From eb8a45015841d433de87b1ded777fdab2974d5a2 Mon Sep 17 00:00:00 2001 From: Jason Ish Date: Fri, 29 Apr 2022 12:29:44 -0600 Subject: [PATCH] Revert "test/from_base64: from_base64 transform test" This reverts commit 7c1ff6dcca1c313eac2cae2b1feeb3ae40e53fec. --- tests/detect-from_base64-01/README.md | 1 - tests/detect-from_base64-01/input.pcap | Bin 1338 -> 0 bytes tests/detect-from_base64-01/test.rules | 1 - tests/detect-from_base64-01/test.yaml | 13 ------------- 4 files changed, 15 deletions(-) delete mode 100644 tests/detect-from_base64-01/README.md delete mode 100644 tests/detect-from_base64-01/input.pcap delete mode 100644 tests/detect-from_base64-01/test.rules delete mode 100644 tests/detect-from_base64-01/test.yaml diff --git a/tests/detect-from_base64-01/README.md b/tests/detect-from_base64-01/README.md deleted file mode 100644 index ebf338a01..000000000 --- a/tests/detect-from_base64-01/README.md +++ /dev/null @@ -1 +0,0 @@ -Test from_base64 transform diff --git a/tests/detect-from_base64-01/input.pcap b/tests/detect-from_base64-01/input.pcap deleted file mode 100644 index 96af08e83bbdbefcfc63f434ef6bae4559836e69..0000000000000000000000000000000000000000 GIT binary patch literal 0 Hc-jL100001 literal 1338 zc-no`PfXKL90%~%G8C#!&=Z_^Vqy$&UDwUAG?;8t9GN3xnEXqODcy6c8EexO!%mW& zJQ)t+0Vm?oiy^xS{*9LrFCI*|aC3>=#?3^O`d*POt6iJCrg`t}^S1_l=PQ3Z^5CDp_)y4khujbt+WX3ve?i}&} z&>nNgLw7Mx&kgjFeyXG6B$3x#WdMjgym>75FRw0ks=t0%+9A3noR8u8l9gAfwl%2%KrT119UO9@rSS+=Q@sSkt6&7?w zmJErT3kBh5DmCu&bAFZ?RSSj)bE+)mvg9$$hk2H{T|l}wnn8IyCNJnY-w+oHb9f*s z%SgkWgT6tQVHuM3r|a%(&q&tk3%0uM;k@;w9?Epu{cEKgF!(@__MiB>Rwm-q9Y>Mu ze!n615%J$%c_{Eaym^CVCXoIB=^~s^=CvHMhIuXo$BRZ*&HDmenDgVEUXu(Y!YP!# z1pNUR)pY!OL4bZiyc`yV0E~~NSmvslH*k@>Mp46)B~8nb8Y`GlWdj-Bf}ta6zBw<6 z@);v5LLta9NvU9X$JDfPPeJK6D-DSO;b^6!T5l any any (msg:"from_base64 transform"; flow:established,from_server; http.response_body; from_base64; content: "This is Suricata"; sid: 1;) diff --git a/tests/detect-from_base64-01/test.yaml b/tests/detect-from_base64-01/test.yaml deleted file mode 100644 index 57c5e081d..000000000 --- a/tests/detect-from_base64-01/test.yaml +++ /dev/null @@ -1,13 +0,0 @@ -args: - - -k none - -requires: - files: - - src/detect-transform-base64.c - -checks: - - filter: - count: 1 - match: - event_type: alert - alert.signature_id: 1 -- 2.47.2