tests/http2: Add tests for HTTP/2 decompression bug

7.0.0-beta1 hits anomaly, failed_decompression

diff --git a/tests/http2-compression-bug/README.md b/tests/http2-compression-bug/README.md
new file mode 100644 (file)
index 0000000..50f931c
--- /dev/null
+++ b/tests/http2-compression-bug/README.md
@@ -0,0 +1 @@
+Chrome 107.0.5304.87 HTTP2 decrypted via Mira ETO

diff --git a/tests/http2-compression-bug/input.pcap b/tests/http2-compression-bug/input.pcap
new file mode 100644 (file)
index 0000000..5630354
Binary files /dev/null and b/tests/http2-compression-bug/input.pcap differ

diff --git a/tests/http2-compression-bug/test.yaml b/tests/http2-compression-bug/test.yaml
new file mode 100644 (file)
index 0000000..f2d94b7
--- /dev/null
+++ b/tests/http2-compression-bug/test.yaml
@@ -0,0 +1,24 @@
+requires:
+  min-version: 7
+
+checks:
+- filter:
+    count: 7
+    match:
+      event_type: http
+- filter:
+    count: 9
+    match:
+      event_type: fileinfo
+- filter:
+    count: 0
+    match:
+      event_type: anomaly
+- filter:
+    count: 1
+    match:
+      event_type: flow
+- filter:
+    count: 1
+    match:
+      event_type: stats