From 85d25301176f0c880118c7abfae59d052a439637 Mon Sep 17 00:00:00 2001 From: Philippe Antoine Date: Wed, 17 Jul 2024 16:08:23 +0200 Subject: [PATCH] rfb: convert unit test to SV Ticket: 7178 --- tests/rfb-parser/README.md | 11 +++++++++++ tests/rfb-parser/input.pcap | Bin 0 -> 663 bytes tests/rfb-parser/test.yaml | 18 ++++++++++++++++++ 3 files changed, 29 insertions(+) create mode 100644 tests/rfb-parser/README.md create mode 100644 tests/rfb-parser/input.pcap create mode 100644 tests/rfb-parser/test.yaml diff --git a/tests/rfb-parser/README.md b/tests/rfb-parser/README.md new file mode 100644 index 000000000..11558358b --- /dev/null +++ b/tests/rfb-parser/README.md @@ -0,0 +1,11 @@ +# Test Description + +Test RFB parsing + +## PCAP + +from RFBParserTest unit test + +## Related issues + +https://redmine.openinfosecfoundation.org/issues/3195 diff --git a/tests/rfb-parser/input.pcap b/tests/rfb-parser/input.pcap new file mode 100644 index 0000000000000000000000000000000000000000..34036ae5fba451f956a20f83d915c3b9492916a7 GIT binary patch literal 663 zc-p&ic+)~A1{MYw`2Qb5OMR6|0MRB;%ml=)3=9Sg3=RwqYzz$b3=E7Q{H9WzM*ym~ zfC-|TiRJ%)MrLMqkQt0bm?6&drcwbY2Q-JVKnT+ekUkwKhMJ*)!ySx3a~J~zAZCE{ zG6QJ~D2D1a!C^n60FvGyHzx%H17ke{19L8rIV?n&gX9KYT;{L>#q^;VYK}Gz_wWiJ znZv}$1kw&v#h?qtQ0F+_0iXf=FwLwC u%nAw;42%r_K~R7LnpWfz^HLMjb5e^Pa`KZCb29RaOZ333l>FSp%sc>iC1$1o literal 0 Hc-jL100001 diff --git a/tests/rfb-parser/test.yaml b/tests/rfb-parser/test.yaml new file mode 100644 index 000000000..798b5b447 --- /dev/null +++ b/tests/rfb-parser/test.yaml @@ -0,0 +1,18 @@ +args: + - -k none --set stream.inline=true + +checks: + + - filter: + count: 1 + match: + event_type: rfb + rfb.server_protocol_version.major: "003" + rfb.server_protocol_version.minor: "007" + rfb.client_protocol_version.major: "003" + rfb.client_protocol_version.minor: "007" + rfb.authentication.security_type: 1 + rfb.screen_shared: true + rfb.framebuffer.width: 1280 + rfb.framebuffer.height: 800 + rfb.framebuffer.name: "aneagles@localhost.localdomain" -- 2.47.2