From: Victor Julien Date: Tue, 9 Sep 2025 19:45:25 +0000 (+0200) Subject: tests: add another test for 4702 X-Git-Tag: suricata-7.0.12~4 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=0d12c0129bce7460bbcd01181e46785bbedfa8a5;p=thirdparty%2Fsuricata-verify.git tests: add another test for 4702 Based on real traffic. --- diff --git a/tests/bug-4702-02/README.md b/tests/bug-4702-02/README.md new file mode 100644 index 000000000..f62e58f1b --- /dev/null +++ b/tests/bug-4702-02/README.md @@ -0,0 +1,4 @@ +PCAP +==== + +Pcap from https://redmine.openinfosecfoundation.org/issues/4702 diff --git a/tests/bug-4702-02/test.yaml b/tests/bug-4702-02/test.yaml new file mode 100644 index 000000000..c5fa03444 --- /dev/null +++ b/tests/bug-4702-02/test.yaml @@ -0,0 +1,17 @@ +requires: + min-version: 7 + +args: + - -k none + +checks: +- filter: + count: 1 + match: + event_type: tls + tls.sni: vlscppe.microsoft.com +- filter: + count: 1 + match: + event_type: flow + tcp.state: closed diff --git a/tests/bug-4702-02/tsecr.pcap b/tests/bug-4702-02/tsecr.pcap new file mode 100644 index 000000000..0f069b740 Binary files /dev/null and b/tests/bug-4702-02/tsecr.pcap differ