From 79c959eb09c7ccee85c23ff9c1d673e098e80fb2 Mon Sep 17 00:00:00 2001 From: Jeff Lucovsky Date: Sat, 13 Feb 2021 10:36:33 -0500 Subject: [PATCH] tests: Update to use modified error message --- tests/test-bad-content-dsize-rule-1/test.yaml | 1 + tests/test-bad-dsize-offset-rule-1/test.rules | 2 +- tests/test-bad-dsize-offset-rule-1/test.yaml | 4 +++- tests/test-bad-dsize-range-offset-rule-1/test.rules | 2 +- tests/test-bad-dsize-range-offset-rule-1/test.yaml | 3 ++- tests/test-bad-dsize-range-rule-1/test.yaml | 1 + 6 files changed, 9 insertions(+), 4 deletions(-) diff --git a/tests/test-bad-content-dsize-rule-1/test.yaml b/tests/test-bad-content-dsize-rule-1/test.yaml index 731ffe9ac..3b7ed88d4 100644 --- a/tests/test-bad-content-dsize-rule-1/test.yaml +++ b/tests/test-bad-content-dsize-rule-1/test.yaml @@ -1,5 +1,6 @@ requires: min-version: 5.0.0 + lt-version: 7 features: - HAVE_LIBJANSSON diff --git a/tests/test-bad-dsize-offset-rule-1/test.rules b/tests/test-bad-dsize-offset-rule-1/test.rules index 321f2a367..d6729cfee 100644 --- a/tests/test-bad-dsize-offset-rule-1/test.rules +++ b/tests/test-bad-dsize-offset-rule-1/test.rules @@ -1 +1 @@ -alert udp any any -> any any (msg:"TEST SUCCESFULL - dsize/offset INVALID combination "; dsize:50; content:"AA"; offset:100; sid:6666661; rev:1;) +alert udp any any -> any any (msg:"TEST SUCCESFUL - dsize/offset INVALID combination "; dsize:50; content:"AA"; offset:100; sid:6666661; rev:1;) diff --git a/tests/test-bad-dsize-offset-rule-1/test.yaml b/tests/test-bad-dsize-offset-rule-1/test.yaml index 38872131f..ca448547d 100644 --- a/tests/test-bad-dsize-offset-rule-1/test.yaml +++ b/tests/test-bad-dsize-offset-rule-1/test.yaml @@ -1,5 +1,6 @@ requires: min-version: 5.0.0 + lt-version: 7 features: - HAVE_LIBJANSSON @@ -8,7 +9,7 @@ command: | ${SRCDIR}/src/suricata --set classification-file="${SRCDIR}/classification.config" --set reference-config-file="${SRCDIR}/reference.config" -l ${OUTPUT_DIR} -c ${TEST_DIR}/suricata.yaml -r ${TEST_DIR}/ -S ${TEST_DIR}/test.rules checks: - # check that we have the following entres in eve.json + # check that we have the following entries in eve.json # match 1 specific rule load failure reason - filter: count: 1 @@ -16,6 +17,7 @@ checks: event_type: engine engine.message: "signature can't match as content length 2 with offset 100 (=102) is bigger than dsize 50." + - filter: count: 1 match: diff --git a/tests/test-bad-dsize-range-offset-rule-1/test.rules b/tests/test-bad-dsize-range-offset-rule-1/test.rules index 6a2b3d111..7bbe446b4 100644 --- a/tests/test-bad-dsize-range-offset-rule-1/test.rules +++ b/tests/test-bad-dsize-range-offset-rule-1/test.rules @@ -1 +1 @@ -alert udp any any -> any any (msg:"TEST SUCCESFULL - dsize/offset INVALID combination "; dsize:5<>10; content:"AAAA"; offset:8; sid:6666665; rev:1;) +alert udp any any -> any any (msg:"TEST SUCCESFUL - dsize/offset INVALID combination "; dsize:5<>10; content:"AAAA"; offset:8; sid:6666665; rev:1;) diff --git a/tests/test-bad-dsize-range-offset-rule-1/test.yaml b/tests/test-bad-dsize-range-offset-rule-1/test.yaml index c508dc66a..dcdf0cbbb 100644 --- a/tests/test-bad-dsize-range-offset-rule-1/test.yaml +++ b/tests/test-bad-dsize-range-offset-rule-1/test.yaml @@ -1,5 +1,6 @@ requires: min-version: 5.0.0 + lt-version: 7 features: - HAVE_LIBJANSSON @@ -8,7 +9,7 @@ command: | ${SRCDIR}/src/suricata --set classification-file="${SRCDIR}/classification.config" --set reference-config-file="${SRCDIR}/reference.config" -l ${OUTPUT_DIR} -c ${TEST_DIR}/suricata.yaml -r ${TEST_DIR}/ -S ${TEST_DIR}/test.rules checks: - # check that we have the following entres in eve.json + # check that we have the following entries in eve.json # match 1 specific rule load failure reason - filter: count: 1 diff --git a/tests/test-bad-dsize-range-rule-1/test.yaml b/tests/test-bad-dsize-range-rule-1/test.yaml index 731ffe9ac..3b7ed88d4 100644 --- a/tests/test-bad-dsize-range-rule-1/test.yaml +++ b/tests/test-bad-dsize-range-rule-1/test.yaml @@ -1,5 +1,6 @@ requires: min-version: 5.0.0 + lt-version: 7 features: - HAVE_LIBJANSSON -- 2.47.2