]> git.ipfire.org Git - thirdparty/suricata-verify.git/commitdiff
Adds http2 test against Suricata bug fixes
authorPhilippe Antoine <contact@catenacyber.fr>
Fri, 18 Sep 2020 06:15:44 +0000 (08:15 +0200)
committerVictor Julien <victor@inliniac.net>
Tue, 6 Oct 2020 09:27:12 +0000 (11:27 +0200)
tests/http2-bugfixes/README.md [new file with mode: 0644]
tests/http2-bugfixes/input.pcap [new file with mode: 0644]
tests/http2-bugfixes/suricata.yaml [new file with mode: 0644]
tests/http2-bugfixes/test.yaml [new file with mode: 0644]

diff --git a/tests/http2-bugfixes/README.md b/tests/http2-bugfixes/README.md
new file mode 100644 (file)
index 0000000..70744c7
--- /dev/null
@@ -0,0 +1,7 @@
+# Description
+
+Test http2 bug fixes
+
+# PCAP
+
+The pcap comes from some SSL decrypt application
diff --git a/tests/http2-bugfixes/input.pcap b/tests/http2-bugfixes/input.pcap
new file mode 100644 (file)
index 0000000..40e77a5
Binary files /dev/null and b/tests/http2-bugfixes/input.pcap differ
diff --git a/tests/http2-bugfixes/suricata.yaml b/tests/http2-bugfixes/suricata.yaml
new file mode 100644 (file)
index 0000000..0b72e6c
--- /dev/null
@@ -0,0 +1,15 @@
+%YAML 1.1
+---
+
+outputs:
+  - eve-log:
+      enabled: true
+      types:
+        - alert
+        - http2
+        - anomaly
+
+app-layer:
+  protocols:
+    http2:
+      enabled: true
diff --git a/tests/http2-bugfixes/test.yaml b/tests/http2-bugfixes/test.yaml
new file mode 100644 (file)
index 0000000..8db25b0
--- /dev/null
@@ -0,0 +1,16 @@
+requires:
+  features:
+    - HAVE_LIBJANSSON
+  min-version: 6.0.0
+
+# disables checksum verification
+args:
+  - -k none
+
+checks:
+
+  # Check that there is no anomaly in HTTP2 parsing
+  - filter:
+      count: 0
+      match:
+        event_type: anomaly