tests: update checks for suricata PR #3865

Signed-off-by: jason taylor <jtfas90@gmail.com>

diff --git a/tests/test-bad-content-dsize-rule-1/test.yaml b/tests/test-bad-content-dsize-rule-1/test.yaml
index 0c2b42070e839160232fe8aa1c569f725e39c50a..731ffe9ac60d04832db8167ddfc21c5a55f686f8 100644 (file)
--- a/tests/test-bad-content-dsize-rule-1/test.yaml
+++ b/tests/test-bad-content-dsize-rule-1/test.yaml
@@ -14,7 +14,7 @@ checks:
       count: 1
       match:
         event_type: engine
-        engine.message: "signature can't match as content length 30 is bigger than dsize 10"
+        engine.message: "signature can't match as content length 30 is bigger than dsize 10."
 
   - filter:
       count: 1

diff --git a/tests/test-bad-depth-rule-1/test.yaml b/tests/test-bad-depth-rule-1/test.yaml
index 1ea80b3ce794c94d05eaddc72e8f08a37bea9d6c..170142ec154f3f120a942ee0f0e70502afe0be7b 100644 (file)
--- a/tests/test-bad-depth-rule-1/test.yaml
+++ b/tests/test-bad-depth-rule-1/test.yaml
@@ -14,7 +14,7 @@ checks:
       count: 1
       match:
         event_type: engine
-        engine.message: "depth needs preceding content, uricontent option, http_client_body, http_server_body, http_header option, http_raw_header option, http_method option, http_cookie, http_raw_uri, http_stat_msg, http_stat_code, http_user_agent, http_host, http_raw_host or file_data/dce_stub_data sticky buffer options"
+        engine.message: "depth needs preceding content, uricontent option, http_client_body, http_server_body, http_header option, http_raw_header option, http_method option, http_cookie, http_raw_uri, http_stat_msg, http_stat_code, http_user_agent, http_host, http_raw_host or file_data/dce_stub_data sticky buffer options."
 
   - filter:
       count: 1

diff --git a/tests/test-bad-depth-within-rule-2/test.yaml b/tests/test-bad-depth-within-rule-2/test.yaml
index 1ea80b3ce794c94d05eaddc72e8f08a37bea9d6c..170142ec154f3f120a942ee0f0e70502afe0be7b 100644 (file)
--- a/tests/test-bad-depth-within-rule-2/test.yaml
+++ b/tests/test-bad-depth-within-rule-2/test.yaml
@@ -14,7 +14,7 @@ checks:
       count: 1
       match:
         event_type: engine
-        engine.message: "depth needs preceding content, uricontent option, http_client_body, http_server_body, http_header option, http_raw_header option, http_method option, http_cookie, http_raw_uri, http_stat_msg, http_stat_code, http_user_agent, http_host, http_raw_host or file_data/dce_stub_data sticky buffer options"
+        engine.message: "depth needs preceding content, uricontent option, http_client_body, http_server_body, http_header option, http_raw_header option, http_method option, http_cookie, http_raw_uri, http_stat_msg, http_stat_code, http_user_agent, http_host, http_raw_host or file_data/dce_stub_data sticky buffer options."
 
   - filter:
       count: 1

diff --git a/tests/test-bad-dsize-offset-rule-1/test.yaml b/tests/test-bad-dsize-offset-rule-1/test.yaml
index b06caec901fd29b720a5c47453b252675d01415e..38872131f0579abb782079b1de5b1ab74d20397e 100644 (file)
--- a/tests/test-bad-dsize-offset-rule-1/test.yaml
+++ b/tests/test-bad-dsize-offset-rule-1/test.yaml
@@ -14,7 +14,7 @@ checks:
       count: 1
       match:
         event_type: engine
-        engine.message: "signature can't match as content length 2 with offset 100 (=102) is bigger than dsize 50"
+        engine.message: "signature can't match as content length 2 with offset 100 (=102) is bigger than dsize 50."
 
   - filter:
       count: 1

diff --git a/tests/test-bad-dsize-range-offset-rule-1/test.yaml b/tests/test-bad-dsize-range-offset-rule-1/test.yaml
index bd4957956884b65bd002a1cd357c216d1776d183..c508dc66adaf3220db8878da812230f13dcfce97 100644 (file)
--- a/tests/test-bad-dsize-range-offset-rule-1/test.yaml
+++ b/tests/test-bad-dsize-range-offset-rule-1/test.yaml
@@ -14,7 +14,7 @@ checks:
       count: 1
       match:
         event_type: engine
-        engine.message: "signature can't match as content length 4 with offset 8 (=12) is bigger than dsize 10"
+        engine.message: "signature can't match as content length 4 with offset 8 (=12) is bigger than dsize 10."
 
   - filter:
       count: 1

diff --git a/tests/test-bad-dsize-range-rule-1/test.yaml b/tests/test-bad-dsize-range-rule-1/test.yaml
index 0c2b42070e839160232fe8aa1c569f725e39c50a..731ffe9ac60d04832db8167ddfc21c5a55f686f8 100644 (file)
--- a/tests/test-bad-dsize-range-rule-1/test.yaml
+++ b/tests/test-bad-dsize-range-rule-1/test.yaml
@@ -14,7 +14,7 @@ checks:
       count: 1
       match:
         event_type: engine
-        engine.message: "signature can't match as content length 30 is bigger than dsize 10"
+        engine.message: "signature can't match as content length 30 is bigger than dsize 10."
 
   - filter:
       count: 1

diff --git a/tests/test-bad-offset-offset-rule-1/test.yaml b/tests/test-bad-offset-offset-rule-1/test.yaml
index 7334d104f9cf1e27fa65c89bbe0bc53de3277b9b..d84904ca3ee795fd49b350b3fcd821028fd13708 100644 (file)
--- a/tests/test-bad-offset-offset-rule-1/test.yaml
+++ b/tests/test-bad-offset-offset-rule-1/test.yaml
@@ -14,7 +14,7 @@ checks:
       count: 1
       match:
         event_type: engine
-        engine.message: "can't use multiple offsets for the same content. "
+        engine.message: "can't use multiple offsets for the same content."
 
   - filter:
       count: 1