From 79e2824c7d0b2067aef7b530c4a7152d70ee8172 Mon Sep 17 00:00:00 2001
From: Shivani Bhardwaj <shivani@oisf.net>
Date: Thu, 29 Jan 2026 13:40:04 +0530
Subject: [PATCH] config: add tests for ipproto + appproto combinations

Bug 8205
---
 .../bug-8205/bug-8205-g0-t0-u0/suricata.yaml  | 17 ++++++++++++++
 tests/bug-8205/bug-8205-g0-t0-u0/test.yaml    | 10 +++++++++
 .../bug-8205/bug-8205-g0-t0-u1/suricata.yaml  | 17 ++++++++++++++
 tests/bug-8205/bug-8205-g0-t0-u1/test.yaml    | 19 ++++++++++++++++
 .../bug-8205/bug-8205-g0-t1-u0/suricata.yaml  | 17 ++++++++++++++
 tests/bug-8205/bug-8205-g0-t1-u0/test.yaml    | 19 ++++++++++++++++
 .../bug-8205/bug-8205-g0-t1-u1/suricata.yaml  | 17 ++++++++++++++
 tests/bug-8205/bug-8205-g0-t1-u1/test.yaml    | 22 +++++++++++++++++++
 .../bug-8205/bug-8205-g1-t0-u0/suricata.yaml  | 17 ++++++++++++++
 tests/bug-8205/bug-8205-g1-t0-u0/test.yaml    | 22 +++++++++++++++++++
 .../bug-8205/bug-8205-g1-t0-u1/suricata.yaml  | 17 ++++++++++++++
 tests/bug-8205/bug-8205-g1-t0-u1/test.yaml    | 19 ++++++++++++++++
 .../bug-8205/bug-8205-g1-t1-u0/suricata.yaml  | 17 ++++++++++++++
 tests/bug-8205/bug-8205-g1-t1-u0/test.yaml    | 19 ++++++++++++++++
 .../bug-8205/bug-8205-g1-t1-u1/suricata.yaml  | 17 ++++++++++++++
 tests/bug-8205/bug-8205-g1-t1-u1/test.yaml    | 17 ++++++++++++++
 .../bug-8205-g1-tna-una/suricata.yaml         | 13 +++++++++++
 tests/bug-8205/bug-8205-g1-tna-una/test.yaml  | 17 ++++++++++++++
 .../bug-8205/bug-8205-gna-t0-u1/suricata.yaml | 16 ++++++++++++++
 tests/bug-8205/bug-8205-gna-t0-u1/test.yaml   | 17 ++++++++++++++
 .../bug-8205/bug-8205-gna-t1-u1/suricata.yaml | 16 ++++++++++++++
 tests/bug-8205/bug-8205-gna-t1-u1/test.yaml   | 17 ++++++++++++++
 .../bug-8205-gna-tna-una/suricata.yaml        |  9 ++++++++
 tests/bug-8205/bug-8205-gna-tna-una/test.yaml | 17 ++++++++++++++
 24 files changed, 405 insertions(+)
 create mode 100644 tests/bug-8205/bug-8205-g0-t0-u0/suricata.yaml
 create mode 100644 tests/bug-8205/bug-8205-g0-t0-u0/test.yaml
 create mode 100644 tests/bug-8205/bug-8205-g0-t0-u1/suricata.yaml
 create mode 100644 tests/bug-8205/bug-8205-g0-t0-u1/test.yaml
 create mode 100644 tests/bug-8205/bug-8205-g0-t1-u0/suricata.yaml
 create mode 100644 tests/bug-8205/bug-8205-g0-t1-u0/test.yaml
 create mode 100644 tests/bug-8205/bug-8205-g0-t1-u1/suricata.yaml
 create mode 100644 tests/bug-8205/bug-8205-g0-t1-u1/test.yaml
 create mode 100644 tests/bug-8205/bug-8205-g1-t0-u0/suricata.yaml
 create mode 100644 tests/bug-8205/bug-8205-g1-t0-u0/test.yaml
 create mode 100644 tests/bug-8205/bug-8205-g1-t0-u1/suricata.yaml
 create mode 100644 tests/bug-8205/bug-8205-g1-t0-u1/test.yaml
 create mode 100644 tests/bug-8205/bug-8205-g1-t1-u0/suricata.yaml
 create mode 100644 tests/bug-8205/bug-8205-g1-t1-u0/test.yaml
 create mode 100644 tests/bug-8205/bug-8205-g1-t1-u1/suricata.yaml
 create mode 100644 tests/bug-8205/bug-8205-g1-t1-u1/test.yaml
 create mode 100644 tests/bug-8205/bug-8205-g1-tna-una/suricata.yaml
 create mode 100644 tests/bug-8205/bug-8205-g1-tna-una/test.yaml
 create mode 100644 tests/bug-8205/bug-8205-gna-t0-u1/suricata.yaml
 create mode 100644 tests/bug-8205/bug-8205-gna-t0-u1/test.yaml
 create mode 100644 tests/bug-8205/bug-8205-gna-t1-u1/suricata.yaml
 create mode 100644 tests/bug-8205/bug-8205-gna-t1-u1/test.yaml
 create mode 100644 tests/bug-8205/bug-8205-gna-tna-una/suricata.yaml
 create mode 100644 tests/bug-8205/bug-8205-gna-tna-una/test.yaml

diff --git a/tests/bug-8205/bug-8205-g0-t0-u0/suricata.yaml b/tests/bug-8205/bug-8205-g0-t0-u0/suricata.yaml
new file mode 100644
index 000000000..497393e5a
--- /dev/null
+++ b/tests/bug-8205/bug-8205-g0-t0-u0/suricata.yaml
@@ -0,0 +1,17 @@
+%YAML 1.1
+---
+
+app-layer:
+  protocols:
+    dns:
+      enabled: no
+      tcp:
+        enabled: no
+      udp:
+        enabled: no
+outputs:
+  - eve-log:
+      enabled: yes
+      types:
+        - dns
+
diff --git a/tests/bug-8205/bug-8205-g0-t0-u0/test.yaml b/tests/bug-8205/bug-8205-g0-t0-u0/test.yaml
new file mode 100644
index 000000000..ff29253e9
--- /dev/null
+++ b/tests/bug-8205/bug-8205-g0-t0-u0/test.yaml
@@ -0,0 +1,10 @@
+requires:
+  min-version: 9
+
+pcap: ../../dns/dns-frames/input.pcap
+
+checks:
+  - filter:
+      count: 0
+      match:
+        event_type: dns
diff --git a/tests/bug-8205/bug-8205-g0-t0-u1/suricata.yaml b/tests/bug-8205/bug-8205-g0-t0-u1/suricata.yaml
new file mode 100644
index 000000000..1dd7710f4
--- /dev/null
+++ b/tests/bug-8205/bug-8205-g0-t0-u1/suricata.yaml
@@ -0,0 +1,17 @@
+%YAML 1.1
+---
+
+app-layer:
+  protocols:
+    dns:
+      enabled: no
+      tcp:
+        enabled: no
+      udp:
+        enabled: yes
+outputs:
+  - eve-log:
+      enabled: yes
+      types:
+        - dns
+
diff --git a/tests/bug-8205/bug-8205-g0-t0-u1/test.yaml b/tests/bug-8205/bug-8205-g0-t0-u1/test.yaml
new file mode 100644
index 000000000..0c939d72e
--- /dev/null
+++ b/tests/bug-8205/bug-8205-g0-t0-u1/test.yaml
@@ -0,0 +1,19 @@
+requires:
+  min-version: 9
+
+pcap: ../../dns/dns-frames/input.pcap
+
+checks:
+  - filter:
+      count: 0
+      match:
+        event_type: dns
+        proto: TCP
+  - filter:
+      count: 2
+      match:
+        event_type: dns
+        proto: UDP
+  - shell:
+      args: |
+        grep -q "Warning: app-layer-detect-proto: Inconsistent global (FALSE) and respective ipproto (TRUE) settings found for alproto dns and ipproto udp" stdout
diff --git a/tests/bug-8205/bug-8205-g0-t1-u0/suricata.yaml b/tests/bug-8205/bug-8205-g0-t1-u0/suricata.yaml
new file mode 100644
index 000000000..dd7a2795c
--- /dev/null
+++ b/tests/bug-8205/bug-8205-g0-t1-u0/suricata.yaml
@@ -0,0 +1,17 @@
+%YAML 1.1
+---
+
+app-layer:
+  protocols:
+    dns:
+      enabled: no
+      tcp:
+        enabled: yes
+      udp:
+        enabled: no
+outputs:
+  - eve-log:
+      enabled: yes
+      types:
+        - dns
+
diff --git a/tests/bug-8205/bug-8205-g0-t1-u0/test.yaml b/tests/bug-8205/bug-8205-g0-t1-u0/test.yaml
new file mode 100644
index 000000000..5c0d964e6
--- /dev/null
+++ b/tests/bug-8205/bug-8205-g0-t1-u0/test.yaml
@@ -0,0 +1,19 @@
+requires:
+  min-version: 9
+
+pcap: ../../dns/dns-frames/input.pcap
+
+checks:
+  - filter:
+      count: 0
+      match:
+        event_type: dns
+        proto: UDP
+  - filter:
+      count: 2
+      match:
+        event_type: dns
+        proto: TCP
+  - shell:
+      args: |
+        grep -q "Warning: app-layer-detect-proto: Inconsistent global (FALSE) and respective ipproto (TRUE) settings found for alproto dns and ipproto tcp" stdout
diff --git a/tests/bug-8205/bug-8205-g0-t1-u1/suricata.yaml b/tests/bug-8205/bug-8205-g0-t1-u1/suricata.yaml
new file mode 100644
index 000000000..6b5fdbc8f
--- /dev/null
+++ b/tests/bug-8205/bug-8205-g0-t1-u1/suricata.yaml
@@ -0,0 +1,17 @@
+%YAML 1.1
+---
+
+app-layer:
+  protocols:
+    dns:
+      enabled: no
+      tcp:
+        enabled: yes
+      udp:
+        enabled: yes
+outputs:
+  - eve-log:
+      enabled: yes
+      types:
+        - dns
+
diff --git a/tests/bug-8205/bug-8205-g0-t1-u1/test.yaml b/tests/bug-8205/bug-8205-g0-t1-u1/test.yaml
new file mode 100644
index 000000000..3fab4c9da
--- /dev/null
+++ b/tests/bug-8205/bug-8205-g0-t1-u1/test.yaml
@@ -0,0 +1,22 @@
+requires:
+  min-version: 9
+
+pcap: ../../dns/dns-frames/input.pcap
+
+checks:
+  - filter:
+      count: 2
+      match:
+        event_type: dns
+        proto: UDP
+  - filter:
+      count: 2
+      match:
+        event_type: dns
+        proto: TCP
+  - shell:
+      args: |
+        grep -q "Warning: app-layer-detect-proto: Inconsistent global (FALSE) and respective ipproto (TRUE) settings found for alproto dns and ipproto tcp" stdout
+  - shell:
+      args: |
+        grep -q "Warning: app-layer-detect-proto: Inconsistent global (FALSE) and respective ipproto (TRUE) settings found for alproto dns and ipproto udp" stdout
diff --git a/tests/bug-8205/bug-8205-g1-t0-u0/suricata.yaml b/tests/bug-8205/bug-8205-g1-t0-u0/suricata.yaml
new file mode 100644
index 000000000..8ce6c1860
--- /dev/null
+++ b/tests/bug-8205/bug-8205-g1-t0-u0/suricata.yaml
@@ -0,0 +1,17 @@
+%YAML 1.1
+---
+
+app-layer:
+  protocols:
+    dns:
+      enabled: yes
+      tcp:
+        enabled: no
+      udp:
+        enabled: no
+outputs:
+  - eve-log:
+      enabled: yes
+      types:
+        - dns
+
diff --git a/tests/bug-8205/bug-8205-g1-t0-u0/test.yaml b/tests/bug-8205/bug-8205-g1-t0-u0/test.yaml
new file mode 100644
index 000000000..eddd87218
--- /dev/null
+++ b/tests/bug-8205/bug-8205-g1-t0-u0/test.yaml
@@ -0,0 +1,22 @@
+requires:
+  min-version: 9
+
+pcap: ../../dns/dns-frames/input.pcap
+
+checks:
+  - filter:
+      count: 0
+      match:
+        event_type: dns
+        proto: UDP
+  - filter:
+      count: 0
+      match:
+        event_type: dns
+        proto: TCP
+  - shell:
+      args: |
+        grep -q "Warning: app-layer-detect-proto: Inconsistent global (TRUE) and respective ipproto (FALSE) settings found for alproto dns and ipproto tcp" stdout
+  - shell:
+      args: |
+        grep -q "Warning: app-layer-detect-proto: Inconsistent global (TRUE) and respective ipproto (FALSE) settings found for alproto dns and ipproto udp" stdout
diff --git a/tests/bug-8205/bug-8205-g1-t0-u1/suricata.yaml b/tests/bug-8205/bug-8205-g1-t0-u1/suricata.yaml
new file mode 100644
index 000000000..f6b3005ea
--- /dev/null
+++ b/tests/bug-8205/bug-8205-g1-t0-u1/suricata.yaml
@@ -0,0 +1,17 @@
+%YAML 1.1
+---
+
+app-layer:
+  protocols:
+    dns:
+      enabled: yes
+      tcp:
+        enabled: no
+      udp:
+        enabled: yes
+outputs:
+  - eve-log:
+      enabled: yes
+      types:
+        - dns
+
diff --git a/tests/bug-8205/bug-8205-g1-t0-u1/test.yaml b/tests/bug-8205/bug-8205-g1-t0-u1/test.yaml
new file mode 100644
index 000000000..a12ddf913
--- /dev/null
+++ b/tests/bug-8205/bug-8205-g1-t0-u1/test.yaml
@@ -0,0 +1,19 @@
+requires:
+  min-version: 9
+
+pcap: ../../dns/dns-frames/input.pcap
+
+checks:
+  - filter:
+      count: 2
+      match:
+        event_type: dns
+        proto: UDP
+  - filter:
+      count: 0
+      match:
+        event_type: dns
+        proto: TCP
+  - shell:
+      args: |
+        grep -q "Warning: app-layer-detect-proto: Inconsistent global (TRUE) and respective ipproto (FALSE) settings found for alproto dns and ipproto tcp" stdout
diff --git a/tests/bug-8205/bug-8205-g1-t1-u0/suricata.yaml b/tests/bug-8205/bug-8205-g1-t1-u0/suricata.yaml
new file mode 100644
index 000000000..14bec3e0e
--- /dev/null
+++ b/tests/bug-8205/bug-8205-g1-t1-u0/suricata.yaml
@@ -0,0 +1,17 @@
+%YAML 1.1
+---
+
+app-layer:
+  protocols:
+    dns:
+      enabled: yes
+      tcp:
+        enabled: yes
+      udp:
+        enabled: no
+outputs:
+  - eve-log:
+      enabled: yes
+      types:
+        - dns
+
diff --git a/tests/bug-8205/bug-8205-g1-t1-u0/test.yaml b/tests/bug-8205/bug-8205-g1-t1-u0/test.yaml
new file mode 100644
index 000000000..5e6d11445
--- /dev/null
+++ b/tests/bug-8205/bug-8205-g1-t1-u0/test.yaml
@@ -0,0 +1,19 @@
+requires:
+  min-version: 9
+
+pcap: ../../dns/dns-frames/input.pcap
+
+checks:
+  - filter:
+      count: 0
+      match:
+        event_type: dns
+        proto: UDP
+  - filter:
+      count: 2
+      match:
+        event_type: dns
+        proto: TCP
+  - shell:
+      args: |
+        grep -q "Warning: app-layer-detect-proto: Inconsistent global (TRUE) and respective ipproto (FALSE) settings found for alproto dns and ipproto udp" stdout
diff --git a/tests/bug-8205/bug-8205-g1-t1-u1/suricata.yaml b/tests/bug-8205/bug-8205-g1-t1-u1/suricata.yaml
new file mode 100644
index 000000000..f1b51009c
--- /dev/null
+++ b/tests/bug-8205/bug-8205-g1-t1-u1/suricata.yaml
@@ -0,0 +1,17 @@
+%YAML 1.1
+---
+
+app-layer:
+  protocols:
+    dns:
+      enabled: yes
+      tcp:
+        enabled: yes
+      udp:
+        enabled: yes
+outputs:
+  - eve-log:
+      enabled: yes
+      types:
+        - dns
+
diff --git a/tests/bug-8205/bug-8205-g1-t1-u1/test.yaml b/tests/bug-8205/bug-8205-g1-t1-u1/test.yaml
new file mode 100644
index 000000000..8e4ddaa49
--- /dev/null
+++ b/tests/bug-8205/bug-8205-g1-t1-u1/test.yaml
@@ -0,0 +1,17 @@
+requires:
+  min-version: 9
+
+pcap: ../../dns/dns-frames/input.pcap
+
+checks:
+  - filter:
+      count: 2
+      match:
+        event_type: dns
+        proto: UDP
+  - filter:
+      count: 2
+      match:
+        event_type: dns
+        proto: TCP
+
diff --git a/tests/bug-8205/bug-8205-g1-tna-una/suricata.yaml b/tests/bug-8205/bug-8205-g1-tna-una/suricata.yaml
new file mode 100644
index 000000000..2072d5c49
--- /dev/null
+++ b/tests/bug-8205/bug-8205-g1-tna-una/suricata.yaml
@@ -0,0 +1,13 @@
+%YAML 1.1
+---
+
+app-layer:
+  protocols:
+    dns:
+      enabled: yes
+outputs:
+  - eve-log:
+      enabled: yes
+      types:
+        - dns
+
diff --git a/tests/bug-8205/bug-8205-g1-tna-una/test.yaml b/tests/bug-8205/bug-8205-g1-tna-una/test.yaml
new file mode 100644
index 000000000..8e4ddaa49
--- /dev/null
+++ b/tests/bug-8205/bug-8205-g1-tna-una/test.yaml
@@ -0,0 +1,17 @@
+requires:
+  min-version: 9
+
+pcap: ../../dns/dns-frames/input.pcap
+
+checks:
+  - filter:
+      count: 2
+      match:
+        event_type: dns
+        proto: UDP
+  - filter:
+      count: 2
+      match:
+        event_type: dns
+        proto: TCP
+
diff --git a/tests/bug-8205/bug-8205-gna-t0-u1/suricata.yaml b/tests/bug-8205/bug-8205-gna-t0-u1/suricata.yaml
new file mode 100644
index 000000000..8d1121fdc
--- /dev/null
+++ b/tests/bug-8205/bug-8205-gna-t0-u1/suricata.yaml
@@ -0,0 +1,16 @@
+%YAML 1.1
+---
+
+app-layer:
+  protocols:
+    dns:
+      tcp:
+        enabled: no
+      udp:
+        enabled: yes
+outputs:
+  - eve-log:
+      enabled: yes
+      types:
+        - dns
+
diff --git a/tests/bug-8205/bug-8205-gna-t0-u1/test.yaml b/tests/bug-8205/bug-8205-gna-t0-u1/test.yaml
new file mode 100644
index 000000000..6f6ad886e
--- /dev/null
+++ b/tests/bug-8205/bug-8205-gna-t0-u1/test.yaml
@@ -0,0 +1,17 @@
+requires:
+  min-version: 9
+
+pcap: ../../dns/dns-frames/input.pcap
+
+checks:
+  - filter:
+      count: 2
+      match:
+        event_type: dns
+        proto: UDP
+  - filter:
+      count: 0
+      match:
+        event_type: dns
+        proto: TCP
+
diff --git a/tests/bug-8205/bug-8205-gna-t1-u1/suricata.yaml b/tests/bug-8205/bug-8205-gna-t1-u1/suricata.yaml
new file mode 100644
index 000000000..ee2ca862d
--- /dev/null
+++ b/tests/bug-8205/bug-8205-gna-t1-u1/suricata.yaml
@@ -0,0 +1,16 @@
+%YAML 1.1
+---
+
+app-layer:
+  protocols:
+    dns:
+      tcp:
+        enabled: yes
+      udp:
+        enabled: yes
+outputs:
+  - eve-log:
+      enabled: yes
+      types:
+        - dns
+
diff --git a/tests/bug-8205/bug-8205-gna-t1-u1/test.yaml b/tests/bug-8205/bug-8205-gna-t1-u1/test.yaml
new file mode 100644
index 000000000..8e4ddaa49
--- /dev/null
+++ b/tests/bug-8205/bug-8205-gna-t1-u1/test.yaml
@@ -0,0 +1,17 @@
+requires:
+  min-version: 9
+
+pcap: ../../dns/dns-frames/input.pcap
+
+checks:
+  - filter:
+      count: 2
+      match:
+        event_type: dns
+        proto: UDP
+  - filter:
+      count: 2
+      match:
+        event_type: dns
+        proto: TCP
+
diff --git a/tests/bug-8205/bug-8205-gna-tna-una/suricata.yaml b/tests/bug-8205/bug-8205-gna-tna-una/suricata.yaml
new file mode 100644
index 000000000..3a2fa1f82
--- /dev/null
+++ b/tests/bug-8205/bug-8205-gna-tna-una/suricata.yaml
@@ -0,0 +1,9 @@
+%YAML 1.1
+---
+
+outputs:
+  - eve-log:
+      enabled: yes
+      types:
+        - dns
+
diff --git a/tests/bug-8205/bug-8205-gna-tna-una/test.yaml b/tests/bug-8205/bug-8205-gna-tna-una/test.yaml
new file mode 100644
index 000000000..8e4ddaa49
--- /dev/null
+++ b/tests/bug-8205/bug-8205-gna-tna-una/test.yaml
@@ -0,0 +1,17 @@
+requires:
+  min-version: 9
+
+pcap: ../../dns/dns-frames/input.pcap
+
+checks:
+  - filter:
+      count: 2
+      match:
+        event_type: dns
+        proto: UDP
+  - filter:
+      count: 2
+      match:
+        event_type: dns
+        proto: TCP
+