From: Victor Julien Date: Mon, 18 Jan 2021 09:36:16 +0000 (+0100) Subject: tests: add bug 1401 tests X-Git-Tag: suricata-6.0.4~191 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=51b3456e6e7af7ceb006e95a8fb06b831468a930;p=thirdparty%2Fsuricata-verify.git tests: add bug 1401 tests --- diff --git a/tests/bug-1401-01/1.rules b/tests/bug-1401-01/1.rules new file mode 100644 index 000000000..498391710 --- /dev/null +++ b/tests/bug-1401-01/1.rules @@ -0,0 +1 @@ +alert tcp 66.155.11.238 any -> any any (flags:SA; sid:1; rev:1;) diff --git a/tests/bug-1401-01/80000000-037-PTP_Example_IPv4_HTTP_Session-PUBLIC-tp-01-TEST1.pcap b/tests/bug-1401-01/80000000-037-PTP_Example_IPv4_HTTP_Session-PUBLIC-tp-01-TEST1.pcap new file mode 100644 index 000000000..33e84169d Binary files /dev/null and b/tests/bug-1401-01/80000000-037-PTP_Example_IPv4_HTTP_Session-PUBLIC-tp-01-TEST1.pcap differ diff --git a/tests/bug-1401-01/test.yaml b/tests/bug-1401-01/test.yaml new file mode 100644 index 000000000..273617c3e --- /dev/null +++ b/tests/bug-1401-01/test.yaml @@ -0,0 +1,11 @@ +requires: + features: + - HAVE_LIBJANSSON + +checks: + - filter: + count: 1 + match: + event_type: alert + alert.signature_id: 1 + diff --git a/tests/bug-1401-02/2.rules b/tests/bug-1401-02/2.rules new file mode 100644 index 000000000..e4b953a81 --- /dev/null +++ b/tests/bug-1401-02/2.rules @@ -0,0 +1 @@ +alert tcp 66.155.11.238 any -> any any (flow:to_client; flags:SA; sid:2; rev:1;) diff --git a/tests/bug-1401-02/80000000-037-PTP_Example_IPv4_HTTP_Session-PUBLIC-tp-01-TEST1.pcap b/tests/bug-1401-02/80000000-037-PTP_Example_IPv4_HTTP_Session-PUBLIC-tp-01-TEST1.pcap new file mode 100644 index 000000000..33e84169d Binary files /dev/null and b/tests/bug-1401-02/80000000-037-PTP_Example_IPv4_HTTP_Session-PUBLIC-tp-01-TEST1.pcap differ diff --git a/tests/bug-1401-02/test.yaml b/tests/bug-1401-02/test.yaml new file mode 100644 index 000000000..2bc44fe8a --- /dev/null +++ b/tests/bug-1401-02/test.yaml @@ -0,0 +1,13 @@ +requires: + features: + - HAVE_LIBJANSSON +args: +- --set stream.midstream=true + +checks: + - filter: + count: 1 + match: + event_type: alert + alert.signature_id: 2 + diff --git a/tests/bug-1401-03/1.rules b/tests/bug-1401-03/1.rules new file mode 100644 index 000000000..498391710 --- /dev/null +++ b/tests/bug-1401-03/1.rules @@ -0,0 +1 @@ +alert tcp 66.155.11.238 any -> any any (flags:SA; sid:1; rev:1;) diff --git a/tests/bug-1401-03/80000000-037-PTP_Example_IPv4_HTTP_Session-PUBLIC-tp-01.pcap b/tests/bug-1401-03/80000000-037-PTP_Example_IPv4_HTTP_Session-PUBLIC-tp-01.pcap new file mode 100644 index 000000000..4c85f66ff Binary files /dev/null and b/tests/bug-1401-03/80000000-037-PTP_Example_IPv4_HTTP_Session-PUBLIC-tp-01.pcap differ diff --git a/tests/bug-1401-03/test.yaml b/tests/bug-1401-03/test.yaml new file mode 100644 index 000000000..273617c3e --- /dev/null +++ b/tests/bug-1401-03/test.yaml @@ -0,0 +1,11 @@ +requires: + features: + - HAVE_LIBJANSSON + +checks: + - filter: + count: 1 + match: + event_type: alert + alert.signature_id: 1 + diff --git a/tests/bug-1401-04/2.rules b/tests/bug-1401-04/2.rules new file mode 100644 index 000000000..e4b953a81 --- /dev/null +++ b/tests/bug-1401-04/2.rules @@ -0,0 +1 @@ +alert tcp 66.155.11.238 any -> any any (flow:to_client; flags:SA; sid:2; rev:1;) diff --git a/tests/bug-1401-04/80000000-037-PTP_Example_IPv4_HTTP_Session-PUBLIC-tp-01.pcap b/tests/bug-1401-04/80000000-037-PTP_Example_IPv4_HTTP_Session-PUBLIC-tp-01.pcap new file mode 100644 index 000000000..4c85f66ff Binary files /dev/null and b/tests/bug-1401-04/80000000-037-PTP_Example_IPv4_HTTP_Session-PUBLIC-tp-01.pcap differ diff --git a/tests/bug-1401-04/test.yaml b/tests/bug-1401-04/test.yaml new file mode 100644 index 000000000..abe62baca --- /dev/null +++ b/tests/bug-1401-04/test.yaml @@ -0,0 +1,11 @@ +requires: + features: + - HAVE_LIBJANSSON + +checks: + - filter: + count: 1 + match: + event_type: alert + alert.signature_id: 2 +