From: Juliana Fajardini <jufajardini@oisf.net>
Date: Thu, 23 Mar 2023 21:09:33 +0000 (-0300)
Subject: tests: test defrag exception policy with drop-flow
X-Git-Tag: suricata-6.0.12~9
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=fc68ce1b92695cb6774b6d3432e24dd2617de47f;p=thirdparty%2Fsuricata-verify.git

tests: test defrag exception policy with drop-flow

Defrag memcap and flow memcap do not support flow action for the
exception policies, as there is no flow when the exception condition is
hit. In such cases, the exception policy must be considered as
`drop-packet`. This commit changes the defrag exception policy test to
check if this behavior is working.
---

diff --git a/tests/exception-policy-defrag-01/test.yaml b/tests/exception-policy-defrag-01/test.yaml
index 02a87c3a8..22be53c71 100644
--- a/tests/exception-policy-defrag-01/test.yaml
+++ b/tests/exception-policy-defrag-01/test.yaml
@@ -8,7 +8,7 @@ args:
 - -k none
 # pretend pretend error in the first fragment
 - --simulate-packet-defrag-memcap=1
-- --set defrag.memcap-policy=drop-packet
+- --set defrag.memcap-policy=drop-flow
 checks:
   - filter:
       count: 0