tests: add test for issue 4081

tests/bug-4081-01/README.md

@@ -0,0 +1,3 @@
+Pcap from https://gitlab.com/wireshark/wireshark/-/wikis/uploads/__moin_import__/attachments/SampleCaptures/v6.pcap
+
+https://redmine.openinfosecfoundation.org/issues/4081

tests/bug-4081-01/test.yaml

@@ -0,0 +1,22 @@
+args:
+  - -k none
+  - --set vars.address-groups.TEST_1=[127.0.0.1]
+  - --set vars.address-groups.TEST_2=[127.0.0.1,::1/128]
+  - --set vars.address-groups.TEST_3=[::1/128]
+
+checks:
+  - filter:
+      count: 9
+      match:
+        event_type: alert
+        alert.signature_id: 1
+  - filter:
+      count: 9
+      match:
+        event_type: alert
+        alert.signature_id: 2
+  - filter:
+      count: 9
+      match:
+        event_type: alert
+        alert.signature_id: 3

tests/bug-4081-01/test_icmpv6.rules

@@ -0,0 +1,3 @@
+alert icmp !$TEST_1 any -> any any (flow:stateless; msg:"ICMPv6 Test Sig 1 - IPv4 only"; itype:136; sid:1; rev:1;)
+alert icmp !$TEST_2 any -> any any (flow:stateless; msg:"ICMPv6 Test Sig 2 - IPv4 and IPv6"; itype:136; sid:2; rev:1;)
+alert icmp !$TEST_3 any -> any any (flow:stateless; msg:"ICMPv6 Test Sig 3 - IPv6 only"; itype:136; sid:3; rev:1;)