tests: add tests for issue 3515

diff --git a/tests/bug-3515/test.rules b/tests/bug-3515/test.rules
new file mode 100644 (file)
index 0000000..e5cffc2
--- /dev/null
+++ b/tests/bug-3515/test.rules
@@ -0,0 +1 @@
+alert tcp any any -> any any (msg:"Test rule"; sid:1;)

diff --git a/tests/bug-3515/test.yaml b/tests/bug-3515/test.yaml
new file mode 100644 (file)
index 0000000..8def8b7
--- /dev/null
+++ b/tests/bug-3515/test.yaml
@@ -0,0 +1,12 @@
+requires:
+  # No pcap required.
+  pcap: false
+  min-version: 6
+
+args:
+  - --engine-analysis --set decoder.erspan.typeI.enabled=true
+
+checks:
+    - shell:
+        args: grep "SC_WARN_ERSPAN_CONFIG" suricata.log | wc -l | xargs
+        expect: 1