Skip to content

test: add test for vlan.id - v9#2207

Closed
AkakiAlice wants to merge 1 commit intoOISF:masterfrom
AkakiAlice:detect-vlan-id-1065-v9
Closed

test: add test for vlan.id - v9#2207
AkakiAlice wants to merge 1 commit intoOISF:masterfrom
AkakiAlice:detect-vlan-id-1065-v9

Conversation

@AkakiAlice
Copy link
Contributor

@AkakiAlice AkakiAlice commented Dec 23, 2024

Ticket: #1065

Description:

  • Add Suricata-Verify test for vlan.id keyword

README.md
Reduce the number of characters per line: line 1;
Add link for redmine ticket: line 6.

test.rules
Add rule with prefilter option: line 12;
Add rule for packet with 0 VLAN layers: line 13;

test.yaml
include alert for the added rules: line 67, line 72.

writepcap.py
Add a comment with scapy version: line 2;
Create a packet without VLAN layers: ine 18, line 20.

Redmine ticket: https://redmine.openinfosecfoundation.org/issues/1065

Previous PR: #2194
Suricata PR: OISF/suricata#12301

@catenacyber catenacyber added the requires suricata pr Depends on a PR in Suricata label Dec 24, 2024
Copy link
Collaborator

@catenacyber catenacyber left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Tests look good

@catenacyber
Copy link
Collaborator

Do not forget to add the label requires Suricata PR ;-)

@catenacyber
Copy link
Collaborator

Requires OISF/suricata#12301

@AkakiAlice
Copy link
Contributor Author

Do not forget to add the label requires Suricata PR ;-)

Did you mean the link to the Suricata PR? I don't know if I have permission to add labels

@AkakiAlice AkakiAlice closed this Dec 30, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

requires suricata pr Depends on a PR in Suricata

Development

Successfully merging this pull request may close these issues.

2 participants