From: Philippe Antoine Date: Mon, 29 Sep 2025 13:28:42 +0000 (+0200) Subject: mime: adds test about quoted-printable X-Git-Tag: suricata-8.0.2~34 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=08656bfb7a240710818081e0ffe02fc3adaba0aa;p=thirdparty%2Fsuricata-verify.git mime: adds test about quoted-printable Ticket: 7950 --- diff --git a/tests/mime/mime-quoted-printable/README.md b/tests/mime/mime-quoted-printable/README.md new file mode 100644 index 000000000..0c3826def --- /dev/null +++ b/tests/mime/mime-quoted-printable/README.md @@ -0,0 +1,11 @@ +# Test Description + +Test mime quoted-printable processing + +## PCAP + +From https://redmine.openinfosecfoundation.org/issues/7950 + +## Related issues + +https://redmine.openinfosecfoundation.org/issues/7950 diff --git a/tests/mime/mime-quoted-printable/input.pcap b/tests/mime/mime-quoted-printable/input.pcap new file mode 100644 index 000000000..7ce724c35 Binary files /dev/null and b/tests/mime/mime-quoted-printable/input.pcap differ diff --git a/tests/mime/mime-quoted-printable/suricata.yaml b/tests/mime/mime-quoted-printable/suricata.yaml new file mode 100644 index 000000000..18985d608 --- /dev/null +++ b/tests/mime/mime-quoted-printable/suricata.yaml @@ -0,0 +1,23 @@ +%YAML 1.1 +--- + +outputs: + - eve-log: + enabled: yes + filetype: regular #regular|syslog|unix_dgram|unix_stream|redis + filename: eve.json + types: + - files: + force-hash: [sha256] + - smtp: + extended: yes # enable this for extended logging information + + +app-layer: + protocols: + smtp: + enabled: yes + # Configure SMTP-MIME Decoder + mime: + decode-mime: yes + decode-quoted-printable: yes diff --git a/tests/mime/mime-quoted-printable/test.yaml b/tests/mime/mime-quoted-printable/test.yaml new file mode 100644 index 000000000..f69a45a34 --- /dev/null +++ b/tests/mime/mime-quoted-printable/test.yaml @@ -0,0 +1,14 @@ +requires: + min-version: 9 + +args: +- -k none + +checks: +- filter: + count: 1 + match: + event_type: fileinfo + fileinfo.filename: related.patch + fileinfo.size: 34224 + fileinfo.sha256: 359641873610597882317aee0f72104ed54fe8aa82d6fa323a5418e4529bd3b9