From: Philippe Antoine Date: Tue, 19 Sep 2023 08:01:54 +0000 (+0200) Subject: Adds test about pop3 protocol detection X-Git-Tag: suricata-6.0.20~44 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=8c7ad59efdb43f37f423128b0236f31175e257fc;p=thirdparty%2Fsuricata-verify.git Adds test about pop3 protocol detection --- diff --git a/tests/pop3/README.md b/tests/pop3/README.md new file mode 100644 index 000000000..52d4e532d --- /dev/null +++ b/tests/pop3/README.md @@ -0,0 +1,8 @@ +# Description + +Test pop3 protocol detection instead of FTP +See https://redmine.openinfosecfoundation.org/issues/6366 + +# PCAP + +The pcap comes from TLPW1 in QA diff --git a/tests/pop3/input.pcap b/tests/pop3/input.pcap new file mode 100644 index 000000000..2d3b923ff Binary files /dev/null and b/tests/pop3/input.pcap differ diff --git a/tests/pop3/test.yaml b/tests/pop3/test.yaml new file mode 100644 index 000000000..34a811b0c --- /dev/null +++ b/tests/pop3/test.yaml @@ -0,0 +1,9 @@ +requires: + min-version: 8 + +checks: + - filter: + count: 1 + match: + event_type: flow + app_proto: pop3