From: Jason Ish Date: Wed, 8 Mar 2023 22:10:01 +0000 (-0600) Subject: tests/quic-ietf: fix test X-Git-Tag: suricata-6.0.12~19 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=refs%2Fpull%2F1158%2Fhead;p=thirdparty%2Fsuricata-verify.git tests/quic-ietf: fix test Suricata was matching on the wrong ja3. --- diff --git a/tests/quic-ietf/test.rules b/tests/quic-ietf/test.rules index 96a0bd4d6..996800ce4 100644 --- a/tests/quic-ietf/test.rules +++ b/tests/quic-ietf/test.rules @@ -1,3 +1,3 @@ alert quic any any -> any any (msg:"QUIC SNI"; quic.sni; content:"msquic.net"; sid:4;) -alert quic any any -> any any (msg:"QUIC JA3"; ja3.string; content:"771,4866,43-51-41"; sid:3;) +alert quic any any -> any any (msg:"QUIC JA3"; ja3s.string; content:"771,4866,43-51-41"; sid:3;) alert quic any any -> any any (msg:"QUIC JA3 HASH"; ja3.hash; content:"deadbeefdeadbeefdeadbeefdeadbeef"; sid:5;)