snmp: add test when snmp is disabled

Ticket: 7820

diff --git a/tests/snmp-disabled/README.md b/tests/snmp-disabled/README.md
new file mode 100644 (file)
index 0000000..73fca0f
--- /dev/null
+++ b/tests/snmp-disabled/README.md
@@ -0,0 +1,5 @@
+Test when snmp is disabled
+
+Pcap reused
+
+Ticket https://redmine.openinfosecfoundation.org/issues/7820

diff --git a/tests/snmp-disabled/suricata.yaml b/tests/snmp-disabled/suricata.yaml
new file mode 100644 (file)
index 0000000..66e695a
--- /dev/null
+++ b/tests/snmp-disabled/suricata.yaml
@@ -0,0 +1,15 @@
+%YAML 1.1
+---
+
+outputs:
+  - eve-log:
+      enabled: yes
+      filetype: regular
+      filename: eve.json
+      types:
+        - flow
+
+app-layer:
+  protocols:
+    snmp:
+      enabled: no
\ No newline at end of file

diff --git a/tests/snmp-disabled/test.yaml b/tests/snmp-disabled/test.yaml
new file mode 100644 (file)
index 0000000..348700c
--- /dev/null
+++ b/tests/snmp-disabled/test.yaml
@@ -0,0 +1,11 @@
+args:
+  - -k none
+
+pcap: ../snmp-v2c-get/SNMPv2c_get_requests.pcap
+
+checks:
+ - filter:
+     count: 0
+     match:
+       event_type: flow
+       app_proto: snmp