader-394/test.yaml b/tests/http-evader/http-evader-394/test.yaml
similarity index 100%
rename from tests/http-evader-394/test.yaml
rename to tests/http-evader/http-evader-394/test.yaml

diff --git a/tests/http-evader-395/README.md b/tests/http-evader/http-evader-395/README.md
similarity index 100%
rename from tests/http-evader-395/README.md
rename to tests/http-evader/http-evader-395/README.md

diff --git a/tests/http-evader-395/input.pcap b/tests/http-evader/http-evader-395/input.pcap
similarity index 100%
rename from tests/http-evader-395/input.pcap
rename to tests/http-evader/http-evader-395/input.pcap

diff --git a/tests/http-evader-395/test.rules b/tests/http-evader/http-evader-395/test.rules
similarity index 100%
rename from tests/http-evader-395/test.rules
rename to tests/http-evader/http-evader-395/test.rules

diff --git a/tests/http-evader-395/test.yaml b/tests/http-evader/http-evader-395/test.yaml
similarity index 100%
rename from tests/http-evader-395/test.yaml
rename to tests/http-evader/http-evader-395/test.yaml

diff --git a/tests/http-evader-396/README.md b/tests/http-evader/http-evader-396/README.md
similarity index 100%
rename from tests/http-evader-396/README.md
rename to tests/http-evader/http-evader-396/README.md

diff --git a/tests/http-evader-396/input.pcap b/tests/http-evader/http-evader-396/input.pcap
similarity index 100%
rename from tests/http-evader-396/input.pcap
rename to tests/http-evader/http-evader-396/input.pcap

diff --git a/tests/http-evader-396/test.rules b/tests/http-evader/http-evader-396/test.rules
similarity index 100%
rename from tests/http-evader-396/test.rules
rename to tests/http-evader/http-evader-396/test.rules

diff --git a/tests/http-evader-396/test.yaml b/tests/http-evader/http-evader-396/test.yaml
similarity index 100%
rename from tests/http-evader-396/test.yaml
rename to tests/http-evader/http-evader-396/test.yaml

diff --git a/tests/http-evader-397/README.md b/tests/http-evader/http-evader-397/README.md
similarity index 100%
rename from tests/http-evader-397/README.md
rename to tests/http-evader/http-evader-397/README.md

diff --git a/tests/http-evader-397/input.pcap b/tests/http-evader/http-evader-397/input.pcap
similarity index 100%
rename from tests/http-evader-397/input.pcap
rename to tests/http-evader/http-evader-397/input.pcap

diff --git a/tests/http-evader-397/test.rules b/tests/http-evader/http-evader-397/test.rules
similarity index 100%
rename from tests/http-evader-397/test.rules
rename to tests/http-evader/http-evader-397/test.rules

diff --git a/tests/http-evader-397/test.yaml b/tests/http-evader/http-evader-397/test.yaml
similarity index 100%
rename from tests/http-evader-397/test.yaml
rename to tests/http-evader/http-evader-397/test.yaml

diff --git a/tests/http-evader-398/README.md b/tests/http-evader/http-evader-398/README.md
similarity index 100%
rename from tests/http-evader-398/README.md
rename to tests/http-evader/http-evader-398/README.md

diff --git a/tests/http-evader-398/input.pcap b/tests/http-evader/http-evader-398/input.pcap
similarity index 100%
rename from tests/http-evader-398/input.pcap
rename to tests/http-evader/http-evader-398/input.pcap

diff --git a/tests/http-evader-398/test.rules b/tests/http-evader/http-evader-398/test.rules
similarity index 100%
rename from tests/http-evader-398/test.rules
rename to tests/http-evader/http-evader-398/test.rules

diff --git a/tests/http-evader-398/test.yaml b/tests/http-evader/http-evader-398/test.yaml
similarity index 100%
rename from tests/http-evader-398/test.yaml
rename to tests/http-evader/http-evader-398/test.yaml

diff --git a/tests/http-evader-399/README.md b/tests/http-evader/http-evader-399/README.md
similarity index 100%
rename from tests/http-evader-399/README.md
rename to tests/http-evader/http-evader-399/README.md

diff --git a/tests/http-evader-399/input.pcap b/tests/http-evader/http-evader-399/input.pcap
similarity index 100%
rename from tests/http-evader-399/input.pcap
rename to tests/http-evader/http-evader-399/input.pcap

diff --git a/tests/http-evader-399/test.rules b/tests/http-evader/http-evader-399/test.rules
similarity index 100%
rename from tests/http-evader-399/test.rules
rename to tests/http-evader/http-evader-399/test.rules

diff --git a/tests/http-evader-399/test.yaml b/tests/http-evader/http-evader-399/test.yaml
similarity index 100%
rename from tests/http-evader-399/test.yaml
rename to tests/http-evader/http-evader-399/test.yaml

diff --git a/tests/http-evader-400/README.md b/tests/http-evader/http-evader-400/README.md
similarity index 100%
rename from tests/http-evader-400/README.md
rename to tests/http-evader/http-evader-400/README.md

diff --git a/tests/http-evader-400/input.pcap b/tests/http-evader/http-evader-400/input.pcap
similarity index 100%
rename from tests/http-evader-400/input.pcap
rename to tests/http-evader/http-evader-400/input.pcap

diff --git a/tests/http-evader-400/test.rules b/tests/http-evader/http-evader-400/test.rules
similarity index 100%
rename from tests/http-evader-400/test.rules
rename to tests/http-evader/http-evader-400/test.rules

diff --git a/tests/http-evader-400/test.yaml b/tests/http-evader/http-evader-400/test.yaml
similarity index 100%
rename from tests/http-evader-400/test.yaml
rename to tests/http-evader/http-evader-400/test.yaml

diff --git a/tests/http-evader-401/README.md b/tests/http-evader/http-evader-401/README.md
similarity index 100%
rename from tests/http-evader-401/README.md
rename to tests/http-evader/http-evader-401/README.md

diff --git a/tests/http-evader-401/input.pcap b/tests/http-evader/http-evader-401/input.pcap
similarity index 100%
rename from tests/http-evader-401/input.pcap
rename to tests/http-evader/http-evader-401/input.pcap

diff --git a/tests/http-evader-401/test.rules b/tests/http-evader/http-evader-401/test.rules
similarity index 100%
rename from tests/http-evader-401/test.rules
rename to tests/http-evader/http-evader-401/test.rules

diff --git a/tests/http-evader-401/test.yaml b/tests/http-evader/http-evader-401/test.yaml
similarity index 100%
rename from tests/http-evader-401/test.yaml
rename to tests/http-evader/http-evader-401/test.yaml

diff --git a/tests/http-evader-402/README.md b/tests/http-evader/http-evader-402/README.md
similarity index 100%
rename from tests/http-evader-402/README.md
rename to tests/http-evader/http-evader-402/README.md

diff --git a/tests/http-evader-402/input.pcap b/tests/http-evader/http-evader-402/input.pcap
similarity index 100%
rename from tests/http-evader-402/input.pcap
rename to tests/http-evader/http-evader-402/input.pcap

diff --git a/tests/http-evader-402/test.rules b/tests/http-evader/http-evader-402/test.rules
similarity index 100%
rename from tests/http-evader-402/test.rules
rename to tests/http-evader/http-evader-402/test.rules

diff --git a/tests/http-evader-402/test.yaml b/tests/http-evader/http-evader-402/test.yaml
similarity index 100%
rename from tests/http-evader-402/test.yaml
rename to tests/http-evader/http-evader-402/test.yaml

diff --git a/tests/http-evader-403/README.md b/tests/http-evader/http-evader-403/README.md
similarity index 100%
rename from tests/http-evader-403/README.md
rename to tests/http-evader/http-evader-403/README.md

diff --git a/tests/http-evader-403/input.pcap b/tests/http-evader/http-evader-403/input.pcap
similarity index 100%
rename from tests/http-evader-403/input.pcap
rename to tests/http-evader/http-evader-403/input.pcap

diff --git a/tests/http-evader-403/test.rules b/tests/http-evader/http-evader-403/test.rules
similarity index 100%
rename from tests/http-evader-403/test.rules
rename to tests/http-evader/http-evader-403/test.rules

diff --git a/tests/http-evader-403/test.yaml b/tests/http-evader/http-evader-403/test.yaml
similarity index 100%
rename from tests/http-evader-403/test.yaml
rename to tests/http-evader/http-evader-403/test.yaml

diff --git a/tests/http-evader-404/README.md b/tests/http-evader/http-evader-404/README.md
similarity index 100%
rename from tests/http-evader-404/README.md
rename to tests/http-evader/http-evader-404/README.md

diff --git a/tests/http-evader-404/input.pcap b/tests/http-evader/http-evader-404/input.pcap
similarity index 100%
rename from tests/http-evader-404/input.pcap
rename to tests/http-evader/http-evader-404/input.pcap

diff --git a/tests/http-evader-404/test.rules b/tests/http-evader/http-evader-404/test.rules
similarity index 100%
rename from tests/http-evader-404/test.rules
rename to tests/http-evader/http-evader-404/test.rules

diff --git a/tests/http-evader-404/test.yaml b/tests/http-evader/http-evader-404/test.yaml
similarity index 100%
rename from tests/http-evader-404/test.yaml
rename to tests/http-evader/http-evader-404/test.yaml

diff --git a/tests/http-evader-405/README.md b/tests/http-evader/http-evader-405/README.md
similarity index 100%
rename from tests/http-evader-405/README.md
rename to tests/http-evader/http-evader-405/README.md

diff --git a/tests/http-evader-405/input.pcap b/tests/http-evader/http-evader-405/input.pcap
similarity index 100%
rename from tests/http-evader-405/input.pcap
rename to tests/http-evader/http-evader-405/input.pcap

diff --git a/tests/http-evader-405/test.rules b/tests/http-evader/http-evader-405/test.rules
similarity index 100%
rename from tests/http-evader-405/test.rules
rename to tests/http-evader/http-evader-405/test.rules

diff --git a/tests/http-evader-405/test.yaml b/tests/http-evader/http-evader-405/test.yaml
similarity index 100%
rename from tests/http-evader-405/test.yaml
rename to tests/http-evader/http-evader-405/test.yaml

diff --git a/tests/http-evader-406/README.md b/tests/http-evader/http-evader-406/README.md
similarity index 100%
rename from tests/http-evader-406/README.md
rename to tests/http-evader/http-evader-406/README.md

diff --git a/tests/http-evader-406/input.pcap b/tests/http-evader/http-evader-406/input.pcap
similarity index 100%
rename from tests/http-evader-406/input.pcap
rename to tests/http-evader/http-evader-406/input.pcap

diff --git a/tests/http-evader-406/test.rules b/tests/http-evader/http-evader-406/test.rules
similarity index 100%
rename from tests/http-evader-406/test.rules
rename to tests/http-evader/http-evader-406/test.rules

diff --git a/tests/http-evader-406/test.yaml b/tests/http-evader/http-evader-406/test.yaml
similarity index 100%
rename from tests/http-evader-406/test.yaml
rename to tests/http-evader/http-evader-406/test.yaml

diff --git a/tests/http-evader-407/README.md b/tests/http-evader/http-evader-407/README.md
similarity index 100%
rename from tests/http-evader-407/README.md
rename to tests/http-evader/http-evader-407/README.md

diff --git a/tests/http-evader-407/input.pcap b/tests/http-evader/http-evader-407/input.pcap
similarity index 100%
rename from tests/http-evader-407/input.pcap
rename to tests/http-evader/http-evader-407/input.pcap

diff --git a/tests/http-evader-407/test.rules b/tests/http-evader/http-evader-407/test.rules
similarity index 100%
rename from tests/http-evader-407/test.rules
rename to tests/http-evader/http-evader-407/test.rules

diff --git a/tests/http-evader-407/test.yaml b/tests/http-evader/http-evader-407/test.yaml
similarity index 100%
rename from tests/http-evader-407/test.yaml
rename to tests/http-evader/http-evader-407/test.yaml

diff --git a/tests/http-evader-408/README.md b/tests/http-evader/http-evader-408/README.md
similarity index 100%
rename from tests/http-evader-408/README.md
rename to tests/http-evader/http-evader-408/README.md

diff --git a/tests/http-evader-408/input.pcap b/tests/http-evader/http-evader-408/input.pcap
similarity index 100%
rename from tests/http-evader-408/input.pcap
rename to tests/http-evader/http-evader-408/input.pcap

diff --git a/tests/http-evader-408/test.rules b/tests/http-evader/http-evader-408/test.rules
similarity index 100%
rename from tests/http-evader-408/test.rules
rename to tests/http-evader/http-evader-408/test.rules

diff --git a/tests/http-evader-408/test.yaml b/tests/http-evader/http-evader-408/test.yaml
similarity index 100%
rename from tests/http-evader-408/test.yaml
rename to tests/http-evader/http-evader-408/test.yaml

diff --git a/tests/http-evader-409/README.md b/tests/http-evader/http-evader-409/README.md
similarity index 100%
rename from tests/http-evader-409/README.md
rename to tests/http-evader/http-evader-409/README.md

diff --git a/tests/http-evader-409/input.pcap b/tests/http-evader/http-evader-409/input.pcap
similarity index 100%
rename from tests/http-evader-409/input.pcap
rename to tests/http-evader/http-evader-409/input.pcap

diff --git a/tests/http-evader-409/test.rules b/tests/http-evader/http-evader-409/test.rules
similarity index 100%
rename from tests/http-evader-409/test.rules
rename to tests/http-evader/http-evader-409/test.rules

diff --git a/tests/http-evader-409/test.yaml b/tests/http-evader/http-evader-409/test.yaml
similarity index 100%
rename from tests/http-evader-409/test.yaml
rename to tests/http-evader/http-evader-409/test.yaml

diff --git a/tests/http-evader-410/README.md b/tests/http-evader/http-evader-410/README.md
similarity index 100%
rename from tests/http-evader-410/README.md
rename to tests/http-evader/http-evader-410/README.md

diff --git a/tests/http-evader-410/input.pcap b/tests/http-evader/http-evader-410/input.pcap
similarity index 100%
rename from tests/http-evader-410/input.pcap
rename to tests/http-evader/http-evader-410/input.pcap

diff --git a/tests/http-evader-410/test.rules b/tests/http-evader/http-evader-410/test.rules
similarity index 100%
rename from tests/http-evader-410/test.rules
rename to tests/http-evader/http-evader-410/test.rules

diff --git a/tests/http-evader-410/test.yaml b/tests/http-evader/http-evader-410/test.yaml
similarity index 100%
rename from tests/http-evader-410/test.yaml
rename to tests/http-evader/http-evader-410/test.yaml

diff --git a/tests/http-evader-411/README.md b/tests/http-evader/http-evader-411/README.md
similarity index 100%
rename from tests/http-evader-411/README.md
rename to tests/http-evader/http-evader-411/README.md

diff --git a/tests/http-evader-411/input.pcap b/tests/http-evader/http-evader-411/input.pcap
similarity index 100%
rename from tests/http-evader-411/input.pcap
rename to tests/http-evader/http-evader-411/input.pcap

diff --git a/tests/http-evader-411/test.rules b/tests/http-evader/http-evader-411/test.rules
similarity index 100%
rename from tests/http-evader-411/test.rules
rename to tests/http-evader/http-evader-411/test.rules

diff --git a/tests/http-evader-411/test.yaml b/tests/http-evader/http-evader-411/test.yaml
similarity index 100%
rename from tests/http-evader-411/test.yaml
rename to tests/http-evader/http-evader-411/test.yaml

diff --git a/tests/http-evader-412/README.md b/tests/http-evader/http-evader-412/README.md
similarity index 100%
rename from tests/http-evader-412/README.md
rename to tests/http-evader/http-evader-412/README.md

diff --git a/tests/http-evader-412/input.pcap b/tests/http-evader/http-evader-412/input.pcap
similarity index 100%
rename from tests/http-evader-412/input.pcap
rename to tests/http-evader/http-evader-412/input.pcap

diff --git a/tests/http-evader-412/test.rules b/tests/http-evader/http-evader-412/test.rules
similarity index 100%
rename from tests/http-evader-412/test.rules
rename to tests/http-evader/http-evader-412/test.rules

diff --git a/tests/http-evader-412/test.yaml b/tests/http-evader/http-evader-412/test.yaml
similarity index 100%
rename from tests/http-evader-412/test.yaml
rename to tests/http-evader/http-evader-412/test.yaml

diff --git a/tests/http-evader-413/README.md b/tests/http-evader/http-evader-413/README.md
similarity index 100%
rename from tests/http-evader-413/README.md
rename to tests/http-evader/http-evader-413/README.md

diff --git a/tests/http-evader-413/input.pcap b/tests/http-evader/http-evader-413/input.pcap
similarity index 100%
rename from tests/http-evader-413/input.pcap
rename to tests/http-evader/http-evader-413/input.pcap

diff --git a/tests/http-evader-413/test.rules b/tests/http-evader/http-evader-413/test.rules
similarity index 100%
rename from tests/http-evader-413/test.rules
rename to tests/http-evader/http-evader-413/test.rules

diff --git a/tests/http-evader-413/test.yaml b/tests/http-evader/http-evader-413/test.yaml
similarity index 100%
rename from tests/http-evader-413/test.yaml
rename to tests/http-evader/http-evader-413/test.yaml

diff --git a/tests/http-evader-414/README.md b/tests/http-evader/http-evader-414/README.md
similarity index 100%
rename from tests/http-evader-414/README.md
rename to tests/http-evader/http-evader-414/README.md

diff --git a/tests/http-evader-414/input.pcap b/tests/http-evader/http-evader-414/input.pcap
similarity index 100%
rename from tests/http-evader-414/input.pcap
rename to tests/http-evader/http-evader-414/input.pcap

diff --git a/tests/http-evader-414/test.rules b/tests/http-evader/http-evader-414/test.rules
similarity index 100%
rename from tests/http-evader-414/test.rules
rename to tests/http-evader/http-evader-414/test.rules

diff --git a/tests/http-evader-414/test.yaml b/tests/http-evader/http-evader-414/test.yaml
similarity index 100%
rename from tests/http-evader-414/test.yaml
rename to tests/http-evader/http-evader-414/test.yaml

diff --git a/tests/http-evader-415/README.md b/tests/http-evader/http-evader-415/README.md
similarity index 100%
rename from tests/http-evader-415/README.md
rename to tests/http-evader/http-evader-415/README.md

diff --git a/tests/http-evader-415/input.pcap b/tests/http-evader/http-evader-415/input.pcap
similarity index 100%
rename from tests/http-evader-415/input.pcap
rename to tests/http-evader/http-evader-415/input.pcap

diff --git a/tests/http-evader-415/test.rules b/tests/http-evader/http-evader-415/test.rules
similarity index 100%
rename from tests/http-evader-415/test.rules
rename to tests/http-evader/http-evader-415/test.rules

diff --git a/tests/http-evader-415/test.yaml b/tests/http-evader/http-evader-415/test.yaml
similarity index 100%
rename from tests/http-evader-415/test.yaml
rename to tests/http-evader/http-evader-415/test.yaml

diff --git a/tests/http-evader-416/README.md b/tests/http-evader/http-evader-416/README.md
similarity index 100%
rename from tests/http-evader-416/README.md
rename to tests/http-evader/http-evader-416/README.md

diff --git a/tests/http-evader-416/input.pcap b/tests/http-evader/http-evader-416/input.pcap
similarity index 100%
rename from tests/http-evader-416/input.pcap
rename to tests/http-evader/http-evader-416/input.pcap

diff --git a/tests/http-evader-416/test.rules b/tests/http-evader/http-evader-416/test.rules
similarity index 100%
rename from tests/http-evader-416/test.rules
rename to tests/http-evader/http-evader-416/test.rules

diff --git a/tests/http-evader-416/test.yaml b/tests/http-evader/http-evader-416/test.yaml
similarity index 100%
rename from tests/http-evader-416/test.yaml
rename to tests/http-evader/http-evader-416/test.yaml

diff --git a/tests/http-evader-417/README.md b/tests/http-evader/http-evader-417/README.md
similarity index 100%
rename from tests/http-evader-417/README.md
rename to tests/http-evader/http-evader-417/README.md

diff --git a/tests/http-evader-417/input.pcap b/tests/http-evader/http-evader-417/input.pcap
similarity index 100%
rename from tests/http-evader-417/input.pcap
rename to tests/http-evader/http-evader-417/input.pcap

diff --git a/tests/http-evader-417/test.rules b/tests/http-evader/http-evader-417/test.rules
similarity index 100%
rename from tests/http-evader-417/test.rules
rename to tests/http-evader/http-evader-417/test.rules

diff --git a/tests/http-evader-417/test.yaml b/tests/http-evader/http-evader-417/test.yaml
similarity index 100%
rename from tests/http-evader-417/test.yaml
rename to tests/http-evader/http-evader-417/test.yaml

diff --git a/tests/http-evader-418/README.md b/tests/http-evader/http-evader-418/README.md
similarity index 100%
rename from tests/http-evader-418/README.md
rename to tests/http-evader/http-evader-418/README.md

diff --git a/tests/http-evader-418/input.pcap b/tests/http-evader/http-evader-418/input.pcap
similarity index 100%
rename from tests/http-evader-418/input.pcap
rename to tests/http-evader/http-evader-418/input.pcap

diff --git a/tests/http-evader-418/test.rules b/tests/http-evader/http-evader-418/test.rules
similarity index 100%
rename from tests/http-evader-418/test.rules
rename to tests/http-evader/http-evader-418/test.rules

diff --git a/tests/http-evader-418/test.yaml b/tests/http-evader/http-evader-418/test.yaml
similarity index 100%
rename from tests/http-evader-418/test.yaml
rename to tests/http-evader/http-evader-418/test.yaml

diff --git a/tests/http-evader-419/README.md b/tests/http-evader/http-evader-419/README.md
similarity index 100%
rename from tests/http-evader-419/README.md
rename to tests/http-evader/http-evader-419/README.md

diff --git a/tests/http-evader-419/input.pcap b/tests/http-evader/http-evader-419/input.pcap
similarity index 100%
rename from tests/http-evader-419/input.pcap
rename to tests/http-evader/http-evader-419/input.pcap

diff --git a/tests/http-evader-419/test.rules b/tests/http-evader/http-evader-419/test.rules
similarity index 100%
rename from tests/http-evader-419/test.rules
rename to tests/http-evader/http-evader-419/test.rules

diff --git a/tests/http-evader-419/test.yaml b/tests/http-evader/http-evader-419/test.yaml
similarity index 100%
rename from tests/http-evader-419/test.yaml
rename to tests/http-evader/http-evader-419/test.yaml

diff --git a/tests/http-evader-420/README.md b/tests/http-evader/http-evader-420/README.md
similarity index 100%
rename from tests/http-evader-420/README.md
rename to tests/http-evader/http-evader-420/README.md

diff --git a/tests/http-evader-420/input.pcap b/tests/http-evader/http-evader-420/input.pcap
similarity index 100%
rename from tests/http-evader-420/input.pcap
rename to tests/http-evader/http-evader-420/input.pcap

diff --git a/tests/http-evader-420/test.rules b/tests/http-evader/http-evader-420/test.rules
similarity index 100%
rename from tests/http-evader-420/test.rules
rename to tests/http-evader/http-evader-420/test.rules

diff --git a/tests/http-evader-420/test.yaml b/tests/http-evader/http-evader-420/test.yaml
similarity index 100%
rename from tests/http-evader-420/test.yaml
rename to tests/http-evader/http-evader-420/test.yaml

diff --git a/tests/http-evader-421/README.md b/tests/http-evader/http-evader-421/README.md
similarity index 100%
rename from tests/http-evader-421/README.md
rename to tests/http-evader/http-evader-421/README.md

diff --git a/tests/http-evader-421/input.pcap b/tests/http-evader/http-evader-421/input.pcap
similarity index 100%
rename from tests/http-evader-421/input.pcap
rename to tests/http-evader/http-evader-421/input.pcap

diff --git a/tests/http-evader-421/test.rules b/tests/http-evader/http-evader-421/test.rules
similarity index 100%
rename from tests/http-evader-421/test.rules
rename to tests/http-evader/http-evader-421/test.rules

diff --git a/tests/http-evader-421/test.yaml b/tests/http-evader/http-evader-421/test.yaml
similarity index 100%
rename from tests/http-evader-421/test.yaml
rename to tests/http-evader/http-evader-421/test.yaml

diff --git a/tests/http-evader-422/README.md b/tests/http-evader/http-evader-422/README.md
similarity index 100%
rename from tests/http-evader-422/README.md
rename to tests/http-evader/http-evader-422/README.md

diff --git a/tests/http-evader-422/input.pcap b/tests/http-evader/http-evader-422/input.pcap
similarity index 100%
rename from tests/http-evader-422/input.pcap
rename to tests/http-evader/http-evader-422/input.pcap

diff --git a/tests/http-evader-422/test.rules b/tests/http-evader/http-evader-422/test.rules
similarity index 100%
rename from tests/http-evader-422/test.rules
rename to tests/http-evader/http-evader-422/test.rules

diff --git a/tests/http-evader-422/test.yaml b/tests/http-evader/http-evader-422/test.yaml
similarity index 100%
rename from tests/http-evader-422/test.yaml
rename to tests/http-evader/http-evader-422/test.yaml

diff --git a/tests/http-evader-423/README.md b/tests/http-evader/http-evader-423/README.md
similarity index 100%
rename from tests/http-evader-423/README.md
rename to tests/http-evader/http-evader-423/README.md

diff --git a/tests/http-evader-423/input.pcap b/tests/http-evader/http-evader-423/input.pcap
similarity index 100%
rename from tests/http-evader-423/input.pcap
rename to tests/http-evader/http-evader-423/input.pcap

diff --git a/tests/http-evader-423/test.rules b/tests/http-evader/http-evader-423/test.rules
similarity index 100%
rename from tests/http-evader-423/test.rules
rename to tests/http-evader/http-evader-423/test.rules

diff --git a/tests/http-evader-423/test.yaml b/tests/http-evader/http-evader-423/test.yaml
similarity index 100%
rename from tests/http-evader-423/test.yaml
rename to tests/http-evader/http-evader-423/test.yaml

diff --git a/tests/http-evader-424/README.md b/tests/http-evader/http-evader-424/README.md
similarity index 100%
rename from tests/http-evader-424/README.md
rename to tests/http-evader/http-evader-424/README.md

diff --git a/tests/http-evader-424/input.pcap b/tests/http-evader/http-evader-424/input.pcap
similarity index 100%
rename from tests/http-evader-424/input.pcap
rename to tests/http-evader/http-evader-424/input.pcap

diff --git a/tests/http-evader-424/test.rules b/tests/http-evader/http-evader-424/test.rules
similarity index 100%
rename from tests/http-evader-424/test.rules
rename to tests/http-evader/http-evader-424/test.rules

diff --git a/tests/http-evader-424/test.yaml b/tests/http-evader/http-evader-424/test.yaml
similarity index 100%
rename from tests/http-evader-424/test.yaml
rename to tests/http-evader/http-evader-424/test.yaml

diff --git a/tests/http-evader-425/README.md b/tests/http-evader/http-evader-425/README.md
similarity index 100%
rename from tests/http-evader-425/README.md
rename to tests/http-evader/http-evader-425/README.md

diff --git a/tests/http-evader-425/input.pcap b/tests/http-evader/http-evader-425/input.pcap
similarity index 100%
rename from tests/http-evader-425/input.pcap
rename to tests/http-evader/http-evader-425/input.pcap

diff --git a/tests/http-evader-425/test.rules b/tests/http-evader/http-evader-425/test.rules
similarity index 100%
rename from tests/http-evader-425/test.rules
rename to tests/http-evader/http-evader-425/test.rules

diff --git a/tests/http-evader-425/test.yaml b/tests/http-evader/http-evader-425/test.yaml
similarity index 100%
rename from tests/http-evader-425/test.yaml
rename to tests/http-evader/http-evader-425/test.yaml

diff --git a/tests/http-evader-426/README.md b/tests/http-evader/http-evader-426/README.md
similarity index 100%
rename from tests/http-evader-426/README.md
rename to tests/http-evader/http-evader-426/README.md

diff --git a/tests/http-evader-426/input.pcap b/tests/http-evader/http-evader-426/input.pcap
similarity index 100%
rename from tests/http-evader-426/input.pcap
rename to tests/http-evader/http-evader-426/input.pcap

diff --git a/tests/http-evader-426/test.rules b/tests/http-evader/http-evader-426/test.rules
similarity index 100%
rename from tests/http-evader-426/test.rules
rename to tests/http-evader/http-evader-426/test.rules

diff --git a/tests/http-evader-426/test.yaml b/tests/http-evader/http-evader-426/test.yaml
similarity index 100%
rename from tests/http-evader-426/test.yaml
rename to tests/http-evader/http-evader-426/test.yaml

diff --git a/tests/http-evader-427/README.md b/tests/http-evader/http-evader-427/README.md
similarity index 100%
rename from tests/http-evader-427/README.md
rename to tests/http-evader/http-evader-427/README.md

diff --git a/tests/http-evader-427/input.pcap b/tests/http-evader/http-evader-427/input.pcap
similarity index 100%
rename from tests/http-evader-427/input.pcap
rename to tests/http-evader/http-evader-427/input.pcap

diff --git a/tests/http-evader-427/test.rules b/tests/http-evader/http-evader-427/test.rules
similarity index 100%
rename from tests/http-evader-427/test.rules
rename to tests/http-evader/http-evader-427/test.rules

diff --git a/tests/http-evader-427/test.yaml b/tests/http-evader/http-evader-427/test.yaml
similarity index 100%
rename from tests/http-evader-427/test.yaml
rename to tests/http-evader/http-evader-427/test.yaml

diff --git a/tests/http-evader-428/README.md b/tests/http-evader/http-evader-428/README.md
similarity index 100%
rename from tests/http-evader-428/README.md
rename to tests/http-evader/http-evader-428/README.md

diff --git a/tests/http-evader-428/input.pcap b/tests/http-evader/http-evader-428/input.pcap
similarity index 100%
rename from tests/http-evader-428/input.pcap
rename to tests/http-evader/http-evader-428/input.pcap

diff --git a/tests/http-evader-428/test.rules b/tests/http-evader/http-evader-428/test.rules
similarity index 100%
rename from tests/http-evader-428/test.rules
rename to tests/http-evader/http-evader-428/test.rules

diff --git a/tests/http-evader-428/test.yaml b/tests/http-evader/http-evader-428/test.yaml
similarity index 100%
rename from tests/http-evader-428/test.yaml
rename to tests/http-evader/http-evader-428/test.yaml

diff --git a/tests/http-evader-429/README.md b/tests/http-evader/http-evader-429/README.md
similarity index 100%
rename from tests/http-evader-429/README.md
rename to tests/http-evader/http-evader-429/README.md

diff --git a/tests/http-evader-429/input.pcap b/tests/http-evader/http-evader-429/input.pcap
similarity index 100%
rename from tests/http-evader-429/input.pcap
rename to tests/http-evader/http-evader-429/input.pcap

diff --git a/tests/http-evader-429/test.rules b/tests/http-evader/http-evader-429/test.rules
similarity index 100%
rename from tests/http-evader-429/test.rules
rename to tests/http-evader/http-evader-429/test.rules

diff --git a/tests/http-evader-429/test.yaml b/tests/http-evader/http-evader-429/test.yaml
similarity index 100%
rename from tests/http-evader-429/test.yaml
rename to tests/http-evader/http-evader-429/test.yaml

diff --git a/tests/http-evader-430/README.md b/tests/http-evader/http-evader-430/README.md
similarity index 100%
rename from tests/http-evader-430/README.md
rename to tests/http-evader/http-evader-430/README.md

diff --git a/tests/http-evader-430/input.pcap b/tests/http-evader/http-evader-430/input.pcap
similarity index 100%
rename from tests/http-evader-430/input.pcap
rename to tests/http-evader/http-evader-430/input.pcap

diff --git a/tests/http-evader-430/test.rules b/tests/http-evader/http-evader-430/test.rules
similarity index 100%
rename from tests/http-evader-430/test.rules
rename to tests/http-evader/http-evader-430/test.rules

diff --git a/tests/http-evader-430/test.yaml b/tests/http-evader/http-evader-430/test.yaml
similarity index 100%
rename from tests/http-evader-430/test.yaml
rename to tests/http-evader/http-evader-430/test.yaml

diff --git a/tests/http-evader-431/README.md b/tests/http-evader/http-evader-431/README.md
similarity index 100%
rename from tests/http-evader-431/README.md
rename to tests/http-evader/http-evader-431/README.md

diff --git a/tests/http-evader-431/input.pcap b/tests/http-evader/http-evader-431/input.pcap
similarity index 100%
rename from tests/http-evader-431/input.pcap
rename to tests/http-evader/http-evader-431/input.pcap

diff --git a/tests/http-evader-431/test.rules b/tests/http-evader/http-evader-431/test.rules
similarity index 100%
rename from tests/http-evader-431/test.rules
rename to tests/http-evader/http-evader-431/test.rules

diff --git a/tests/http-evader-431/test.yaml b/tests/http-evader/http-evader-431/test.yaml
similarity index 100%
rename from tests/http-evader-431/test.yaml
rename to tests/http-evader/http-evader-431/test.yaml

diff --git a/tests/http-evader-432/README.md b/tests/http-evader/http-evader-432/README.md
similarity index 100%
rename from tests/http-evader-432/README.md
rename to tests/http-evader/http-evader-432/README.md

diff --git a/tests/http-evader-432/input.pcap b/tests/http-evader/http-evader-432/input.pcap
similarity index 100%
rename from tests/http-evader-432/input.pcap
rename to tests/http-evader/http-evader-432/input.pcap

diff --git a/tests/http-evader-432/test.rules b/tests/http-evader/http-evader-432/test.rules
similarity index 100%
rename from tests/http-evader-432/test.rules
rename to tests/http-evader/http-evader-432/test.rules

diff --git a/tests/http-evader-432/test.yaml b/tests/http-evader/http-evader-432/test.yaml
similarity index 100%
rename from tests/http-evader-432/test.yaml
rename to tests/http-evader/http-evader-432/test.yaml

diff --git a/tests/http-evader-433/README.md b/tests/http-evader/http-evader-433/README.md
similarity index 100%
rename from tests/http-evader-433/README.md
rename to tests/http-evader/http-evader-433/README.md

diff --git a/tests/http-evader-433/input.pcap b/tests/http-evader/http-evader-433/input.pcap
similarity index 100%
rename from tests/http-evader-433/input.pcap
rename to tests/http-evader/http-evader-433/input.pcap

diff --git a/tests/http-evader-433/test.rules b/tests/http-evader/http-evader-433/test.rules
similarity index 100%
rename from tests/http-evader-433/test.rules
rename to tests/http-evader/http-evader-433/test.rules

diff --git a/tests/http-evader-433/test.yaml b/tests/http-evader/http-evader-433/test.yaml
similarity index 100%
rename from tests/http-evader-433/test.yaml
rename to tests/http-evader/http-evader-433/test.yaml

diff --git a/tests/http-evader-434/README.md b/tests/http-evader/http-evader-434/README.md
similarity index 100%
rename from tests/http-evader-434/README.md
rename to tests/http-evader/http-evader-434/README.md

diff --git a/tests/http-evader-434/input.pcap b/tests/http-evader/http-evader-434/input.pcap
similarity index 100%
rename from tests/http-evader-434/input.pcap
rename to tests/http-evader/http-evader-434/input.pcap

diff --git a/tests/http-evader-434/test.rules b/tests/http-evader/http-evader-434/test.rules
similarity index 100%
rename from tests/http-evader-434/test.rules
rename to tests/http-evader/http-evader-434/test.rules

diff --git a/tests/http-evader-434/test.yaml b/tests/http-evader/http-evader-434/test.yaml
similarity index 100%
rename from tests/http-evader-434/test.yaml
rename to tests/http-evader/http-evader-434/test.yaml

diff --git a/tests/http-evader-435/README.md b/tests/http-evader/http-evader-435/README.md
similarity index 100%
rename from tests/http-evader-435/README.md
rename to tests/http-evader/http-evader-435/README.md

diff --git a/tests/http-evader-435/input.pcap b/tests/http-evader/http-evader-435/input.pcap
similarity index 100%
rename from tests/http-evader-435/input.pcap
rename to tests/http-evader/http-evader-435/input.pcap

diff --git a/tests/http-evader-435/test.rules b/tests/http-evader/http-evader-435/test.rules
similarity index 100%
rename from tests/http-evader-435/test.rules
rename to tests/http-evader/http-evader-435/test.rules

diff --git a/tests/http-evader-435/test.yaml b/tests/http-evader/http-evader-435/test.yaml
similarity index 100%
rename from tests/http-evader-435/test.yaml
rename to tests/http-evader/http-evader-435/test.yaml

diff --git a/tests/http-evader-436/README.md b/tests/http-evader/http-evader-436/README.md
similarity index 100%
rename from tests/http-evader-436/README.md
rename to tests/http-evader/http-evader-436/README.md

diff --git a/tests/http-evader-436/input.pcap b/tests/http-evader/http-evader-436/input.pcap
similarity index 100%
rename from tests/http-evader-436/input.pcap
rename to tests/http-evader/http-evader-436/input.pcap

diff --git a/tests/http-evader-436/test.rules b/tests/http-evader/http-evader-436/test.rules
similarity index 100%
rename from tests/http-evader-436/test.rules
rename to tests/http-evader/http-evader-436/test.rules

diff --git a/tests/http-evader-436/test.yaml b/tests/http-evader/http-evader-436/test.yaml
similarity index 100%
rename from tests/http-evader-436/test.yaml
rename to tests/http-evader/http-evader-436/test.yaml

diff --git a/tests/http-evader-437/README.md b/tests/http-evader/http-evader-437/README.md
similarity index 100%
rename from tests/http-evader-437/README.md
rename to tests/http-evader/http-evader-437/README.md

diff --git a/tests/http-evader-437/input.pcap b/tests/http-evader/http-evader-437/input.pcap
similarity index 100%
rename from tests/http-evader-437/input.pcap
rename to tests/http-evader/http-evader-437/input.pcap

diff --git a/tests/http-evader-437/test.rules b/tests/http-evader/http-evader-437/test.rules
similarity index 100%
rename from tests/http-evader-437/test.rules
rename to tests/http-evader/http-evader-437/test.rules

diff --git a/tests/http-evader-437/test.yaml b/tests/http-evader/http-evader-437/test.yaml
similarity index 100%
rename from tests/http-evader-437/test.yaml
rename to tests/http-evader/http-evader-437/test.yaml

diff --git a/tests/http-evader-438/README.md b/tests/http-evader/http-evader-438/README.md
similarity index 100%
rename from tests/http-evader-438/README.md
rename to tests/http-evader/http-evader-438/README.md

diff --git a/tests/http-evader-438/input.pcap b/tests/http-evader/http-evader-438/input.pcap
similarity index 100%
rename from tests/http-evader-438/input.pcap
rename to tests/http-evader/http-evader-438/input.pcap

diff --git a/tests/http-evader-438/test.rules b/tests/http-evader/http-evader-438/test.rules
similarity index 100%
rename from tests/http-evader-438/test.rules
rename to tests/http-evader/http-evader-438/test.rules

diff --git a/tests/http-evader-438/test.yaml b/tests/http-evader/http-evader-438/test.yaml
similarity index 100%
rename from tests/http-evader-438/test.yaml
rename to tests/http-evader/http-evader-438/test.yaml

diff --git a/tests/http-evader-439/README.md b/tests/http-evader/http-evader-439/README.md
similarity index 100%
rename from tests/http-evader-439/README.md
rename to tests/http-evader/http-evader-439/README.md

diff --git a/tests/http-evader-439/input.pcap b/tests/http-evader/http-evader-439/input.pcap
similarity index 100%
rename from tests/http-evader-439/input.pcap
rename to tests/http-evader/http-evader-439/input.pcap

diff --git a/tests/http-evader-439/test.rules b/tests/http-evader/http-evader-439/test.rules
similarity index 100%
rename from tests/http-evader-439/test.rules
rename to tests/http-evader/http-evader-439/test.rules

diff --git a/tests/http-evader-439/test.yaml b/tests/http-evader/http-evader-439/test.yaml
similarity index 100%
rename from tests/http-evader-439/test.yaml
rename to tests/http-evader/http-evader-439/test.yaml

diff --git a/tests/http-evader-440/README.md b/tests/http-evader/http-evader-440/README.md
similarity index 100%
rename from tests/http-evader-440/README.md
rename to tests/http-evader/http-evader-440/README.md

diff --git a/tests/http-evader-440/input.pcap b/tests/http-evader/http-evader-440/input.pcap
similarity index 100%
rename from tests/http-evader-440/input.pcap
rename to tests/http-evader/http-evader-440/input.pcap

diff --git a/tests/http-evader-440/test.rules b/tests/http-evader/http-evader-440/test.rules
similarity index 100%
rename from tests/http-evader-440/test.rules
rename to tests/http-evader/http-evader-440/test.rules

diff --git a/tests/http-evader-440/test.yaml b/tests/http-evader/http-evader-440/test.yaml
similarity index 100%
rename from tests/http-evader-440/test.yaml
rename to tests/http-evader/http-evader-440/test.yaml

diff --git a/tests/http-evader-441/README.md b/tests/http-evader/http-evader-441/README.md
similarity index 100%
rename from tests/http-evader-441/README.md
rename to tests/http-evader/http-evader-441/README.md

diff --git a/tests/http-evader-441/input.pcap b/tests/http-evader/http-evader-441/input.pcap
similarity index 100%
rename from tests/http-evader-441/input.pcap
rename to tests/http-evader/http-evader-441/input.pcap

diff --git a/tests/http-evader-441/test.rules b/tests/http-evader/http-evader-441/test.rules
similarity index 100%
rename from tests/http-evader-441/test.rules
rename to tests/http-evader/http-evader-441/test.rules

diff --git a/tests/http-evader-441/test.yaml b/tests/http-evader/http-evader-441/test.yaml
similarity index 100%
rename from tests/http-evader-441/test.yaml
rename to tests/http-evader/http-evader-441/test.yaml

diff --git a/tests/http-evader-442/README.md b/tests/http-evader/http-evader-442/README.md
similarity index 100%
rename from tests/http-evader-442/README.md
rename to tests/http-evader/http-evader-442/README.md

diff --git a/tests/http-evader-442/input.pcap b/tests/http-evader/http-evader-442/input.pcap
similarity index 100%
rename from tests/http-evader-442/input.pcap
rename to tests/http-evader/http-evader-442/input.pcap

diff --git a/tests/http-evader-442/test.rules b/tests/http-evader/http-evader-442/test.rules
similarity index 100%
rename from tests/http-evader-442/test.rules
rename to tests/http-evader/http-evader-442/test.rules

diff --git a/tests/http-evader-442/test.yaml b/tests/http-evader/http-evader-442/test.yaml
similarity index 100%
rename from tests/http-evader-442/test.yaml
rename to tests/http-evader/http-evader-442/test.yaml

diff --git a/tests/http-evader-443/README.md b/tests/http-evader/http-evader-443/README.md
similarity index 100%
rename from tests/http-evader-443/README.md
rename to tests/http-evader/http-evader-443/README.md

diff --git a/tests/http-evader-443/input.pcap b/tests/http-evader/http-evader-443/input.pcap
similarity index 100%
rename from tests/http-evader-443/input.pcap
rename to tests/http-evader/http-evader-443/input.pcap

diff --git a/tests/http-evader-443/test.rules b/tests/http-evader/http-evader-443/test.rules
similarity index 100%
rename from tests/http-evader-443/test.rules
rename to tests/http-evader/http-evader-443/test.rules

diff --git a/tests/http-evader-443/test.yaml b/tests/http-evader/http-evader-443/test.yaml
similarity index 100%
rename from tests/http-evader-443/test.yaml
rename to tests/http-evader/http-evader-443/test.yaml

diff --git a/tests/http-evader-444/README.md b/tests/http-evader/http-evader-444/README.md
similarity index 100%
rename from tests/http-evader-444/README.md
rename to tests/http-evader/http-evader-444/README.md

diff --git a/tests/http-evader-444/input.pcap b/tests/http-evader/http-evader-444/input.pcap
similarity index 100%
rename from tests/http-evader-444/input.pcap
rename to tests/http-evader/http-evader-444/input.pcap

diff --git a/tests/http-evader-444/test.rules b/tests/http-evader/http-evader-444/test.rules
similarity index 100%
rename from tests/http-evader-444/test.rules
rename to tests/http-evader/http-evader-444/test.rules

diff --git a/tests/http-evader-444/test.yaml b/tests/http-evader/http-evader-444/test.yaml
similarity index 100%
rename from tests/http-evader-444/test.yaml
rename to tests/http-evader/http-evader-444/test.yaml

diff --git a/tests/http-evader-445/README.md b/tests/http-evader/http-evader-445/README.md
similarity index 100%
rename from tests/http-evader-445/README.md
rename to tests/http-evader/http-evader-445/README.md

diff --git a/tests/http-evader-445/input.pcap b/tests/http-evader/http-evader-445/input.pcap
similarity index 100%
rename from tests/http-evader-445/input.pcap
rename to tests/http-evader/http-evader-445/input.pcap

diff --git a/tests/http-evader-445/test.rules b/tests/http-evader/http-evader-445/test.rules
similarity index 100%
rename from tests/http-evader-445/test.rules
rename to tests/http-evader/http-evader-445/test.rules

diff --git a/tests/http-evader-445/test.yaml b/tests/http-evader/http-evader-445/test.yaml
similarity index 100%
rename from tests/http-evader-445/test.yaml
rename to tests/http-evader/http-evader-445/test.yaml

diff --git a/tests/http-evader-446/README.md b/tests/http-evader/http-evader-446/README.md
similarity index 100%
rename from tests/http-evader-446/README.md
rename to tests/http-evader/http-evader-446/README.md

diff --git a/tests/http-evader-446/input.pcap b/tests/http-evader/http-evader-446/input.pcap
similarity index 100%
rename from tests/http-evader-446/input.pcap
rename to tests/http-evader/http-evader-446/input.pcap

diff --git a/tests/http-evader-446/test.rules b/tests/http-evader/http-evader-446/test.rules
similarity index 100%
rename from tests/http-evader-446/test.rules
rename to tests/http-evader/http-evader-446/test.rules

diff --git a/tests/http-evader-446/test.yaml b/tests/http-evader/http-evader-446/test.yaml
similarity index 100%
rename from tests/http-evader-446/test.yaml
rename to tests/http-evader/http-evader-446/test.yaml

diff --git a/tests/http-evader-447/README.md b/tests/http-evader/http-evader-447/README.md
similarity index 100%
rename from tests/http-evader-447/README.md
rename to tests/http-evader/http-evader-447/README.md

diff --git a/tests/http-evader-447/input.pcap b/tests/http-evader/http-evader-447/input.pcap
similarity index 100%
rename from tests/http-evader-447/input.pcap
rename to tests/http-evader/http-evader-447/input.pcap

diff --git a/tests/http-evader-447/test.rules b/tests/http-evader/http-evader-447/test.rules
similarity index 100%
rename from tests/http-evader-447/test.rules
rename to tests/http-evader/http-evader-447/test.rules

diff --git a/tests/http-evader-447/test.yaml b/tests/http-evader/http-evader-447/test.yaml
similarity index 100%
rename from tests/http-evader-447/test.yaml
rename to tests/http-evader/http-evader-447/test.yaml

diff --git a/tests/http-evader-448/README.md b/tests/http-evader/http-evader-448/README.md
similarity index 100%
rename from tests/http-evader-448/README.md
rename to tests/http-evader/http-evader-448/README.md

diff --git a/tests/http-evader-448/input.pcap b/tests/http-evader/http-evader-448/input.pcap
similarity index 100%
rename from tests/http-evader-448/input.pcap
rename to tests/http-evader/http-evader-448/input.pcap

diff --git a/tests/http-evader-448/test.rules b/tests/http-evader/http-evader-448/test.rules
similarity index 100%
rename from tests/http-evader-448/test.rules
rename to tests/http-evader/http-evader-448/test.rules

diff --git a/tests/http-evader-448/test.yaml b/tests/http-evader/http-evader-448/test.yaml
similarity index 100%
rename from tests/http-evader-448/test.yaml
rename to tests/http-evader/http-evader-448/test.yaml

diff --git a/tests/http-evader-449/README.md b/tests/http-evader/http-evader-449/README.md
similarity index 100%
rename from tests/http-evader-449/README.md
rename to tests/http-evader/http-evader-449/README.md

diff --git a/tests/http-evader-449/input.pcap b/tests/http-evader/http-evader-449/input.pcap
similarity index 100%
rename from tests/http-evader-449/input.pcap
rename to tests/http-evader/http-evader-449/input.pcap

diff --git a/tests/http-evader-449/test.rules b/tests/http-evader/http-evader-449/test.rules
similarity index 100%
rename from tests/http-evader-449/test.rules
rename to tests/http-evader/http-evader-449/test.rules

diff --git a/tests/http-evader-449/test.yaml b/tests/http-evader/http-evader-449/test.yaml
similarity index 100%
rename from tests/http-evader-449/test.yaml
rename to tests/http-evader/http-evader-449/test.yaml

diff --git a/tests/http-evader-450/README.md b/tests/http-evader/http-evader-450/README.md
similarity index 100%
rename from tests/http-evader-450/README.md
rename to tests/http-evader/http-evader-450/README.md

diff --git a/tests/http-evader-450/input.pcap b/tests/http-evader/http-evader-450/input.pcap
similarity index 100%
rename from tests/http-evader-450/input.pcap
rename to tests/http-evader/http-evader-450/input.pcap

diff --git a/tests/http-evader-450/test.rules b/tests/http-evader/http-evader-450/test.rules
similarity index 100%
rename from tests/http-evader-450/test.rules
rename to tests/http-evader/http-evader-450/test.rules

diff --git a/tests/http-evader-450/test.yaml b/tests/http-evader/http-evader-450/test.yaml
similarity index 100%
rename from tests/http-evader-450/test.yaml
rename to tests/http-evader/http-evader-450/test.yaml

diff --git a/tests/http-evader-451/README.md b/tests/http-evader/http-evader-451/README.md
similarity index 100%
rename from tests/http-evader-451/README.md
rename to tests/http-evader/http-evader-451/README.md

diff --git a/tests/http-evader-451/input.pcap b/tests/http-evader/http-evader-451/input.pcap
similarity index 100%
rename from tests/http-evader-451/input.pcap
rename to tests/http-evader/http-evader-451/input.pcap

diff --git a/tests/http-evader-451/test.rules b/tests/http-evader/http-evader-451/test.rules
similarity index 100%
rename from tests/http-evader-451/test.rules
rename to tests/http-evader/http-evader-451/test.rules

diff --git a/tests/http-evader-451/test.yaml b/tests/http-evader/http-evader-451/test.yaml
similarity index 100%
rename from tests/http-evader-451/test.yaml
rename to tests/http-evader/http-evader-451/test.yaml

diff --git a/tests/http-evader-452/README.md b/tests/http-evader/http-evader-452/README.md
similarity index 100%
rename from tests/http-evader-452/README.md
rename to tests/http-evader/http-evader-452/README.md

diff --git a/tests/http-evader-452/input.pcap b/tests/http-evader/http-evader-452/input.pcap
similarity index 100%
rename from tests/http-evader-452/input.pcap
rename to tests/http-evader/http-evader-452/input.pcap

diff --git a/tests/http-evader-452/test.rules b/tests/http-evader/http-evader-452/test.rules
similarity index 100%
rename from tests/http-evader-452/test.rules
rename to tests/http-evader/http-evader-452/test.rules

diff --git a/tests/http-evader-452/test.yaml b/tests/http-evader/http-evader-452/test.yaml
similarity index 100%
rename from tests/http-evader-452/test.yaml
rename to tests/http-evader/http-evader-452/test.yaml

diff --git a/tests/http-evader-453/README.md b/tests/http-evader/http-evader-453/README.md
similarity index 100%
rename from tests/http-evader-453/README.md
rename to tests/http-evader/http-evader-453/README.md

diff --git a/tests/http-evader-453/input.pcap b/tests/http-evader/http-evader-453/input.pcap
similarity index 100%
rename from tests/http-evader-453/input.pcap
rename to tests/http-evader/http-evader-453/input.pcap

diff --git a/tests/http-evader-453/test.rules b/tests/http-evader/http-evader-453/test.rules
similarity index 100%
rename from tests/http-evader-453/test.rules
rename to tests/http-evader/http-evader-453/test.rules

diff --git a/tests/http-evader-453/test.yaml b/tests/http-evader/http-evader-453/test.yaml
similarity index 100%
rename from tests/http-evader-453/test.yaml
rename to tests/http-evader/http-evader-453/test.yaml

diff --git a/tests/http-evader-454/README.md b/tests/http-evader/http-evader-454/README.md
similarity index 100%
rename from tests/http-evader-454/README.md
rename to tests/http-evader/http-evader-454/README.md

diff --git a/tests/http-evader-454/input.pcap b/tests/http-evader/http-evader-454/input.pcap
similarity index 100%
rename from tests/http-evader-454/input.pcap
rename to tests/http-evader/http-evader-454/input.pcap

diff --git a/tests/http-evader-454/test.rules b/tests/http-evader/http-evader-454/test.rules
similarity index 100%
rename from tests/http-evader-454/test.rules
rename to tests/http-evader/http-evader-454/test.rules

diff --git a/tests/http-evader-454/test.yaml b/tests/http-evader/http-evader-454/test.yaml
similarity index 100%
rename from tests/http-evader-454/test.yaml
rename to tests/http-evader/http-evader-454/test.yaml

diff --git a/tests/http-evader-455/README.md b/tests/http-evader/http-evader-455/README.md
similarity index 100%
rename from tests/http-evader-455/README.md
rename to tests/http-evader/http-evader-455/README.md

diff --git a/tests/http-evader-455/input.pcap b/tests/http-evader/http-evader-455/input.pcap
similarity index 100%
rename from tests/http-evader-455/input.pcap
rename to tests/http-evader/http-evader-455/input.pcap

diff --git a/tests/http-evader-455/test.rules b/tests/http-evader/http-evader-455/test.rules
similarity index 100%
rename from tests/http-evader-455/test.rules
rename to tests/http-evader/http-evader-455/test.rules

diff --git a/tests/http-evader-455/test.yaml b/tests/http-evader/http-evader-455/test.yaml
similarity index 100%
rename from tests/http-evader-455/test.yaml
rename to tests/http-evader/http-evader-455/test.yaml

diff --git a/tests/http-evader-456/README.md b/tests/http-evader/http-evader-456/README.md
similarity index 100%
rename from tests/http-evader-456/README.md
rename to tests/http-evader/http-evader-456/README.md

diff --git a/tests/http-evader-456/input.pcap b/tests/http-evader/http-evader-456/input.pcap
similarity index 100%
rename from tests/http-evader-456/input.pcap
rename to tests/http-evader/http-evader-456/input.pcap

diff --git a/tests/http-evader-456/test.rules b/tests/http-evader/http-evader-456/test.rules
similarity index 100%
rename from tests/http-evader-456/test.rules
rename to tests/http-evader/http-evader-456/test.rules

diff --git a/tests/http-evader-456/test.yaml b/tests/http-evader/http-evader-456/test.yaml
similarity index 100%
rename from tests/http-evader-456/test.yaml
rename to tests/http-evader/http-evader-456/test.yaml

diff --git a/tests/http-evader-457/README.md b/tests/http-evader/http-evader-457/README.md
similarity index 100%
rename from tests/http-evader-457/README.md
rename to tests/http-evader/http-evader-457/README.md

diff --git a/tests/http-evader-457/input.pcap b/tests/http-evader/http-evader-457/input.pcap
similarity index 100%
rename from tests/http-evader-457/input.pcap
rename to tests/http-evader/http-evader-457/input.pcap

diff --git a/tests/http-evader-457/test.rules b/tests/http-evader/http-evader-457/test.rules
similarity index 100%
rename from tests/http-evader-457/test.rules
rename to tests/http-evader/http-evader-457/test.rules

diff --git a/tests/http-evader-457/test.yaml b/tests/http-evader/http-evader-457/test.yaml
similarity index 100%
rename from tests/http-evader-457/test.yaml
rename to tests/http-evader/http-evader-457/test.yaml

diff --git a/tests/http-evader-458/README.md b/tests/http-evader/http-evader-458/README.md
similarity index 100%
rename from tests/http-evader-458/README.md
rename to tests/http-evader/http-evader-458/README.md

diff --git a/tests/http-evader-458/input.pcap b/tests/http-evader/http-evader-458/input.pcap
similarity index 100%
rename from tests/http-evader-458/input.pcap
rename to tests/http-evader/http-evader-458/input.pcap

diff --git a/tests/http-evader-458/test.rules b/tests/http-evader/http-evader-458/test.rules
similarity index 100%
rename from tests/http-evader-458/test.rules
rename to tests/http-evader/http-evader-458/test.rules

diff --git a/tests/http-evader-458/test.yaml b/tests/http-evader/http-evader-458/test.yaml
similarity index 100%
rename from tests/http-evader-458/test.yaml
rename to tests/http-evader/http-evader-458/test.yaml

diff --git a/tests/http-evader-459/README.md b/tests/http-evader/http-evader-459/README.md
similarity index 100%
rename from tests/http-evader-459/README.md
rename to tests/http-evader/http-evader-459/README.md

diff --git a/tests/http-evader-459/input.pcap b/tests/http-evader/http-evader-459/input.pcap
similarity index 100%
rename from tests/http-evader-459/input.pcap
rename to tests/http-evader/http-evader-459/input.pcap

diff --git a/tests/http-evader-459/test.rules b/tests/http-evader/http-evader-459/test.rules
similarity index 100%
rename from tests/http-evader-459/test.rules
rename to tests/http-evader/http-evader-459/test.rules

diff --git a/tests/http-evader-459/test.yaml b/tests/http-evader/http-evader-459/test.yaml
similarity index 100%
rename from tests/http-evader-459/test.yaml
rename to tests/http-evader/http-evader-459/test.yaml

diff --git a/tests/http-evader-460/README.md b/tests/http-evader/http-evader-460/README.md
similarity index 100%
rename from tests/http-evader-460/README.md
rename to tests/http-evader/http-evader-460/README.md

diff --git a/tests/http-evader-460/input.pcap b/tests/http-evader/http-evader-460/input.pcap
similarity index 100%
rename from tests/http-evader-460/input.pcap
rename to tests/http-evader/http-evader-460/input.pcap

diff --git a/tests/http-evader-460/test.rules b/tests/http-evader/http-evader-460/test.rules
similarity index 100%
rename from tests/http-evader-460/test.rules
rename to tests/http-evader/http-evader-460/test.rules

diff --git a/tests/http-evader-460/test.yaml b/tests/http-evader/http-evader-460/test.yaml
similarity index 100%
rename from tests/http-evader-460/test.yaml
rename to tests/http-evader/http-evader-460/test.yaml

diff --git a/tests/http-evader-461/README.md b/tests/http-evader/http-evader-461/README.md
similarity index 100%
rename from tests/http-evader-461/README.md
rename to tests/http-evader/http-evader-461/README.md

diff --git a/tests/http-evader-461/input.pcap b/tests/http-evader/http-evader-461/input.pcap
similarity index 100%
rename from tests/http-evader-461/input.pcap
rename to tests/http-evader/http-evader-461/input.pcap

diff --git a/tests/http-evader-461/test.rules b/tests/http-evader/http-evader-461/test.rules
similarity index 100%
rename from tests/http-evader-461/test.rules
rename to tests/http-evader/http-evader-461/test.rules

diff --git a/tests/http-evader-461/test.yaml b/tests/http-evader/http-evader-461/test.yaml
similarity index 100%
rename from tests/http-evader-461/test.yaml
rename to tests/http-evader/http-evader-461/test.yaml

diff --git a/tests/http-evader-462/README.md b/tests/http-evader/http-evader-462/README.md
similarity index 100%
rename from tests/http-evader-462/README.md
rename to tests/http-evader/http-evader-462/README.md

diff --git a/tests/http-evader-462/input.pcap b/tests/http-evader/http-evader-462/input.pcap
similarity index 100%
rename from tests/http-evader-462/input.pcap
rename to tests/http-evader/http-evader-462/input.pcap

diff --git a/tests/http-evader-462/test.rules b/tests/http-evader/http-evader-462/test.rules
similarity index 100%
rename from tests/http-evader-462/test.rules
rename to tests/http-evader/http-evader-462/test.rules

diff --git a/tests/http-evader-462/test.yaml b/tests/http-evader/http-evader-462/test.yaml
similarity index 100%
rename from tests/http-evader-462/test.yaml
rename to tests/http-evader/http-evader-462/test.yaml

diff --git a/tests/http-evader-463/README.md b/tests/http-evader/http-evader-463/README.md
similarity index 100%
rename from tests/http-evader-463/README.md
rename to tests/http-evader/http-evader-463/README.md

diff --git a/tests/http-evader-463/input.pcap b/tests/http-evader/http-evader-463/input.pcap
similarity index 100%
rename from tests/http-evader-463/input.pcap
rename to tests/http-evader/http-evader-463/input.pcap

diff --git a/tests/http-evader-463/test.rules b/tests/http-evader/http-evader-463/test.rules
similarity index 100%
rename from tests/http-evader-463/test.rules
rename to tests/http-evader/http-evader-463/test.rules

diff --git a/tests/http-evader-463/test.yaml b/tests/http-evader/http-evader-463/test.yaml
similarity index 100%
rename from tests/http-evader-463/test.yaml
rename to tests/http-evader/http-evader-463/test.yaml

diff --git a/tests/http-evader-464/README.md b/tests/http-evader/http-evader-464/README.md
similarity index 100%
rename from tests/http-evader-464/README.md
rename to tests/http-evader/http-evader-464/README.md

diff --git a/tests/http-evader-464/input.pcap b/tests/http-evader/http-evader-464/input.pcap
similarity index 100%
rename from tests/http-evader-464/input.pcap
rename to tests/http-evader/http-evader-464/input.pcap

diff --git a/tests/http-evader-464/test.rules b/tests/http-evader/http-evader-464/test.rules
similarity index 100%
rename from tests/http-evader-464/test.rules
rename to tests/http-evader/http-evader-464/test.rules

diff --git a/tests/http-evader-464/test.yaml b/tests/http-evader/http-evader-464/test.yaml
similarity index 100%
rename from tests/http-evader-464/test.yaml
rename to tests/http-evader/http-evader-464/test.yaml

diff --git a/tests/http-evader-465/README.md b/tests/http-evader/http-evader-465/README.md
similarity index 100%
rename from tests/http-evader-465/README.md
rename to tests/http-evader/http-evader-465/README.md

diff --git a/tests/http-evader-465/input.pcap b/tests/http-evader/http-evader-465/input.pcap
similarity index 100%
rename from tests/http-evader-465/input.pcap
rename to tests/http-evader/http-evader-465/input.pcap

diff --git a/tests/http-evader-465/test.rules b/tests/http-evader/http-evader-465/test.rules
similarity index 100%
rename from tests/http-evader-465/test.rules
rename to tests/http-evader/http-evader-465/test.rules

diff --git a/tests/http-evader-465/test.yaml b/tests/http-evader/http-evader-465/test.yaml
similarity index 100%
rename from tests/http-evader-465/test.yaml
rename to tests/http-evader/http-evader-465/test.yaml

diff --git a/tests/http-evader-466/README.md b/tests/http-evader/http-evader-466/README.md
similarity index 100%
rename from tests/http-evader-466/README.md
rename to tests/http-evader/http-evader-466/README.md

diff --git a/tests/http-evader-466/input.pcap b/tests/http-evader/http-evader-466/input.pcap
similarity index 100%
rename from tests/http-evader-466/input.pcap
rename to tests/http-evader/http-evader-466/input.pcap

diff --git a/tests/http-evader-466/test.rules b/tests/http-evader/http-evader-466/test.rules
similarity index 100%
rename from tests/http-evader-466/test.rules
rename to tests/http-evader/http-evader-466/test.rules

diff --git a/tests/http-evader-466/test.yaml b/tests/http-evader/http-evader-466/test.yaml
similarity index 100%
rename from tests/http-evader-466/test.yaml
rename to tests/http-evader/http-evader-466/test.yaml

diff --git a/tests/http-evader-467/README.md b/tests/http-evader/http-evader-467/README.md
similarity index 100%
rename from tests/http-evader-467/README.md
rename to tests/http-evader/http-evader-467/README.md

diff --git a/tests/http-evader-467/input.pcap b/tests/http-evader/http-evader-467/input.pcap
similarity index 100%
rename from tests/http-evader-467/input.pcap
rename to tests/http-evader/http-evader-467/input.pcap

diff --git a/tests/http-evader-467/test.rules b/tests/http-evader/http-evader-467/test.rules
similarity index 100%
rename from tests/http-evader-467/test.rules
rename to tests/http-evader/http-evader-467/test.rules

diff --git a/tests/http-evader-467/test.yaml b/tests/http-evader/http-evader-467/test.yaml
similarity index 100%
rename from tests/http-evader-467/test.yaml
rename to tests/http-evader/http-evader-467/test.yaml

diff --git a/tests/http-evader-468/README.md b/tests/http-evader/http-evader-468/README.md
similarity index 100%
rename from tests/http-evader-468/README.md
rename to tests/http-evader/http-evader-468/README.md

diff --git a/tests/http-evader-468/input.pcap b/tests/http-evader/http-evader-468/input.pcap
similarity index 100%
rename from tests/http-evader-468/input.pcap
rename to tests/http-evader/http-evader-468/input.pcap

diff --git a/tests/http-evader-468/test.rules b/tests/http-evader/http-evader-468/test.rules
similarity index 100%
rename from tests/http-evader-468/test.rules
rename to tests/http-evader/http-evader-468/test.rules

diff --git a/tests/http-evader-468/test.yaml b/tests/http-evader/http-evader-468/test.yaml
similarity index 100%
rename from tests/http-evader-468/test.yaml
rename to tests/http-evader/http-evader-468/test.yaml

diff --git a/tests/http-evader-469/README.md b/tests/http-evader/http-evader-469/README.md
similarity index 100%
rename from tests/http-evader-469/README.md
rename to tests/http-evader/http-evader-469/README.md

diff --git a/tests/http-evader-469/input.pcap b/tests/http-evader/http-evader-469/input.pcap
similarity index 100%
rename from tests/http-evader-469/input.pcap
rename to tests/http-evader/http-evader-469/input.pcap

diff --git a/tests/http-evader-469/test.rules b/tests/http-evader/http-evader-469/test.rules
similarity index 100%
rename from tests/http-evader-469/test.rules
rename to tests/http-evader/http-evader-469/test.rules

diff --git a/tests/http-evader-469/test.yaml b/tests/http-evader/http-evader-469/test.yaml
similarity index 100%
rename from tests/http-evader-469/test.yaml
rename to tests/http-evader/http-evader-469/test.yaml

diff --git a/tests/http-evader-470/README.md b/tests/http-evader/http-evader-470/README.md
similarity index 100%
rename from tests/http-evader-470/README.md
rename to tests/http-evader/http-evader-470/README.md

diff --git a/tests/http-evader-470/input.pcap b/tests/http-evader/http-evader-470/input.pcap
similarity index 100%
rename from tests/http-evader-470/input.pcap
rename to tests/http-evader/http-evader-470/input.pcap

diff --git a/tests/http-evader-470/test.rules b/tests/http-evader/http-evader-470/test.rules
similarity index 100%
rename from tests/http-evader-470/test.rules
rename to tests/http-evader/http-evader-470/test.rules

diff --git a/tests/http-evader-470/test.yaml b/tests/http-evader/http-evader-470/test.yaml
similarity index 100%
rename from tests/http-evader-470/test.yaml
rename to tests/http-evader/http-evader-470/test.yaml

diff --git a/tests/http-evader-471/README.md b/tests/http-evader/http-evader-471/README.md
similarity index 100%
rename from tests/http-evader-471/README.md
rename to tests/http-evader/http-evader-471/README.md

diff --git a/tests/http-evader-471/input.pcap b/tests/http-evader/http-evader-471/input.pcap
similarity index 100%
rename from tests/http-evader-471/input.pcap
rename to tests/http-evader/http-evader-471/input.pcap

diff --git a/tests/http-evader-471/test.rules b/tests/http-evader/http-evader-471/test.rules
similarity index 100%
rename from tests/http-evader-471/test.rules
rename to tests/http-evader/http-evader-471/test.rules

diff --git a/tests/http-evader-471/test.yaml b/tests/http-evader/http-evader-471/test.yaml
similarity index 100%
rename from tests/http-evader-471/test.yaml
rename to tests/http-evader/http-evader-471/test.yaml

diff --git a/tests/http-evader-472/README.md b/tests/http-evader/http-evader-472/README.md
similarity index 100%
rename from tests/http-evader-472/README.md
rename to tests/http-evader/http-evader-472/README.md

diff --git a/tests/http-evader-472/input.pcap b/tests/http-evader/http-evader-472/input.pcap
similarity index 100%
rename from tests/http-evader-472/input.pcap
rename to tests/http-evader/http-evader-472/input.pcap

diff --git a/tests/http-evader-472/test.rules b/tests/http-evader/http-evader-472/test.rules
similarity index 100%
rename from tests/http-evader-472/test.rules
rename to tests/http-evader/http-evader-472/test.rules

diff --git a/tests/http-evader-472/test.yaml b/tests/http-evader/http-evader-472/test.yaml
similarity index 100%
rename from tests/http-evader-472/test.yaml
rename to tests/http-evader/http-evader-472/test.yaml

diff --git a/tests/http-evader-473/README.md b/tests/http-evader/http-evader-473/README.md
similarity index 100%
rename from tests/http-evader-473/README.md
rename to tests/http-evader/http-evader-473/README.md

diff --git a/tests/http-evader-473/input.pcap b/tests/http-evader/http-evader-473/input.pcap
similarity index 100%
rename from tests/http-evader-473/input.pcap
rename to tests/http-evader/http-evader-473/input.pcap

diff --git a/tests/http-evader-473/test.rules b/tests/http-evader/http-evader-473/test.rules
similarity index 100%
rename from tests/http-evader-473/test.rules
rename to tests/http-evader/http-evader-473/test.rules

diff --git a/tests/http-evader-473/test.yaml b/tests/http-evader/http-evader-473/test.yaml
similarity index 100%
rename from tests/http-evader-473/test.yaml
rename to tests/http-evader/http-evader-473/test.yaml

diff --git a/tests/http-evader-474/README.md b/tests/http-evader/http-evader-474/README.md
similarity index 100%
rename from tests/http-evader-474/README.md
rename to tests/http-evader/http-evader-474/README.md

diff --git a/tests/http-evader-474/input.pcap b/tests/http-evader/http-evader-474/input.pcap
similarity index 100%
rename from tests/http-evader-474/input.pcap
rename to tests/http-evader/http-evader-474/input.pcap

diff --git a/tests/http-evader-474/test.rules b/tests/http-evader/http-evader-474/test.rules
similarity index 100%
rename from tests/http-evader-474/test.rules
rename to tests/http-evader/http-evader-474/test.rules

diff --git a/tests/http-evader-474/test.yaml b/tests/http-evader/http-evader-474/test.yaml
similarity index 100%
rename from tests/http-evader-474/test.yaml
rename to tests/http-evader/http-evader-474/test.yaml

diff --git a/tests/http-evader-475/README.md b/tests/http-evader/http-evader-475/README.md
similarity index 100%
rename from tests/http-evader-475/README.md
rename to tests/http-evader/http-evader-475/README.md

diff --git a/tests/http-evader-475/input.pcap b/tests/http-evader/http-evader-475/input.pcap
similarity index 100%
rename from tests/http-evader-475/input.pcap
rename to tests/http-evader/http-evader-475/input.pcap

diff --git a/tests/http-evader-475/test.rules b/tests/http-evader/http-evader-475/test.rules
similarity index 100%
rename from tests/http-evader-475/test.rules
rename to tests/http-evader/http-evader-475/test.rules

diff --git a/tests/http-evader-475/test.yaml b/tests/http-evader/http-evader-475/test.yaml
similarity index 100%
rename from tests/http-evader-475/test.yaml
rename to tests/http-evader/http-evader-475/test.yaml

diff --git a/tests/http-evader-476/README.md b/tests/http-evader/http-evader-476/README.md
similarity index 100%
rename from tests/http-evader-476/README.md
rename to tests/http-evader/http-evader-476/README.md

diff --git a/tests/http-evader-476/input.pcap b/tests/http-evader/http-evader-476/input.pcap
similarity index 100%
rename from tests/http-evader-476/input.pcap
rename to tests/http-evader/http-evader-476/input.pcap

diff --git a/tests/http-evader-476/test.rules b/tests/http-evader/http-evader-476/test.rules
similarity index 100%
rename from tests/http-evader-476/test.rules
rename to tests/http-evader/http-evader-476/test.rules

diff --git a/tests/http-evader-476/test.yaml b/tests/http-evader/http-evader-476/test.yaml
similarity index 100%
rename from tests/http-evader-476/test.yaml
rename to tests/http-evader/http-evader-476/test.yaml

diff --git a/tests/http-evader-477/README.md b/tests/http-evader/http-evader-477/README.md
similarity index 100%
rename from tests/http-evader-477/README.md
rename to tests/http-evader/http-evader-477/README.md

diff --git a/tests/http-evader-477/input.pcap b/tests/http-evader/http-evader-477/input.pcap
similarity index 100%
rename from tests/http-evader-477/input.pcap
rename to tests/http-evader/http-evader-477/input.pcap

diff --git a/tests/http-evader-477/test.rules b/tests/http-evader/http-evader-477/test.rules
similarity index 100%
rename from tests/http-evader-477/test.rules
rename to tests/http-evader/http-evader-477/test.rules

diff --git a/tests/http-evader-477/test.yaml b/tests/http-evader/http-evader-477/test.yaml
similarity index 100%
rename from tests/http-evader-477/test.yaml
rename to tests/http-evader/http-evader-477/test.yaml

diff --git a/tests/http-evader-478/README.md b/tests/http-evader/http-evader-478/README.md
similarity index 100%
rename from tests/http-evader-478/README.md
rename to tests/http-evader/http-evader-478/README.md

diff --git a/tests/http-evader-478/input.pcap b/tests/http-evader/http-evader-478/input.pcap
similarity index 100%
rename from tests/http-evader-478/input.pcap
rename to tests/http-evader/http-evader-478/input.pcap

diff --git a/tests/http-evader-478/test.rules b/tests/http-evader/http-evader-478/test.rules
similarity index 100%
rename from tests/http-evader-478/test.rules
rename to tests/http-evader/http-evader-478/test.rules

diff --git a/tests/http-evader-478/test.yaml b/tests/http-evader/http-evader-478/test.yaml
similarity index 100%
rename from tests/http-evader-478/test.yaml
rename to tests/http-evader/http-evader-478/test.yaml

diff --git a/tests/http-evader-479/README.md b/tests/http-evader/http-evader-479/README.md
similarity index 100%
rename from tests/http-evader-479/README.md
rename to tests/http-evader/http-evader-479/README.md

diff --git a/tests/http-evader-479/input.pcap b/tests/http-evader/http-evader-479/input.pcap
similarity index 100%
rename from tests/http-evader-479/input.pcap
rename to tests/http-evader/http-evader-479/input.pcap

diff --git a/tests/http-evader-479/test.rules b/tests/http-evader/http-evader-479/test.rules
similarity index 100%
rename from tests/http-evader-479/test.rules
rename to tests/http-evader/http-evader-479/test.rules

diff --git a/tests/http-evader-479/test.yaml b/tests/http-evader/http-evader-479/test.yaml
similarity index 100%
rename from tests/http-evader-479/test.yaml
rename to tests/http-evader/http-evader-479/test.yaml

diff --git a/tests/http-evader-480/README.md b/tests/http-evader/http-evader-480/README.md
similarity index 100%
rename from tests/http-evader-480/README.md
rename to tests/http-evader/http-evader-480/README.md

diff --git a/tests/http-evader-480/input.pcap b/tests/http-evader/http-evader-480/input.pcap
similarity index 100%
rename from tests/http-evader-480/input.pcap
rename to tests/http-evader/http-evader-480/input.pcap

diff --git a/tests/http-evader-480/test.rules b/tests/http-evader/http-evader-480/test.rules
similarity index 100%
rename from tests/http-evader-480/test.rules
rename to tests/http-evader/http-evader-480/test.rules

diff --git a/tests/http-evader-480/test.yaml b/tests/http-evader/http-evader-480/test.yaml
similarity index 100%
rename from tests/http-evader-480/test.yaml
rename to tests/http-evader/http-evader-480/test.yaml

diff --git a/tests/http-evader-481/README.md b/tests/http-evader/http-evader-481/README.md
similarity index 100%
rename from tests/http-evader-481/README.md
rename to tests/http-evader/http-evader-481/README.md

diff --git a/tests/http-evader-481/input.pcap b/tests/http-evader/http-evader-481/input.pcap
similarity index 100%
rename from tests/http-evader-481/input.pcap
rename to tests/http-evader/http-evader-481/input.pcap

diff --git a/tests/http-evader-481/test.rules b/tests/http-evader/http-evader-481/test.rules
similarity index 100%
rename from tests/http-evader-481/test.rules
rename to tests/http-evader/http-evader-481/test.rules

diff --git a/tests/http-evader-481/test.yaml b/tests/http-evader/http-evader-481/test.yaml
similarity index 100%
rename from tests/http-evader-481/test.yaml
rename to tests/http-evader/http-evader-481/test.yaml

diff --git a/tests/http-evader-482/README.md b/tests/http-evader/http-evader-482/README.md
similarity index 100%
rename from tests/http-evader-482/README.md
rename to tests/http-evader/http-evader-482/README.md

diff --git a/tests/http-evader-482/input.pcap b/tests/http-evader/http-evader-482/input.pcap
similarity index 100%
rename from tests/http-evader-482/input.pcap
rename to tests/http-evader/http-evader-482/input.pcap

diff --git a/tests/http-evader-482/test.rules b/tests/http-evader/http-evader-482/test.rules
similarity index 100%
rename from tests/http-evader-482/test.rules
rename to tests/http-evader/http-evader-482/test.rules

diff --git a/tests/http-evader-482/test.yaml b/tests/http-evader/http-evader-482/test.yaml
similarity index 100%
rename from tests/http-evader-482/test.yaml
rename to tests/http-evader/http-evader-482/test.yaml

diff --git a/tests/http-evader-483/README.md b/tests/http-evader/http-evader-483/README.md
similarity index 100%
rename from tests/http-evader-483/README.md
rename to tests/http-evader/http-evader-483/README.md

diff --git a/tests/http-evader-483/input.pcap b/tests/http-evader/http-evader-483/input.pcap
similarity index 100%
rename from tests/http-evader-483/input.pcap
rename to tests/http-evader/http-evader-483/input.pcap

diff --git a/tests/http-evader-483/test.rules b/tests/http-evader/http-evader-483/test.rules
similarity index 100%
rename from tests/http-evader-483/test.rules
rename to tests/http-evader/http-evader-483/test.rules

diff --git a/tests/http-evader-483/test.yaml b/tests/http-evader/http-evader-483/test.yaml
similarity index 100%
rename from tests/http-evader-483/test.yaml
rename to tests/http-evader/http-evader-483/test.yaml

diff --git a/tests/http-evader-484/README.md b/tests/http-evader/http-evader-484/README.md
similarity index 100%
rename from tests/http-evader-484/README.md
rename to tests/http-evader/http-evader-484/README.md

diff --git a/tests/http-evader-484/input.pcap b/tests/http-evader/http-evader-484/input.pcap
similarity index 100%
rename from tests/http-evader-484/input.pcap
rename to tests/http-evader/http-evader-484/input.pcap

diff --git a/tests/http-evader-484/test.rules b/tests/http-evader/http-evader-484/test.rules
similarity index 100%
rename from tests/http-evader-484/test.rules
rename to tests/http-evader/http-evader-484/test.rules

diff --git a/tests/http-evader-484/test.yaml b/tests/http-evader/http-evader-484/test.yaml
similarity index 100%
rename from tests/http-evader-484/test.yaml
rename to tests/http-evader/http-evader-484/test.yaml

diff --git a/tests/http-evader-485/README.md b/tests/http-evader/http-evader-485/README.md
similarity index 100%
rename from tests/http-evader-485/README.md
rename to tests/http-evader/http-evader-485/README.md

diff --git a/tests/http-evader-485/input.pcap b/tests/http-evader/http-evader-485/input.pcap
similarity index 100%
rename from tests/http-evader-485/input.pcap
rename to tests/http-evader/http-evader-485/input.pcap

diff --git a/tests/http-evader-485/test.rules b/tests/http-evader/http-evader-485/test.rules
similarity index 100%
rename from tests/http-evader-485/test.rules
rename to tests/http-evader/http-evader-485/test.rules

diff --git a/tests/http-evader-485/test.yaml b/tests/http-evader/http-evader-485/test.yaml
similarity index 100%
rename from tests/http-evader-485/test.yaml
rename to tests/http-evader/http-evader-485/test.yaml

diff --git a/tests/http-evader-486/README.md b/tests/http-evader/http-evader-486/README.md
similarity index 100%
rename from tests/http-evader-486/README.md
rename to tests/http-evader/http-evader-486/README.md

diff --git a/tests/http-evader-486/input.pcap b/tests/http-evader/http-evader-486/input.pcap
similarity index 100%
rename from tests/http-evader-486/input.pcap
rename to tests/http-evader/http-evader-486/input.pcap

diff --git a/tests/http-evader-486/test.rules b/tests/http-evader/http-evader-486/test.rules
similarity index 100%
rename from tests/http-evader-486/test.rules
rename to tests/http-evader/http-evader-486/test.rules

diff --git a/tests/http-evader-486/test.yaml b/tests/http-evader/http-evader-486/test.yaml
similarity index 100%
rename from tests/http-evader-486/test.yaml
rename to tests/http-evader/http-evader-486/test.yaml

diff --git a/tests/http-evader-487/README.md b/tests/http-evader/http-evader-487/README.md
similarity index 100%
rename from tests/http-evader-487/README.md
rename to tests/http-evader/http-evader-487/README.md

diff --git a/tests/http-evader-487/input.pcap b/tests/http-evader/http-evader-487/input.pcap
similarity index 100%
rename from tests/http-evader-487/input.pcap
rename to tests/http-evader/http-evader-487/input.pcap

diff --git a/tests/http-evader-487/test.rules b/tests/http-evader/http-evader-487/test.rules
similarity index 100%
rename from tests/http-evader-487/test.rules
rename to tests/http-evader/http-evader-487/test.rules

diff --git a/tests/http-evader-487/test.yaml b/tests/http-evader/http-evader-487/test.yaml
similarity index 100%
rename from tests/http-evader-487/test.yaml
rename to tests/http-evader/http-evader-487/test.yaml

diff --git a/tests/http-evader-488/README.md b/tests/http-evader/http-evader-488/README.md
similarity index 100%
rename from tests/http-evader-488/README.md
rename to tests/http-evader/http-evader-488/README.md

diff --git a/tests/http-evader-488/input.pcap b/tests/http-evader/http-evader-488/input.pcap
similarity index 100%
rename from tests/http-evader-488/input.pcap
rename to tests/http-evader/http-evader-488/input.pcap

diff --git a/tests/http-evader-488/test.rules b/tests/http-evader/http-evader-488/test.rules
similarity index 100%
rename from tests/http-evader-488/test.rules
rename to tests/http-evader/http-evader-488/test.rules

diff --git a/tests/http-evader-488/test.yaml b/tests/http-evader/http-evader-488/test.yaml
similarity index 100%
rename from tests/http-evader-488/test.yaml
rename to tests/http-evader/http-evader-488/test.yaml

diff --git a/tests/http-evader-489/README.md b/tests/http-evader/http-evader-489/README.md
similarity index 100%
rename from tests/http-evader-489/README.md
rename to tests/http-evader/http-evader-489/README.md

diff --git a/tests/http-evader-489/input.pcap b/tests/http-evader/http-evader-489/input.pcap
similarity index 100%
rename from tests/http-evader-489/input.pcap
rename to tests/http-evader/http-evader-489/input.pcap

diff --git a/tests/http-evader-489/test.rules b/tests/http-evader/http-evader-489/test.rules
similarity index 100%
rename from tests/http-evader-489/test.rules
rename to tests/http-evader/http-evader-489/test.rules

diff --git a/tests/http-evader-489/test.yaml b/tests/http-evader/http-evader-489/test.yaml
similarity index 100%
rename from tests/http-evader-489/test.yaml
rename to tests/http-evader/http-evader-489/test.yaml

diff --git a/tests/http-evader-490/README.md b/tests/http-evader/http-evader-490/README.md
similarity index 100%
rename from tests/http-evader-490/README.md
rename to tests/http-evader/http-evader-490/README.md

diff --git a/tests/http-evader-490/input.pcap b/tests/http-evader/http-evader-490/input.pcap
similarity index 100%
rename from tests/http-evader-490/input.pcap
rename to tests/http-evader/http-evader-490/input.pcap

diff --git a/tests/http-evader-490/test.rules b/tests/http-evader/http-evader-490/test.rules
similarity index 100%
rename from tests/http-evader-490/test.rules
rename to tests/http-evader/http-evader-490/test.rules

diff --git a/tests/http-evader-490/test.yaml b/tests/http-evader/http-evader-490/test.yaml
similarity index 100%
rename from tests/http-evader-490/test.yaml
rename to tests/http-evader/http-evader-490/test.yaml

diff --git a/tests/http-evader-491/README.md b/tests/http-evader/http-evader-491/README.md
similarity index 100%
rename from tests/http-evader-491/README.md
rename to tests/http-evader/http-evader-491/README.md

diff --git a/tests/http-evader-491/input.pcap b/tests/http-evader/http-evader-491/input.pcap
similarity index 100%
rename from tests/http-evader-491/input.pcap
rename to tests/http-evader/http-evader-491/input.pcap

diff --git a/tests/http-evader-491/test.rules b/tests/http-evader/http-evader-491/test.rules
similarity index 100%
rename from tests/http-evader-491/test.rules
rename to tests/http-evader/http-evader-491/test.rules

diff --git a/tests/http-evader-491/test.yaml b/tests/http-evader/http-evader-491/test.yaml
similarity index 100%
rename from tests/http-evader-491/test.yaml
rename to tests/http-evader/http-evader-491/test.yaml

diff --git a/tests/http-evader-492/README.md b/tests/http-evader/http-evader-492/README.md
similarity index 100%
rename from tests/http-evader-492/README.md
rename to tests/http-evader/http-evader-492/README.md

diff --git a/tests/http-evader-492/input.pcap b/tests/http-evader/http-evader-492/input.pcap
similarity index 100%
rename from tests/http-evader-492/input.pcap
rename to tests/http-evader/http-evader-492/input.pcap

diff --git a/tests/http-evader-492/test.rules b/tests/http-evader/http-evader-492/test.rules
similarity index 100%
rename from tests/http-evader-492/test.rules
rename to tests/http-evader/http-evader-492/test.rules

diff --git a/tests/http-evader-492/test.yaml b/tests/http-evader/http-evader-492/test.yaml
similarity index 100%
rename from tests/http-evader-492/test.yaml
rename to tests/http-evader/http-evader-492/test.yaml

diff --git a/tests/http-evader-493/README.md b/tests/http-evader/http-evader-493/README.md
similarity index 100%
rename from tests/http-evader-493/README.md
rename to tests/http-evader/http-evader-493/README.md

diff --git a/tests/http-evader-493/input.pcap b/tests/http-evader/http-evader-493/input.pcap
similarity index 100%
rename from tests/http-evader-493/input.pcap
rename to tests/http-evader/http-evader-493/input.pcap

diff --git a/tests/http-evader-493/test.rules b/tests/http-evader/http-evader-493/test.rules
similarity index 100%
rename from tests/http-evader-493/test.rules
rename to tests/http-evader/http-evader-493/test.rules

diff --git a/tests/http-evader-493/test.yaml b/tests/http-evader/http-evader-493/test.yaml
similarity index 100%
rename from tests/http-evader-493/test.yaml
rename to tests/http-evader/http-evader-493/test.yaml

diff --git a/tests/http-evader-494/README.md b/tests/http-evader/http-evader-494/README.md
similarity index 100%
rename from tests/http-evader-494/README.md
rename to tests/http-evader/http-evader-494/README.md

diff --git a/tests/http-evader-494/input.pcap b/tests/http-evader/http-evader-494/input.pcap
similarity index 100%
rename from tests/http-evader-494/input.pcap
rename to tests/http-evader/http-evader-494/input.pcap

diff --git a/tests/http-evader-494/test.rules b/tests/http-evader/http-evader-494/test.rules
similarity index 100%
rename from tests/http-evader-494/test.rules
rename to tests/http-evader/http-evader-494/test.rules

diff --git a/tests/http-evader-494/test.yaml b/tests/http-evader/http-evader-494/test.yaml
similarity index 100%
rename from tests/http-evader-494/test.yaml
rename to tests/http-evader/http-evader-494/test.yaml

diff --git a/tests/http-evader-495/README.md b/tests/http-evader/http-evader-495/README.md
similarity index 100%
rename from tests/http-evader-495/README.md
rename to tests/http-evader/http-evader-495/README.md

diff --git a/tests/http-evader-495/input.pcap b/tests/http-evader/http-evader-495/input.pcap
similarity index 100%
rename from tests/http-evader-495/input.pcap
rename to tests/http-evader/http-evader-495/input.pcap

diff --git a/tests/http-evader-495/test.rules b/tests/http-evader/http-evader-495/test.rules
similarity index 100%
rename from tests/http-evader-495/test.rules
rename to tests/http-evader/http-evader-495/test.rules

diff --git a/tests/http-evader-495/test.yaml b/tests/http-evader/http-evader-495/test.yaml
similarity index 100%
rename from tests/http-evader-495/test.yaml
rename to tests/http-evader/http-evader-495/test.yaml

diff --git a/tests/http-evader-496/README.md b/tests/http-evader/http-evader-496/README.md
similarity index 100%
rename from tests/http-evader-496/README.md
rename to tests/http-evader/http-evader-496/README.md

diff --git a/tests/http-evader-496/input.pcap b/tests/http-evader/http-evader-496/input.pcap
similarity index 100%
rename from tests/http-evader-496/input.pcap
rename to tests/http-evader/http-evader-496/input.pcap

diff --git a/tests/http-evader-496/test.rules b/tests/http-evader/http-evader-496/test.rules
similarity index 100%
rename from tests/http-evader-496/test.rules
rename to tests/http-evader/http-evader-496/test.rules

diff --git a/tests/http-evader-496/test.yaml b/tests/http-evader/http-evader-496/test.yaml
similarity index 100%
rename from tests/http-evader-496/test.yaml
rename to tests/http-evader/http-evader-496/test.yaml

diff --git a/tests/http-evader-497/README.md b/tests/http-evader/http-evader-497/README.md
similarity index 100%
rename from tests/http-evader-497/README.md
rename to tests/http-evader/http-evader-497/README.md

diff --git a/tests/http-evader-497/input.pcap b/tests/http-evader/http-evader-497/input.pcap
similarity index 100%
rename from tests/http-evader-497/input.pcap
rename to tests/http-evader/http-evader-497/input.pcap

diff --git a/tests/http-evader-497/test.rules b/tests/http-evader/http-evader-497/test.rules
similarity index 100%
rename from tests/http-evader-497/test.rules
rename to tests/http-evader/http-evader-497/test.rules

diff --git a/tests/http-evader-497/test.yaml b/tests/http-evader/http-evader-497/test.yaml
similarity index 100%
rename from tests/http-evader-497/test.yaml
rename to tests/http-evader/http-evader-497/test.yaml

diff --git a/tests/http-evader-498/README.md b/tests/http-evader/http-evader-498/README.md
similarity index 100%
rename from tests/http-evader-498/README.md
rename to tests/http-evader/http-evader-498/README.md

diff --git a/tests/http-evader-498/input.pcap b/tests/http-evader/http-evader-498/input.pcap
similarity index 100%
rename from tests/http-evader-498/input.pcap
rename to tests/http-evader/http-evader-498/input.pcap

diff --git a/tests/http-evader-498/test.rules b/tests/http-evader/http-evader-498/test.rules
similarity index 100%
rename from tests/http-evader-498/test.rules
rename to tests/http-evader/http-evader-498/test.rules

diff --git a/tests/http-evader-498/test.yaml b/tests/http-evader/http-evader-498/test.yaml
similarity index 100%
rename from tests/http-evader-498/test.yaml
rename to tests/http-evader/http-evader-498/test.yaml

diff --git a/tests/http-evader-499/README.md b/tests/http-evader/http-evader-499/README.md
similarity index 100%
rename from tests/http-evader-499/README.md
rename to tests/http-evader/http-evader-499/README.md

diff --git a/tests/http-evader-499/input.pcap b/tests/http-evader/http-evader-499/input.pcap
similarity index 100%
rename from tests/http-evader-499/input.pcap
rename to tests/http-evader/http-evader-499/input.pcap

diff --git a/tests/http-evader-499/test.rules b/tests/http-evader/http-evader-499/test.rules
similarity index 100%
rename from tests/http-evader-499/test.rules
rename to tests/http-evader/http-evader-499/test.rules

diff --git a/tests/http-evader-499/test.yaml b/tests/http-evader/http-evader-499/test.yaml
similarity index 100%
rename from tests/http-evader-499/test.yaml
rename to tests/http-evader/http-evader-499/test.yaml

diff --git a/tests/http-evader-500/README.md b/tests/http-evader/http-evader-500/README.md
similarity index 100%
rename from tests/http-evader-500/README.md
rename to tests/http-evader/http-evader-500/README.md

diff --git a/tests/http-evader-500/input.pcap b/tests/http-evader/http-evader-500/input.pcap
similarity index 100%
rename from tests/http-evader-500/input.pcap
rename to tests/http-evader/http-evader-500/input.pcap

diff --git a/tests/http-evader-500/test.rules b/tests/http-evader/http-evader-500/test.rules
similarity index 100%
rename from tests/http-evader-500/test.rules
rename to tests/http-evader/http-evader-500/test.rules

diff --git a/tests/http-evader-500/test.yaml b/tests/http-evader/http-evader-500/test.yaml
similarity index 100%
rename from tests/http-evader-500/test.yaml
rename to tests/http-evader/http-evader-500/test.yaml

diff --git a/tests/http-evader-501/README.md b/tests/http-evader/http-evader-501/README.md
similarity index 100%
rename from tests/http-evader-501/README.md
rename to tests/http-evader/http-evader-501/README.md

diff --git a/tests/http-evader-501/input.pcap b/tests/http-evader/http-evader-501/input.pcap
similarity index 100%
rename from tests/http-evader-501/input.pcap
rename to tests/http-evader/http-evader-501/input.pcap

diff --git a/tests/http-evader-501/test.rules b/tests/http-evader/http-evader-501/test.rules
similarity index 100%
rename from tests/http-evader-501/test.rules
rename to tests/http-evader/http-evader-501/test.rules

diff --git a/tests/http-evader-501/test.yaml b/tests/http-evader/http-evader-501/test.yaml
similarity index 100%
rename from tests/http-evader-501/test.yaml
rename to tests/http-evader/http-evader-501/test.yaml