tests/quic-ietf: fix test

Suricata was matching on the wrong ja3.

diff --git a/tests/quic-ietf/test.rules b/tests/quic-ietf/test.rules
index 96a0bd4d6987ff8595aed40226a67eddaa4b5bcd..996800ce44d5070de40be2535e4ae106bb4e3157 100644 (file)
--- a/tests/quic-ietf/test.rules
+++ b/tests/quic-ietf/test.rules
@@ -1,3 +1,3 @@
 alert quic any any -> any any (msg:"QUIC SNI"; quic.sni; content:"msquic.net"; sid:4;)
-alert quic any any -> any any (msg:"QUIC JA3"; ja3.string; content:"771,4866,43-51-41"; sid:3;)
+alert quic any any -> any any (msg:"QUIC JA3"; ja3s.string; content:"771,4866,43-51-41"; sid:3;)
 alert quic any any -> any any (msg:"QUIC JA3 HASH"; ja3.hash; content:"deadbeefdeadbeefdeadbeefdeadbeef"; sid:5;)