From 325d8bc3b3779e5ed227ea037abf76fd85ec4efc Mon Sep 17 00:00:00 2001 From: Jeff Lucovsky Date: Tue, 18 May 2021 08:22:12 -0400 Subject: [PATCH] decode/vntag: 6.0.3+ backport support --- tests/decode-vntag-01/README.md | 2 +- tests/decode-vntag-02/README.md | 1 + tests/decode-vntag-02/input.pcap | Bin 0 -> 744 bytes tests/decode-vntag-02/test.yaml | 13 +++++++++++++ tests/decode-vntag-03/README.md | 1 + tests/decode-vntag-03/input.pcap | Bin 0 -> 744 bytes tests/decode-vntag-03/test.yaml | 10 ++++++++++ 7 files changed, 26 insertions(+), 1 deletion(-) create mode 100644 tests/decode-vntag-02/README.md create mode 100644 tests/decode-vntag-02/input.pcap create mode 100644 tests/decode-vntag-02/test.yaml create mode 100644 tests/decode-vntag-03/README.md create mode 100644 tests/decode-vntag-03/input.pcap create mode 100644 tests/decode-vntag-03/test.yaml diff --git a/tests/decode-vntag-01/README.md b/tests/decode-vntag-01/README.md index 6749466d1..28e0ceb1e 100644 --- a/tests/decode-vntag-01/README.md +++ b/tests/decode-vntag-01/README.md @@ -1 +1 @@ -Ensure VNTAG (802.1Qbh) packets are decoded +Suricata 7+ Ensure VNTAG (802.1Qbh) packets are decoded diff --git a/tests/decode-vntag-02/README.md b/tests/decode-vntag-02/README.md new file mode 100644 index 000000000..8ece3779c --- /dev/null +++ b/tests/decode-vntag-02/README.md @@ -0,0 +1 @@ +Suricata 6.0.3+ Ensure VNTAG (802.1Qbh) packets are decoded diff --git a/tests/decode-vntag-02/input.pcap b/tests/decode-vntag-02/input.pcap new file mode 100644 index 0000000000000000000000000000000000000000..64d4aca0079fec86cc9a03bc286da58b6a81999c GIT binary patch literal 744 zc-p&ic+)~A1{MYw`2U}Qfe}dG?PUvKQ08W60J0mvGK@?h2}VW+#!fX5zmb7~n}flX zfgxqh4xqlj91j`6fQeDM(px-!4cqEv5ss?yCXag7%{B_ zVE5dIxrgolHs7}l@~J;0yg2W^oNedDCitp+*|wkZI$m5`U%J1m>E5Hl-nUKIUz}@+ zu=8flDbbw=SIrUQJrpqI{a%gy_*gC8lZkfvJ3As7W_cSjXYAw_TThaEc7xq>59Xfg zxBov!|2e^!0x#VbI(0r!wZ@( zLa$jV-eo?`%C%yl5~ANvt$cLgN|$#@)50-hmR?5-SIDwgrFj6%0sid( literal 0 Hc-jL100001 diff --git a/tests/decode-vntag-02/test.yaml b/tests/decode-vntag-02/test.yaml new file mode 100644 index 000000000..46e934264 --- /dev/null +++ b/tests/decode-vntag-02/test.yaml @@ -0,0 +1,13 @@ +requires: + + min-version: 6.0.3 + +args: + - --set decoder.vntag.enabled=true + +checks: + + - stats: + decoder.ipv4: 5 + decoder.vlan: 5 + decoder.vntag: 5 diff --git a/tests/decode-vntag-03/README.md b/tests/decode-vntag-03/README.md new file mode 100644 index 000000000..14d7cbdda --- /dev/null +++ b/tests/decode-vntag-03/README.md @@ -0,0 +1 @@ +Suricata 6.0.3 Ensure VNTAG (802.1Qbh) packets are not decoded diff --git a/tests/decode-vntag-03/input.pcap b/tests/decode-vntag-03/input.pcap new file mode 100644 index 0000000000000000000000000000000000000000..64d4aca0079fec86cc9a03bc286da58b6a81999c GIT binary patch literal 744 zc-p&ic+)~A1{MYw`2U}Qfe}dG?PUvKQ08W60J0mvGK@?h2}VW+#!fX5zmb7~n}flX zfgxqh4xqlj91j`6fQeDM(px-!4cqEv5ss?yCXag7%{B_ zVE5dIxrgolHs7}l@~J;0yg2W^oNedDCitp+*|wkZI$m5`U%J1m>E5Hl-nUKIUz}@+ zu=8flDbbw=SIrUQJrpqI{a%gy_*gC8lZkfvJ3As7W_cSjXYAw_TThaEc7xq>59Xfg zxBov!|2e^!0x#VbI(0r!wZ@( zLa$jV-eo?`%C%yl5~ANvt$cLgN|$#@)50-hmR?5-SIDwgrFj6%0sid( literal 0 Hc-jL100001 diff --git a/tests/decode-vntag-03/test.yaml b/tests/decode-vntag-03/test.yaml new file mode 100644 index 000000000..8629bfb34 --- /dev/null +++ b/tests/decode-vntag-03/test.yaml @@ -0,0 +1,10 @@ +requires: + + min-version: 6.0.3 + lt-version: 7.0.0 + +checks: + + - stats: + decoder.ipv4: 0 + decoder.vntag: 0 -- 2.47.2