]> git.ipfire.org Git - thirdparty/suricata-verify.git/log
thirdparty/suricata-verify.git
12 months agodns-udp-double-request-response: v2 and v3 tests 1969/head
Jason Ish [Fri, 5 Jul 2024 01:01:32 +0000 (19:01 -0600)] 
dns-udp-double-request-response: v2 and v3 tests

12 months agodns-tcp-www-google-com: v2 and v3 tests
Jason Ish [Fri, 5 Jul 2024 00:58:36 +0000 (18:58 -0600)] 
dns-tcp-www-google-com: v2 and v3 tests

12 months agodns-tcp-ts-gap: update for v2 and v3 dns logging
Jason Ish [Fri, 5 Jul 2024 00:56:28 +0000 (18:56 -0600)] 
dns-tcp-ts-gap: update for v2 and v3 dns logging

12 months agodns-tcp-multirequest-buffer: v2 and v3 tests
Jason Ish [Fri, 5 Jul 2024 00:05:50 +0000 (18:05 -0600)] 
dns-tcp-multirequest-buffer: v2 and v3 tests

12 months agodns-single-request: v2 and v3 tests
Jason Ish [Fri, 5 Jul 2024 00:02:40 +0000 (18:02 -0600)] 
dns-single-request: v2 and v3 tests

12 months agodns-incomplete: dns v2 and v3 tests
Jason Ish [Fri, 5 Jul 2024 00:00:32 +0000 (18:00 -0600)] 
dns-incomplete: dns v2 and v3 tests

12 months agobug-990: dns v2 and v3 tests
Jason Ish [Thu, 4 Jul 2024 23:56:09 +0000 (17:56 -0600)] 
bug-990: dns v2 and v3 tests

As this is a DNS test move into dns/.

12 months agobug-856: dns v2 and v3 tests
Jason Ish [Thu, 4 Jul 2024 23:53:58 +0000 (17:53 -0600)] 
bug-856: dns v2 and v3 tests

Move into dns as this is a DNS test.

12 months agobug-1158: dns v2 and v3 tests
Jason Ish [Thu, 4 Jul 2024 23:49:58 +0000 (17:49 -0600)] 
bug-1158: dns v2 and v3 tests

As this is a DNS test, also move into the dns/ folder.

12 months agodns-udp-null: v2 and v3 tests
Jason Ish [Thu, 4 Jul 2024 23:42:45 +0000 (17:42 -0600)] 
dns-udp-null: v2 and v3 tests

12 months agodns-udp-junkrequest-first: v2 and v3 tests
Jason Ish [Thu, 4 Jul 2024 23:39:40 +0000 (17:39 -0600)] 
dns-udp-junkrequest-first: v2 and v3 tests

12 months agodecode-teredo-01: update for dns v3 logging
Jason Ish [Thu, 4 Jul 2024 23:25:43 +0000 (17:25 -0600)] 
decode-teredo-01: update for dns v3 logging

12 months agoethernet-eve: update for dns v3 logging
Jason Ish [Thu, 4 Jul 2024 22:41:39 +0000 (16:41 -0600)] 
ethernet-eve: update for dns v3 logging

12 months agovxlan-decoder-03: v2 and v3 dns tests
Jason Ish [Thu, 4 Jul 2024 22:39:44 +0000 (16:39 -0600)] 
vxlan-decoder-03: v2 and v3 dns tests

12 months agodns-udp-eve-log-query-only: v2 and v3 tests
Jason Ish [Thu, 4 Jul 2024 21:45:07 +0000 (15:45 -0600)] 
dns-udp-eve-log-query-only: v2 and v3 tests

12 months agodns-udp-eve-log-answer-only: v2 and v3 tests
Jason Ish [Thu, 4 Jul 2024 21:43:29 +0000 (15:43 -0600)] 
dns-udp-eve-log-answer-only: v2 and v3 tests

12 months agodns-udp-eve-log-srv: v2 and v3 tests
Jason Ish [Thu, 4 Jul 2024 21:41:29 +0000 (15:41 -0600)] 
dns-udp-eve-log-srv: v2 and v3 tests

12 months agodns-udp-eve-log-aaaa-only: v2 and v3 tests
Jason Ish [Thu, 4 Jul 2024 21:39:05 +0000 (15:39 -0600)] 
dns-udp-eve-log-aaaa-only: v2 and v3 tests

12 months agodns-udp-eve-log-mx-only: v2 and v3 tests
Jason Ish [Thu, 4 Jul 2024 21:34:36 +0000 (15:34 -0600)] 
dns-udp-eve-log-mx-only: v2 and v3 tests

12 months agodns-udp-eve-dig: v2 and v3 tests
Jason Ish [Thu, 4 Jul 2024 21:28:59 +0000 (15:28 -0600)] 
dns-udp-eve-dig: v2 and v3 tests

12 months agodns-udp-eve-txt: v2 and v3 tests
Jason Ish [Thu, 4 Jul 2024 21:24:59 +0000 (15:24 -0600)] 
dns-udp-eve-txt: v2 and v3 tests

12 months agodns-udp-unsolicited-response: v2 and v3 tests
Jason Ish [Thu, 4 Jul 2024 21:20:43 +0000 (15:20 -0600)] 
dns-udp-unsolicited-response: v2 and v3 tests

12 months agodns-z-bit: v2 and v3 tests
Jason Ish [Thu, 4 Jul 2024 21:17:44 +0000 (15:17 -0600)] 
dns-z-bit: v2 and v3 tests

12 months agodns-invalid-opcode: v2 and v3 tests
Jason Ish [Thu, 4 Jul 2024 21:14:07 +0000 (15:14 -0600)] 
dns-invalid-opcode: v2 and v3 tests

12 months agorun.py: allow tests to specify environment variables
Jason Ish [Thu, 4 Jul 2024 21:06:57 +0000 (15:06 -0600)] 
run.py: allow tests to specify environment variables

12 months agodns-eve: v2 and v3 tests
Jason Ish [Thu, 4 Jul 2024 20:33:43 +0000 (14:33 -0600)] 
dns-eve: v2 and v3 tests

12 months agodns-eve-log-https-only: v2 and v3 tests
Jason Ish [Thu, 4 Jul 2024 20:30:54 +0000 (14:30 -0600)] 
dns-eve-log-https-only: v2 and v3 tests

12 months agotests: update dns checks for v3 format in alerts
Jason Ish [Thu, 27 Jun 2024 23:30:50 +0000 (17:30 -0600)] 
tests: update dns checks for v3 format in alerts

12 months agomqtt: add tests for MQTT log limiting
Sascha Steinbiss [Fri, 10 May 2024 21:29:40 +0000 (23:29 +0200)] 
mqtt: add tests for MQTT log limiting

12 months agotests: enable iprep isset test for 7 1966/head
Victor Julien [Mon, 1 Jul 2024 10:05:23 +0000 (12:05 +0200)] 
tests: enable iprep isset test for 7

12 months agotests: support detect bypass udp test on 7
Philippe Antoine [Thu, 4 Jul 2024 09:21:03 +0000 (11:21 +0200)] 
tests: support detect bypass udp test on 7

Ticket: 7054

12 months agobackport to 7 test filestore-dont
Philippe Antoine [Mon, 24 Jun 2024 20:08:52 +0000 (22:08 +0200)] 
backport to 7 test filestore-dont

Ticket: 6390

13 months agodatasets-memcap-01: add os and arch requirements 1962/head
Shivani Bhardwaj [Thu, 4 Jul 2024 12:59:38 +0000 (18:29 +0530)] 
datasets-memcap-01: add os and arch requirements

13 months agotests: add tcp split handshake tests
Victor Julien [Mon, 27 May 2024 14:43:37 +0000 (16:43 +0200)] 
tests: add tcp split handshake tests

13 months agoeve-validator: use default-features in Cargo.toml
Philippe Antoine [Thu, 27 Jun 2024 09:10:08 +0000 (11:10 +0200)] 
eve-validator: use default-features in Cargo.toml

warning: `default_features` is deprecated in favor of `default-features` and will not work in the 2024 edition

13 months agotests: remove tests for versions less than 6
Jason Ish [Fri, 21 Jun 2024 14:05:42 +0000 (08:05 -0600)] 
tests: remove tests for versions less than 6

13 months agomqtt: requirement on version and not file
Philippe Antoine [Tue, 18 Jun 2024 05:11:54 +0000 (07:11 +0200)] 
mqtt: requirement on version and not file

As the fle is planned to be moved to rust

13 months agodatasets: add tests for string memcap 1956/head
Shivani Bhardwaj [Mon, 10 Jun 2024 10:19:50 +0000 (15:49 +0530)] 
datasets: add tests for string memcap

Ticket 3910

13 months agorun.py: add option to check for architecture
Shivani Bhardwaj [Fri, 28 Jun 2024 06:31:40 +0000 (12:01 +0530)] 
run.py: add option to check for architecture

13 months agorun.py: add option to check for os
Shivani Bhardwaj [Tue, 11 Jun 2024 10:08:21 +0000 (15:38 +0530)] 
run.py: add option to check for os

13 months agobypass: adds a test with a UDP flow
Philippe Antoine [Thu, 30 May 2024 12:47:31 +0000 (14:47 +0200)] 
bypass: adds a test with a UDP flow

Ticket: 7053

13 months agotests: support alert pass tests on 7 1950/head
Victor Julien [Fri, 28 Jun 2024 10:51:23 +0000 (12:51 +0200)] 
tests: support alert pass tests on 7

13 months agotests: add threshold backoff tests 1939/head 1947/head
Victor Julien [Mon, 24 Jun 2024 12:18:08 +0000 (14:18 +0200)] 
tests: add threshold backoff tests

13 months agotests: add detection_filter tests for by_flow and by_src 1938/head
Victor Julien [Wed, 13 Mar 2024 10:06:02 +0000 (11:06 +0100)] 
tests: add detection_filter tests for by_flow and by_src

13 months agotests: add global by_flow thresholding tests
Victor Julien [Sat, 2 Mar 2024 07:40:42 +0000 (08:40 +0100)] 
tests: add global by_flow thresholding tests

13 months agotests: add threshold by_flow test
Victor Julien [Fri, 1 Mar 2024 13:15:27 +0000 (14:15 +0100)] 
tests: add threshold by_flow test

Ticket: #6822.

13 months agotests/transform: from_base64 test 1937/head suricata-6.0.20 suricata-7.0.6
Jeff Lucovsky [Tue, 27 Feb 2024 14:02:35 +0000 (09:02 -0500)] 
tests/transform: from_base64 test

Issue: 6487

Test cases for the from_base64 transform
- Case 01 tests RFC4648 (default) with various offsets
- Case 02 tests RFC2045 and verifies success and failure case
  (with other modes)
- Case 03 -- case 01 with fast_pattern associated with the
  post transform content.

13 months agooutput: adds checks for payload_length field
Philippe Antoine [Thu, 20 Jun 2024 14:09:37 +0000 (16:09 +0200)] 
output: adds checks for payload_length field

Ticket: 7098

13 months agodcerpc: check for app-layer metadata in alert
Philippe Antoine [Thu, 20 Jun 2024 13:08:16 +0000 (15:08 +0200)] 
dcerpc: check for app-layer metadata in alert

Ticket: 6090

13 months agoAdds a test about filestore
Philippe Antoine [Tue, 10 Oct 2023 10:04:48 +0000 (12:04 +0200)] 
Adds a test about filestore

That it does not store too many files

13 months agosmtp: backport to 7 test smtp-to-comma 1933/head
Philippe Antoine [Tue, 4 Jun 2024 13:27:07 +0000 (15:27 +0200)] 
smtp: backport to 7 test smtp-to-comma

Ticket: 7060

13 months agotests: add tls alpn tests 1927/head
Victor Julien [Fri, 31 May 2024 13:14:29 +0000 (15:14 +0200)] 
tests: add tls alpn tests

13 months agotests: add stream_size prefilter tests 1925/head
Victor Julien [Fri, 7 Jun 2024 12:44:29 +0000 (14:44 +0200)] 
tests: add stream_size prefilter tests

13 months agodetect: move http uri unit tests to SV 1919/head
Philippe Antoine [Fri, 14 Jun 2024 08:24:00 +0000 (10:24 +0200)] 
detect: move http uri unit tests to SV

Ticket: 3725

13 months agotests: iprep isset/isnotset test 1918/head
Victor Julien [Thu, 16 May 2024 13:56:57 +0000 (15:56 +0200)] 
tests: iprep isset/isnotset test

13 months agotests/ja4: Enable ja4 tests for 7.0.6 and later 1908/head
Jeff Lucovsky [Tue, 14 May 2024 12:56:14 +0000 (08:56 -0400)] 
tests/ja4: Enable ja4 tests for 7.0.6 and later

Issue: 7010

Enable the JA4 tests for Suricata 7.0.6 and later.

13 months agotesta/ja4: Confirm config on auto-enable
Jeff Lucovsky [Tue, 14 May 2024 12:57:08 +0000 (08:57 -0400)] 
testa/ja4: Confirm config on auto-enable

Issue: 7010

Confirm that the config-level message is displayed when JA4 is enabled
due to rule usage.

13 months agotests: add test for alert-then-pass issue 5466 1903/head 1905/head
Victor Julien [Fri, 12 Jan 2024 13:38:57 +0000 (14:38 +0100)] 
tests: add test for alert-then-pass issue 5466

13 months agowebsocket: adds check for data frame 1901/head
Philippe Antoine [Thu, 6 Jun 2024 21:20:13 +0000 (23:20 +0200)] 
websocket: adds check for data frame

Ticket: 7051

13 months agoenip: adds test for new enip keywords
Philippe Antoine [Thu, 7 Dec 2023 08:37:06 +0000 (09:37 +0100)] 
enip: adds test for new enip keywords

Ticket: 3958

13 months agoenip: adds test for frames
Philippe Antoine [Thu, 7 Dec 2023 08:11:39 +0000 (09:11 +0100)] 
enip: adds test for frames

Ticket: 3598

13 months agoenip: Add test for logger
Philippe Antoine [Fri, 17 Nov 2023 11:03:11 +0000 (12:03 +0100)] 
enip: Add test for logger

13 months agoenip: tests compatible with rust parser
Philippe Antoine [Mon, 20 Nov 2023 08:23:43 +0000 (09:23 +0100)] 
enip: tests compatible with rust parser

13 months agosmtp/mime: adds test for url extraction in base64 message 1900/head
Philippe Antoine [Tue, 4 Jun 2024 12:41:58 +0000 (14:41 +0200)] 
smtp/mime: adds test for url extraction in base64 message

Ticket: 5185

13 months agotests: fix order of mac address in nfs test for 7 1892/head
Philippe Antoine [Sun, 2 Jun 2024 19:37:28 +0000 (21:37 +0200)] 
tests: fix order of mac address in nfs test for 7

Ticket: 6690

13 months agotests/pgsql: add test for bug 6983 1890/head
Juliana Fajardini [Wed, 24 Apr 2024 00:43:58 +0000 (21:43 -0300)] 
tests/pgsql: add test for bug 6983

Related to
Bug #6983

14 months agotests: smtp frames tests 1883/head 1887/head
Victor Julien [Wed, 15 Nov 2023 10:18:27 +0000 (11:18 +0100)] 
tests: smtp frames tests

14 months agosmtp: adds test with To field having quotes, commas... 1882/head
Philippe Antoine [Thu, 30 May 2024 09:28:58 +0000 (11:28 +0200)] 
smtp: adds test with To field having quotes, commas...

Ticket: 3487

14 months agosmtp: extend test with smtp extended logging
Philippe Antoine [Thu, 23 May 2024 12:50:07 +0000 (14:50 +0200)] 
smtp: extend test with smtp extended logging

with custom fields, to cover more suricata code

14 months agosmtp/mime: update test to match new behavior
Philippe Antoine [Wed, 22 May 2024 20:39:50 +0000 (22:39 +0200)] 
smtp/mime: update test to match new behavior

Ticket: 3487

rust mime parser succeeds in parsing this traffic

14 months agotests: add lua output streaming test 1877/head
Victor Julien [Sat, 1 Jun 2024 14:09:09 +0000 (16:09 +0200)] 
tests: add lua output streaming test

14 months agotests: add lua stats test
Victor Julien [Sat, 1 Jun 2024 11:04:45 +0000 (13:04 +0200)] 
tests: add lua stats test

14 months agotests: fix order of mac address in nfs test
Eric Leblond [Sun, 25 Feb 2024 20:39:13 +0000 (21:39 +0100)] 
tests: fix order of mac address in nfs test

14 months agotests: add ethernet eve test
Eric Leblond [Mon, 30 Oct 2023 20:43:49 +0000 (21:43 +0100)] 
tests: add ethernet eve test

14 months agotests: fix dataset test on 6.0.x 1871/head
Victor Julien [Thu, 30 May 2024 07:58:41 +0000 (09:58 +0200)] 
tests: fix dataset test on 6.0.x

14 months agotests: add tls client cert match test 1866/head
Victor Julien [Sat, 25 May 2024 18:45:00 +0000 (20:45 +0200)] 
tests: add tls client cert match test

14 months agotests: tls store for client certs
Victor Julien [Sat, 25 May 2024 18:46:14 +0000 (20:46 +0200)] 
tests: tls store for client certs

14 months agotests: add tls-store test
Victor Julien [Sat, 25 May 2024 13:44:43 +0000 (15:44 +0200)] 
tests: add tls-store test

14 months agotest: test lua memory limit errors 1859/head 1861/head 1864/head
Jason Ish [Mon, 27 May 2024 21:54:53 +0000 (15:54 -0600)] 
test: test lua memory limit errors

14 months agotest: lua scripts exceeding the instruction limit
Jason Ish [Fri, 24 May 2024 22:02:43 +0000 (16:02 -0600)] 
test: lua scripts exceeding the instruction limit

14 months agotest: add lua test for blocked lua library
Jason Ish [Fri, 24 May 2024 17:09:36 +0000 (11:09 -0600)] 
test: add lua test for blocked lua library

14 months agorun.py: use single mode if -j1 and on Linux
Jason Ish [Fri, 24 May 2024 18:45:34 +0000 (12:45 -0600)] 
run.py: use single mode if -j1 and on Linux

Single mode can expose some errors that are hidden in mp mode, so it
can be useful to use even on Linux.

14 months agorun.py: add __startswith and __endswith for string matching
Jason Ish [Fri, 24 May 2024 17:09:07 +0000 (11:09 -0600)] 
run.py: add __startswith and __endswith for string matching

14 months agorule-grouping: update min-version 1854/head
Shivani Bhardwaj [Tue, 5 Mar 2024 07:01:52 +0000 (12:31 +0530)] 
rule-grouping: update min-version

14 months agotests: enable pcap tests for 7 1849/head 1852/head
Victor Julien [Thu, 23 May 2024 09:35:33 +0000 (11:35 +0200)] 
tests: enable pcap tests for 7

14 months agotests: enable ppp tests for 7
Victor Julien [Thu, 23 May 2024 09:33:51 +0000 (11:33 +0200)] 
tests: enable ppp tests for 7

14 months agotests: add pcap logging tests 1848/head
Victor Julien [Tue, 21 May 2024 07:51:01 +0000 (09:51 +0200)] 
tests: add pcap logging tests

14 months agotests: lz4 pcap write tests
Victor Julien [Mon, 20 May 2024 20:28:14 +0000 (22:28 +0200)] 
tests: lz4 pcap write tests

14 months agotls-subjectaltname: add tests 1846/head
Shivani Bhardwaj [Fri, 29 Mar 2024 12:23:34 +0000 (17:53 +0530)] 
tls-subjectaltname: add tests

Feature 5234

14 months agosmtp: adds test with data command being rejected 1845/head
Philippe Antoine [Sat, 30 Mar 2024 14:03:48 +0000 (15:03 +0100)] 
smtp: adds test with data command being rejected

Ticket: 6906

14 months agoAdds test about pop3 protocol detection
Philippe Antoine [Tue, 19 Sep 2023 08:01:54 +0000 (10:01 +0200)] 
Adds test about pop3 protocol detection

14 months agoAdds a test case for uri with space in it 1838/head
Philippe Antoine [Tue, 2 Apr 2019 10:23:45 +0000 (12:23 +0200)] 
Adds a test case for uri with space in it

14 months agotest: lua-rule-errors 1835/head
Jason Ish [Tue, 7 May 2024 16:43:27 +0000 (10:43 -0600)] 
test: lua-rule-errors

Test for correct behvaior when a Lua rule crashes.

On crash, a Lua script should not result in a match when negation is
applied. Also test for:
- error stat
- one time logging per thread

Ticket: #6940

14 months agoreadme: add example for __find
Jason Ish [Tue, 7 May 2024 16:42:54 +0000 (10:42 -0600)] 
readme: add example for __find

__find can be used to search for a substring in a json field.

14 months agoarp: add tests 1833/head
Giuseppe Longo [Mon, 4 Mar 2024 12:27:34 +0000 (13:27 +0100)] 
arp: add tests

14 months agodetect: add a test for protocol mismatch detection 1832/head
Philippe Antoine [Tue, 7 May 2024 07:06:15 +0000 (09:06 +0200)] 
detect: add a test for protocol mismatch detection

Ticket: #4921

14 months agodetect: add a tests for original protocol matching
Philippe Antoine [Tue, 7 May 2024 07:01:17 +0000 (09:01 +0200)] 
detect: add a tests for original protocol matching

Ticket: #4921

14 months agotests: add tests for negated protocol matching
Victor Julien [Tue, 21 Dec 2021 09:07:01 +0000 (10:07 +0100)] 
tests: add tests for negated protocol matching

Ticket: #4921

14 months agowebsocket: adds test for ping/pong opcodes 1831/head
Philippe Antoine [Tue, 14 May 2024 12:12:45 +0000 (14:12 +0200)] 
websocket: adds test for ping/pong opcodes

Ticket: 7025

14 months agowebsocket: checks alert app-layer metadata for frames
Philippe Antoine [Fri, 26 Apr 2024 08:43:42 +0000 (10:43 +0200)] 
websocket: checks alert app-layer metadata for frames

Ticket: 6973