diff --git a/tests/bug-7241-02-pre8/README.md b/tests/bug-7241-02-pre8/README.md new file mode 100644 index 000000000..05c3e00b6 --- /dev/null +++ b/tests/bug-7241-02-pre8/README.md @@ -0,0 +1,4 @@ +Test for issue 7272 +=================== + +Test specifically for the features supported in Suricata 7. diff --git a/tests/bug-7241-02-pre8/test.rules b/tests/bug-7241-02-pre8/test.rules new file mode 100644 index 000000000..d97f65c90 --- /dev/null +++ b/tests/bug-7241-02-pre8/test.rules @@ -0,0 +1,2 @@ +drop tcp any any -> any any (flow:established; app-layer-protocol:!tls; sid:1;) +drop tcp any any -> any any (flow:established; app-layer-protocol:!tls; prefilter; sid:2;) diff --git a/tests/bug-7241-02-pre8/test.yaml b/tests/bug-7241-02-pre8/test.yaml new file mode 100644 index 000000000..4aaaa23b1 --- /dev/null +++ b/tests/bug-7241-02-pre8/test.yaml @@ -0,0 +1,20 @@ +requires: + min-version: 7 + +pcap: ../tls/tls-random/input.pcap + +args: +- -k none +- --simulate-ips + +checks: +- filter: + count: 0 + match: + alert.signature_id: 1 + event_type: alert +- filter: + count: 0 + match: + alert.signature_id: 2 + event_type: alert