From: Jason Ish Date: Tue, 10 Dec 2024 20:40:35 +0000 (-0600) Subject: dns-rname-truncated: update for 7.0.8 backport X-Git-Tag: suricata-7.0.8~3 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=b12b26cdcc8ece5cf10ac1f5573bf059886c8680;p=thirdparty%2Fsuricata-verify.git dns-rname-truncated: update for 7.0.8 backport --- diff --git a/tests/dns/dns-truncated-rname/test.yaml b/tests/dns/dns-truncated-rname/test.yaml index 7b94f775c..bb1cd0afa 100644 --- a/tests/dns/dns-truncated-rname/test.yaml +++ b/tests/dns/dns-truncated-rname/test.yaml @@ -1,5 +1,5 @@ requires: - min-version: 8 + min-version: 7 args: - --set app-layer.protocols.dns.tcp.detection-ports.dp=1053 @@ -7,6 +7,8 @@ args: checks: - filter: + requires: + min-version: 8 count: 1 match: pcap_cnt: 8 @@ -14,9 +16,29 @@ checks: dns.queries[0].rrname.__len: 1025 dns.queries[0].rrname_truncated: true - filter: + requires: + lt-version: 8 + count: 1500 + match: + pcap_cnt: 8 + event_type: dns + dns.rrname.__len: 1025 + dns.rrname_truncated: true + - filter: + requires: + min-version: 8 count: 1 match: pcap_cnt: 9 event_type: alert alert.signature_id: 224008 dns.queries[0].rrname_truncated: true + - filter: + requires: + lt-version: 8 + count: 1 + match: + pcap_cnt: 9 + event_type: alert + alert.signature_id: 224008 + dns.query[0].rrname_truncated: true