From 2597a9aab2e2093fab335b717cacf688943093dc Mon Sep 17 00:00:00 2001 From: Victor Julien Date: Mon, 30 Jan 2023 14:17:55 +0100 Subject: [PATCH] udp: improve strict/non-strict checks for 6 --- tests/udp-5379/udp-hlen-invalid-non-strict/test.yaml | 7 ++++++- tests/udp-5379/udp-hlen-invalid-strict/test.yaml | 2 +- 2 files changed, 7 insertions(+), 2 deletions(-) diff --git a/tests/udp-5379/udp-hlen-invalid-non-strict/test.yaml b/tests/udp-5379/udp-hlen-invalid-non-strict/test.yaml index 33e466ada..248e71064 100644 --- a/tests/udp-5379/udp-hlen-invalid-non-strict/test.yaml +++ b/tests/udp-5379/udp-hlen-invalid-non-strict/test.yaml @@ -15,5 +15,10 @@ checks: - shell: version: 6 args: |- - grep "\[ERRCODE: SC_WARN_DEPRECATED(203)\] - decode-event keyword no longer supports event \"decoder.udp.hlen_invalid\"" suricata.log | wc -l + grep "decode-event keyword no longer supports event \"decoder.udp.hlen_invalid\"" suricata.log | wc -l expect: 1 + - shell: + version: 6 + args: |- + grep -E "Error.*SC_WARN_DEPRECATED.*decode-event keyword no longer supports event \"decoder.udp.hlen_invalid\"" suricata.log | wc -l + expect: 0 diff --git a/tests/udp-5379/udp-hlen-invalid-strict/test.yaml b/tests/udp-5379/udp-hlen-invalid-strict/test.yaml index 7d9fbe709..e25bcb48f 100644 --- a/tests/udp-5379/udp-hlen-invalid-strict/test.yaml +++ b/tests/udp-5379/udp-hlen-invalid-strict/test.yaml @@ -16,5 +16,5 @@ checks: - shell: version: 6 args: |- - grep "\[ERRCODE: SC_WARN_DEPRECATED(203)\] - decode-event keyword no longer supports event \"decoder.udp.hlen_invalid\"" suricata.log | wc -l + grep -E "Error.*SC_WARN_DEPRECATED.*decode-event keyword no longer supports event \"decoder.udp.hlen_invalid\"" suricata.log | wc -l expect: 1 -- 2.47.2