From b18e132fc24e6bcedcdf7da8f71e680d0fe97477 Mon Sep 17 00:00:00 2001 From: Shivani Bhardwaj Date: Fri, 19 Feb 2021 13:17:02 +0530 Subject: [PATCH] http/connect: remove app proto from filter There is no DCERPC packet in the pcap. With the addition of probe function in DCERPC, app_proto check for dcerpc causes the test to fail. It is incorrect, remove it. --- tests/http-connect/http-connect-fail/test.yaml | 1 - 1 file changed, 1 deletion(-) diff --git a/tests/http-connect/http-connect-fail/test.yaml b/tests/http-connect/http-connect-fail/test.yaml index 6ece99ebd..f6fd050ca 100644 --- a/tests/http-connect/http-connect-fail/test.yaml +++ b/tests/http-connect/http-connect-fail/test.yaml @@ -21,7 +21,6 @@ checks: count: 1 match: event_type: flow - app_proto: dcerpc app_proto_orig: http - filter: count: 0 -- 2.47.2