Adds an smtp test

Ticket: 4948

diff --git a/tests/smtp-rset-starttls/README.md b/tests/smtp-rset-starttls/README.md
new file mode 100644 (file)
index 0000000..7db5cd2
--- /dev/null
+++ b/tests/smtp-rset-starttls/README.md
@@ -0,0 +1,7 @@
+# Description
+
+Test smtp against bug https://redmine.openinfosecfoundation.org/issues/4948
+
+# PCAP
+
+The pcap comes from an oss-fuzz reproducer, and was crafted with fuzzpcap, to add the ehlo sequence to get first recognized as SMTP.

diff --git a/tests/smtp-rset-starttls/input.pcap b/tests/smtp-rset-starttls/input.pcap
new file mode 100644 (file)
index 0000000..40b998f
Binary files /dev/null and b/tests/smtp-rset-starttls/input.pcap differ

diff --git a/tests/smtp-rset-starttls/test.yaml b/tests/smtp-rset-starttls/test.yaml
new file mode 100644 (file)
index 0000000..4be4932
--- /dev/null
+++ b/tests/smtp-rset-starttls/test.yaml
@@ -0,0 +1,13 @@
+requires:
+  features:
+    - HAVE_LIBJANSSON
+
+# disables checksum verification
+args:
+  - -k none
+
+checks:
+  - filter:
+      count: 1 
+      match:
+        event_type: smtp