]> git.ipfire.org Git - thirdparty/suricata-verify.git/log
thirdparty/suricata-verify.git
13 months agotests: fix order of mac address in nfs test for 7 1892/head
Philippe Antoine [Sun, 2 Jun 2024 19:37:28 +0000 (21:37 +0200)] 
tests: fix order of mac address in nfs test for 7

Ticket: 6690

13 months agotests/pgsql: add test for bug 6983 1890/head
Juliana Fajardini [Wed, 24 Apr 2024 00:43:58 +0000 (21:43 -0300)] 
tests/pgsql: add test for bug 6983

Related to
Bug #6983

14 months agotests: smtp frames tests 1883/head 1887/head
Victor Julien [Wed, 15 Nov 2023 10:18:27 +0000 (11:18 +0100)] 
tests: smtp frames tests

14 months agosmtp: adds test with To field having quotes, commas... 1882/head
Philippe Antoine [Thu, 30 May 2024 09:28:58 +0000 (11:28 +0200)] 
smtp: adds test with To field having quotes, commas...

Ticket: 3487

14 months agosmtp: extend test with smtp extended logging
Philippe Antoine [Thu, 23 May 2024 12:50:07 +0000 (14:50 +0200)] 
smtp: extend test with smtp extended logging

with custom fields, to cover more suricata code

14 months agosmtp/mime: update test to match new behavior
Philippe Antoine [Wed, 22 May 2024 20:39:50 +0000 (22:39 +0200)] 
smtp/mime: update test to match new behavior

Ticket: 3487

rust mime parser succeeds in parsing this traffic

14 months agotests: add lua output streaming test 1877/head
Victor Julien [Sat, 1 Jun 2024 14:09:09 +0000 (16:09 +0200)] 
tests: add lua output streaming test

14 months agotests: add lua stats test
Victor Julien [Sat, 1 Jun 2024 11:04:45 +0000 (13:04 +0200)] 
tests: add lua stats test

14 months agotests: fix order of mac address in nfs test
Eric Leblond [Sun, 25 Feb 2024 20:39:13 +0000 (21:39 +0100)] 
tests: fix order of mac address in nfs test

14 months agotests: add ethernet eve test
Eric Leblond [Mon, 30 Oct 2023 20:43:49 +0000 (21:43 +0100)] 
tests: add ethernet eve test

14 months agotests: fix dataset test on 6.0.x 1871/head
Victor Julien [Thu, 30 May 2024 07:58:41 +0000 (09:58 +0200)] 
tests: fix dataset test on 6.0.x

14 months agotests: add tls client cert match test 1866/head
Victor Julien [Sat, 25 May 2024 18:45:00 +0000 (20:45 +0200)] 
tests: add tls client cert match test

14 months agotests: tls store for client certs
Victor Julien [Sat, 25 May 2024 18:46:14 +0000 (20:46 +0200)] 
tests: tls store for client certs

14 months agotests: add tls-store test
Victor Julien [Sat, 25 May 2024 13:44:43 +0000 (15:44 +0200)] 
tests: add tls-store test

14 months agotest: test lua memory limit errors 1859/head 1861/head 1864/head
Jason Ish [Mon, 27 May 2024 21:54:53 +0000 (15:54 -0600)] 
test: test lua memory limit errors

14 months agotest: lua scripts exceeding the instruction limit
Jason Ish [Fri, 24 May 2024 22:02:43 +0000 (16:02 -0600)] 
test: lua scripts exceeding the instruction limit

14 months agotest: add lua test for blocked lua library
Jason Ish [Fri, 24 May 2024 17:09:36 +0000 (11:09 -0600)] 
test: add lua test for blocked lua library

14 months agorun.py: use single mode if -j1 and on Linux
Jason Ish [Fri, 24 May 2024 18:45:34 +0000 (12:45 -0600)] 
run.py: use single mode if -j1 and on Linux

Single mode can expose some errors that are hidden in mp mode, so it
can be useful to use even on Linux.

14 months agorun.py: add __startswith and __endswith for string matching
Jason Ish [Fri, 24 May 2024 17:09:07 +0000 (11:09 -0600)] 
run.py: add __startswith and __endswith for string matching

14 months agorule-grouping: update min-version 1854/head
Shivani Bhardwaj [Tue, 5 Mar 2024 07:01:52 +0000 (12:31 +0530)] 
rule-grouping: update min-version

14 months agotests: enable pcap tests for 7 1849/head 1852/head
Victor Julien [Thu, 23 May 2024 09:35:33 +0000 (11:35 +0200)] 
tests: enable pcap tests for 7

14 months agotests: enable ppp tests for 7
Victor Julien [Thu, 23 May 2024 09:33:51 +0000 (11:33 +0200)] 
tests: enable ppp tests for 7

14 months agotests: add pcap logging tests 1848/head
Victor Julien [Tue, 21 May 2024 07:51:01 +0000 (09:51 +0200)] 
tests: add pcap logging tests

14 months agotests: lz4 pcap write tests
Victor Julien [Mon, 20 May 2024 20:28:14 +0000 (22:28 +0200)] 
tests: lz4 pcap write tests

14 months agotls-subjectaltname: add tests 1846/head
Shivani Bhardwaj [Fri, 29 Mar 2024 12:23:34 +0000 (17:53 +0530)] 
tls-subjectaltname: add tests

Feature 5234

14 months agosmtp: adds test with data command being rejected 1845/head
Philippe Antoine [Sat, 30 Mar 2024 14:03:48 +0000 (15:03 +0100)] 
smtp: adds test with data command being rejected

Ticket: 6906

14 months agoAdds test about pop3 protocol detection
Philippe Antoine [Tue, 19 Sep 2023 08:01:54 +0000 (10:01 +0200)] 
Adds test about pop3 protocol detection

14 months agoAdds a test case for uri with space in it 1838/head
Philippe Antoine [Tue, 2 Apr 2019 10:23:45 +0000 (12:23 +0200)] 
Adds a test case for uri with space in it

14 months agotest: lua-rule-errors 1835/head
Jason Ish [Tue, 7 May 2024 16:43:27 +0000 (10:43 -0600)] 
test: lua-rule-errors

Test for correct behvaior when a Lua rule crashes.

On crash, a Lua script should not result in a match when negation is
applied. Also test for:
- error stat
- one time logging per thread

Ticket: #6940

14 months agoreadme: add example for __find
Jason Ish [Tue, 7 May 2024 16:42:54 +0000 (10:42 -0600)] 
readme: add example for __find

__find can be used to search for a substring in a json field.

14 months agoarp: add tests 1833/head
Giuseppe Longo [Mon, 4 Mar 2024 12:27:34 +0000 (13:27 +0100)] 
arp: add tests

14 months agodetect: add a test for protocol mismatch detection 1832/head
Philippe Antoine [Tue, 7 May 2024 07:06:15 +0000 (09:06 +0200)] 
detect: add a test for protocol mismatch detection

Ticket: #4921

14 months agodetect: add a tests for original protocol matching
Philippe Antoine [Tue, 7 May 2024 07:01:17 +0000 (09:01 +0200)] 
detect: add a tests for original protocol matching

Ticket: #4921

14 months agotests: add tests for negated protocol matching
Victor Julien [Tue, 21 Dec 2021 09:07:01 +0000 (10:07 +0100)] 
tests: add tests for negated protocol matching

Ticket: #4921

14 months agowebsocket: adds test for ping/pong opcodes 1831/head
Philippe Antoine [Tue, 14 May 2024 12:12:45 +0000 (14:12 +0200)] 
websocket: adds test for ping/pong opcodes

Ticket: 7025

14 months agowebsocket: checks alert app-layer metadata for frames
Philippe Antoine [Fri, 26 Apr 2024 08:43:42 +0000 (10:43 +0200)] 
websocket: checks alert app-layer metadata for frames

Ticket: 6973

14 months agoadd tests for bug 5220 1821/head
Shivani Bhardwaj [Thu, 14 Dec 2023 13:16:25 +0000 (18:46 +0530)] 
add tests for bug 5220

15 months agoetopen: use latest emerging-all rules 1818/head
Shivani Bhardwaj [Fri, 3 May 2024 09:19:57 +0000 (14:49 +0530)] 
etopen: use latest emerging-all rules

15 months agotests: require 7 for iprep tests 1817/head
Victor Julien [Thu, 2 May 2024 09:43:12 +0000 (11:43 +0200)] 
tests: require 7 for iprep tests

15 months agosnmp: adds test for community keyword 1815/head
Philippe Antoine [Fri, 26 Apr 2024 14:25:18 +0000 (16:25 +0200)] 
snmp: adds test for community keyword

as was done by unit test DetectSNMPCommunityTest

15 months agotests: enable datalink/defrag tests for 6.0.x
Victor Julien [Wed, 17 Apr 2024 15:02:29 +0000 (17:02 +0200)] 
tests: enable datalink/defrag tests for 6.0.x

15 months agohttp: adds test about decompression
Philippe Antoine [Tue, 16 Apr 2024 20:55:38 +0000 (22:55 +0200)] 
http: adds test about decompression

Ticket: 6959

15 months agoframework: bump jsonschema crate to v0.17
Philippe Antoine [Fri, 12 Apr 2024 08:47:18 +0000 (10:47 +0200)] 
framework: bump jsonschema crate to v0.17

So that it can compile without failing on
error[E0635]: unknown feature `stdsimd`
  --> .cargo/registry/src/index.crates.io-6f17d22bba15001f/ahash-0.7.6/src/lib.rs:33:42
   |
33 | #![cfg_attr(feature = "stdsimd", feature(stdsimd))]
   |                                          ^^^^^^^

15 months agotests: add bug 2576 tests
Victor Julien [Tue, 30 Jan 2024 19:14:58 +0000 (20:14 +0100)] 
tests: add bug 2576 tests

15 months agohttp: adds test with HTTP not being 0.9
Philippe Antoine [Mon, 11 Mar 2024 10:14:36 +0000 (11:14 +0100)] 
http: adds test with HTTP not being 0.9

Ticket: 6757

In the case we have too many whitespaces after the request

15 months agotests: add bug 1449 test
Victor Julien [Mon, 27 Nov 2023 09:23:21 +0000 (10:23 +0100)] 
tests: add bug 1449 test

Was private at the time but no need to keep it private.

15 months agotests: add tests for iprep bug 6834 1811/head 1813/head
Victor Julien [Thu, 25 Apr 2024 15:29:54 +0000 (17:29 +0200)] 
tests: add tests for iprep bug 6834

15 months agotls/random: set min version to 7 1806/head 1809/head
Shivani Bhardwaj [Mon, 29 Apr 2024 06:13:28 +0000 (11:43 +0530)] 
tls/random: set min version to 7

15 months agotls/random: improve rules w direction 1805/head
Shivani Bhardwaj [Fri, 26 Apr 2024 07:28:29 +0000 (12:58 +0530)] 
tls/random: improve rules w direction

15 months agotls/random: add tests for bug 6989
Shivani Bhardwaj [Fri, 26 Apr 2024 07:21:23 +0000 (12:51 +0530)] 
tls/random: add tests for bug 6989

15 months agotests: Update min-version for 6.0.x testing 1803/head
Jeff Lucovsky [Wed, 24 Apr 2024 13:51:52 +0000 (09:51 -0400)] 
tests: Update min-version for 6.0.x testing

Issue: 5578

Update the min-version so the 6.0.x change will be tested.

15 months agotests: add bug 5578 traffic test
Victor Julien [Tue, 4 Jul 2023 09:39:51 +0000 (11:39 +0200)] 
tests: add bug 5578 traffic test

15 months agotests: add bug 5578 parsing test
Victor Julien [Tue, 4 Jul 2023 09:39:28 +0000 (11:39 +0200)] 
tests: add bug 5578 parsing test

15 months agosdp: add test 1797/head
Giuseppe Longo [Mon, 18 Mar 2024 08:27:02 +0000 (09:27 +0100)] 
sdp: add test

This adds a test for SDP protocol.

15 months agohttp: backports for http.response_body 1792/head 1793/head suricata-6.0.19 suricata-7.0.5
Philippe Antoine [Sat, 20 Apr 2024 08:28:43 +0000 (10:28 +0200)] 
http: backports for http.response_body

Ticket: 6948

15 months agotests: add rule to check for http.response_body 1791/head
Philippe Antoine [Thu, 18 Apr 2024 12:57:46 +0000 (14:57 +0200)] 
tests: add rule to check for http.response_body

Ticket: 6948

15 months agohttp: test FP for http.response_body
Philippe Antoine [Fri, 12 Apr 2024 10:56:17 +0000 (12:56 +0200)] 
http: test FP for http.response_body

Ticket: 6948

We should not match on request body

15 months agotests: update eve config stats option term
Juliana Fajardini [Wed, 17 Apr 2024 00:44:06 +0000 (21:44 -0300)] 
tests: update eve config stats option term

Replaced `zero-valued-counters` for eve-log.stats counters options with
the same term used for the pre-dated similar option for stats.log
output.

Task #6962

15 months agodetect/ipopts: Support 7.0.x 1785/head 1790/head
Jeff Lucovsky [Thu, 18 Apr 2024 13:06:24 +0000 (09:06 -0400)] 
detect/ipopts: Support 7.0.x

This commit resets the min-version to 7.0.5 to support the backport
(issue 6882).

15 months agodetect/ipopts: IP option tests 1780/head
Jeff Lucovsky [Thu, 21 Mar 2024 13:25:49 +0000 (09:25 -0400)] 
detect/ipopts: IP option tests

15 months agoAdds test for websocket 1777/head
Philippe Antoine [Wed, 6 Dec 2023 21:07:02 +0000 (22:07 +0100)] 
Adds test for websocket

Ticket: 2695

15 months agotests: enable datalink/defrag tests for 7.0.x 1772/head
Victor Julien [Mon, 15 Apr 2024 11:53:41 +0000 (13:53 +0200)] 
tests: enable datalink/defrag tests for 7.0.x

15 months agotests/pgsql: add checks and test for bug 6092 1771/head
Juliana Fajardini [Mon, 15 Apr 2024 23:19:54 +0000 (20:19 -0300)] 
tests/pgsql: add checks and test for bug 6092

Ensure that pgsql metadata flags (for now, just setting whether
passwords should be logged or not) are properly processed by Suri and
logging functions.

Related to
Bug #6092

15 months agoja4: adjust and add tests
Sascha Steinbiss [Mon, 4 Mar 2024 18:22:40 +0000 (19:22 +0100)] 
ja4: adjust and add tests

15 months agoja3: adjust and add tests
Sascha Steinbiss [Mon, 4 Mar 2024 18:22:16 +0000 (19:22 +0100)] 
ja3: adjust and add tests

15 months agotests: add defrag datalink tests 1769/head
Victor Julien [Fri, 12 Apr 2024 09:09:01 +0000 (11:09 +0200)] 
tests: add defrag datalink tests

Bug: 6887.

15 months agotests: add rule to check for tcp_mss
Daniel Olatunji [Mon, 13 Nov 2023 11:57:31 +0000 (11:57 +0000)] 
tests: add rule to check for tcp_mss

Related to
Issue: #6355

15 months agoadd test for base64_data w fast_pattern 1767/head
Shivani Bhardwaj [Wed, 3 Apr 2024 07:13:40 +0000 (12:43 +0530)] 
add test for base64_data w fast_pattern

Bug 6859

15 months agotest/memcap: Validate memcap pressure values 1763/head
Jeff Lucovsky [Sun, 24 Mar 2024 12:17:31 +0000 (08:17 -0400)] 
test/memcap: Validate memcap pressure values

Issue: 6398

This test validates that the memcap pressure stats are no longer in the
global namespace.

Old:
- memcap_pressure
- memcap_pressure_max

New:
- memcap.pressure
- memcap.pressure_max

15 months agotests: add checks for hiding zero counter stats 1753/head
Juliana Fajardini [Wed, 3 Apr 2024 23:13:18 +0000 (20:13 -0300)] 
tests: add checks for hiding zero counter stats

Task #5976

15 months agotests/exception-policy/stats: fix app-layer test
Juliana Fajardini [Thu, 11 Apr 2024 20:17:11 +0000 (17:17 -0300)] 
tests/exception-policy/stats: fix app-layer test

exception-policy-applayer-03 was missing the checks for exception-policy
per-appproto errors.

15 months agotests: check exception policy stats counters 1752/head
Juliana Fajardini [Fri, 17 Feb 2023 20:28:02 +0000 (17:28 -0300)] 
tests: check exception policy stats counters

Edit the existing exception policy tests to check for the new exception
policy stats counters.

Add two more tests, to showcase behavior for exception policy stats
counters when set up to log counters for each app-proto error and
zero-valued counters are enabled (default behavior).

Ticket #5816

15 months agotests: add rule to check for tcp_seq 1750/head 1751/head
Daniel Olatunji [Wed, 31 Jan 2024 15:29:16 +0000 (16:29 +0100)] 
tests: add rule to check for tcp_seq

Related to
Issue: 6353

15 months agotests: add rule to check for tcp/ack 1749/head
Daniel Olatunji [Wed, 31 Jan 2024 15:37:54 +0000 (16:37 +0100)] 
tests: add rule to check for tcp/ack

Related to
Issue: 6354

16 months agorule-grouping: add boundary port tests 1730/head 1731/head
Shivani Bhardwaj [Mon, 25 Mar 2024 13:35:47 +0000 (19:05 +0530)] 
rule-grouping: add boundary port tests

16 months agoport-grouping: add tests for bug 6881 and more 1725/head
Shivani Bhardwaj [Thu, 21 Mar 2024 09:17:39 +0000 (14:47 +0530)] 
port-grouping: add tests for bug 6881 and more

16 months agotests: add bug 6875 test 1717/head
Victor Julien [Wed, 20 Mar 2024 07:17:06 +0000 (08:17 +0100)] 
tests: add bug 6875 test

16 months agotests: update drop and ssh tests for 7 1712/head 1715/head suricata-6.0.17 suricata-7.0.4
Victor Julien [Mon, 18 Mar 2024 16:13:56 +0000 (17:13 +0100)] 
tests: update drop and ssh tests for 7

16 months agoAdds test about ssh new keys 1710/head
Philippe Antoine [Mon, 27 Nov 2023 16:28:47 +0000 (17:28 +0100)] 
Adds test about ssh new keys

Ticket: 6578

16 months agodrop: adds test with a protocol change
Philippe Antoine [Mon, 29 Jan 2024 14:24:47 +0000 (15:24 +0100)] 
drop: adds test with a protocol change

Ticket: 6305

16 months agotests: add frame gap logging tests 1708/head
Victor Julien [Fri, 24 Nov 2023 11:06:19 +0000 (12:06 +0100)] 
tests: add frame gap logging tests

16 months agotests: add various eve payload representation tests
Victor Julien [Mon, 20 Nov 2023 12:25:24 +0000 (13:25 +0100)] 
tests: add various eve payload representation tests

Overlaps and gaps.

16 months agohttp: adds check for request line missing protocol 1705/head 1706/head 1707/head
Philippe Antoine [Wed, 13 Mar 2024 20:33:02 +0000 (21:33 +0100)] 
http: adds check for request line missing protocol

This generates an anomaly

Ticket: 6856

16 months agorule-grouping: add edge case test 1694/head
Shivani Bhardwaj [Sat, 9 Mar 2024 04:19:13 +0000 (09:49 +0530)] 
rule-grouping: add edge case test

17 months agotest: add test for dns.rcode 1687/head 1693/head
Hadiqa Alamdar Bukhari [Tue, 26 Dec 2023 10:00:08 +0000 (15:00 +0500)] 
test: add test for dns.rcode

Feature #6621

17 months agodetect/port: add rule grouping tests 1678/head 1680/head
Shivani Bhardwaj [Wed, 21 Feb 2024 09:50:42 +0000 (15:20 +0530)] 
detect/port: add rule grouping tests

17 months agotest: add test for dns.rrtype 1675/head
Hadiqa Alamdar Bukhari [Fri, 2 Feb 2024 13:38:49 +0000 (18:38 +0500)] 
test: add test for dns.rrtype

Feature #6666

17 months agosip: add tests for sip over tcp 1672/head
Giuseppe Longo [Thu, 13 Apr 2023 16:59:03 +0000 (18:59 +0200)] 
sip: add tests for sip over tcp

17 months agomqtt: frameswith multiple PDUs backport 1669/head
Philippe Antoine [Thu, 22 Feb 2024 20:35:06 +0000 (21:35 +0100)] 
mqtt: frameswith multiple PDUs  backport

Ticket: 6592

17 months agodns: adds test for sshfp 1663/head
Philippe Antoine [Thu, 18 Jan 2024 12:39:47 +0000 (13:39 +0100)] 
dns: adds test for sshfp

17 months agotcp: add a SYN packet test to verify correct flow output 1659/head 1660/head
Lukas Sismis [Tue, 6 Feb 2024 10:54:03 +0000 (11:54 +0100)] 
tcp: add a SYN packet test to verify correct flow output

Ticket: #6733

17 months agohttp: adds another test for http.request_header keyword 1652/head
Philippe Antoine [Wed, 14 Feb 2024 21:16:28 +0000 (22:16 +0100)] 
http: adds another test for http.request_header keyword

Ticket: 6483

17 months agossh: do not enforce pcap_cnt
Philippe Antoine [Tue, 6 Feb 2024 13:52:15 +0000 (14:52 +0100)] 
ssh: do not enforce pcap_cnt

As this is an invalid tcp packet, that should not run any tx
detection on it.

Ticket: 6775

17 months agohttp2: adds test with continuation frames
Philippe Antoine [Thu, 25 Jan 2024 15:00:02 +0000 (16:00 +0100)] 
http2: adds test with continuation frames

Ticket: 5926

17 months agohttp: adds test with chunked as a token
Philippe Antoine [Mon, 12 Feb 2024 13:02:40 +0000 (14:02 +0100)] 
http: adds test with chunked as a token

Ticket: 6415

17 months agofilestore: directionality fix backported to 7 1650/head 1651/head
Philippe Antoine [Thu, 15 Feb 2024 08:24:30 +0000 (09:24 +0100)] 
filestore: directionality fix backported to 7

17 months agoadd test for bug 6617 1649/head
Shivani Bhardwaj [Mon, 18 Dec 2023 08:16:03 +0000 (13:46 +0530)] 
add test for bug 6617

17 months agotest/mqtt: Improve multi PDU parsing 1647/head
Jeff Lucovsky [Wed, 24 Jan 2024 14:43:25 +0000 (09:43 -0500)] 
test/mqtt: Improve multi PDU parsing

Issue: 6592

17 months agocheck-eve: open files with utf-8 encoding 1645/head 1646/head
Jason Ish [Mon, 12 Feb 2024 15:54:07 +0000 (09:54 -0600)] 
check-eve: open files with utf-8 encoding

Not needed in modern versions of Python, but required for older
versions like 3.6.

17 months agoAdds test for http.request_header and http.response_header keywords 1638/head
Philippe Antoine [Fri, 9 Feb 2024 16:30:29 +0000 (17:30 +0100)] 
Adds test for http.request_header and http.response_header keywords

Ticket: 6736