]> git.ipfire.org Git - thirdparty/suricata-verify.git/commitdiff
projects / thirdparty / suricata-verify.git / commitdiff
? search:
summary | shortlog | log | commit | commitdiff | tree
raw | patch | inline | side by side (parent: 5ee45a0)
tests: add issue 3844 test
authorVictor Julien <victor@inliniac.net>
Fri, 5 Sep 2025 05:38:47 +0000 (07:38 +0200)
committerVictor Julien <victor@inliniac.net>
Sat, 18 Oct 2025 16:36:50 +0000 (18:36 +0200)
tests/bug-3844/input.pcap [new file with mode: 0644] patch | blob
tests/bug-3844/test.yaml [new file with mode: 0644] patch | blob
tests/bug-3844/writepcap.py [new file with mode: 0755] patch | blob

diff --git a/tests/bug-3844/input.pcap b/tests/bug-3844/input.pcap
new file mode 100644 (file)
index 0000000..00e8a85
Binary files /dev/null and b/tests/bug-3844/input.pcap differ
diff --git a/tests/bug-3844/test.yaml b/tests/bug-3844/test.yaml
new file mode 100644 (file)
index 0000000..2da4489
--- /dev/null
+++ b/tests/bug-3844/test.yaml
@@ -0,0 +1,9 @@
+requires:
+  min-version: 8
+
+checks:
+- filter:
+    count: 1
+    match:
+      event_type: http
+      http.url: /
diff --git a/tests/bug-3844/writepcap.py b/tests/bug-3844/writepcap.py
new file mode 100755 (executable)
index 0000000..da27ab1
--- /dev/null
+++ b/tests/bug-3844/writepcap.py
@@ -0,0 +1,16 @@
+#!/usr/bin/env python
+from scapy.all import *
+
+pkts = []
+
+pkts += Ether(dst='05:04:03:02:01:00', src='00:01:02:03:04:05')/Dot1Q(vlan=6)/IP(src='1.1.1.1', dst='2.2.2.2')/TCP(dport=8080,sport=12345,flags='S',seq=1111,options=[('WScale', 5),('Timestamp', (1234,5678))])
+pkts += Ether(src='05:04:03:02:01:00', dst='00:01:02:03:04:05')/Dot1Q(vlan=6)/IP(dst='1.1.1.1', src='2.2.2.2')/TCP(sport=8080,dport=12345,flags='R',seq=2222,ack=1112)
+pkts += Ether(dst='05:04:03:02:01:00', src='00:01:02:03:04:05')/Dot1Q(vlan=6)/IP(src='1.1.1.1', dst='2.2.2.2')/TCP(dport=8080,sport=12345,flags='S',seq=3333,options=[('WScale', 5)])
+pkts += Ether(src='05:04:03:02:01:00', dst='00:01:02:03:04:05')/Dot1Q(vlan=6)/IP(dst='1.1.1.1', src='2.2.2.2')/TCP(sport=8080,dport=12345,flags='SA',seq=4444,ack=3334)
+pkts += Ether(dst='05:04:03:02:01:00', src='00:01:02:03:04:05')/Dot1Q(vlan=6)/IP(src='1.1.1.1', dst='2.2.2.2')/TCP(dport=8080,sport=12345,flags='A',seq=3334,ack=4445)
+pkts += Ether(dst='05:04:03:02:01:00', src='00:01:02:03:04:05')/Dot1Q(vlan=6)/IP(src='1.1.1.1', dst='2.2.2.2')/TCP(dport=8080,sport=12345,flags='A',seq=3334,ack=4445)/"GET /"
+pkts += Ether(src='05:04:03:02:01:00', dst='00:01:02:03:04:05')/Dot1Q(vlan=6)/IP(dst='1.1.1.1', src='2.2.2.2')/TCP(sport=8080,dport=12345,flags='A',seq=4445,ack=3339)/"<html>hi</html>"
+pkts += Ether(dst='05:04:03:02:01:00', src='00:01:02:03:04:05')/Dot1Q(vlan=6)/IP(src='1.1.1.1', dst='2.2.2.2')/TCP(dport=8080,sport=12345,flags='R',seq=3339)
+
+wrpcap('input.pcap', pkts)
+
Mirror of https://github.com/OISF/suricata-verify.git