From: Philippe Antoine Date: Fri, 28 Oct 2022 20:09:45 +0000 (+0200) Subject: quic: adds signature for parsing check X-Git-Tag: suricata-6.0.9~8 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=fa0550a6ff9060dc5d0e0cbfb9d5b4655914c188;p=thirdparty%2Fsuricata-verify.git quic: adds signature for parsing check --- diff --git a/tests/quic-ietf/test.rules b/tests/quic-ietf/test.rules index 25d1489ab..96a0bd4d6 100644 --- a/tests/quic-ietf/test.rules +++ b/tests/quic-ietf/test.rules @@ -1,2 +1,3 @@ alert quic any any -> any any (msg:"QUIC SNI"; quic.sni; content:"msquic.net"; sid:4;) alert quic any any -> any any (msg:"QUIC JA3"; ja3.string; content:"771,4866,43-51-41"; sid:3;) +alert quic any any -> any any (msg:"QUIC JA3 HASH"; ja3.hash; content:"deadbeefdeadbeefdeadbeefdeadbeef"; sid:5;)