From: jason taylor Date: Sat, 18 May 2019 23:55:53 +0000 (-0400) Subject: tests: update checks for suricata PR #3865 X-Git-Tag: suricata-6.0.4~431 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=9af6f84344349daf7d0c00aac1ac83ed14e21ac3;p=thirdparty%2Fsuricata-verify.git tests: update checks for suricata PR #3865 Signed-off-by: jason taylor --- diff --git a/tests/test-bad-content-dsize-rule-1/test.yaml b/tests/test-bad-content-dsize-rule-1/test.yaml index 0c2b42070..731ffe9ac 100644 --- a/tests/test-bad-content-dsize-rule-1/test.yaml +++ b/tests/test-bad-content-dsize-rule-1/test.yaml @@ -14,7 +14,7 @@ checks: count: 1 match: event_type: engine - engine.message: "signature can't match as content length 30 is bigger than dsize 10" + engine.message: "signature can't match as content length 30 is bigger than dsize 10." - filter: count: 1 diff --git a/tests/test-bad-depth-rule-1/test.yaml b/tests/test-bad-depth-rule-1/test.yaml index 1ea80b3ce..170142ec1 100644 --- a/tests/test-bad-depth-rule-1/test.yaml +++ b/tests/test-bad-depth-rule-1/test.yaml @@ -14,7 +14,7 @@ checks: count: 1 match: event_type: engine - engine.message: "depth needs preceding content, uricontent option, http_client_body, http_server_body, http_header option, http_raw_header option, http_method option, http_cookie, http_raw_uri, http_stat_msg, http_stat_code, http_user_agent, http_host, http_raw_host or file_data/dce_stub_data sticky buffer options" + engine.message: "depth needs preceding content, uricontent option, http_client_body, http_server_body, http_header option, http_raw_header option, http_method option, http_cookie, http_raw_uri, http_stat_msg, http_stat_code, http_user_agent, http_host, http_raw_host or file_data/dce_stub_data sticky buffer options." - filter: count: 1 diff --git a/tests/test-bad-depth-within-rule-2/test.yaml b/tests/test-bad-depth-within-rule-2/test.yaml index 1ea80b3ce..170142ec1 100644 --- a/tests/test-bad-depth-within-rule-2/test.yaml +++ b/tests/test-bad-depth-within-rule-2/test.yaml @@ -14,7 +14,7 @@ checks: count: 1 match: event_type: engine - engine.message: "depth needs preceding content, uricontent option, http_client_body, http_server_body, http_header option, http_raw_header option, http_method option, http_cookie, http_raw_uri, http_stat_msg, http_stat_code, http_user_agent, http_host, http_raw_host or file_data/dce_stub_data sticky buffer options" + engine.message: "depth needs preceding content, uricontent option, http_client_body, http_server_body, http_header option, http_raw_header option, http_method option, http_cookie, http_raw_uri, http_stat_msg, http_stat_code, http_user_agent, http_host, http_raw_host or file_data/dce_stub_data sticky buffer options." - filter: count: 1 diff --git a/tests/test-bad-dsize-offset-rule-1/test.yaml b/tests/test-bad-dsize-offset-rule-1/test.yaml index b06caec90..38872131f 100644 --- a/tests/test-bad-dsize-offset-rule-1/test.yaml +++ b/tests/test-bad-dsize-offset-rule-1/test.yaml @@ -14,7 +14,7 @@ checks: count: 1 match: event_type: engine - engine.message: "signature can't match as content length 2 with offset 100 (=102) is bigger than dsize 50" + engine.message: "signature can't match as content length 2 with offset 100 (=102) is bigger than dsize 50." - filter: count: 1 diff --git a/tests/test-bad-dsize-range-offset-rule-1/test.yaml b/tests/test-bad-dsize-range-offset-rule-1/test.yaml index bd4957956..c508dc66a 100644 --- a/tests/test-bad-dsize-range-offset-rule-1/test.yaml +++ b/tests/test-bad-dsize-range-offset-rule-1/test.yaml @@ -14,7 +14,7 @@ checks: count: 1 match: event_type: engine - engine.message: "signature can't match as content length 4 with offset 8 (=12) is bigger than dsize 10" + engine.message: "signature can't match as content length 4 with offset 8 (=12) is bigger than dsize 10." - filter: count: 1 diff --git a/tests/test-bad-dsize-range-rule-1/test.yaml b/tests/test-bad-dsize-range-rule-1/test.yaml index 0c2b42070..731ffe9ac 100644 --- a/tests/test-bad-dsize-range-rule-1/test.yaml +++ b/tests/test-bad-dsize-range-rule-1/test.yaml @@ -14,7 +14,7 @@ checks: count: 1 match: event_type: engine - engine.message: "signature can't match as content length 30 is bigger than dsize 10" + engine.message: "signature can't match as content length 30 is bigger than dsize 10." - filter: count: 1 diff --git a/tests/test-bad-offset-offset-rule-1/test.yaml b/tests/test-bad-offset-offset-rule-1/test.yaml index 7334d104f..d84904ca3 100644 --- a/tests/test-bad-offset-offset-rule-1/test.yaml +++ b/tests/test-bad-offset-offset-rule-1/test.yaml @@ -14,7 +14,7 @@ checks: count: 1 match: event_type: engine - engine.message: "can't use multiple offsets for the same content. " + engine.message: "can't use multiple offsets for the same content." - filter: count: 1