From c90ac26a86b169df700197c43d9e62ce42278b14 Mon Sep 17 00:00:00 2001 From: Victor Julien Date: Thu, 13 Feb 2025 16:03:22 +0100 Subject: [PATCH] tests: bug 7554 test --- tests/tls/tls-fin-close-data-01/debug-s13.pcap | Bin 0 -> 11253 bytes tests/tls/tls-fin-close-data-01/test.yaml | 17 +++++++++++++++++ 2 files changed, 17 insertions(+) create mode 100644 tests/tls/tls-fin-close-data-01/debug-s13.pcap create mode 100644 tests/tls/tls-fin-close-data-01/test.yaml diff --git a/tests/tls/tls-fin-close-data-01/debug-s13.pcap b/tests/tls/tls-fin-close-data-01/debug-s13.pcap new file mode 100644 index 0000000000000000000000000000000000000000..e2101daa6f23d573de360e490b920fc422d61526 GIT binary patch literal 11253 zc-ozs1yEeuwsxCt8h3Y>;O_1Og1fuBySoJq?hq_^a0tQOoe+XUkOX%EKjhXu_nmXk zJFn`eYEjf~daSS5v*wtK-gCY61wa5K;6GoG0Ep-BuA5aBSE68m%=6DLt06U!;Fmd$ zAw^tT8w@}K0N~e!6$S`H6)eK3LVzomL(8Y7A==joF+RO8@_~0J0&oBT5E9$~350=* z_xiB;avcH$f_@;r_(1g-zEEH25be{_b4W`b&-BiGw5KPR z!QbS-7qSPsW5o;onGEwnCU_=`K2t^iE;G9>-0#fa{*t-#neG{g0&yh(e9j2*JMYO0 z`Gu(B2L^OO1Aec+5~1sL;a`ZE27gP$fw&S6{DXMAttkcZ3SC*B zo9?d~x}nAqn6x(~u-Myg#Sf0DWgU~cNCXgd^JPj-ZA~d5G#j`xNjVKQAEAkW33HuQ zbHwqa8vrtN2y_rSu#2vXX{>y#tc$*jxeKlfwhO%r1CR~K0WbkLp0|3w4*)6v1pq+m z?99%HV4_`8jH&q9sH`db-Fw!lrTK zfO)=_nPhUSmD&!MHx{xrJzNg?fc#PI={}r!LUb!`mCCXtyH58lPMZAk`wenqTRW0o-?9x@}y#&QOw505Ye3VMU6MHfzS zri?Kw0@XqiW$?%`*m0q+ZTy7jDcrbi7jYPP0B*^N>YYn<1QFOvJntb8CMOe1^|YNR3IlVBW6%Ziq?4o3T109~!o2;``sk56T$yfogu;etEj`st`Z7b7 zOxpx)f23?JC4_h<3l8nqbqTk*l=jg z<#A64t^sh~Jesx(iP4^5UT>KR6zt7wZ)((na39wE$c}9w9ZN@e>R~A7yVs89W?dcy zZC&AS`FbT>^5{U^a$gW;(BiN6wQ}C`i8e|&qKH3mxm!r(Vv0EwHlq+X5Ipj98d2Lt zL-6qi*-j|OyL?qkb)>>|$C9XwxBLY)(DAdfrS?IZbG8z~{fCRVIF2KR3_87+e zX~@tnw0gcr+36rpnX}zts?N>Bt)0fn4VE9VfY9e8kzUMY6(Paf32I_muW~dc7Qu^2 zaRT6E<*94RU?k!&#%z>q4H^`@yd)v$_h9cuH#sl8Tein*d7~651F1o~eS#&W8(zFM zdV0Z9A(mZKu3{dTT&QSM+z3NAG!R^>V)@{)d@U=<)3k*VcFYkqxKYp}EK*h~Va;7) z72ABYME&ZnrY(DH)Rpp}qn#Wbo}yPMhfd@{vb*8Tk0L4mngvOShZMmj+ORL3F0(Ud z3SXfEN;oM7ziFb`n>sBTMfyWtppyIXQl|hZ>}o3EdZzUF6!y>NB9dubpmAoiC^g9m z(vP!FUugRX`$UQfR`O`6RS6dlAphofrCzbqvJDTj=VnOqfBp_OKm>ASR$}fAS8gUe4LyV{2Su@1n2EcG(lBMkXobX)V(gI zgN7}D4giJ(L4rU4#OLOV^{;LU0|^6$fr5P2Aru4<^xTOVp4%}5fB*m#h5+CLprM}I zHV^=MM1;V7Rt^9J0U$YE*yPj5oW1;*rB6#am{6wFNfYQeQTCR&wBg2y@v{`**iMax z;3I~*I>F)72Z>ykuXJJ*l#G5*3s!x!ra%xHpRa?)xilE^#UNT~!4qM4=UWrwRP% zeokoUokB&5(P|3qi;GmLm)jeFgI zwvwYGlorUYvYtZYm9>JpcX^Irw>88=Q0bh}jg(L3W@?8fkzRC1eer{S)xBC@5*hWo ze?(nWb+%87XXk5h0d#Y;1C6e_mf>p79XnCa!Hdt~%KtMV{MYQkzH$V3o;|31|1x`c zt`idQ2cke?rq=z-=g%&0esTH>v8VzJXaWO%ufGz(Wh*~kh@{Z}8?k!y4`Ry;5$pN3 zdq2-1?jVq&YQ_DhsY-+upl;_X#j^M;?v!At#y-(dJ?^x`O4j`UIU%4wJDCx{_ALMB z(nU9+3V*ljNfLW-?26W~w>uZmz?*8kNu_M?@j~j|vcq%L0YQ)$&)Y*lV1q!Y5wM_I z_a)dJ!uKSJU@yGbiiw$R+NWF*LIiE-Bv!x%eEk}9YfIV_Qr{GpX-fNyHv0l$esv}q zy@#{TyWpqyrdf9zEPT55hc$AuAjX9isM-3WJ}k%LHbNh<(|=xMHck?kNw8qWGMV?M zd5n%dOXipP+9Zo_J97wHDoc+`Csq3hGYR3U{x&%$=w|C#%On>fBCayL^dp-|LB0{M zgk#s4AQDTd8xyt#`~VK6>jT{O_&N#Gmsk|-o#5!bT;*&nzjxb7AhDs7?PK`ro8khC0oCfSti*W#qUqgf7G z2`y8V=+1rQ9(lw{3!Abxf-<>t(BeaAzv#5$S^<(vdp6@~Voct7{j8O?mfNzjiEWVL zsWOoo?B<*t-G&h0hr&azIPa5DtfO~@V9R7P_`1T>PV9=ciRP*=<<#Y?qZbn5EFkvh zLTB`&zS*N*fbdo3&!QVqQMC*O3Q1KTQ}!M zI=W=QG&+F`0qiLcVjh;Lm^ssV7zFaU+LV^(L~^0~*%-zCRA2TwAqZyQj4}4fY*u%t zC6l^nR?{z5tb`tU2A5P|_)7BZSIpKW)Jm2a>=eMqQEqLqZl~9vdDH(wdR@zNfZj$) z_tmC8Oi&pS##aZfKe@mHk(i1nwH9AH%U{G5lM!wm<{_R*nwTZ~N6Q5{kw4cN--tx< z;I-|*fI?@2Uz2N4)6I!tu~QbM1?uSNb_=$awlD%z`%GlFkeT&ywzt+1wK_d|^$Uy(WZ7ncr0oel{^W;Zmi=4Qul+lHQJN6ls<8=uQgHU+jvNiGok4|8D#Ne=xEuOq2rq zouE3phs8Y!kdp=DU`C@BhpblR+S+W_O=@qI4VocZJ)@&pG;%{Hu=CoOHM7fheZknR zrVIVs;2MQt(e^a`6S@rzfBHGjhMCKPAJW8k0Yaip^BN)<-WIsqx!?hdDY#k`)+c77 z#_n|X_BeSmV++KMHiIp@Q{NE@nhHUdTLMx^^xecPp?fNQB`rpH@1 zLLEsAd|w2>z3b>p7w@e2$CD%C?~~)opU-&&{BuaFM}a6ng#U4J{PohwUx-j2{?Q9R ze|rJy&t6zP`nMN^)&A^-XktHorL2o{%%86cD>hv716)2fV>R^gf$&REL`0&&!-J6n z;@C-s{WypXB9Q@V_h5Z`H{q3Z(G?~%ha5-F+bo1b?Haky=n({m*r^OZIq*SEn$@gK zg(seG979OH2NpG8lV+NbcaQHY)(%WHAfgg|_}pYt#wRA($}4DZR|pE%U0@Ns_X=PV zR{h+c)t#>^*^2DQtb*L3`hh6*z|7x#KTc8{XEda0wrZL{n&g0>*fgI}uHf^>CHmKC zQ1(A!cDly0OS=cCe-2}}kG;n;F2oI8_x%!cpV`DRikq2xyJ#cqag&rfM^_*!QodQ& z#7jI1v1Yz zKkLA>WTDNSci=QJmy(t0`&Iq4cdA;bC017$Nsk}3BqFU2QV4lmj$!#gjCMRQsk9C5 zWn6HP6A|U>9hC8-hLiZiH2DFD>Uxe-$%$hgnf4X#_zo*_C#jl?CYt(9d{Rv42lj5> zzw+9~^rSA~p`^>~KL6;8s%nyzhE&q#@HHUvYvna|ge0_+2@Civ>}DlIXg>OVV91tF z`l1q=(TbaI0{C>$~8-l1T6 zg&l{Kqf*mFy0(Uw^C256e{vS%5qHwPxl0wjzyATJiwTFq1kE;%NltC(sMgB0yd>Ui zW%{Mq*8tPFI0kKKFc|)+(U3w_J4ihMfgj!9jezU06*X~hJ z!)7Acw=T9Tvr)uY2bT-$6RTmB8ls-Y<8Yl-Gm_{m%ri&Wzounf4N_l@|7aJ!*IY|{ z+C{6*G#46?YUpKDd#f_#Fy-n}%zMo_pC&gb!B9p$nI3?vJS2|^v*9B{Qbx$o#&cK) zWZeNC8FY& zU6iosqakbt{`6L6ms@B3JRFuXyBQ)#SLkjMro)RBJbBAzAlp&LGJ9Jp%w@ubwO?>r zFb4C>1Vww;1?gs1XaEg#GzU(> zM9YD#I(*%ji93E;CKKN5e!7!pT@X<7S`Zj6#Pa*j)Ua=XUNXLbQ0x8nefLtuRIb3s zN(aAG!sCyEGk#K2$PJJ@^Cz8Gmz8_|7x2rTwLE3op)x0W=)4z7GDFmi0&O45E-AHY# z+WlAbmtd3e<`q$%Szep0I?5X%++4wrr8@FEpEKU@4WkDPs!bEWi+{rl#;-V%e_vbA zn6q?vlHLNjx}Z5Eo;S3zA6t#6f8pxvP^5(J)xe4{793YI65mc6@% zF`v?wIZJ8h;e8LGUBah3b>gNHZTol^W;E+uM!_1RC_V4VIu9+F%5&`a9pincR6TR0n5@PGuu#rAk~!YP znH5ycVZ9!pknzi?SIIq8e0D+_=bBL8un<8F23V@NFs04izvWW;iCidBR8$8o5wc5!p+Y9G{M zx%H>?plsCxq4L7cN>&feMSvD5fbBks{I3mYwlsgW0bd(DCh> zB}+~UL;{^u8xWnRnHv9%vDy<2wtsggtX4+DBeOdZ46cJx_LUjCtGvA=G@hs$+F_i`V^8*g0I|z^84w^SAj!^a z`1sHg1eJsw)8ka-gC~8rVI1AQJG!mU(AFjH+K8-}LciJIpv90^irq)%9xUp2AU5bD zTomWCj#ez%)ETzC9%4MS8rc=&lDk6Ny!9Est)B?+V-`+Y#nEh&-I}teGeu$>vL$jy zFd|r|mrfLdY}O9zndGJ3SntUfq;@L6ny6HPEO)C(A;?U1wm7!sfu0S{5fZbKKHEL6 zAGTxM95f-MyLRjtS4WF!O_4g)Q1GJohG};D4Op7KiO6%DaTBcMHhdpnsYf6Z2X8$e zM>{>p=Mr+%JP~Awa-Q<=qjPDUU2>Gsp`RTePA^+~;uR$Uuyu?OX4~#igY7K)iO^Zo zR%#aO(;lT@p%7kTC|lxqxPW77O{csGN8;FcqaLx-qSlMeNR&jf=$;SGoC@)>3Eq_Y9M5=_gK|?MTtG^xtP?)t+9wbreT62o`h zMyv}`$jnw4v0iO(dB>UIVs+i&QvlQ6<^@~e?fGEz5;|YbvAckSA1B*kdAMtZqQ;S#UL^G4nmfGChzkx3Um4z=IV^gnpLB|-E^+0F! zX%mnzh0jYDH>mkXFChQ+!t#H6;rraP7kK`M7aspOFVuno*ARf;>#tsb*k3t$@d8Ef zpS|#X?zb0kATiNm{_F)`3+h9lnAiO`G3xme_+=hoq5)MZ6UiQ5;X6L6ZtM~S>_fE+9FhJayRxs_C#`Po{}{~hr)_;gJ^^T-VBcJXy-8G&8KU@RE-iN(_o<0 zHM(fHo%xT=AaDVyDwP0b9GoJuLCpdTyyEv7=BNzmIeoovpU@GO>$vQX7LUq&RWn$F zmO92VLE(mysz;e$5(!1!2%~F%I3`t1Ngp|D(_G}<&Mvv}$qIJ!xe2%zv}}e3Zw>L) zYVQ^dDSvV$R;Y{s4iFXKIR~_&`#}@9j3%e6K+&7-p)$64c34&Id58IBqI_MbgYA>! z##*F;Xt+HPI%4;AlVdngS3IG0jjN^-nt#+P;7PP!2v8tob8M&&DAp!#c7OW{7P?h} z*KNNa`QC4VDi($U1V7V)|BmRYi~5_G_P0cwXQJr8iIwCp#6SK+2;lH3=HGc&LQviG z_|qi|RVc8psEjk;N5wSk<9QbKCrgN0WiK>Ouxk>OFNIr`LB9W}f~r3KOQIlAD8Tab z`17*^#eR`OeH za@Md1aTIt=tTAWU| zw2zk9ECciPX<=09jiNZ;vY@R0MHocN?}uQy3hfk&EcfWl@7{_U@19Va^+ZLg@LV7k zA(lE0S{HxIG+Ts+F(}QVy}o-8+0t$y8QV8QGL{jsB(1CnzIP+D{%EenoNEA2&slQ4 zj3PELVQCRBUVZ8YJGllG7Ns_{kkgnDAcZfAGgZUygxAd||JFA09aL;yc+9&i+leXa z(S=6x*3QX^wwqtk$6^k{N?Kkyii2U$Idq;lt)YQN@7weCdwa2wmrk(`OByL5Ox`wr z>0f*5J?YA$fy^&_{6fZ&^r{QCdfpX57T)M|!(dBO@53qv=w2FtF?Ib>qMz8%e7S$q zN31_p)?5mcX5;G^*ZVOO1Lw-M5t=r_a?E8XlSdq=yCZ4Wjv|oII!cMPY|q8?mhZB} z1ffY3VzbL@{o$k12k*Kim4T{#OBRQm8xf1wV^))ktzaqz#^ed=5t#F#;v`tU;Op@Vl(e=Vq@w2Pta;~2sHWKM$ud<|MMk&Y(xt8%kk@qfCrFb@L6!+sts0 zG9KyIo2*#v=TDt~MPXhzHrjXWN{dPZCju$HIrY7sIv>fMghNUL(q9Q?f^PLw{M202 zzSC0J-%azd9E99WkX+_#Np;g?v!};=juCdOg)v*&henf1gsr&dYcMi+ZMB3C*=;m` z>_n@Q?XP6kdJxT`9QaQBi+zw+9-}AL{Z|ud$EcIVhXI+d_W`<}VD8uXY&l>M*?$e> zPlsgsrWBbhTj~p0smoZt=B!4++`H8+qwRE9x^zqPCSU=$!+co0MAIYYBb+UZ5GB+} zY6+K#)4XWwfrzmy4Vmcj{=$b)`ObLP>zL^?z5VL-&diAqWTuV;^=n?J0B&8(Wd?@F z{`uh*6(?^??D1dj+b6X>aD1d%E7E(uI)Vc~V1sNwvYqaO;e5tIb~CB&%YO>EjIu1ImYFG9?&v#7G1#sAm=)vhu0cHMq?{!-EBBE!h+yK= zy;Dg6;Tj@8s>60MwFx=$(Riz6aA+62*Lc3!S}lWa=Q|~VOks#PdhxRhhN>>Nap*!B zYK0$%_bDw(FO6Qv9qOMxZ9Dz_X`9ENXPSekbwV=q=d&(~zx5w8&HjsiUWf_L#B)f% z@AX$AH0D^}LcBO*^Vn0^h<@!;o^Naav$>fMixq%OgWWxs$somCV{l7r#VwoXro# zd!f0@uRao6vS;tm#)!20U7!X)xn!-|mIy(`G3RuBK<6+f^8*;TaWVGj^5bM>M*|Pa z1>V6)yE|@}e8z5`kzHY9s@S!b%}dmDKJTZ+jE5-CbN)g~Q7inOqeKUnj7EU3P+Izz z#mubgj`2_9Ogo0SEDd~!)k%lS0RXt^5nMhH6xP98n9p+6CC)554(U+>Y zjGWg=_^;T|uC(@)+*}_`M8_R#Q1a>>XS!kYAdUTTpWs7z47TQ!#V)9YhoDq%Wm)gN zZ4`{3?*xeKX)|l2@)z_1aZ6%5S8(*QBO8zB&V0H?1p3!ii=Z&kIGcJk#T;|qCobU+ zvIe47S)P2H*deWE!yNTD)sS<$57LCqVvRjT_97c0MB-i5A8G~=%s`I&%z2hoe)%R; z$X%<5(;h^&Rc8GX+@y_HMpmhD_4Q`0COdYQU_S5$8T}^Xjz7QXw%~R@f?0G>)vq_0 zu+0|5gT~OAJt^MEM}b6n=Gkt@Rz%cVn=6~F*N1EV_U>N?K%W~vbV2%_r4;aNe-r~v zLfT=UrzmB*@5>pUbEF`=%4+<+pI6TjSXue-{zsgK(7UnvvE-|UrqDxc7yA~ODs4G5 z-tC{;XQW#{YzdmUujM~5bgqSnmX10ui3nYY#yZl087XbC90gQ4#| zq%Lja&Y+0U4yw%abXVzt2k|$vWYK>uwrnC8_uQ%QnBJOZ$@h1^U^?>0+B$sg+9~G` z-L#aUvbPJi6KP@k9#WIDe74p8sy6F^!kvq0!|AIt*`W0jCIO4enO=9tF4axJBT$}3ZGT2FD&yfAC;&17o7rl7098F@w;&n9yR78_&PH3K84 zH}J4I2|H578?aN@c$$^c(MLa=)=A?VnFXR4$a=YsKt*#DdLKzD>?T3n!H9Kiel=R$ zc#4(!LF#9AEF?GNlkziPZ>WyQa5j-=y7?%L$lEIPO*AnE&E+TDPr{l}k=LNB?2PCW zBjd0$X6SQ@$(76~=O_3Sn<8zTjfOgi+EhkUhB>&K99~*rlou30`?;ZN|J^+QMi=Av zJm2x>>6r|D4(XWpd3rV$!24r*W_@XcFOxhvbvC1icKqvj?H=Ai&Ok^1)zEh@JC%At z{nJ?l^Y>1(f7yxd_fDwKI|2W^(+iQ+`yYjH{#yuce{SE$yuaHwDkO?m^Pk)I3sJ`V zA2VY8&N%azjP%b`zUTAO-)8j7gL-)i_4oQqMgZW|%j2nhP{7N-W_)@2QSn(yUz`8^ fDDD3@i|-Fs)Bj|hm;A4+z<;rPpn6>Y?_B>6eAwm> literal 0 Hc-jL100001 diff --git a/tests/tls/tls-fin-close-data-01/test.yaml b/tests/tls/tls-fin-close-data-01/test.yaml new file mode 100644 index 000000000..c73cbd4f2 --- /dev/null +++ b/tests/tls/tls-fin-close-data-01/test.yaml @@ -0,0 +1,17 @@ +requires: + min-version: 8 + +args: + - -k none + +checks: + - filter: + count: 1 + match: + event_type: stats + stats.app_layer.error.tls.parser: 0 + - filter: + count: 1 + match: + event_type: tls + tls.sni: rr4---sn-5hne6nzy.googlevideo.com -- 2.47.2