]> git.ipfire.org Git - thirdparty/suricata-verify.git/log
thirdparty/suricata-verify.git
12 months agotests: enable iprep isset test for 7 1966/head
Victor Julien [Mon, 1 Jul 2024 10:05:23 +0000 (12:05 +0200)] 
tests: enable iprep isset test for 7

12 months agotests: support detect bypass udp test on 7
Philippe Antoine [Thu, 4 Jul 2024 09:21:03 +0000 (11:21 +0200)] 
tests: support detect bypass udp test on 7

Ticket: 7054

12 months agobackport to 7 test filestore-dont
Philippe Antoine [Mon, 24 Jun 2024 20:08:52 +0000 (22:08 +0200)] 
backport to 7 test filestore-dont

Ticket: 6390

13 months agodatasets-memcap-01: add os and arch requirements 1962/head
Shivani Bhardwaj [Thu, 4 Jul 2024 12:59:38 +0000 (18:29 +0530)] 
datasets-memcap-01: add os and arch requirements

13 months agotests: add tcp split handshake tests
Victor Julien [Mon, 27 May 2024 14:43:37 +0000 (16:43 +0200)] 
tests: add tcp split handshake tests

13 months agoeve-validator: use default-features in Cargo.toml
Philippe Antoine [Thu, 27 Jun 2024 09:10:08 +0000 (11:10 +0200)] 
eve-validator: use default-features in Cargo.toml

warning: `default_features` is deprecated in favor of `default-features` and will not work in the 2024 edition

13 months agotests: remove tests for versions less than 6
Jason Ish [Fri, 21 Jun 2024 14:05:42 +0000 (08:05 -0600)] 
tests: remove tests for versions less than 6

13 months agomqtt: requirement on version and not file
Philippe Antoine [Tue, 18 Jun 2024 05:11:54 +0000 (07:11 +0200)] 
mqtt: requirement on version and not file

As the fle is planned to be moved to rust

13 months agodatasets: add tests for string memcap 1956/head
Shivani Bhardwaj [Mon, 10 Jun 2024 10:19:50 +0000 (15:49 +0530)] 
datasets: add tests for string memcap

Ticket 3910

13 months agorun.py: add option to check for architecture
Shivani Bhardwaj [Fri, 28 Jun 2024 06:31:40 +0000 (12:01 +0530)] 
run.py: add option to check for architecture

13 months agorun.py: add option to check for os
Shivani Bhardwaj [Tue, 11 Jun 2024 10:08:21 +0000 (15:38 +0530)] 
run.py: add option to check for os

13 months agobypass: adds a test with a UDP flow
Philippe Antoine [Thu, 30 May 2024 12:47:31 +0000 (14:47 +0200)] 
bypass: adds a test with a UDP flow

Ticket: 7053

13 months agotests: support alert pass tests on 7 1950/head
Victor Julien [Fri, 28 Jun 2024 10:51:23 +0000 (12:51 +0200)] 
tests: support alert pass tests on 7

13 months agotests: add threshold backoff tests 1939/head 1947/head
Victor Julien [Mon, 24 Jun 2024 12:18:08 +0000 (14:18 +0200)] 
tests: add threshold backoff tests

13 months agotests: add detection_filter tests for by_flow and by_src 1938/head
Victor Julien [Wed, 13 Mar 2024 10:06:02 +0000 (11:06 +0100)] 
tests: add detection_filter tests for by_flow and by_src

13 months agotests: add global by_flow thresholding tests
Victor Julien [Sat, 2 Mar 2024 07:40:42 +0000 (08:40 +0100)] 
tests: add global by_flow thresholding tests

13 months agotests: add threshold by_flow test
Victor Julien [Fri, 1 Mar 2024 13:15:27 +0000 (14:15 +0100)] 
tests: add threshold by_flow test

Ticket: #6822.

13 months agotests/transform: from_base64 test 1937/head suricata-6.0.20 suricata-7.0.6
Jeff Lucovsky [Tue, 27 Feb 2024 14:02:35 +0000 (09:02 -0500)] 
tests/transform: from_base64 test

Issue: 6487

Test cases for the from_base64 transform
- Case 01 tests RFC4648 (default) with various offsets
- Case 02 tests RFC2045 and verifies success and failure case
  (with other modes)
- Case 03 -- case 01 with fast_pattern associated with the
  post transform content.

13 months agooutput: adds checks for payload_length field
Philippe Antoine [Thu, 20 Jun 2024 14:09:37 +0000 (16:09 +0200)] 
output: adds checks for payload_length field

Ticket: 7098

13 months agodcerpc: check for app-layer metadata in alert
Philippe Antoine [Thu, 20 Jun 2024 13:08:16 +0000 (15:08 +0200)] 
dcerpc: check for app-layer metadata in alert

Ticket: 6090

13 months agoAdds a test about filestore
Philippe Antoine [Tue, 10 Oct 2023 10:04:48 +0000 (12:04 +0200)] 
Adds a test about filestore

That it does not store too many files

13 months agosmtp: backport to 7 test smtp-to-comma 1933/head
Philippe Antoine [Tue, 4 Jun 2024 13:27:07 +0000 (15:27 +0200)] 
smtp: backport to 7 test smtp-to-comma

Ticket: 7060

13 months agotests: add tls alpn tests 1927/head
Victor Julien [Fri, 31 May 2024 13:14:29 +0000 (15:14 +0200)] 
tests: add tls alpn tests

13 months agotests: add stream_size prefilter tests 1925/head
Victor Julien [Fri, 7 Jun 2024 12:44:29 +0000 (14:44 +0200)] 
tests: add stream_size prefilter tests

13 months agodetect: move http uri unit tests to SV 1919/head
Philippe Antoine [Fri, 14 Jun 2024 08:24:00 +0000 (10:24 +0200)] 
detect: move http uri unit tests to SV

Ticket: 3725

13 months agotests: iprep isset/isnotset test 1918/head
Victor Julien [Thu, 16 May 2024 13:56:57 +0000 (15:56 +0200)] 
tests: iprep isset/isnotset test

13 months agotests/ja4: Enable ja4 tests for 7.0.6 and later 1908/head
Jeff Lucovsky [Tue, 14 May 2024 12:56:14 +0000 (08:56 -0400)] 
tests/ja4: Enable ja4 tests for 7.0.6 and later

Issue: 7010

Enable the JA4 tests for Suricata 7.0.6 and later.

13 months agotesta/ja4: Confirm config on auto-enable
Jeff Lucovsky [Tue, 14 May 2024 12:57:08 +0000 (08:57 -0400)] 
testa/ja4: Confirm config on auto-enable

Issue: 7010

Confirm that the config-level message is displayed when JA4 is enabled
due to rule usage.

13 months agotests: add test for alert-then-pass issue 5466 1903/head 1905/head
Victor Julien [Fri, 12 Jan 2024 13:38:57 +0000 (14:38 +0100)] 
tests: add test for alert-then-pass issue 5466

13 months agowebsocket: adds check for data frame 1901/head
Philippe Antoine [Thu, 6 Jun 2024 21:20:13 +0000 (23:20 +0200)] 
websocket: adds check for data frame

Ticket: 7051

13 months agoenip: adds test for new enip keywords
Philippe Antoine [Thu, 7 Dec 2023 08:37:06 +0000 (09:37 +0100)] 
enip: adds test for new enip keywords

Ticket: 3958

13 months agoenip: adds test for frames
Philippe Antoine [Thu, 7 Dec 2023 08:11:39 +0000 (09:11 +0100)] 
enip: adds test for frames

Ticket: 3598

13 months agoenip: Add test for logger
Philippe Antoine [Fri, 17 Nov 2023 11:03:11 +0000 (12:03 +0100)] 
enip: Add test for logger

13 months agoenip: tests compatible with rust parser
Philippe Antoine [Mon, 20 Nov 2023 08:23:43 +0000 (09:23 +0100)] 
enip: tests compatible with rust parser

13 months agosmtp/mime: adds test for url extraction in base64 message 1900/head
Philippe Antoine [Tue, 4 Jun 2024 12:41:58 +0000 (14:41 +0200)] 
smtp/mime: adds test for url extraction in base64 message

Ticket: 5185

13 months agotests: fix order of mac address in nfs test for 7 1892/head
Philippe Antoine [Sun, 2 Jun 2024 19:37:28 +0000 (21:37 +0200)] 
tests: fix order of mac address in nfs test for 7

Ticket: 6690

13 months agotests/pgsql: add test for bug 6983 1890/head
Juliana Fajardini [Wed, 24 Apr 2024 00:43:58 +0000 (21:43 -0300)] 
tests/pgsql: add test for bug 6983

Related to
Bug #6983

14 months agotests: smtp frames tests 1883/head 1887/head
Victor Julien [Wed, 15 Nov 2023 10:18:27 +0000 (11:18 +0100)] 
tests: smtp frames tests

14 months agosmtp: adds test with To field having quotes, commas... 1882/head
Philippe Antoine [Thu, 30 May 2024 09:28:58 +0000 (11:28 +0200)] 
smtp: adds test with To field having quotes, commas...

Ticket: 3487

14 months agosmtp: extend test with smtp extended logging
Philippe Antoine [Thu, 23 May 2024 12:50:07 +0000 (14:50 +0200)] 
smtp: extend test with smtp extended logging

with custom fields, to cover more suricata code

14 months agosmtp/mime: update test to match new behavior
Philippe Antoine [Wed, 22 May 2024 20:39:50 +0000 (22:39 +0200)] 
smtp/mime: update test to match new behavior

Ticket: 3487

rust mime parser succeeds in parsing this traffic

14 months agotests: add lua output streaming test 1877/head
Victor Julien [Sat, 1 Jun 2024 14:09:09 +0000 (16:09 +0200)] 
tests: add lua output streaming test

14 months agotests: add lua stats test
Victor Julien [Sat, 1 Jun 2024 11:04:45 +0000 (13:04 +0200)] 
tests: add lua stats test

14 months agotests: fix order of mac address in nfs test
Eric Leblond [Sun, 25 Feb 2024 20:39:13 +0000 (21:39 +0100)] 
tests: fix order of mac address in nfs test

14 months agotests: add ethernet eve test
Eric Leblond [Mon, 30 Oct 2023 20:43:49 +0000 (21:43 +0100)] 
tests: add ethernet eve test

14 months agotests: fix dataset test on 6.0.x 1871/head
Victor Julien [Thu, 30 May 2024 07:58:41 +0000 (09:58 +0200)] 
tests: fix dataset test on 6.0.x

14 months agotests: add tls client cert match test 1866/head
Victor Julien [Sat, 25 May 2024 18:45:00 +0000 (20:45 +0200)] 
tests: add tls client cert match test

14 months agotests: tls store for client certs
Victor Julien [Sat, 25 May 2024 18:46:14 +0000 (20:46 +0200)] 
tests: tls store for client certs

14 months agotests: add tls-store test
Victor Julien [Sat, 25 May 2024 13:44:43 +0000 (15:44 +0200)] 
tests: add tls-store test

14 months agotest: test lua memory limit errors 1859/head 1861/head 1864/head
Jason Ish [Mon, 27 May 2024 21:54:53 +0000 (15:54 -0600)] 
test: test lua memory limit errors

14 months agotest: lua scripts exceeding the instruction limit
Jason Ish [Fri, 24 May 2024 22:02:43 +0000 (16:02 -0600)] 
test: lua scripts exceeding the instruction limit

14 months agotest: add lua test for blocked lua library
Jason Ish [Fri, 24 May 2024 17:09:36 +0000 (11:09 -0600)] 
test: add lua test for blocked lua library

14 months agorun.py: use single mode if -j1 and on Linux
Jason Ish [Fri, 24 May 2024 18:45:34 +0000 (12:45 -0600)] 
run.py: use single mode if -j1 and on Linux

Single mode can expose some errors that are hidden in mp mode, so it
can be useful to use even on Linux.

14 months agorun.py: add __startswith and __endswith for string matching
Jason Ish [Fri, 24 May 2024 17:09:07 +0000 (11:09 -0600)] 
run.py: add __startswith and __endswith for string matching

14 months agorule-grouping: update min-version 1854/head
Shivani Bhardwaj [Tue, 5 Mar 2024 07:01:52 +0000 (12:31 +0530)] 
rule-grouping: update min-version

14 months agotests: enable pcap tests for 7 1849/head 1852/head
Victor Julien [Thu, 23 May 2024 09:35:33 +0000 (11:35 +0200)] 
tests: enable pcap tests for 7

14 months agotests: enable ppp tests for 7
Victor Julien [Thu, 23 May 2024 09:33:51 +0000 (11:33 +0200)] 
tests: enable ppp tests for 7

14 months agotests: add pcap logging tests 1848/head
Victor Julien [Tue, 21 May 2024 07:51:01 +0000 (09:51 +0200)] 
tests: add pcap logging tests

14 months agotests: lz4 pcap write tests
Victor Julien [Mon, 20 May 2024 20:28:14 +0000 (22:28 +0200)] 
tests: lz4 pcap write tests

14 months agotls-subjectaltname: add tests 1846/head
Shivani Bhardwaj [Fri, 29 Mar 2024 12:23:34 +0000 (17:53 +0530)] 
tls-subjectaltname: add tests

Feature 5234

14 months agosmtp: adds test with data command being rejected 1845/head
Philippe Antoine [Sat, 30 Mar 2024 14:03:48 +0000 (15:03 +0100)] 
smtp: adds test with data command being rejected

Ticket: 6906

14 months agoAdds test about pop3 protocol detection
Philippe Antoine [Tue, 19 Sep 2023 08:01:54 +0000 (10:01 +0200)] 
Adds test about pop3 protocol detection

14 months agoAdds a test case for uri with space in it 1838/head
Philippe Antoine [Tue, 2 Apr 2019 10:23:45 +0000 (12:23 +0200)] 
Adds a test case for uri with space in it

14 months agotest: lua-rule-errors 1835/head
Jason Ish [Tue, 7 May 2024 16:43:27 +0000 (10:43 -0600)] 
test: lua-rule-errors

Test for correct behvaior when a Lua rule crashes.

On crash, a Lua script should not result in a match when negation is
applied. Also test for:
- error stat
- one time logging per thread

Ticket: #6940

14 months agoreadme: add example for __find
Jason Ish [Tue, 7 May 2024 16:42:54 +0000 (10:42 -0600)] 
readme: add example for __find

__find can be used to search for a substring in a json field.

14 months agoarp: add tests 1833/head
Giuseppe Longo [Mon, 4 Mar 2024 12:27:34 +0000 (13:27 +0100)] 
arp: add tests

14 months agodetect: add a test for protocol mismatch detection 1832/head
Philippe Antoine [Tue, 7 May 2024 07:06:15 +0000 (09:06 +0200)] 
detect: add a test for protocol mismatch detection

Ticket: #4921

14 months agodetect: add a tests for original protocol matching
Philippe Antoine [Tue, 7 May 2024 07:01:17 +0000 (09:01 +0200)] 
detect: add a tests for original protocol matching

Ticket: #4921

14 months agotests: add tests for negated protocol matching
Victor Julien [Tue, 21 Dec 2021 09:07:01 +0000 (10:07 +0100)] 
tests: add tests for negated protocol matching

Ticket: #4921

14 months agowebsocket: adds test for ping/pong opcodes 1831/head
Philippe Antoine [Tue, 14 May 2024 12:12:45 +0000 (14:12 +0200)] 
websocket: adds test for ping/pong opcodes

Ticket: 7025

14 months agowebsocket: checks alert app-layer metadata for frames
Philippe Antoine [Fri, 26 Apr 2024 08:43:42 +0000 (10:43 +0200)] 
websocket: checks alert app-layer metadata for frames

Ticket: 6973

14 months agoadd tests for bug 5220 1821/head
Shivani Bhardwaj [Thu, 14 Dec 2023 13:16:25 +0000 (18:46 +0530)] 
add tests for bug 5220

15 months agoetopen: use latest emerging-all rules 1818/head
Shivani Bhardwaj [Fri, 3 May 2024 09:19:57 +0000 (14:49 +0530)] 
etopen: use latest emerging-all rules

15 months agotests: require 7 for iprep tests 1817/head
Victor Julien [Thu, 2 May 2024 09:43:12 +0000 (11:43 +0200)] 
tests: require 7 for iprep tests

15 months agosnmp: adds test for community keyword 1815/head
Philippe Antoine [Fri, 26 Apr 2024 14:25:18 +0000 (16:25 +0200)] 
snmp: adds test for community keyword

as was done by unit test DetectSNMPCommunityTest

15 months agotests: enable datalink/defrag tests for 6.0.x
Victor Julien [Wed, 17 Apr 2024 15:02:29 +0000 (17:02 +0200)] 
tests: enable datalink/defrag tests for 6.0.x

15 months agohttp: adds test about decompression
Philippe Antoine [Tue, 16 Apr 2024 20:55:38 +0000 (22:55 +0200)] 
http: adds test about decompression

Ticket: 6959

15 months agoframework: bump jsonschema crate to v0.17
Philippe Antoine [Fri, 12 Apr 2024 08:47:18 +0000 (10:47 +0200)] 
framework: bump jsonschema crate to v0.17

So that it can compile without failing on
error[E0635]: unknown feature `stdsimd`
  --> .cargo/registry/src/index.crates.io-6f17d22bba15001f/ahash-0.7.6/src/lib.rs:33:42
   |
33 | #![cfg_attr(feature = "stdsimd", feature(stdsimd))]
   |                                          ^^^^^^^

15 months agotests: add bug 2576 tests
Victor Julien [Tue, 30 Jan 2024 19:14:58 +0000 (20:14 +0100)] 
tests: add bug 2576 tests

15 months agohttp: adds test with HTTP not being 0.9
Philippe Antoine [Mon, 11 Mar 2024 10:14:36 +0000 (11:14 +0100)] 
http: adds test with HTTP not being 0.9

Ticket: 6757

In the case we have too many whitespaces after the request

15 months agotests: add bug 1449 test
Victor Julien [Mon, 27 Nov 2023 09:23:21 +0000 (10:23 +0100)] 
tests: add bug 1449 test

Was private at the time but no need to keep it private.

15 months agotests: add tests for iprep bug 6834 1811/head 1813/head
Victor Julien [Thu, 25 Apr 2024 15:29:54 +0000 (17:29 +0200)] 
tests: add tests for iprep bug 6834

15 months agotls/random: set min version to 7 1806/head 1809/head
Shivani Bhardwaj [Mon, 29 Apr 2024 06:13:28 +0000 (11:43 +0530)] 
tls/random: set min version to 7

15 months agotls/random: improve rules w direction 1805/head
Shivani Bhardwaj [Fri, 26 Apr 2024 07:28:29 +0000 (12:58 +0530)] 
tls/random: improve rules w direction

15 months agotls/random: add tests for bug 6989
Shivani Bhardwaj [Fri, 26 Apr 2024 07:21:23 +0000 (12:51 +0530)] 
tls/random: add tests for bug 6989

15 months agotests: Update min-version for 6.0.x testing 1803/head
Jeff Lucovsky [Wed, 24 Apr 2024 13:51:52 +0000 (09:51 -0400)] 
tests: Update min-version for 6.0.x testing

Issue: 5578

Update the min-version so the 6.0.x change will be tested.

15 months agotests: add bug 5578 traffic test
Victor Julien [Tue, 4 Jul 2023 09:39:51 +0000 (11:39 +0200)] 
tests: add bug 5578 traffic test

15 months agotests: add bug 5578 parsing test
Victor Julien [Tue, 4 Jul 2023 09:39:28 +0000 (11:39 +0200)] 
tests: add bug 5578 parsing test

15 months agosdp: add test 1797/head
Giuseppe Longo [Mon, 18 Mar 2024 08:27:02 +0000 (09:27 +0100)] 
sdp: add test

This adds a test for SDP protocol.

15 months agohttp: backports for http.response_body 1792/head 1793/head suricata-6.0.19 suricata-7.0.5
Philippe Antoine [Sat, 20 Apr 2024 08:28:43 +0000 (10:28 +0200)] 
http: backports for http.response_body

Ticket: 6948

15 months agotests: add rule to check for http.response_body 1791/head
Philippe Antoine [Thu, 18 Apr 2024 12:57:46 +0000 (14:57 +0200)] 
tests: add rule to check for http.response_body

Ticket: 6948

15 months agohttp: test FP for http.response_body
Philippe Antoine [Fri, 12 Apr 2024 10:56:17 +0000 (12:56 +0200)] 
http: test FP for http.response_body

Ticket: 6948

We should not match on request body

15 months agotests: update eve config stats option term
Juliana Fajardini [Wed, 17 Apr 2024 00:44:06 +0000 (21:44 -0300)] 
tests: update eve config stats option term

Replaced `zero-valued-counters` for eve-log.stats counters options with
the same term used for the pre-dated similar option for stats.log
output.

Task #6962

15 months agodetect/ipopts: Support 7.0.x 1785/head 1790/head
Jeff Lucovsky [Thu, 18 Apr 2024 13:06:24 +0000 (09:06 -0400)] 
detect/ipopts: Support 7.0.x

This commit resets the min-version to 7.0.5 to support the backport
(issue 6882).

15 months agodetect/ipopts: IP option tests 1780/head
Jeff Lucovsky [Thu, 21 Mar 2024 13:25:49 +0000 (09:25 -0400)] 
detect/ipopts: IP option tests

15 months agoAdds test for websocket 1777/head
Philippe Antoine [Wed, 6 Dec 2023 21:07:02 +0000 (22:07 +0100)] 
Adds test for websocket

Ticket: 2695

15 months agotests: enable datalink/defrag tests for 7.0.x 1772/head
Victor Julien [Mon, 15 Apr 2024 11:53:41 +0000 (13:53 +0200)] 
tests: enable datalink/defrag tests for 7.0.x

15 months agotests/pgsql: add checks and test for bug 6092 1771/head
Juliana Fajardini [Mon, 15 Apr 2024 23:19:54 +0000 (20:19 -0300)] 
tests/pgsql: add checks and test for bug 6092

Ensure that pgsql metadata flags (for now, just setting whether
passwords should be logged or not) are properly processed by Suri and
logging functions.

Related to
Bug #6092

15 months agoja4: adjust and add tests
Sascha Steinbiss [Mon, 4 Mar 2024 18:22:40 +0000 (19:22 +0100)] 
ja4: adjust and add tests

15 months agoja3: adjust and add tests
Sascha Steinbiss [Mon, 4 Mar 2024 18:22:16 +0000 (19:22 +0100)] 
ja3: adjust and add tests