From: Philippe Antoine <pantoine@oisf.net>
Date: Wed, 24 Sep 2025 12:50:06 +0000 (+0200)
Subject: detect/integers: add check for count argument
X-Git-Tag: suricata-8.0.2~19
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=0b1a8bb269434e7f150ac592886c9533aa0c5e01;p=thirdparty%2Fsuricata-verify.git

detect/integers: add check for count argument

Ticket: 7211
---

diff --git a/tests/http2-window-index/test.rules b/tests/http2-window-index/test.rules
index fd65785d4..cc1e9083b 100644
--- a/tests/http2-window-index/test.rules
+++ b/tests/http2-window-index/test.rules
@@ -14,3 +14,5 @@ alert http2 any any -> any any (http2.window:32768,or_absent; sid:9; rev:1;)
 alert http2 any any -> any any (http2.window:123,oob_or 2; sid:10; rev:1;)
 
 alert http2 any any -> any any (http2.window:>36000,nb>1,1:-1; sid:11; rev:1;)
+
+alert http2 any any -> any any (http2.window:count>5; sid:12; rev:1;)
diff --git a/tests/http2-window-index/test.yaml b/tests/http2-window-index/test.yaml
index 463f633c2..abf863b75 100644
--- a/tests/http2-window-index/test.yaml
+++ b/tests/http2-window-index/test.yaml
@@ -52,3 +52,9 @@ checks:
         event_type: alert
         alert.signature_id: 11
         http.http2.stream_id: 5
+  - filter:
+      count: 1
+      match:
+        event_type: alert
+        alert.signature_id: 12
+        http.http2.stream_id: 5