]>
git.ipfire.org Git - thirdparty/suricata-verify.git/log
Shivani Bhardwaj [Thu, 4 Jul 2024 12:59:38 +0000 (18:29 +0530)]
datasets-memcap-01: add os and arch requirements
Victor Julien [Mon, 27 May 2024 14:43:37 +0000 (16:43 +0200)]
tests: add tcp split handshake tests
Philippe Antoine [Thu, 27 Jun 2024 09:10:08 +0000 (11:10 +0200)]
eve-validator: use default-features in Cargo.toml
warning: `default_features` is deprecated in favor of `default-features` and will not work in the 2024 edition
Jason Ish [Fri, 21 Jun 2024 14:05:42 +0000 (08:05 -0600)]
tests: remove tests for versions less than 6
Philippe Antoine [Tue, 18 Jun 2024 05:11:54 +0000 (07:11 +0200)]
mqtt: requirement on version and not file
As the fle is planned to be moved to rust
Shivani Bhardwaj [Mon, 10 Jun 2024 10:19:50 +0000 (15:49 +0530)]
datasets: add tests for string memcap
Ticket 3910
Shivani Bhardwaj [Fri, 28 Jun 2024 06:31:40 +0000 (12:01 +0530)]
run.py: add option to check for architecture
Shivani Bhardwaj [Tue, 11 Jun 2024 10:08:21 +0000 (15:38 +0530)]
run.py: add option to check for os
Philippe Antoine [Thu, 30 May 2024 12:47:31 +0000 (14:47 +0200)]
bypass: adds a test with a UDP flow
Ticket: 7053
Victor Julien [Fri, 28 Jun 2024 10:51:23 +0000 (12:51 +0200)]
tests: support alert pass tests on 7
Victor Julien [Mon, 24 Jun 2024 12:18:08 +0000 (14:18 +0200)]
tests: add threshold backoff tests
Victor Julien [Wed, 13 Mar 2024 10:06:02 +0000 (11:06 +0100)]
tests: add detection_filter tests for by_flow and by_src
Victor Julien [Sat, 2 Mar 2024 07:40:42 +0000 (08:40 +0100)]
tests: add global by_flow thresholding tests
Victor Julien [Fri, 1 Mar 2024 13:15:27 +0000 (14:15 +0100)]
tests: add threshold by_flow test
Ticket: #6822.
Jeff Lucovsky [Tue, 27 Feb 2024 14:02:35 +0000 (09:02 -0500)]
tests/transform: from_base64 test
Issue: 6487
Test cases for the from_base64 transform
- Case 01 tests RFC4648 (default) with various offsets
- Case 02 tests RFC2045 and verifies success and failure case
(with other modes)
- Case 03 -- case 01 with fast_pattern associated with the
post transform content.
Philippe Antoine [Thu, 20 Jun 2024 14:09:37 +0000 (16:09 +0200)]
output: adds checks for payload_length field
Ticket: 7098
Philippe Antoine [Thu, 20 Jun 2024 13:08:16 +0000 (15:08 +0200)]
dcerpc: check for app-layer metadata in alert
Ticket: 6090
Philippe Antoine [Tue, 10 Oct 2023 10:04:48 +0000 (12:04 +0200)]
Adds a test about filestore
That it does not store too many files
Philippe Antoine [Tue, 4 Jun 2024 13:27:07 +0000 (15:27 +0200)]
smtp: backport to 7 test smtp-to-comma
Ticket: 7060
Victor Julien [Fri, 31 May 2024 13:14:29 +0000 (15:14 +0200)]
tests: add tls alpn tests
Victor Julien [Fri, 7 Jun 2024 12:44:29 +0000 (14:44 +0200)]
tests: add stream_size prefilter tests
Philippe Antoine [Fri, 14 Jun 2024 08:24:00 +0000 (10:24 +0200)]
detect: move http uri unit tests to SV
Ticket: 3725
Victor Julien [Thu, 16 May 2024 13:56:57 +0000 (15:56 +0200)]
tests: iprep isset/isnotset test
Jeff Lucovsky [Tue, 14 May 2024 12:56:14 +0000 (08:56 -0400)]
tests/ja4: Enable ja4 tests for 7.0.6 and later
Issue: 7010
Enable the JA4 tests for Suricata 7.0.6 and later.
Jeff Lucovsky [Tue, 14 May 2024 12:57:08 +0000 (08:57 -0400)]
testa/ja4: Confirm config on auto-enable
Issue: 7010
Confirm that the config-level message is displayed when JA4 is enabled
due to rule usage.
Victor Julien [Fri, 12 Jan 2024 13:38:57 +0000 (14:38 +0100)]
tests: add test for alert-then-pass issue 5466
Philippe Antoine [Thu, 6 Jun 2024 21:20:13 +0000 (23:20 +0200)]
websocket: adds check for data frame
Ticket: 7051
Philippe Antoine [Thu, 7 Dec 2023 08:37:06 +0000 (09:37 +0100)]
enip: adds test for new enip keywords
Ticket: 3958
Philippe Antoine [Thu, 7 Dec 2023 08:11:39 +0000 (09:11 +0100)]
enip: adds test for frames
Ticket: 3598
Philippe Antoine [Fri, 17 Nov 2023 11:03:11 +0000 (12:03 +0100)]
enip: Add test for logger
Philippe Antoine [Mon, 20 Nov 2023 08:23:43 +0000 (09:23 +0100)]
enip: tests compatible with rust parser
Philippe Antoine [Tue, 4 Jun 2024 12:41:58 +0000 (14:41 +0200)]
smtp/mime: adds test for url extraction in base64 message
Ticket: 5185
Philippe Antoine [Sun, 2 Jun 2024 19:37:28 +0000 (21:37 +0200)]
tests: fix order of mac address in nfs test for 7
Ticket: 6690
Juliana Fajardini [Wed, 24 Apr 2024 00:43:58 +0000 (21:43 -0300)]
tests/pgsql: add test for bug 6983
Related to
Bug #6983
Victor Julien [Wed, 15 Nov 2023 10:18:27 +0000 (11:18 +0100)]
tests: smtp frames tests
Philippe Antoine [Thu, 30 May 2024 09:28:58 +0000 (11:28 +0200)]
smtp: adds test with To field having quotes, commas...
Ticket: 3487
Philippe Antoine [Thu, 23 May 2024 12:50:07 +0000 (14:50 +0200)]
smtp: extend test with smtp extended logging
with custom fields, to cover more suricata code
Philippe Antoine [Wed, 22 May 2024 20:39:50 +0000 (22:39 +0200)]
smtp/mime: update test to match new behavior
Ticket: 3487
rust mime parser succeeds in parsing this traffic
Victor Julien [Sat, 1 Jun 2024 14:09:09 +0000 (16:09 +0200)]
tests: add lua output streaming test
Victor Julien [Sat, 1 Jun 2024 11:04:45 +0000 (13:04 +0200)]
tests: add lua stats test
Eric Leblond [Sun, 25 Feb 2024 20:39:13 +0000 (21:39 +0100)]
tests: fix order of mac address in nfs test
Eric Leblond [Mon, 30 Oct 2023 20:43:49 +0000 (21:43 +0100)]
tests: add ethernet eve test
Victor Julien [Thu, 30 May 2024 07:58:41 +0000 (09:58 +0200)]
tests: fix dataset test on 6.0.x
Victor Julien [Sat, 25 May 2024 18:45:00 +0000 (20:45 +0200)]
tests: add tls client cert match test
Victor Julien [Sat, 25 May 2024 18:46:14 +0000 (20:46 +0200)]
tests: tls store for client certs
Victor Julien [Sat, 25 May 2024 13:44:43 +0000 (15:44 +0200)]
tests: add tls-store test
Jason Ish [Mon, 27 May 2024 21:54:53 +0000 (15:54 -0600)]
test: test lua memory limit errors
Jason Ish [Fri, 24 May 2024 22:02:43 +0000 (16:02 -0600)]
test: lua scripts exceeding the instruction limit
Jason Ish [Fri, 24 May 2024 17:09:36 +0000 (11:09 -0600)]
test: add lua test for blocked lua library
Jason Ish [Fri, 24 May 2024 18:45:34 +0000 (12:45 -0600)]
run.py: use single mode if -j1 and on Linux
Single mode can expose some errors that are hidden in mp mode, so it
can be useful to use even on Linux.
Jason Ish [Fri, 24 May 2024 17:09:07 +0000 (11:09 -0600)]
run.py: add __startswith and __endswith for string matching
Shivani Bhardwaj [Tue, 5 Mar 2024 07:01:52 +0000 (12:31 +0530)]
rule-grouping: update min-version
Victor Julien [Thu, 23 May 2024 09:35:33 +0000 (11:35 +0200)]
tests: enable pcap tests for 7
Victor Julien [Thu, 23 May 2024 09:33:51 +0000 (11:33 +0200)]
tests: enable ppp tests for 7
Victor Julien [Tue, 21 May 2024 07:51:01 +0000 (09:51 +0200)]
tests: add pcap logging tests
Victor Julien [Mon, 20 May 2024 20:28:14 +0000 (22:28 +0200)]
tests: lz4 pcap write tests
Shivani Bhardwaj [Fri, 29 Mar 2024 12:23:34 +0000 (17:53 +0530)]
tls-subjectaltname: add tests
Feature 5234
Philippe Antoine [Sat, 30 Mar 2024 14:03:48 +0000 (15:03 +0100)]
smtp: adds test with data command being rejected
Ticket: 6906
Philippe Antoine [Tue, 19 Sep 2023 08:01:54 +0000 (10:01 +0200)]
Adds test about pop3 protocol detection
Philippe Antoine [Tue, 2 Apr 2019 10:23:45 +0000 (12:23 +0200)]
Adds a test case for uri with space in it
Jason Ish [Tue, 7 May 2024 16:43:27 +0000 (10:43 -0600)]
test: lua-rule-errors
Test for correct behvaior when a Lua rule crashes.
On crash, a Lua script should not result in a match when negation is
applied. Also test for:
- error stat
- one time logging per thread
Ticket: #6940
Jason Ish [Tue, 7 May 2024 16:42:54 +0000 (10:42 -0600)]
readme: add example for __find
__find can be used to search for a substring in a json field.
Giuseppe Longo [Mon, 4 Mar 2024 12:27:34 +0000 (13:27 +0100)]
arp: add tests
Philippe Antoine [Tue, 7 May 2024 07:06:15 +0000 (09:06 +0200)]
detect: add a test for protocol mismatch detection
Ticket: #4921
Philippe Antoine [Tue, 7 May 2024 07:01:17 +0000 (09:01 +0200)]
detect: add a tests for original protocol matching
Ticket: #4921
Victor Julien [Tue, 21 Dec 2021 09:07:01 +0000 (10:07 +0100)]
tests: add tests for negated protocol matching
Ticket: #4921
Philippe Antoine [Tue, 14 May 2024 12:12:45 +0000 (14:12 +0200)]
websocket: adds test for ping/pong opcodes
Ticket: 7025
Philippe Antoine [Fri, 26 Apr 2024 08:43:42 +0000 (10:43 +0200)]
websocket: checks alert app-layer metadata for frames
Ticket: 6973
Shivani Bhardwaj [Thu, 14 Dec 2023 13:16:25 +0000 (18:46 +0530)]
add tests for bug 5220
Shivani Bhardwaj [Fri, 3 May 2024 09:19:57 +0000 (14:49 +0530)]
etopen: use latest emerging-all rules
Victor Julien [Thu, 2 May 2024 09:43:12 +0000 (11:43 +0200)]
tests: require 7 for iprep tests
Philippe Antoine [Fri, 26 Apr 2024 14:25:18 +0000 (16:25 +0200)]
snmp: adds test for community keyword
as was done by unit test DetectSNMPCommunityTest
Victor Julien [Wed, 17 Apr 2024 15:02:29 +0000 (17:02 +0200)]
tests: enable datalink/defrag tests for 6.0.x
Philippe Antoine [Tue, 16 Apr 2024 20:55:38 +0000 (22:55 +0200)]
http: adds test about decompression
Ticket: 6959
Philippe Antoine [Fri, 12 Apr 2024 08:47:18 +0000 (10:47 +0200)]
framework: bump jsonschema crate to v0.17
So that it can compile without failing on
error[E0635]: unknown feature `stdsimd`
--> .cargo/registry/src/index.crates.io-
6f17d22bba15001f /ahash-0.7.6/src/lib.rs:33:42
|
33 | #![cfg_attr(feature = "stdsimd", feature(stdsimd))]
| ^^^^^^^
Victor Julien [Tue, 30 Jan 2024 19:14:58 +0000 (20:14 +0100)]
tests: add bug 2576 tests
Philippe Antoine [Mon, 11 Mar 2024 10:14:36 +0000 (11:14 +0100)]
http: adds test with HTTP not being 0.9
Ticket: 6757
In the case we have too many whitespaces after the request
Victor Julien [Mon, 27 Nov 2023 09:23:21 +0000 (10:23 +0100)]
tests: add bug 1449 test
Was private at the time but no need to keep it private.
Victor Julien [Thu, 25 Apr 2024 15:29:54 +0000 (17:29 +0200)]
tests: add tests for iprep bug 6834
Shivani Bhardwaj [Mon, 29 Apr 2024 06:13:28 +0000 (11:43 +0530)]
tls/random: set min version to 7
Shivani Bhardwaj [Fri, 26 Apr 2024 07:28:29 +0000 (12:58 +0530)]
tls/random: improve rules w direction
Shivani Bhardwaj [Fri, 26 Apr 2024 07:21:23 +0000 (12:51 +0530)]
tls/random: add tests for bug 6989
Jeff Lucovsky [Wed, 24 Apr 2024 13:51:52 +0000 (09:51 -0400)]
tests: Update min-version for 6.0.x testing
Issue: 5578
Update the min-version so the 6.0.x change will be tested.
Victor Julien [Tue, 4 Jul 2023 09:39:51 +0000 (11:39 +0200)]
tests: add bug 5578 traffic test
Victor Julien [Tue, 4 Jul 2023 09:39:28 +0000 (11:39 +0200)]
tests: add bug 5578 parsing test
Giuseppe Longo [Mon, 18 Mar 2024 08:27:02 +0000 (09:27 +0100)]
sdp: add test
This adds a test for SDP protocol.
Philippe Antoine [Sat, 20 Apr 2024 08:28:43 +0000 (10:28 +0200)]
http: backports for http.response_body
Ticket: 6948
Philippe Antoine [Thu, 18 Apr 2024 12:57:46 +0000 (14:57 +0200)]
tests: add rule to check for http.response_body
Ticket: 6948
Philippe Antoine [Fri, 12 Apr 2024 10:56:17 +0000 (12:56 +0200)]
http: test FP for http.response_body
Ticket: 6948
We should not match on request body
Juliana Fajardini [Wed, 17 Apr 2024 00:44:06 +0000 (21:44 -0300)]
tests: update eve config stats option term
Replaced `zero-valued-counters` for eve-log.stats counters options with
the same term used for the pre-dated similar option for stats.log
output.
Task #6962
Jeff Lucovsky [Thu, 18 Apr 2024 13:06:24 +0000 (09:06 -0400)]
detect/ipopts: Support 7.0.x
This commit resets the min-version to 7.0.5 to support the backport
(issue 6882).
Jeff Lucovsky [Thu, 21 Mar 2024 13:25:49 +0000 (09:25 -0400)]
detect/ipopts: IP option tests
Philippe Antoine [Wed, 6 Dec 2023 21:07:02 +0000 (22:07 +0100)]
Adds test for websocket
Ticket: 2695
Victor Julien [Mon, 15 Apr 2024 11:53:41 +0000 (13:53 +0200)]
tests: enable datalink/defrag tests for 7.0.x
Juliana Fajardini [Mon, 15 Apr 2024 23:19:54 +0000 (20:19 -0300)]
tests/pgsql: add checks and test for bug 6092
Ensure that pgsql metadata flags (for now, just setting whether
passwords should be logged or not) are properly processed by Suri and
logging functions.
Related to
Bug #6092
Sascha Steinbiss [Mon, 4 Mar 2024 18:22:40 +0000 (19:22 +0100)]
ja4: adjust and add tests
Sascha Steinbiss [Mon, 4 Mar 2024 18:22:16 +0000 (19:22 +0100)]
ja3: adjust and add tests
Victor Julien [Fri, 12 Apr 2024 09:09:01 +0000 (11:09 +0200)]
tests: add defrag datalink tests
Bug: 6887.
Daniel Olatunji [Mon, 13 Nov 2023 11:57:31 +0000 (11:57 +0000)]
tests: add rule to check for tcp_mss
Related to
Issue: #6355
Shivani Bhardwaj [Wed, 3 Apr 2024 07:13:40 +0000 (12:43 +0530)]
add test for base64_data w fast_pattern
Bug 6859