]>
git.ipfire.org Git - thirdparty/suricata-verify.git/log
Victor Julien [Mon, 18 Oct 2021 14:30:32 +0000 (16:30 +0200)]
tests: fix fastopen test on openbsd
Just rewrote it with:
tshark -F pcap -r <old> -w <new>
This changed the md5sum, so something changed.
OpenBSD 7.0 reported caplen of 0.
Victor Julien [Mon, 18 Oct 2021 13:18:49 +0000 (15:18 +0200)]
tests: fix pcapng pcaps
Victor Julien [Mon, 18 Oct 2021 13:16:57 +0000 (15:16 +0200)]
ci: fix pcapng check on ubuntu
Jason Ish [Sun, 10 Oct 2021 05:10:35 +0000 (23:10 -0600)]
runner: fix tests always being run in quiet mode
Fix an early return introduced in
9839097b816d2f7e1cb00d4f4e98919565d122a1 , which resulted in a quiet like
mode all the time.
Jason Ish [Mon, 20 Sep 2021 17:43:49 +0000 (11:43 -0600)]
tests: convert check.sh to test.yaml
Philippe Antoine [Fri, 10 Sep 2021 11:38:05 +0000 (13:38 +0200)]
Adds tests about IPv6 fragmentation
Philippe Antoine [Thu, 7 Oct 2021 08:53:00 +0000 (10:53 +0200)]
modbus: enable in configuration
Shivani Bhardwaj [Wed, 6 Oct 2021 10:29:39 +0000 (15:59 +0530)]
smb-eicar-padding: bump min-version to 6
Shivani Bhardwaj [Wed, 6 Oct 2021 10:29:28 +0000 (15:59 +0530)]
smb-eicar-overlap: bump min-version to 6
Shivani Bhardwaj [Wed, 6 Oct 2021 10:29:13 +0000 (15:59 +0530)]
krb5-probing: bump min-version to 6
Shivani Bhardwaj [Wed, 6 Oct 2021 10:29:02 +0000 (15:59 +0530)]
issue-3703: bump min-version to 6
Shivani Bhardwaj [Mon, 6 Sep 2021 01:00:30 +0000 (06:30 +0530)]
ssh: fix alert count
Jason Ish [Wed, 29 Sep 2021 17:44:02 +0000 (11:44 -0600)]
github-ci: add pcre2
Philippe Antoine [Tue, 25 May 2021 15:38:38 +0000 (17:38 +0200)]
Use generic PCRE string for error code checking
Philippe Antoine [Tue, 16 Mar 2021 19:37:07 +0000 (20:37 +0100)]
pcrexform: test becomes obsolete in version 7
converted to a unit test failing to load the signature
Victor Julien [Tue, 28 Sep 2021 12:41:26 +0000 (14:41 +0200)]
tests: enable issue 4663 tests for 5 and 6
Philippe Antoine [Fri, 10 Sep 2021 09:06:08 +0000 (11:06 +0200)]
Sets minimum version 6 for ip6 invalid fragment length
Philippe Antoine [Fri, 23 Jul 2021 15:56:35 +0000 (17:56 +0200)]
Ads various tests about IPv6 denial of service
Philippe Antoine [Fri, 23 Jul 2021 15:44:06 +0000 (17:44 +0200)]
Adds test about IPv6 smurf detection
aka (spoofed) ping to multicast
Philippe Antoine [Tue, 20 Jul 2021 08:51:27 +0000 (10:51 +0200)]
Adds test about ICMPv6 kill router
Philippe Antoine [Tue, 20 Jul 2021 07:57:00 +0000 (09:57 +0200)]
Adds test about ipv6 unknown dst opts
used as way to have a covert channel
Philippe Antoine [Mon, 19 Jul 2021 13:47:40 +0000 (15:47 +0200)]
Adds test about icmpv6 type and code detection
Philippe Antoine [Fri, 23 Apr 2021 20:24:20 +0000 (22:24 +0200)]
Adds test about tcp protocol detection bailout
Mats Klepsland [Mon, 31 May 2021 10:57:05 +0000 (12:57 +0200)]
Add test for Bug #4503
Jason Ish [Mon, 20 Sep 2021 19:28:38 +0000 (13:28 -0600)]
run.py: remove support for check.sh
Jason Ish [Sat, 18 Sep 2021 00:30:53 +0000 (18:30 -0600)]
ci: run in quiet mode
Jason Ish [Fri, 17 Sep 2021 22:30:46 +0000 (16:30 -0600)]
ci: give jobs better names
Jason Ish [Fri, 17 Sep 2021 22:29:11 +0000 (16:29 -0600)]
ci: add lua to the ubuntu builds
Jason Ish [Fri, 17 Sep 2021 22:24:03 +0000 (16:24 -0600)]
ci: add almalinux build to test on RHEL-like systems
The test is done on Ubuntu, but there are some variations
between RHEL-like and Ubuntu that we should catch.
Philippe Antoine [Fri, 3 Sep 2021 09:09:57 +0000 (11:09 +0200)]
Adds http2 range test
Philippe Antoine [Thu, 18 Feb 2021 09:40:22 +0000 (10:40 +0100)]
Adds http range test over multiple flows
Philippe Antoine [Fri, 6 Dec 2019 14:58:09 +0000 (15:58 +0100)]
Adds incomplete test for http range file
Victor Julien [Mon, 27 Sep 2021 12:38:25 +0000 (14:38 +0200)]
lua: fix ua-scfileinfo on 5.0.x w/o NSS
Shivani Bhardwaj [Fri, 17 Sep 2021 06:06:58 +0000 (11:36 +0530)]
filestore-stream-depth: fix test for 6.0.x
Victor Julien [Fri, 17 Sep 2021 09:24:33 +0000 (11:24 +0200)]
lua/fileinfo: match script and expected output
Juliana Fajardini [Thu, 16 Sep 2021 13:41:00 +0000 (14:41 +0100)]
tests: add test for lua SCFileInfo
Prep for using lua's pushinteger function in SCFileInfo callbacks
Juliana Fajardini [Mon, 26 Jul 2021 13:58:19 +0000 (14:58 +0100)]
tests: add test for lua's SCRuleIds function
Juliana Fajardini [Mon, 26 Jul 2021 13:49:23 +0000 (14:49 +0100)]
tests: add test for SCFlowStats function
Juliana Fajardini [Thu, 1 Jul 2021 18:58:22 +0000 (19:58 +0100)]
tests: add lua SCPacketTuple test
Juliana Fajardini [Thu, 1 Jul 2021 18:57:11 +0000 (19:57 +0100)]
tests: add lua SCFlowTuple test
Victor Julien [Fri, 3 Sep 2021 15:03:24 +0000 (17:03 +0200)]
tests: add bug 4663 and 4670 tests
Jason Ish [Wed, 8 Sep 2021 16:59:44 +0000 (10:59 -0600)]
runner: add --quiet option
With --quiet each successful test won't be output, instead
just failed tests, the final summary and maybe some other
useful diagnostic info.
Quiet will also suppress skipped tests from being printed.
Victor Julien [Mon, 6 Sep 2021 10:17:56 +0000 (12:17 +0200)]
tests: fix tests for suricata <=6
Philippe Antoine [Mon, 19 Jul 2021 15:23:04 +0000 (17:23 +0200)]
Adds a test about IPv6 fragment invalid length
Philippe Antoine [Mon, 31 May 2021 08:50:19 +0000 (10:50 +0200)]
Adds http.header on HTTP2 traffic check
Philippe Antoine [Mon, 31 May 2021 08:11:05 +0000 (10:11 +0200)]
Adds http.header_names on HTTP2 traffic check
Philippe Antoine [Wed, 26 May 2021 20:00:53 +0000 (22:00 +0200)]
Adds http.host on HTTP2 traffic check
Philippe Antoine [Wed, 26 May 2021 18:58:24 +0000 (20:58 +0200)]
http2: upgrade transforms Host into :authority
Philippe Antoine [Mon, 5 Jul 2021 08:59:27 +0000 (10:59 +0200)]
Adds test about http2 deflate decompression
Victor Julien [Wed, 24 Mar 2021 20:43:27 +0000 (21:43 +0100)]
tests: add issue 3703 test
Victor Julien [Tue, 23 Mar 2021 10:49:43 +0000 (11:49 +0100)]
tests: updates after fixing issue 3703
Philippe Antoine [Tue, 13 Jul 2021 11:52:00 +0000 (13:52 +0200)]
Better checks for file deletion over SMB2
Philippe Antoine [Tue, 13 Jul 2021 08:56:52 +0000 (10:56 +0200)]
Adds test about file deletion over SMB2
Jason Ish [Mon, 23 Aug 2021 22:58:32 +0000 (16:58 -0600)]
requires: document per-check requires with a test conversion
Jason Ish [Mon, 23 Aug 2021 22:28:08 +0000 (16:28 -0600)]
runner: use same require checks in filters as main test
Re-use the requirements checking code from the test case in the
per-test filters. This means all requirements like lt-version,
etc are available at the filter level.
Jason Ish [Mon, 23 Aug 2021 22:17:29 +0000 (16:17 -0600)]
runner: remove 'config' requires
This is not used, and not documented and did have a spurious
debug line. I think it was an unfinished prototype that
never got used.
Jason Ish [Wed, 7 Jul 2021 13:53:24 +0000 (07:53 -0600)]
file-compare: skip file-compare tests on Windows
These should work, but it looks like there is a path issue,
so skip these tests on Windows until it can be fixed.
Jason Ish [Tue, 6 Jul 2021 23:00:20 +0000 (17:00 -0600)]
output-tcp-data: use file-compare in test.yaml
Tharushi Jayasekara [Tue, 16 Feb 2021 18:57:27 +0000 (00:27 +0530)]
run: convert cmp tests to python
Tharushi Jayasekara [Tue, 16 Feb 2021 18:53:55 +0000 (00:23 +0530)]
readme: example of file-compare check
Tharushi Jayasekara [Tue, 16 Feb 2021 18:53:05 +0000 (00:23 +0530)]
tests: add file-compare test
Victor Julien [Thu, 11 Mar 2021 16:12:56 +0000 (17:12 +0100)]
tests: add test for issue 4394
Jeff Lucovsky [Tue, 18 May 2021 12:22:12 +0000 (08:22 -0400)]
decode/vntag: 6.0.3+ backport support
Jeff Lucovsky [Sat, 24 Apr 2021 20:04:04 +0000 (16:04 -0400)]
tests/vntag: Basic test case for VNTAG decode
Sascha Steinbiss [Sat, 26 Jun 2021 12:12:50 +0000 (14:12 +0200)]
mqtt: add suricata.yaml enabling MQTT for testing
Jeff Lucovsky [Sat, 5 Dec 2020 14:43:12 +0000 (09:43 -0500)]
threshold-config: New test for issue in 2190
This commit adds a test case for large IP address handling in the
threshold.config file.
Philippe Antoine [Wed, 26 May 2021 09:44:48 +0000 (11:44 +0200)]
Make HTTP2 test work on version 6
Juliana Fajardini [Thu, 17 Jun 2021 17:27:07 +0000 (18:27 +0100)]
test/mqtt: add sid to mqtt-binary-message rule
mqtt-binary-message: add sid to rule in test.rules
Philippe Antoine [Fri, 4 Jun 2021 08:36:04 +0000 (10:36 +0200)]
Adds check about ssh bypass
Philippe Antoine [Tue, 27 Apr 2021 07:15:24 +0000 (09:15 +0200)]
Adds test about ftp epsv response parsing
Simon Dugas [Sun, 6 Dec 2020 17:20:24 +0000 (17:20 +0000)]
modbus: add test cases
Add tests for modbus logging and alerting.
Victor Julien [Fri, 21 May 2021 08:50:02 +0000 (10:50 +0200)]
http2: fix for suricata 6
Philippe Antoine [Mon, 26 Apr 2021 13:50:17 +0000 (15:50 +0200)]
Adds check for http.cookie keyword on http2 traffic
Philippe Antoine [Mon, 26 Apr 2021 13:29:25 +0000 (15:29 +0200)]
Adds check for http.host.raw keyword on http2 traffic
Philippe Antoine [Mon, 26 Apr 2021 13:16:24 +0000 (15:16 +0200)]
Adds check for http.method keyword on http2 traffic
Philippe Antoine [Mon, 26 Apr 2021 13:00:39 +0000 (15:00 +0200)]
Adds check for http.server keyword on http2 traffic
Philippe Antoine [Mon, 26 Apr 2021 12:42:11 +0000 (14:42 +0200)]
http2: use stat_code instead of stat_msg as keyword
Eric Leblond [Sun, 18 Apr 2021 10:26:05 +0000 (12:26 +0200)]
http-sha256-drop-02: don't use flow_id in test
flow_id has no reason to be fix from a user perspective so we
should not use it in test but use information from the flow
itself.
Jeff Lucovsky [Sun, 28 Feb 2021 20:06:04 +0000 (15:06 -0500)]
tests: Invalid threshold.config w/out -T
Jeff Lucovsky [Sun, 28 Feb 2021 19:42:00 +0000 (14:42 -0500)]
tests: Add test for threshold.config validation
This commit adds a test case to insure that "-T" stops execution when
threshold.config is not valid.
Eric Leblond [Thu, 1 Aug 2019 19:29:12 +0000 (21:29 +0200)]
tests: basic geoip test
The tests are done by using a local database generated via the
geoip.pl Perl script. The obtained maxmindb test.mmdb and it only
contains 2 entries.
Eric Leblond [Thu, 1 Aug 2019 19:28:29 +0000 (21:28 +0200)]
more features detection in run.py
Victor Julien [Tue, 12 Jan 2021 21:03:13 +0000 (22:03 +0100)]
tests/ftpdata: add detection
Jeff Lucovsky [Wed, 31 Mar 2021 12:58:42 +0000 (08:58 -0400)]
tests/threshold: Code coverage for issue 4407
This test insures that the Suricata code added for issue 4407 is
exercised.
Jason Ish [Mon, 29 Mar 2021 16:28:17 +0000 (10:28 -0600)]
tests: add test for Rust template parser
Jason Ish [Mon, 29 Mar 2021 16:21:32 +0000 (10:21 -0600)]
tests: add test for C template parser
Philippe Antoine [Thu, 11 Mar 2021 15:17:56 +0000 (16:17 +0100)]
Adds kerberos probing parser test
Jason Ish [Tue, 16 Mar 2021 17:41:12 +0000 (11:41 -0600)]
license: add a LICENSE.txt (MIT)
Jason Ish [Tue, 16 Mar 2021 04:24:35 +0000 (22:24 -0600)]
dns-udp-eve-log-srv: for Suricata v7+
Remove file check and just use a version check now that 7 is out.
Jason Ish [Mon, 15 Mar 2021 21:58:17 +0000 (15:58 -0600)]
dns-udp-eve-log-query-only: add dns eve v2 test
Jason Ish [Mon, 15 Mar 2021 21:55:13 +0000 (15:55 -0600)]
dns-udp-eve-log-mx-only: add dns eve v2 test
Jason Ish [Mon, 15 Mar 2021 21:50:01 +0000 (15:50 -0600)]
dns-udp-eve-log-answer-only: dns eve v2 test
Jason Ish [Mon, 15 Mar 2021 21:46:14 +0000 (15:46 -0600)]
dns-udp-eve-log-aaaa-only: add dns eve v2 test
Jason Ish [Mon, 15 Mar 2021 21:38:57 +0000 (15:38 -0600)]
dns-udp-double-request-response: add dns eve v2 test
Jason Ish [Mon, 15 Mar 2021 21:36:05 +0000 (15:36 -0600)]
dns-tcp-www-google-com: add dns eve v2 test
Jason Ish [Mon, 15 Mar 2021 21:15:53 +0000 (15:15 -0600)]
dns-tcp-ts-gap: update for dns eve v2
Jason Ish [Mon, 15 Mar 2021 21:13:00 +0000 (15:13 -0600)]
dns: mark existing dns eve v1 tests for Suricata < 7
Jason Ish [Mon, 15 Mar 2021 20:56:13 +0000 (14:56 -0600)]
dns-udp-unsolicited-response: dns eve v1 and v2 tests
Jason Ish [Mon, 15 Mar 2021 20:54:36 +0000 (14:54 -0600)]
dns-udp-null: use dns v2 logging
Also, instead of file check use min-version of 7.
Jason Ish [Mon, 15 Mar 2021 20:50:50 +0000 (14:50 -0600)]
dns-udp-nxdomain-soa: v1 and v2 dns eve tests