]>
git.ipfire.org Git - thirdparty/suricata-verify.git/log
Jason Ish [Fri, 5 Jul 2024 01:01:32 +0000 (19:01 -0600)]
dns-udp-double-request-response: v2 and v3 tests
Jason Ish [Fri, 5 Jul 2024 00:58:36 +0000 (18:58 -0600)]
dns-tcp-www-google-com: v2 and v3 tests
Jason Ish [Fri, 5 Jul 2024 00:56:28 +0000 (18:56 -0600)]
dns-tcp-ts-gap: update for v2 and v3 dns logging
Jason Ish [Fri, 5 Jul 2024 00:05:50 +0000 (18:05 -0600)]
dns-tcp-multirequest-buffer: v2 and v3 tests
Jason Ish [Fri, 5 Jul 2024 00:02:40 +0000 (18:02 -0600)]
dns-single-request: v2 and v3 tests
Jason Ish [Fri, 5 Jul 2024 00:00:32 +0000 (18:00 -0600)]
dns-incomplete: dns v2 and v3 tests
Jason Ish [Thu, 4 Jul 2024 23:56:09 +0000 (17:56 -0600)]
bug-990: dns v2 and v3 tests
As this is a DNS test move into dns/.
Jason Ish [Thu, 4 Jul 2024 23:53:58 +0000 (17:53 -0600)]
bug-856: dns v2 and v3 tests
Move into dns as this is a DNS test.
Jason Ish [Thu, 4 Jul 2024 23:49:58 +0000 (17:49 -0600)]
bug-1158: dns v2 and v3 tests
As this is a DNS test, also move into the dns/ folder.
Jason Ish [Thu, 4 Jul 2024 23:42:45 +0000 (17:42 -0600)]
dns-udp-null: v2 and v3 tests
Jason Ish [Thu, 4 Jul 2024 23:39:40 +0000 (17:39 -0600)]
dns-udp-junkrequest-first: v2 and v3 tests
Jason Ish [Thu, 4 Jul 2024 23:25:43 +0000 (17:25 -0600)]
decode-teredo-01: update for dns v3 logging
Jason Ish [Thu, 4 Jul 2024 22:41:39 +0000 (16:41 -0600)]
ethernet-eve: update for dns v3 logging
Jason Ish [Thu, 4 Jul 2024 22:39:44 +0000 (16:39 -0600)]
vxlan-decoder-03: v2 and v3 dns tests
Jason Ish [Thu, 4 Jul 2024 21:45:07 +0000 (15:45 -0600)]
dns-udp-eve-log-query-only: v2 and v3 tests
Jason Ish [Thu, 4 Jul 2024 21:43:29 +0000 (15:43 -0600)]
dns-udp-eve-log-answer-only: v2 and v3 tests
Jason Ish [Thu, 4 Jul 2024 21:41:29 +0000 (15:41 -0600)]
dns-udp-eve-log-srv: v2 and v3 tests
Jason Ish [Thu, 4 Jul 2024 21:39:05 +0000 (15:39 -0600)]
dns-udp-eve-log-aaaa-only: v2 and v3 tests
Jason Ish [Thu, 4 Jul 2024 21:34:36 +0000 (15:34 -0600)]
dns-udp-eve-log-mx-only: v2 and v3 tests
Jason Ish [Thu, 4 Jul 2024 21:28:59 +0000 (15:28 -0600)]
dns-udp-eve-dig: v2 and v3 tests
Jason Ish [Thu, 4 Jul 2024 21:24:59 +0000 (15:24 -0600)]
dns-udp-eve-txt: v2 and v3 tests
Jason Ish [Thu, 4 Jul 2024 21:20:43 +0000 (15:20 -0600)]
dns-udp-unsolicited-response: v2 and v3 tests
Jason Ish [Thu, 4 Jul 2024 21:17:44 +0000 (15:17 -0600)]
dns-z-bit: v2 and v3 tests
Jason Ish [Thu, 4 Jul 2024 21:14:07 +0000 (15:14 -0600)]
dns-invalid-opcode: v2 and v3 tests
Jason Ish [Thu, 4 Jul 2024 21:06:57 +0000 (15:06 -0600)]
run.py: allow tests to specify environment variables
Jason Ish [Thu, 4 Jul 2024 20:33:43 +0000 (14:33 -0600)]
dns-eve: v2 and v3 tests
Jason Ish [Thu, 4 Jul 2024 20:30:54 +0000 (14:30 -0600)]
dns-eve-log-https-only: v2 and v3 tests
Jason Ish [Thu, 27 Jun 2024 23:30:50 +0000 (17:30 -0600)]
tests: update dns checks for v3 format in alerts
Sascha Steinbiss [Fri, 10 May 2024 21:29:40 +0000 (23:29 +0200)]
mqtt: add tests for MQTT log limiting
Victor Julien [Mon, 1 Jul 2024 10:05:23 +0000 (12:05 +0200)]
tests: enable iprep isset test for 7
Philippe Antoine [Thu, 4 Jul 2024 09:21:03 +0000 (11:21 +0200)]
tests: support detect bypass udp test on 7
Ticket: 7054
Philippe Antoine [Mon, 24 Jun 2024 20:08:52 +0000 (22:08 +0200)]
backport to 7 test filestore-dont
Ticket: 6390
Shivani Bhardwaj [Thu, 4 Jul 2024 12:59:38 +0000 (18:29 +0530)]
datasets-memcap-01: add os and arch requirements
Victor Julien [Mon, 27 May 2024 14:43:37 +0000 (16:43 +0200)]
tests: add tcp split handshake tests
Philippe Antoine [Thu, 27 Jun 2024 09:10:08 +0000 (11:10 +0200)]
eve-validator: use default-features in Cargo.toml
warning: `default_features` is deprecated in favor of `default-features` and will not work in the 2024 edition
Jason Ish [Fri, 21 Jun 2024 14:05:42 +0000 (08:05 -0600)]
tests: remove tests for versions less than 6
Philippe Antoine [Tue, 18 Jun 2024 05:11:54 +0000 (07:11 +0200)]
mqtt: requirement on version and not file
As the fle is planned to be moved to rust
Shivani Bhardwaj [Mon, 10 Jun 2024 10:19:50 +0000 (15:49 +0530)]
datasets: add tests for string memcap
Ticket 3910
Shivani Bhardwaj [Fri, 28 Jun 2024 06:31:40 +0000 (12:01 +0530)]
run.py: add option to check for architecture
Shivani Bhardwaj [Tue, 11 Jun 2024 10:08:21 +0000 (15:38 +0530)]
run.py: add option to check for os
Philippe Antoine [Thu, 30 May 2024 12:47:31 +0000 (14:47 +0200)]
bypass: adds a test with a UDP flow
Ticket: 7053
Victor Julien [Fri, 28 Jun 2024 10:51:23 +0000 (12:51 +0200)]
tests: support alert pass tests on 7
Victor Julien [Mon, 24 Jun 2024 12:18:08 +0000 (14:18 +0200)]
tests: add threshold backoff tests
Victor Julien [Wed, 13 Mar 2024 10:06:02 +0000 (11:06 +0100)]
tests: add detection_filter tests for by_flow and by_src
Victor Julien [Sat, 2 Mar 2024 07:40:42 +0000 (08:40 +0100)]
tests: add global by_flow thresholding tests
Victor Julien [Fri, 1 Mar 2024 13:15:27 +0000 (14:15 +0100)]
tests: add threshold by_flow test
Ticket: #6822.
Jeff Lucovsky [Tue, 27 Feb 2024 14:02:35 +0000 (09:02 -0500)]
tests/transform: from_base64 test
Issue: 6487
Test cases for the from_base64 transform
- Case 01 tests RFC4648 (default) with various offsets
- Case 02 tests RFC2045 and verifies success and failure case
(with other modes)
- Case 03 -- case 01 with fast_pattern associated with the
post transform content.
Philippe Antoine [Thu, 20 Jun 2024 14:09:37 +0000 (16:09 +0200)]
output: adds checks for payload_length field
Ticket: 7098
Philippe Antoine [Thu, 20 Jun 2024 13:08:16 +0000 (15:08 +0200)]
dcerpc: check for app-layer metadata in alert
Ticket: 6090
Philippe Antoine [Tue, 10 Oct 2023 10:04:48 +0000 (12:04 +0200)]
Adds a test about filestore
That it does not store too many files
Philippe Antoine [Tue, 4 Jun 2024 13:27:07 +0000 (15:27 +0200)]
smtp: backport to 7 test smtp-to-comma
Ticket: 7060
Victor Julien [Fri, 31 May 2024 13:14:29 +0000 (15:14 +0200)]
tests: add tls alpn tests
Victor Julien [Fri, 7 Jun 2024 12:44:29 +0000 (14:44 +0200)]
tests: add stream_size prefilter tests
Philippe Antoine [Fri, 14 Jun 2024 08:24:00 +0000 (10:24 +0200)]
detect: move http uri unit tests to SV
Ticket: 3725
Victor Julien [Thu, 16 May 2024 13:56:57 +0000 (15:56 +0200)]
tests: iprep isset/isnotset test
Jeff Lucovsky [Tue, 14 May 2024 12:56:14 +0000 (08:56 -0400)]
tests/ja4: Enable ja4 tests for 7.0.6 and later
Issue: 7010
Enable the JA4 tests for Suricata 7.0.6 and later.
Jeff Lucovsky [Tue, 14 May 2024 12:57:08 +0000 (08:57 -0400)]
testa/ja4: Confirm config on auto-enable
Issue: 7010
Confirm that the config-level message is displayed when JA4 is enabled
due to rule usage.
Victor Julien [Fri, 12 Jan 2024 13:38:57 +0000 (14:38 +0100)]
tests: add test for alert-then-pass issue 5466
Philippe Antoine [Thu, 6 Jun 2024 21:20:13 +0000 (23:20 +0200)]
websocket: adds check for data frame
Ticket: 7051
Philippe Antoine [Thu, 7 Dec 2023 08:37:06 +0000 (09:37 +0100)]
enip: adds test for new enip keywords
Ticket: 3958
Philippe Antoine [Thu, 7 Dec 2023 08:11:39 +0000 (09:11 +0100)]
enip: adds test for frames
Ticket: 3598
Philippe Antoine [Fri, 17 Nov 2023 11:03:11 +0000 (12:03 +0100)]
enip: Add test for logger
Philippe Antoine [Mon, 20 Nov 2023 08:23:43 +0000 (09:23 +0100)]
enip: tests compatible with rust parser
Philippe Antoine [Tue, 4 Jun 2024 12:41:58 +0000 (14:41 +0200)]
smtp/mime: adds test for url extraction in base64 message
Ticket: 5185
Philippe Antoine [Sun, 2 Jun 2024 19:37:28 +0000 (21:37 +0200)]
tests: fix order of mac address in nfs test for 7
Ticket: 6690
Juliana Fajardini [Wed, 24 Apr 2024 00:43:58 +0000 (21:43 -0300)]
tests/pgsql: add test for bug 6983
Related to
Bug #6983
Victor Julien [Wed, 15 Nov 2023 10:18:27 +0000 (11:18 +0100)]
tests: smtp frames tests
Philippe Antoine [Thu, 30 May 2024 09:28:58 +0000 (11:28 +0200)]
smtp: adds test with To field having quotes, commas...
Ticket: 3487
Philippe Antoine [Thu, 23 May 2024 12:50:07 +0000 (14:50 +0200)]
smtp: extend test with smtp extended logging
with custom fields, to cover more suricata code
Philippe Antoine [Wed, 22 May 2024 20:39:50 +0000 (22:39 +0200)]
smtp/mime: update test to match new behavior
Ticket: 3487
rust mime parser succeeds in parsing this traffic
Victor Julien [Sat, 1 Jun 2024 14:09:09 +0000 (16:09 +0200)]
tests: add lua output streaming test
Victor Julien [Sat, 1 Jun 2024 11:04:45 +0000 (13:04 +0200)]
tests: add lua stats test
Eric Leblond [Sun, 25 Feb 2024 20:39:13 +0000 (21:39 +0100)]
tests: fix order of mac address in nfs test
Eric Leblond [Mon, 30 Oct 2023 20:43:49 +0000 (21:43 +0100)]
tests: add ethernet eve test
Victor Julien [Thu, 30 May 2024 07:58:41 +0000 (09:58 +0200)]
tests: fix dataset test on 6.0.x
Victor Julien [Sat, 25 May 2024 18:45:00 +0000 (20:45 +0200)]
tests: add tls client cert match test
Victor Julien [Sat, 25 May 2024 18:46:14 +0000 (20:46 +0200)]
tests: tls store for client certs
Victor Julien [Sat, 25 May 2024 13:44:43 +0000 (15:44 +0200)]
tests: add tls-store test
Jason Ish [Mon, 27 May 2024 21:54:53 +0000 (15:54 -0600)]
test: test lua memory limit errors
Jason Ish [Fri, 24 May 2024 22:02:43 +0000 (16:02 -0600)]
test: lua scripts exceeding the instruction limit
Jason Ish [Fri, 24 May 2024 17:09:36 +0000 (11:09 -0600)]
test: add lua test for blocked lua library
Jason Ish [Fri, 24 May 2024 18:45:34 +0000 (12:45 -0600)]
run.py: use single mode if -j1 and on Linux
Single mode can expose some errors that are hidden in mp mode, so it
can be useful to use even on Linux.
Jason Ish [Fri, 24 May 2024 17:09:07 +0000 (11:09 -0600)]
run.py: add __startswith and __endswith for string matching
Shivani Bhardwaj [Tue, 5 Mar 2024 07:01:52 +0000 (12:31 +0530)]
rule-grouping: update min-version
Victor Julien [Thu, 23 May 2024 09:35:33 +0000 (11:35 +0200)]
tests: enable pcap tests for 7
Victor Julien [Thu, 23 May 2024 09:33:51 +0000 (11:33 +0200)]
tests: enable ppp tests for 7
Victor Julien [Tue, 21 May 2024 07:51:01 +0000 (09:51 +0200)]
tests: add pcap logging tests
Victor Julien [Mon, 20 May 2024 20:28:14 +0000 (22:28 +0200)]
tests: lz4 pcap write tests
Shivani Bhardwaj [Fri, 29 Mar 2024 12:23:34 +0000 (17:53 +0530)]
tls-subjectaltname: add tests
Feature 5234
Philippe Antoine [Sat, 30 Mar 2024 14:03:48 +0000 (15:03 +0100)]
smtp: adds test with data command being rejected
Ticket: 6906
Philippe Antoine [Tue, 19 Sep 2023 08:01:54 +0000 (10:01 +0200)]
Adds test about pop3 protocol detection
Philippe Antoine [Tue, 2 Apr 2019 10:23:45 +0000 (12:23 +0200)]
Adds a test case for uri with space in it
Jason Ish [Tue, 7 May 2024 16:43:27 +0000 (10:43 -0600)]
test: lua-rule-errors
Test for correct behvaior when a Lua rule crashes.
On crash, a Lua script should not result in a match when negation is
applied. Also test for:
- error stat
- one time logging per thread
Ticket: #6940
Jason Ish [Tue, 7 May 2024 16:42:54 +0000 (10:42 -0600)]
readme: add example for __find
__find can be used to search for a substring in a json field.
Giuseppe Longo [Mon, 4 Mar 2024 12:27:34 +0000 (13:27 +0100)]
arp: add tests
Philippe Antoine [Tue, 7 May 2024 07:06:15 +0000 (09:06 +0200)]
detect: add a test for protocol mismatch detection
Ticket: #4921
Philippe Antoine [Tue, 7 May 2024 07:01:17 +0000 (09:01 +0200)]
detect: add a tests for original protocol matching
Ticket: #4921
Victor Julien [Tue, 21 Dec 2021 09:07:01 +0000 (10:07 +0100)]
tests: add tests for negated protocol matching
Ticket: #4921
Philippe Antoine [Tue, 14 May 2024 12:12:45 +0000 (14:12 +0200)]
websocket: adds test for ping/pong opcodes
Ticket: 7025
Philippe Antoine [Fri, 26 Apr 2024 08:43:42 +0000 (10:43 +0200)]
websocket: checks alert app-layer metadata for frames
Ticket: 6973