From 32ca159a1a9ebc880fd12f564872106f2f441119 Mon Sep 17 00:00:00 2001 From: Philippe Antoine Date: Sat, 25 Apr 2026 22:30:17 +0200 Subject: [PATCH] mdns: adds rules to test to check they load Ticket: 8501 --- tests/mdns/test.rules | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/tests/mdns/test.rules b/tests/mdns/test.rules index 44f36faa0..66ef85047 100644 --- a/tests/mdns/test.rules +++ b/tests/mdns/test.rules @@ -1,3 +1,8 @@ alert mdns any any -> any any (mdns.queries.rrname; content: "_apple"; sid:1;) alert mdns any any -> any any (mdns.answers.rrname; content: "Mac"; sid:2;) alert mdns any any -> any any (mdns.response.rrname; content: "John’s iMac._companion-link._tcp.local"; sid:3;) + +# Same rules should also load with alert ip prefix +alert ip any any -> any any (mdns.queries.rrname; content: "_apple"; requires: version >= 9; sid:11;) +alert ip any any -> any any (mdns.answers.rrname; content: "Mac"; requires: version >= 9; sid:12;) +alert ip any any -> any any (mdns.response.rrname; content: "John’s iMac._companion-link._tcp.local"; requires: version >= 9; sid:13;) -- 2.47.3