]> git.ipfire.org Git - thirdparty/suricata-verify.git/commitdiff
nsh: Add tests for NSH headers types 1 and 2
authorCarl Smith <carl@eclb.co.nz>
Tue, 18 Aug 2020 00:05:01 +0000 (12:05 +1200)
committerVictor Julien <victor@inliniac.net>
Thu, 31 Dec 2020 11:17:28 +0000 (12:17 +0100)
tests/decode-nsh-type1/README.md [new file with mode: 0644]
tests/decode-nsh-type1/input.pcap [new file with mode: 0644]
tests/decode-nsh-type1/test.yaml [new file with mode: 0644]
tests/decode-nsh-type2/README.md [new file with mode: 0644]
tests/decode-nsh-type2/input.pcap [new file with mode: 0644]
tests/decode-nsh-type2/test.yaml [new file with mode: 0644]

diff --git a/tests/decode-nsh-type1/README.md b/tests/decode-nsh-type1/README.md
new file mode 100644 (file)
index 0000000..80c575f
--- /dev/null
@@ -0,0 +1,3 @@
+NSH - Network Service Header (https://tools.ietf.org/html/rfc8300)
+Ensure NSH Type 1 headers are decoded.
+Type 1 headers have a fixed-Length context header (16-bytes).
diff --git a/tests/decode-nsh-type1/input.pcap b/tests/decode-nsh-type1/input.pcap
new file mode 100644 (file)
index 0000000..5e09725
Binary files /dev/null and b/tests/decode-nsh-type1/input.pcap differ
diff --git a/tests/decode-nsh-type1/test.yaml b/tests/decode-nsh-type1/test.yaml
new file mode 100644 (file)
index 0000000..ad7ddc6
--- /dev/null
@@ -0,0 +1,20 @@
+requires:
+    min-version: 6
+
+args:
+- -k none
+
+checks:
+  - filter:
+      count: 1
+      match:
+        event_type: flow
+  - filter:
+      count: 1
+      match:
+        event_type: stats
+  - stats:
+      decoder.ethernet: 1
+      decoder.nsh: 1
+      decoder.ipv4: 1
+      decoder.udp: 1
\ No newline at end of file
diff --git a/tests/decode-nsh-type2/README.md b/tests/decode-nsh-type2/README.md
new file mode 100644 (file)
index 0000000..e101ca3
--- /dev/null
@@ -0,0 +1,3 @@
+NSH - Network Service Header (https://tools.ietf.org/html/rfc8300)
+Ensure NSH Type 2 headers are decoded.
+Type 2 headers have zero or more variable-length context headers.
diff --git a/tests/decode-nsh-type2/input.pcap b/tests/decode-nsh-type2/input.pcap
new file mode 100644 (file)
index 0000000..820f93e
Binary files /dev/null and b/tests/decode-nsh-type2/input.pcap differ
diff --git a/tests/decode-nsh-type2/test.yaml b/tests/decode-nsh-type2/test.yaml
new file mode 100644 (file)
index 0000000..ad7ddc6
--- /dev/null
@@ -0,0 +1,20 @@
+requires:
+    min-version: 6
+
+args:
+- -k none
+
+checks:
+  - filter:
+      count: 1
+      match:
+        event_type: flow
+  - filter:
+      count: 1
+      match:
+        event_type: stats
+  - stats:
+      decoder.ethernet: 1
+      decoder.nsh: 1
+      decoder.ipv4: 1
+      decoder.udp: 1
\ No newline at end of file