]> git.ipfire.org Git - thirdparty/suricata-verify.git/log
thirdparty/suricata-verify.git
23 months agoAdds a test about filestore
Philippe Antoine [Tue, 10 Oct 2023 10:04:48 +0000 (12:04 +0200)] 
Adds a test about filestore

That it does not store too many files

23 months agosmtp: backport to 7 test smtp-to-comma 1933/head
Philippe Antoine [Tue, 4 Jun 2024 13:27:07 +0000 (15:27 +0200)] 
smtp: backport to 7 test smtp-to-comma

Ticket: 7060

23 months agotests: add tls alpn tests 1927/head
Victor Julien [Fri, 31 May 2024 13:14:29 +0000 (15:14 +0200)] 
tests: add tls alpn tests

23 months agotests: add stream_size prefilter tests 1925/head
Victor Julien [Fri, 7 Jun 2024 12:44:29 +0000 (14:44 +0200)] 
tests: add stream_size prefilter tests

23 months agodetect: move http uri unit tests to SV 1919/head
Philippe Antoine [Fri, 14 Jun 2024 08:24:00 +0000 (10:24 +0200)] 
detect: move http uri unit tests to SV

Ticket: 3725

23 months agotests: iprep isset/isnotset test 1918/head
Victor Julien [Thu, 16 May 2024 13:56:57 +0000 (15:56 +0200)] 
tests: iprep isset/isnotset test

23 months agotests/ja4: Enable ja4 tests for 7.0.6 and later 1908/head
Jeff Lucovsky [Tue, 14 May 2024 12:56:14 +0000 (08:56 -0400)] 
tests/ja4: Enable ja4 tests for 7.0.6 and later

Issue: 7010

Enable the JA4 tests for Suricata 7.0.6 and later.

23 months agotesta/ja4: Confirm config on auto-enable
Jeff Lucovsky [Tue, 14 May 2024 12:57:08 +0000 (08:57 -0400)] 
testa/ja4: Confirm config on auto-enable

Issue: 7010

Confirm that the config-level message is displayed when JA4 is enabled
due to rule usage.

23 months agotests: add test for alert-then-pass issue 5466 1903/head 1905/head
Victor Julien [Fri, 12 Jan 2024 13:38:57 +0000 (14:38 +0100)] 
tests: add test for alert-then-pass issue 5466

23 months agowebsocket: adds check for data frame 1901/head
Philippe Antoine [Thu, 6 Jun 2024 21:20:13 +0000 (23:20 +0200)] 
websocket: adds check for data frame

Ticket: 7051

23 months agoenip: adds test for new enip keywords
Philippe Antoine [Thu, 7 Dec 2023 08:37:06 +0000 (09:37 +0100)] 
enip: adds test for new enip keywords

Ticket: 3958

23 months agoenip: adds test for frames
Philippe Antoine [Thu, 7 Dec 2023 08:11:39 +0000 (09:11 +0100)] 
enip: adds test for frames

Ticket: 3598

23 months agoenip: Add test for logger
Philippe Antoine [Fri, 17 Nov 2023 11:03:11 +0000 (12:03 +0100)] 
enip: Add test for logger

23 months agoenip: tests compatible with rust parser
Philippe Antoine [Mon, 20 Nov 2023 08:23:43 +0000 (09:23 +0100)] 
enip: tests compatible with rust parser

23 months agosmtp/mime: adds test for url extraction in base64 message 1900/head
Philippe Antoine [Tue, 4 Jun 2024 12:41:58 +0000 (14:41 +0200)] 
smtp/mime: adds test for url extraction in base64 message

Ticket: 5185

23 months agotests: fix order of mac address in nfs test for 7 1892/head
Philippe Antoine [Sun, 2 Jun 2024 19:37:28 +0000 (21:37 +0200)] 
tests: fix order of mac address in nfs test for 7

Ticket: 6690

23 months agotests/pgsql: add test for bug 6983 1890/head
Juliana Fajardini [Wed, 24 Apr 2024 00:43:58 +0000 (21:43 -0300)] 
tests/pgsql: add test for bug 6983

Related to
Bug #6983

2 years agotests: smtp frames tests 1883/head 1887/head
Victor Julien [Wed, 15 Nov 2023 10:18:27 +0000 (11:18 +0100)] 
tests: smtp frames tests

2 years agosmtp: adds test with To field having quotes, commas... 1882/head
Philippe Antoine [Thu, 30 May 2024 09:28:58 +0000 (11:28 +0200)] 
smtp: adds test with To field having quotes, commas...

Ticket: 3487

2 years agosmtp: extend test with smtp extended logging
Philippe Antoine [Thu, 23 May 2024 12:50:07 +0000 (14:50 +0200)] 
smtp: extend test with smtp extended logging

with custom fields, to cover more suricata code

2 years agosmtp/mime: update test to match new behavior
Philippe Antoine [Wed, 22 May 2024 20:39:50 +0000 (22:39 +0200)] 
smtp/mime: update test to match new behavior

Ticket: 3487

rust mime parser succeeds in parsing this traffic

2 years agotests: add lua output streaming test 1877/head
Victor Julien [Sat, 1 Jun 2024 14:09:09 +0000 (16:09 +0200)] 
tests: add lua output streaming test

2 years agotests: add lua stats test
Victor Julien [Sat, 1 Jun 2024 11:04:45 +0000 (13:04 +0200)] 
tests: add lua stats test

2 years agotests: fix order of mac address in nfs test
Eric Leblond [Sun, 25 Feb 2024 20:39:13 +0000 (21:39 +0100)] 
tests: fix order of mac address in nfs test

2 years agotests: add ethernet eve test
Eric Leblond [Mon, 30 Oct 2023 20:43:49 +0000 (21:43 +0100)] 
tests: add ethernet eve test

2 years agotests: fix dataset test on 6.0.x 1871/head
Victor Julien [Thu, 30 May 2024 07:58:41 +0000 (09:58 +0200)] 
tests: fix dataset test on 6.0.x

2 years agotests: add tls client cert match test 1866/head
Victor Julien [Sat, 25 May 2024 18:45:00 +0000 (20:45 +0200)] 
tests: add tls client cert match test

2 years agotests: tls store for client certs
Victor Julien [Sat, 25 May 2024 18:46:14 +0000 (20:46 +0200)] 
tests: tls store for client certs

2 years agotests: add tls-store test
Victor Julien [Sat, 25 May 2024 13:44:43 +0000 (15:44 +0200)] 
tests: add tls-store test

2 years agotest: test lua memory limit errors 1859/head 1861/head 1864/head
Jason Ish [Mon, 27 May 2024 21:54:53 +0000 (15:54 -0600)] 
test: test lua memory limit errors

2 years agotest: lua scripts exceeding the instruction limit
Jason Ish [Fri, 24 May 2024 22:02:43 +0000 (16:02 -0600)] 
test: lua scripts exceeding the instruction limit

2 years agotest: add lua test for blocked lua library
Jason Ish [Fri, 24 May 2024 17:09:36 +0000 (11:09 -0600)] 
test: add lua test for blocked lua library

2 years agorun.py: use single mode if -j1 and on Linux
Jason Ish [Fri, 24 May 2024 18:45:34 +0000 (12:45 -0600)] 
run.py: use single mode if -j1 and on Linux

Single mode can expose some errors that are hidden in mp mode, so it
can be useful to use even on Linux.

2 years agorun.py: add __startswith and __endswith for string matching
Jason Ish [Fri, 24 May 2024 17:09:07 +0000 (11:09 -0600)] 
run.py: add __startswith and __endswith for string matching

2 years agorule-grouping: update min-version 1854/head
Shivani Bhardwaj [Tue, 5 Mar 2024 07:01:52 +0000 (12:31 +0530)] 
rule-grouping: update min-version

2 years agotests: enable pcap tests for 7 1849/head 1852/head
Victor Julien [Thu, 23 May 2024 09:35:33 +0000 (11:35 +0200)] 
tests: enable pcap tests for 7

2 years agotests: enable ppp tests for 7
Victor Julien [Thu, 23 May 2024 09:33:51 +0000 (11:33 +0200)] 
tests: enable ppp tests for 7

2 years agotests: add pcap logging tests 1848/head
Victor Julien [Tue, 21 May 2024 07:51:01 +0000 (09:51 +0200)] 
tests: add pcap logging tests

2 years agotests: lz4 pcap write tests
Victor Julien [Mon, 20 May 2024 20:28:14 +0000 (22:28 +0200)] 
tests: lz4 pcap write tests

2 years agotls-subjectaltname: add tests 1846/head
Shivani Bhardwaj [Fri, 29 Mar 2024 12:23:34 +0000 (17:53 +0530)] 
tls-subjectaltname: add tests

Feature 5234

2 years agosmtp: adds test with data command being rejected 1845/head
Philippe Antoine [Sat, 30 Mar 2024 14:03:48 +0000 (15:03 +0100)] 
smtp: adds test with data command being rejected

Ticket: 6906

2 years agoAdds test about pop3 protocol detection
Philippe Antoine [Tue, 19 Sep 2023 08:01:54 +0000 (10:01 +0200)] 
Adds test about pop3 protocol detection

2 years agoAdds a test case for uri with space in it 1838/head
Philippe Antoine [Tue, 2 Apr 2019 10:23:45 +0000 (12:23 +0200)] 
Adds a test case for uri with space in it

2 years agotest: lua-rule-errors 1835/head
Jason Ish [Tue, 7 May 2024 16:43:27 +0000 (10:43 -0600)] 
test: lua-rule-errors

Test for correct behvaior when a Lua rule crashes.

On crash, a Lua script should not result in a match when negation is
applied. Also test for:
- error stat
- one time logging per thread

Ticket: #6940

2 years agoreadme: add example for __find
Jason Ish [Tue, 7 May 2024 16:42:54 +0000 (10:42 -0600)] 
readme: add example for __find

__find can be used to search for a substring in a json field.

2 years agoarp: add tests 1833/head
Giuseppe Longo [Mon, 4 Mar 2024 12:27:34 +0000 (13:27 +0100)] 
arp: add tests

2 years agodetect: add a test for protocol mismatch detection 1832/head
Philippe Antoine [Tue, 7 May 2024 07:06:15 +0000 (09:06 +0200)] 
detect: add a test for protocol mismatch detection

Ticket: #4921

2 years agodetect: add a tests for original protocol matching
Philippe Antoine [Tue, 7 May 2024 07:01:17 +0000 (09:01 +0200)] 
detect: add a tests for original protocol matching

Ticket: #4921

2 years agotests: add tests for negated protocol matching
Victor Julien [Tue, 21 Dec 2021 09:07:01 +0000 (10:07 +0100)] 
tests: add tests for negated protocol matching

Ticket: #4921

2 years agowebsocket: adds test for ping/pong opcodes 1831/head
Philippe Antoine [Tue, 14 May 2024 12:12:45 +0000 (14:12 +0200)] 
websocket: adds test for ping/pong opcodes

Ticket: 7025

2 years agowebsocket: checks alert app-layer metadata for frames
Philippe Antoine [Fri, 26 Apr 2024 08:43:42 +0000 (10:43 +0200)] 
websocket: checks alert app-layer metadata for frames

Ticket: 6973

2 years agoadd tests for bug 5220 1821/head
Shivani Bhardwaj [Thu, 14 Dec 2023 13:16:25 +0000 (18:46 +0530)] 
add tests for bug 5220

2 years agoetopen: use latest emerging-all rules 1818/head
Shivani Bhardwaj [Fri, 3 May 2024 09:19:57 +0000 (14:49 +0530)] 
etopen: use latest emerging-all rules

2 years agotests: require 7 for iprep tests 1817/head
Victor Julien [Thu, 2 May 2024 09:43:12 +0000 (11:43 +0200)] 
tests: require 7 for iprep tests

2 years agosnmp: adds test for community keyword 1815/head
Philippe Antoine [Fri, 26 Apr 2024 14:25:18 +0000 (16:25 +0200)] 
snmp: adds test for community keyword

as was done by unit test DetectSNMPCommunityTest

2 years agotests: enable datalink/defrag tests for 6.0.x
Victor Julien [Wed, 17 Apr 2024 15:02:29 +0000 (17:02 +0200)] 
tests: enable datalink/defrag tests for 6.0.x

2 years agohttp: adds test about decompression
Philippe Antoine [Tue, 16 Apr 2024 20:55:38 +0000 (22:55 +0200)] 
http: adds test about decompression

Ticket: 6959

2 years agoframework: bump jsonschema crate to v0.17
Philippe Antoine [Fri, 12 Apr 2024 08:47:18 +0000 (10:47 +0200)] 
framework: bump jsonschema crate to v0.17

So that it can compile without failing on
error[E0635]: unknown feature `stdsimd`
  --> .cargo/registry/src/index.crates.io-6f17d22bba15001f/ahash-0.7.6/src/lib.rs:33:42
   |
33 | #![cfg_attr(feature = "stdsimd", feature(stdsimd))]
   |                                          ^^^^^^^

2 years agotests: add bug 2576 tests
Victor Julien [Tue, 30 Jan 2024 19:14:58 +0000 (20:14 +0100)] 
tests: add bug 2576 tests

2 years agohttp: adds test with HTTP not being 0.9
Philippe Antoine [Mon, 11 Mar 2024 10:14:36 +0000 (11:14 +0100)] 
http: adds test with HTTP not being 0.9

Ticket: 6757

In the case we have too many whitespaces after the request

2 years agotests: add bug 1449 test
Victor Julien [Mon, 27 Nov 2023 09:23:21 +0000 (10:23 +0100)] 
tests: add bug 1449 test

Was private at the time but no need to keep it private.

2 years agotests: add tests for iprep bug 6834 1811/head 1813/head
Victor Julien [Thu, 25 Apr 2024 15:29:54 +0000 (17:29 +0200)] 
tests: add tests for iprep bug 6834

2 years agotls/random: set min version to 7 1806/head 1809/head
Shivani Bhardwaj [Mon, 29 Apr 2024 06:13:28 +0000 (11:43 +0530)] 
tls/random: set min version to 7

2 years agotls/random: improve rules w direction 1805/head
Shivani Bhardwaj [Fri, 26 Apr 2024 07:28:29 +0000 (12:58 +0530)] 
tls/random: improve rules w direction

2 years agotls/random: add tests for bug 6989
Shivani Bhardwaj [Fri, 26 Apr 2024 07:21:23 +0000 (12:51 +0530)] 
tls/random: add tests for bug 6989

2 years agotests: Update min-version for 6.0.x testing 1803/head
Jeff Lucovsky [Wed, 24 Apr 2024 13:51:52 +0000 (09:51 -0400)] 
tests: Update min-version for 6.0.x testing

Issue: 5578

Update the min-version so the 6.0.x change will be tested.

2 years agotests: add bug 5578 traffic test
Victor Julien [Tue, 4 Jul 2023 09:39:51 +0000 (11:39 +0200)] 
tests: add bug 5578 traffic test

2 years agotests: add bug 5578 parsing test
Victor Julien [Tue, 4 Jul 2023 09:39:28 +0000 (11:39 +0200)] 
tests: add bug 5578 parsing test

2 years agosdp: add test 1797/head
Giuseppe Longo [Mon, 18 Mar 2024 08:27:02 +0000 (09:27 +0100)] 
sdp: add test

This adds a test for SDP protocol.

2 years agohttp: backports for http.response_body 1792/head 1793/head suricata-6.0.19 suricata-7.0.5
Philippe Antoine [Sat, 20 Apr 2024 08:28:43 +0000 (10:28 +0200)] 
http: backports for http.response_body

Ticket: 6948

2 years agotests: add rule to check for http.response_body 1791/head
Philippe Antoine [Thu, 18 Apr 2024 12:57:46 +0000 (14:57 +0200)] 
tests: add rule to check for http.response_body

Ticket: 6948

2 years agohttp: test FP for http.response_body
Philippe Antoine [Fri, 12 Apr 2024 10:56:17 +0000 (12:56 +0200)] 
http: test FP for http.response_body

Ticket: 6948

We should not match on request body

2 years agotests: update eve config stats option term
Juliana Fajardini [Wed, 17 Apr 2024 00:44:06 +0000 (21:44 -0300)] 
tests: update eve config stats option term

Replaced `zero-valued-counters` for eve-log.stats counters options with
the same term used for the pre-dated similar option for stats.log
output.

Task #6962

2 years agodetect/ipopts: Support 7.0.x 1785/head 1790/head
Jeff Lucovsky [Thu, 18 Apr 2024 13:06:24 +0000 (09:06 -0400)] 
detect/ipopts: Support 7.0.x

This commit resets the min-version to 7.0.5 to support the backport
(issue 6882).

2 years agodetect/ipopts: IP option tests 1780/head
Jeff Lucovsky [Thu, 21 Mar 2024 13:25:49 +0000 (09:25 -0400)] 
detect/ipopts: IP option tests

2 years agoAdds test for websocket 1777/head
Philippe Antoine [Wed, 6 Dec 2023 21:07:02 +0000 (22:07 +0100)] 
Adds test for websocket

Ticket: 2695

2 years agotests: enable datalink/defrag tests for 7.0.x 1772/head
Victor Julien [Mon, 15 Apr 2024 11:53:41 +0000 (13:53 +0200)] 
tests: enable datalink/defrag tests for 7.0.x

2 years agotests/pgsql: add checks and test for bug 6092 1771/head
Juliana Fajardini [Mon, 15 Apr 2024 23:19:54 +0000 (20:19 -0300)] 
tests/pgsql: add checks and test for bug 6092

Ensure that pgsql metadata flags (for now, just setting whether
passwords should be logged or not) are properly processed by Suri and
logging functions.

Related to
Bug #6092

2 years agoja4: adjust and add tests
Sascha Steinbiss [Mon, 4 Mar 2024 18:22:40 +0000 (19:22 +0100)] 
ja4: adjust and add tests

2 years agoja3: adjust and add tests
Sascha Steinbiss [Mon, 4 Mar 2024 18:22:16 +0000 (19:22 +0100)] 
ja3: adjust and add tests

2 years agotests: add defrag datalink tests 1769/head
Victor Julien [Fri, 12 Apr 2024 09:09:01 +0000 (11:09 +0200)] 
tests: add defrag datalink tests

Bug: 6887.

2 years agotests: add rule to check for tcp_mss
Daniel Olatunji [Mon, 13 Nov 2023 11:57:31 +0000 (11:57 +0000)] 
tests: add rule to check for tcp_mss

Related to
Issue: #6355

2 years agoadd test for base64_data w fast_pattern 1767/head
Shivani Bhardwaj [Wed, 3 Apr 2024 07:13:40 +0000 (12:43 +0530)] 
add test for base64_data w fast_pattern

Bug 6859

2 years agotest/memcap: Validate memcap pressure values 1763/head
Jeff Lucovsky [Sun, 24 Mar 2024 12:17:31 +0000 (08:17 -0400)] 
test/memcap: Validate memcap pressure values

Issue: 6398

This test validates that the memcap pressure stats are no longer in the
global namespace.

Old:
- memcap_pressure
- memcap_pressure_max

New:
- memcap.pressure
- memcap.pressure_max

2 years agotests: add checks for hiding zero counter stats 1753/head
Juliana Fajardini [Wed, 3 Apr 2024 23:13:18 +0000 (20:13 -0300)] 
tests: add checks for hiding zero counter stats

Task #5976

2 years agotests/exception-policy/stats: fix app-layer test
Juliana Fajardini [Thu, 11 Apr 2024 20:17:11 +0000 (17:17 -0300)] 
tests/exception-policy/stats: fix app-layer test

exception-policy-applayer-03 was missing the checks for exception-policy
per-appproto errors.

2 years agotests: check exception policy stats counters 1752/head
Juliana Fajardini [Fri, 17 Feb 2023 20:28:02 +0000 (17:28 -0300)] 
tests: check exception policy stats counters

Edit the existing exception policy tests to check for the new exception
policy stats counters.

Add two more tests, to showcase behavior for exception policy stats
counters when set up to log counters for each app-proto error and
zero-valued counters are enabled (default behavior).

Ticket #5816

2 years agotests: add rule to check for tcp_seq 1750/head 1751/head
Daniel Olatunji [Wed, 31 Jan 2024 15:29:16 +0000 (16:29 +0100)] 
tests: add rule to check for tcp_seq

Related to
Issue: 6353

2 years agotests: add rule to check for tcp/ack 1749/head
Daniel Olatunji [Wed, 31 Jan 2024 15:37:54 +0000 (16:37 +0100)] 
tests: add rule to check for tcp/ack

Related to
Issue: 6354

2 years agorule-grouping: add boundary port tests 1730/head 1731/head
Shivani Bhardwaj [Mon, 25 Mar 2024 13:35:47 +0000 (19:05 +0530)] 
rule-grouping: add boundary port tests

2 years agoport-grouping: add tests for bug 6881 and more 1725/head
Shivani Bhardwaj [Thu, 21 Mar 2024 09:17:39 +0000 (14:47 +0530)] 
port-grouping: add tests for bug 6881 and more

2 years agotests: add bug 6875 test 1717/head
Victor Julien [Wed, 20 Mar 2024 07:17:06 +0000 (08:17 +0100)] 
tests: add bug 6875 test

2 years agotests: update drop and ssh tests for 7 1712/head 1715/head suricata-6.0.17 suricata-7.0.4
Victor Julien [Mon, 18 Mar 2024 16:13:56 +0000 (17:13 +0100)] 
tests: update drop and ssh tests for 7

2 years agoAdds test about ssh new keys 1710/head
Philippe Antoine [Mon, 27 Nov 2023 16:28:47 +0000 (17:28 +0100)] 
Adds test about ssh new keys

Ticket: 6578

2 years agodrop: adds test with a protocol change
Philippe Antoine [Mon, 29 Jan 2024 14:24:47 +0000 (15:24 +0100)] 
drop: adds test with a protocol change

Ticket: 6305

2 years agotests: add frame gap logging tests 1708/head
Victor Julien [Fri, 24 Nov 2023 11:06:19 +0000 (12:06 +0100)] 
tests: add frame gap logging tests

2 years agotests: add various eve payload representation tests
Victor Julien [Mon, 20 Nov 2023 12:25:24 +0000 (13:25 +0100)] 
tests: add various eve payload representation tests

Overlaps and gaps.

2 years agohttp: adds check for request line missing protocol 1705/head 1706/head 1707/head
Philippe Antoine [Wed, 13 Mar 2024 20:33:02 +0000 (21:33 +0100)] 
http: adds check for request line missing protocol

This generates an anomaly

Ticket: 6856

2 years agorule-grouping: add edge case test 1694/head
Shivani Bhardwaj [Sat, 9 Mar 2024 04:19:13 +0000 (09:49 +0530)] 
rule-grouping: add edge case test

2 years agotest: add test for dns.rcode 1687/head 1693/head
Hadiqa Alamdar Bukhari [Tue, 26 Dec 2023 10:00:08 +0000 (15:00 +0500)] 
test: add test for dns.rcode

Feature #6621