Skip to content

Commit 79e2824

Browse files
committed
config: add tests for ipproto + appproto combinations
Bug 8205
1 parent a0138b4 commit 79e2824

File tree

24 files changed

+405
-0
lines changed

24 files changed

+405
-0
lines changed
Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
%YAML 1.1
2+
---
3+
4+
app-layer:
5+
protocols:
6+
dns:
7+
enabled: no
8+
tcp:
9+
enabled: no
10+
udp:
11+
enabled: no
12+
outputs:
13+
- eve-log:
14+
enabled: yes
15+
types:
16+
- dns
17+
Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,10 @@
1+
requires:
2+
min-version: 9
3+
4+
pcap: ../../dns/dns-frames/input.pcap
5+
6+
checks:
7+
- filter:
8+
count: 0
9+
match:
10+
event_type: dns
Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
%YAML 1.1
2+
---
3+
4+
app-layer:
5+
protocols:
6+
dns:
7+
enabled: no
8+
tcp:
9+
enabled: no
10+
udp:
11+
enabled: yes
12+
outputs:
13+
- eve-log:
14+
enabled: yes
15+
types:
16+
- dns
17+
Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,19 @@
1+
requires:
2+
min-version: 9
3+
4+
pcap: ../../dns/dns-frames/input.pcap
5+
6+
checks:
7+
- filter:
8+
count: 0
9+
match:
10+
event_type: dns
11+
proto: TCP
12+
- filter:
13+
count: 2
14+
match:
15+
event_type: dns
16+
proto: UDP
17+
- shell:
18+
args: |
19+
grep -q "Warning: app-layer-detect-proto: Inconsistent global (FALSE) and respective ipproto (TRUE) settings found for alproto dns and ipproto udp" stdout
Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
%YAML 1.1
2+
---
3+
4+
app-layer:
5+
protocols:
6+
dns:
7+
enabled: no
8+
tcp:
9+
enabled: yes
10+
udp:
11+
enabled: no
12+
outputs:
13+
- eve-log:
14+
enabled: yes
15+
types:
16+
- dns
17+
Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,19 @@
1+
requires:
2+
min-version: 9
3+
4+
pcap: ../../dns/dns-frames/input.pcap
5+
6+
checks:
7+
- filter:
8+
count: 0
9+
match:
10+
event_type: dns
11+
proto: UDP
12+
- filter:
13+
count: 2
14+
match:
15+
event_type: dns
16+
proto: TCP
17+
- shell:
18+
args: |
19+
grep -q "Warning: app-layer-detect-proto: Inconsistent global (FALSE) and respective ipproto (TRUE) settings found for alproto dns and ipproto tcp" stdout
Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
%YAML 1.1
2+
---
3+
4+
app-layer:
5+
protocols:
6+
dns:
7+
enabled: no
8+
tcp:
9+
enabled: yes
10+
udp:
11+
enabled: yes
12+
outputs:
13+
- eve-log:
14+
enabled: yes
15+
types:
16+
- dns
17+
Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
requires:
2+
min-version: 9
3+
4+
pcap: ../../dns/dns-frames/input.pcap
5+
6+
checks:
7+
- filter:
8+
count: 2
9+
match:
10+
event_type: dns
11+
proto: UDP
12+
- filter:
13+
count: 2
14+
match:
15+
event_type: dns
16+
proto: TCP
17+
- shell:
18+
args: |
19+
grep -q "Warning: app-layer-detect-proto: Inconsistent global (FALSE) and respective ipproto (TRUE) settings found for alproto dns and ipproto tcp" stdout
20+
- shell:
21+
args: |
22+
grep -q "Warning: app-layer-detect-proto: Inconsistent global (FALSE) and respective ipproto (TRUE) settings found for alproto dns and ipproto udp" stdout
Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
%YAML 1.1
2+
---
3+
4+
app-layer:
5+
protocols:
6+
dns:
7+
enabled: yes
8+
tcp:
9+
enabled: no
10+
udp:
11+
enabled: no
12+
outputs:
13+
- eve-log:
14+
enabled: yes
15+
types:
16+
- dns
17+
Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
requires:
2+
min-version: 9
3+
4+
pcap: ../../dns/dns-frames/input.pcap
5+
6+
checks:
7+
- filter:
8+
count: 0
9+
match:
10+
event_type: dns
11+
proto: UDP
12+
- filter:
13+
count: 0
14+
match:
15+
event_type: dns
16+
proto: TCP
17+
- shell:
18+
args: |
19+
grep -q "Warning: app-layer-detect-proto: Inconsistent global (TRUE) and respective ipproto (FALSE) settings found for alproto dns and ipproto tcp" stdout
20+
- shell:
21+
args: |
22+
grep -q "Warning: app-layer-detect-proto: Inconsistent global (TRUE) and respective ipproto (FALSE) settings found for alproto dns and ipproto udp" stdout

0 commit comments

Comments
 (0)