From: Jason Ish Date: Mon, 23 Aug 2021 22:58:32 +0000 (-0600) Subject: requires: document per-check requires with a test conversion X-Git-Tag: suricata-6.0.4~68 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=4c1bd1652406f04e95abc485a30c1695d5d89c0e;p=thirdparty%2Fsuricata-verify.git requires: document per-check requires with a test conversion --- diff --git a/README.md b/README.md index d738c44e6..e03860333 100644 --- a/README.md +++ b/README.md @@ -101,8 +101,12 @@ checks: # A verification filter that is run over the eve.json. Multiple # filters may exist and all must pass for the test to pass. - filter: - # Additional feature needed to run this specific filter - feature: HTTP2_DECOMPRESSION + + # Requires that apply just to this check. Has all the same options + # as the test level requires above. + requires: + features: + - HTTP2_DECOMPRESSION # The number of records this filter should match. count: 1 diff --git a/tests/http2-bugfixes/test.yaml b/tests/http2-bugfixes/test.yaml index 85602dcc1..8e1ccd9fb 100644 --- a/tests/http2-bugfixes/test.yaml +++ b/tests/http2-bugfixes/test.yaml @@ -16,14 +16,16 @@ checks: event_type: anomaly # check gzip decompresser - filter: - feature: HTTP2_DECOMPRESSION + requires: + features: [HTTP2_DECOMPRESSION] count: 1 match: event_type: fileinfo fileinfo.size: 639 # check brotli decompresser - filter: - feature: HTTP2_DECOMPRESSION + requires: + features: [HTTP2_DECOMPRESSION] count: 1 match: event_type: fileinfo