http/connect: remove app proto from filter

There is no DCERPC packet in the pcap. With the addition of probe
function in DCERPC, app_proto check for dcerpc causes the test to fail.
It is incorrect, remove it.

diff --git a/tests/http-connect/http-connect-fail/test.yaml b/tests/http-connect/http-connect-fail/test.yaml
index 6ece99ebd0352c613bdf5245d1aab3867087aaf6..f6fd050ca8fa139cee8be25a1473ac7ea72363f6 100644 (file)
--- a/tests/http-connect/http-connect-fail/test.yaml
+++ b/tests/http-connect/http-connect-fail/test.yaml
@@ -21,7 +21,6 @@ checks:
       count: 1
       match:
         event_type: flow
-        app_proto: dcerpc
         app_proto_orig: http
   - filter:
       count: 0