From: Jason Ish Date: Wed, 4 Dec 2024 17:45:38 +0000 (-0600) Subject: test: simple test for unknown requirements X-Git-Tag: suricata-7.0.8~15 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=61bba63475a38e762b13ce8a362dbabc163fc158;p=thirdparty%2Fsuricata-verify.git test: simple test for unknown requirements --- diff --git a/tests/requires-unknown/README.md b/tests/requires-unknown/README.md new file mode 100644 index 000000000..8da7368a5 --- /dev/null +++ b/tests/requires-unknown/README.md @@ -0,0 +1,4 @@ +Test that unknown requirements are treated as unsatisfied leading to the rule +being skipped. + +Simple standalone test. diff --git a/tests/requires-unknown/test.rules b/tests/requires-unknown/test.rules new file mode 100644 index 000000000..136269bc5 --- /dev/null +++ b/tests/requires-unknown/test.rules @@ -0,0 +1 @@ +alert http any any -> any any (content:"uid=0"; requires: foo bar; sid:9; rev:1;) diff --git a/tests/requires-unknown/test.yaml b/tests/requires-unknown/test.yaml new file mode 100644 index 000000000..4ac126a9d --- /dev/null +++ b/tests/requires-unknown/test.yaml @@ -0,0 +1,14 @@ +requires: + min-version: 7.0.8 + +pcap: ../eve-metadata/testmyids.pcap + +checks: + + - filter: + count: 1 + match: + event_type: stats + stats.detect.engines[0].rules_skipped: 1 + stats.detect.engines[0].rules_loaded: 0 + stats.detect.engines[0].rules_failed: 0