nfs: add a test for nfsv2 logging

Ticket: 8222

diff --git a/tests/nfs2-log/README.md b/tests/nfs2-log/README.md
new file mode 100644 (file)
index 0000000..1ad5f72
--- /dev/null
+++ b/tests/nfs2-log/README.md
@@ -0,0 +1,11 @@
+## NFSv2 log
+
+This test validates the correct logging for NFSv2.
+
+## PCAP
+
+Reused
+
+##Ticket
+
+https://redmine.openinfosecfoundation.org/issues/8222

diff --git a/tests/nfs2-log/test.yaml b/tests/nfs2-log/test.yaml
new file mode 100644 (file)
index 0000000..33c812a
--- /dev/null
+++ b/tests/nfs2-log/test.yaml
@@ -0,0 +1,23 @@
+requires:
+  min-version: 9
+
+pcap: ../nfs-bug-5140/nfsv2.pcap
+
+args:
+  - -k none
+
+checks:
+  - filter:
+      count: 0
+      match:
+        event_type: nfs
+        nfs.version: 2
+        nfs.procedure: MKDIR
+        has-key: nfs.rename
+  - filter:
+      count: 1
+      match:
+        event_type: nfs
+        nfs.version: 2
+        nfs.procedure: RENAME
+        has-key: nfs.rename