From: Philippe Antoine Date: Thu, 17 Mar 2022 20:32:42 +0000 (+0100) Subject: Adds an smtp test X-Git-Tag: suricata-5.0.10~59 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=f6cc05bc24ea352a08c051a27c261e257938f5e4;p=thirdparty%2Fsuricata-verify.git Adds an smtp test Ticket: 4948 --- diff --git a/tests/smtp-rset-starttls/README.md b/tests/smtp-rset-starttls/README.md new file mode 100644 index 000000000..7db5cd249 --- /dev/null +++ b/tests/smtp-rset-starttls/README.md @@ -0,0 +1,7 @@ +# Description + +Test smtp against bug https://redmine.openinfosecfoundation.org/issues/4948 + +# PCAP + +The pcap comes from an oss-fuzz reproducer, and was crafted with fuzzpcap, to add the ehlo sequence to get first recognized as SMTP. diff --git a/tests/smtp-rset-starttls/input.pcap b/tests/smtp-rset-starttls/input.pcap new file mode 100644 index 000000000..40b998fa9 Binary files /dev/null and b/tests/smtp-rset-starttls/input.pcap differ diff --git a/tests/smtp-rset-starttls/test.yaml b/tests/smtp-rset-starttls/test.yaml new file mode 100644 index 000000000..4be4932ad --- /dev/null +++ b/tests/smtp-rset-starttls/test.yaml @@ -0,0 +1,13 @@ +requires: + features: + - HAVE_LIBJANSSON + +# disables checksum verification +args: + - -k none + +checks: + - filter: + count: 1 + match: + event_type: smtp