From: Philippe Antoine Date: Tue, 19 Sep 2023 08:30:03 +0000 (+0200) Subject: Adds test about mime when stream depth is reached X-Git-Tag: suricata-6.0.15~6 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=f0f14b2eb3e0da43c72874f5d3a1d8d88bd002f3;p=thirdparty%2Fsuricata-verify.git Adds test about mime when stream depth is reached --- diff --git a/tests/mime/mime-stream-depth/README.md b/tests/mime/mime-stream-depth/README.md new file mode 100644 index 000000000..54c2c5764 --- /dev/null +++ b/tests/mime/mime-stream-depth/README.md @@ -0,0 +1,8 @@ +# Description + +Test mime base64 decoding completeness when stream depth is reached +See https://redmine.openinfosecfoundation.org/issues/6367 + +# PCAP + +The pcap comes from QA TLPW1 diff --git a/tests/mime/mime-stream-depth/input.pcap b/tests/mime/mime-stream-depth/input.pcap new file mode 100644 index 000000000..b0d5e564d Binary files /dev/null and b/tests/mime/mime-stream-depth/input.pcap differ diff --git a/tests/mime/mime-stream-depth/test.yaml b/tests/mime/mime-stream-depth/test.yaml new file mode 100644 index 000000000..6c606db74 --- /dev/null +++ b/tests/mime/mime-stream-depth/test.yaml @@ -0,0 +1,18 @@ +requires: + min-version: 7 + +args: +- --set stream.reassembly.depth=1mb + +checks: + - filter: + count: 2 + match: + event_type: fileinfo + fileinfo.size: 326976 + - filter: + count: 1 + match: + event_type: fileinfo + fileinfo.size: 63891 + fileinfo.state: TRUNCATED