]> git.ipfire.org Git - thirdparty/suricata-verify.git/commitdiff
dns-response-rrname-sticky-buffer: update for keyword rename
authorJason Ish <jason.ish@oisf.net>
Tue, 28 Jan 2025 22:38:53 +0000 (16:38 -0600)
committerVictor Julien <victor@inliniac.net>
Wed, 5 Mar 2025 14:59:57 +0000 (15:59 +0100)
And rename the test to match the keyword.

Add ticket reference to README.

tests/dns/dns-response-rrname-sticky-buffer/README.md [new file with mode: 0644]
tests/dns/dns-response-rrname-sticky-buffer/test.rules [new file with mode: 0644]
tests/dns/dns-response-rrname-sticky-buffer/test.yaml [moved from tests/dns/dns-response-sticky-buffer/test.yaml with 100% similarity]
tests/dns/dns-response-sticky-buffer/README.md [deleted file]
tests/dns/dns-response-sticky-buffer/test.rules [deleted file]

diff --git a/tests/dns/dns-response-rrname-sticky-buffer/README.md b/tests/dns/dns-response-rrname-sticky-buffer/README.md
new file mode 100644 (file)
index 0000000..57d3444
--- /dev/null
@@ -0,0 +1,6 @@
+Test the 'dns.response.rrname' sticky buffer.
+
+This test verifies that data in a name field or an rdata field 
+of a DNS response will trigger a signature.
+
+Ticket: https://redmine.openinfosecfoundation.org/issues/7012
diff --git a/tests/dns/dns-response-rrname-sticky-buffer/test.rules b/tests/dns/dns-response-rrname-sticky-buffer/test.rules
new file mode 100644 (file)
index 0000000..688f5e6
--- /dev/null
@@ -0,0 +1,5 @@
+# Will alert on name field of Query section in response 
+alert dns any any -> any any (dns.response.rrname; content: "dne.oisf.net"; sid:1; rev:1;)
+
+# Will alert on rdata field of Authority section in response 
+alert dns any any -> any any (dns.response.rrname; content: "ns-110.awsdns-13.com"; sid:2; rev:1;)
diff --git a/tests/dns/dns-response-sticky-buffer/README.md b/tests/dns/dns-response-sticky-buffer/README.md
deleted file mode 100644 (file)
index 413a47f..0000000
+++ /dev/null
@@ -1,4 +0,0 @@
-Test the 'dns.response' sticky buffer.
-
-This test verifies that data in a name field or an rdata field 
-of a DNS response will trigger a signature.
\ No newline at end of file
diff --git a/tests/dns/dns-response-sticky-buffer/test.rules b/tests/dns/dns-response-sticky-buffer/test.rules
deleted file mode 100644 (file)
index 7b042d9..0000000
+++ /dev/null
@@ -1,5 +0,0 @@
-# Will alert on name field of Query section in response 
-alert dns any any -> any any (dns.response; content: "dne.oisf.net"; sid:1; rev:1;)
-
-# Will alert on rdata field of Authority section in response 
-alert dns any any -> any any (dns.response; content: "ns-110.awsdns-13.com"; sid:2; rev:1;)