]>
git.ipfire.org Git - thirdparty/suricata-verify.git/log
Philippe Antoine [Sun, 2 Jun 2024 19:37:28 +0000 (21:37 +0200)]
tests: fix order of mac address in nfs test for 7
Ticket: 6690
Juliana Fajardini [Wed, 24 Apr 2024 00:43:58 +0000 (21:43 -0300)]
tests/pgsql: add test for bug 6983
Related to
Bug #6983
Victor Julien [Wed, 15 Nov 2023 10:18:27 +0000 (11:18 +0100)]
tests: smtp frames tests
Philippe Antoine [Thu, 30 May 2024 09:28:58 +0000 (11:28 +0200)]
smtp: adds test with To field having quotes, commas...
Ticket: 3487
Philippe Antoine [Thu, 23 May 2024 12:50:07 +0000 (14:50 +0200)]
smtp: extend test with smtp extended logging
with custom fields, to cover more suricata code
Philippe Antoine [Wed, 22 May 2024 20:39:50 +0000 (22:39 +0200)]
smtp/mime: update test to match new behavior
Ticket: 3487
rust mime parser succeeds in parsing this traffic
Victor Julien [Sat, 1 Jun 2024 14:09:09 +0000 (16:09 +0200)]
tests: add lua output streaming test
Victor Julien [Sat, 1 Jun 2024 11:04:45 +0000 (13:04 +0200)]
tests: add lua stats test
Eric Leblond [Sun, 25 Feb 2024 20:39:13 +0000 (21:39 +0100)]
tests: fix order of mac address in nfs test
Eric Leblond [Mon, 30 Oct 2023 20:43:49 +0000 (21:43 +0100)]
tests: add ethernet eve test
Victor Julien [Thu, 30 May 2024 07:58:41 +0000 (09:58 +0200)]
tests: fix dataset test on 6.0.x
Victor Julien [Sat, 25 May 2024 18:45:00 +0000 (20:45 +0200)]
tests: add tls client cert match test
Victor Julien [Sat, 25 May 2024 18:46:14 +0000 (20:46 +0200)]
tests: tls store for client certs
Victor Julien [Sat, 25 May 2024 13:44:43 +0000 (15:44 +0200)]
tests: add tls-store test
Jason Ish [Mon, 27 May 2024 21:54:53 +0000 (15:54 -0600)]
test: test lua memory limit errors
Jason Ish [Fri, 24 May 2024 22:02:43 +0000 (16:02 -0600)]
test: lua scripts exceeding the instruction limit
Jason Ish [Fri, 24 May 2024 17:09:36 +0000 (11:09 -0600)]
test: add lua test for blocked lua library
Jason Ish [Fri, 24 May 2024 18:45:34 +0000 (12:45 -0600)]
run.py: use single mode if -j1 and on Linux
Single mode can expose some errors that are hidden in mp mode, so it
can be useful to use even on Linux.
Jason Ish [Fri, 24 May 2024 17:09:07 +0000 (11:09 -0600)]
run.py: add __startswith and __endswith for string matching
Shivani Bhardwaj [Tue, 5 Mar 2024 07:01:52 +0000 (12:31 +0530)]
rule-grouping: update min-version
Victor Julien [Thu, 23 May 2024 09:35:33 +0000 (11:35 +0200)]
tests: enable pcap tests for 7
Victor Julien [Thu, 23 May 2024 09:33:51 +0000 (11:33 +0200)]
tests: enable ppp tests for 7
Victor Julien [Tue, 21 May 2024 07:51:01 +0000 (09:51 +0200)]
tests: add pcap logging tests
Victor Julien [Mon, 20 May 2024 20:28:14 +0000 (22:28 +0200)]
tests: lz4 pcap write tests
Shivani Bhardwaj [Fri, 29 Mar 2024 12:23:34 +0000 (17:53 +0530)]
tls-subjectaltname: add tests
Feature 5234
Philippe Antoine [Sat, 30 Mar 2024 14:03:48 +0000 (15:03 +0100)]
smtp: adds test with data command being rejected
Ticket: 6906
Philippe Antoine [Tue, 19 Sep 2023 08:01:54 +0000 (10:01 +0200)]
Adds test about pop3 protocol detection
Philippe Antoine [Tue, 2 Apr 2019 10:23:45 +0000 (12:23 +0200)]
Adds a test case for uri with space in it
Jason Ish [Tue, 7 May 2024 16:43:27 +0000 (10:43 -0600)]
test: lua-rule-errors
Test for correct behvaior when a Lua rule crashes.
On crash, a Lua script should not result in a match when negation is
applied. Also test for:
- error stat
- one time logging per thread
Ticket: #6940
Jason Ish [Tue, 7 May 2024 16:42:54 +0000 (10:42 -0600)]
readme: add example for __find
__find can be used to search for a substring in a json field.
Giuseppe Longo [Mon, 4 Mar 2024 12:27:34 +0000 (13:27 +0100)]
arp: add tests
Philippe Antoine [Tue, 7 May 2024 07:06:15 +0000 (09:06 +0200)]
detect: add a test for protocol mismatch detection
Ticket: #4921
Philippe Antoine [Tue, 7 May 2024 07:01:17 +0000 (09:01 +0200)]
detect: add a tests for original protocol matching
Ticket: #4921
Victor Julien [Tue, 21 Dec 2021 09:07:01 +0000 (10:07 +0100)]
tests: add tests for negated protocol matching
Ticket: #4921
Philippe Antoine [Tue, 14 May 2024 12:12:45 +0000 (14:12 +0200)]
websocket: adds test for ping/pong opcodes
Ticket: 7025
Philippe Antoine [Fri, 26 Apr 2024 08:43:42 +0000 (10:43 +0200)]
websocket: checks alert app-layer metadata for frames
Ticket: 6973
Shivani Bhardwaj [Thu, 14 Dec 2023 13:16:25 +0000 (18:46 +0530)]
add tests for bug 5220
Shivani Bhardwaj [Fri, 3 May 2024 09:19:57 +0000 (14:49 +0530)]
etopen: use latest emerging-all rules
Victor Julien [Thu, 2 May 2024 09:43:12 +0000 (11:43 +0200)]
tests: require 7 for iprep tests
Philippe Antoine [Fri, 26 Apr 2024 14:25:18 +0000 (16:25 +0200)]
snmp: adds test for community keyword
as was done by unit test DetectSNMPCommunityTest
Victor Julien [Wed, 17 Apr 2024 15:02:29 +0000 (17:02 +0200)]
tests: enable datalink/defrag tests for 6.0.x
Philippe Antoine [Tue, 16 Apr 2024 20:55:38 +0000 (22:55 +0200)]
http: adds test about decompression
Ticket: 6959
Philippe Antoine [Fri, 12 Apr 2024 08:47:18 +0000 (10:47 +0200)]
framework: bump jsonschema crate to v0.17
So that it can compile without failing on
error[E0635]: unknown feature `stdsimd`
--> .cargo/registry/src/index.crates.io-
6f17d22bba15001f /ahash-0.7.6/src/lib.rs:33:42
|
33 | #![cfg_attr(feature = "stdsimd", feature(stdsimd))]
| ^^^^^^^
Victor Julien [Tue, 30 Jan 2024 19:14:58 +0000 (20:14 +0100)]
tests: add bug 2576 tests
Philippe Antoine [Mon, 11 Mar 2024 10:14:36 +0000 (11:14 +0100)]
http: adds test with HTTP not being 0.9
Ticket: 6757
In the case we have too many whitespaces after the request
Victor Julien [Mon, 27 Nov 2023 09:23:21 +0000 (10:23 +0100)]
tests: add bug 1449 test
Was private at the time but no need to keep it private.
Victor Julien [Thu, 25 Apr 2024 15:29:54 +0000 (17:29 +0200)]
tests: add tests for iprep bug 6834
Shivani Bhardwaj [Mon, 29 Apr 2024 06:13:28 +0000 (11:43 +0530)]
tls/random: set min version to 7
Shivani Bhardwaj [Fri, 26 Apr 2024 07:28:29 +0000 (12:58 +0530)]
tls/random: improve rules w direction
Shivani Bhardwaj [Fri, 26 Apr 2024 07:21:23 +0000 (12:51 +0530)]
tls/random: add tests for bug 6989
Jeff Lucovsky [Wed, 24 Apr 2024 13:51:52 +0000 (09:51 -0400)]
tests: Update min-version for 6.0.x testing
Issue: 5578
Update the min-version so the 6.0.x change will be tested.
Victor Julien [Tue, 4 Jul 2023 09:39:51 +0000 (11:39 +0200)]
tests: add bug 5578 traffic test
Victor Julien [Tue, 4 Jul 2023 09:39:28 +0000 (11:39 +0200)]
tests: add bug 5578 parsing test
Giuseppe Longo [Mon, 18 Mar 2024 08:27:02 +0000 (09:27 +0100)]
sdp: add test
This adds a test for SDP protocol.
Philippe Antoine [Sat, 20 Apr 2024 08:28:43 +0000 (10:28 +0200)]
http: backports for http.response_body
Ticket: 6948
Philippe Antoine [Thu, 18 Apr 2024 12:57:46 +0000 (14:57 +0200)]
tests: add rule to check for http.response_body
Ticket: 6948
Philippe Antoine [Fri, 12 Apr 2024 10:56:17 +0000 (12:56 +0200)]
http: test FP for http.response_body
Ticket: 6948
We should not match on request body
Juliana Fajardini [Wed, 17 Apr 2024 00:44:06 +0000 (21:44 -0300)]
tests: update eve config stats option term
Replaced `zero-valued-counters` for eve-log.stats counters options with
the same term used for the pre-dated similar option for stats.log
output.
Task #6962
Jeff Lucovsky [Thu, 18 Apr 2024 13:06:24 +0000 (09:06 -0400)]
detect/ipopts: Support 7.0.x
This commit resets the min-version to 7.0.5 to support the backport
(issue 6882).
Jeff Lucovsky [Thu, 21 Mar 2024 13:25:49 +0000 (09:25 -0400)]
detect/ipopts: IP option tests
Philippe Antoine [Wed, 6 Dec 2023 21:07:02 +0000 (22:07 +0100)]
Adds test for websocket
Ticket: 2695
Victor Julien [Mon, 15 Apr 2024 11:53:41 +0000 (13:53 +0200)]
tests: enable datalink/defrag tests for 7.0.x
Juliana Fajardini [Mon, 15 Apr 2024 23:19:54 +0000 (20:19 -0300)]
tests/pgsql: add checks and test for bug 6092
Ensure that pgsql metadata flags (for now, just setting whether
passwords should be logged or not) are properly processed by Suri and
logging functions.
Related to
Bug #6092
Sascha Steinbiss [Mon, 4 Mar 2024 18:22:40 +0000 (19:22 +0100)]
ja4: adjust and add tests
Sascha Steinbiss [Mon, 4 Mar 2024 18:22:16 +0000 (19:22 +0100)]
ja3: adjust and add tests
Victor Julien [Fri, 12 Apr 2024 09:09:01 +0000 (11:09 +0200)]
tests: add defrag datalink tests
Bug: 6887.
Daniel Olatunji [Mon, 13 Nov 2023 11:57:31 +0000 (11:57 +0000)]
tests: add rule to check for tcp_mss
Related to
Issue: #6355
Shivani Bhardwaj [Wed, 3 Apr 2024 07:13:40 +0000 (12:43 +0530)]
add test for base64_data w fast_pattern
Bug 6859
Jeff Lucovsky [Sun, 24 Mar 2024 12:17:31 +0000 (08:17 -0400)]
test/memcap: Validate memcap pressure values
Issue: 6398
This test validates that the memcap pressure stats are no longer in the
global namespace.
Old:
- memcap_pressure
- memcap_pressure_max
New:
- memcap.pressure
- memcap.pressure_max
Juliana Fajardini [Wed, 3 Apr 2024 23:13:18 +0000 (20:13 -0300)]
tests: add checks for hiding zero counter stats
Task #5976
Juliana Fajardini [Thu, 11 Apr 2024 20:17:11 +0000 (17:17 -0300)]
tests/exception-policy/stats: fix app-layer test
exception-policy-applayer-03 was missing the checks for exception-policy
per-appproto errors.
Juliana Fajardini [Fri, 17 Feb 2023 20:28:02 +0000 (17:28 -0300)]
tests: check exception policy stats counters
Edit the existing exception policy tests to check for the new exception
policy stats counters.
Add two more tests, to showcase behavior for exception policy stats
counters when set up to log counters for each app-proto error and
zero-valued counters are enabled (default behavior).
Ticket #5816
Daniel Olatunji [Wed, 31 Jan 2024 15:29:16 +0000 (16:29 +0100)]
tests: add rule to check for tcp_seq
Related to
Issue: 6353
Daniel Olatunji [Wed, 31 Jan 2024 15:37:54 +0000 (16:37 +0100)]
tests: add rule to check for tcp/ack
Related to
Issue: 6354
Shivani Bhardwaj [Mon, 25 Mar 2024 13:35:47 +0000 (19:05 +0530)]
rule-grouping: add boundary port tests
Shivani Bhardwaj [Thu, 21 Mar 2024 09:17:39 +0000 (14:47 +0530)]
port-grouping: add tests for bug 6881 and more
Victor Julien [Wed, 20 Mar 2024 07:17:06 +0000 (08:17 +0100)]
tests: add bug 6875 test
Victor Julien [Mon, 18 Mar 2024 16:13:56 +0000 (17:13 +0100)]
tests: update drop and ssh tests for 7
Philippe Antoine [Mon, 27 Nov 2023 16:28:47 +0000 (17:28 +0100)]
Adds test about ssh new keys
Ticket: 6578
Philippe Antoine [Mon, 29 Jan 2024 14:24:47 +0000 (15:24 +0100)]
drop: adds test with a protocol change
Ticket: 6305
Victor Julien [Fri, 24 Nov 2023 11:06:19 +0000 (12:06 +0100)]
tests: add frame gap logging tests
Victor Julien [Mon, 20 Nov 2023 12:25:24 +0000 (13:25 +0100)]
tests: add various eve payload representation tests
Overlaps and gaps.
Philippe Antoine [Wed, 13 Mar 2024 20:33:02 +0000 (21:33 +0100)]
http: adds check for request line missing protocol
This generates an anomaly
Ticket: 6856
Shivani Bhardwaj [Sat, 9 Mar 2024 04:19:13 +0000 (09:49 +0530)]
rule-grouping: add edge case test
Hadiqa Alamdar Bukhari [Tue, 26 Dec 2023 10:00:08 +0000 (15:00 +0500)]
test: add test for dns.rcode
Feature #6621
Shivani Bhardwaj [Wed, 21 Feb 2024 09:50:42 +0000 (15:20 +0530)]
detect/port: add rule grouping tests
Hadiqa Alamdar Bukhari [Fri, 2 Feb 2024 13:38:49 +0000 (18:38 +0500)]
test: add test for dns.rrtype
Feature #6666
Giuseppe Longo [Thu, 13 Apr 2023 16:59:03 +0000 (18:59 +0200)]
sip: add tests for sip over tcp
Philippe Antoine [Thu, 22 Feb 2024 20:35:06 +0000 (21:35 +0100)]
mqtt: frameswith multiple PDUs backport
Ticket: 6592
Philippe Antoine [Thu, 18 Jan 2024 12:39:47 +0000 (13:39 +0100)]
dns: adds test for sshfp
Lukas Sismis [Tue, 6 Feb 2024 10:54:03 +0000 (11:54 +0100)]
tcp: add a SYN packet test to verify correct flow output
Ticket: #6733
Philippe Antoine [Wed, 14 Feb 2024 21:16:28 +0000 (22:16 +0100)]
http: adds another test for http.request_header keyword
Ticket: 6483
Philippe Antoine [Tue, 6 Feb 2024 13:52:15 +0000 (14:52 +0100)]
ssh: do not enforce pcap_cnt
As this is an invalid tcp packet, that should not run any tx
detection on it.
Ticket: 6775
Philippe Antoine [Thu, 25 Jan 2024 15:00:02 +0000 (16:00 +0100)]
http2: adds test with continuation frames
Ticket: 5926
Philippe Antoine [Mon, 12 Feb 2024 13:02:40 +0000 (14:02 +0100)]
http: adds test with chunked as a token
Ticket: 6415
Philippe Antoine [Thu, 15 Feb 2024 08:24:30 +0000 (09:24 +0100)]
filestore: directionality fix backported to 7
Shivani Bhardwaj [Mon, 18 Dec 2023 08:16:03 +0000 (13:46 +0530)]
add test for bug 6617
Jeff Lucovsky [Wed, 24 Jan 2024 14:43:25 +0000 (09:43 -0500)]
test/mqtt: Improve multi PDU parsing
Issue: 6592
Jason Ish [Mon, 12 Feb 2024 15:54:07 +0000 (09:54 -0600)]
check-eve: open files with utf-8 encoding
Not needed in modern versions of Python, but required for older
versions like 3.6.
Philippe Antoine [Fri, 9 Feb 2024 16:30:29 +0000 (17:30 +0100)]
Adds test for http.request_header and http.response_header keywords
Ticket: 6736