Skip to content

Commit

Permalink
Adds test about pop3 protocol detection
Browse files Browse the repository at this point in the history
  • Loading branch information
catenacyber committed Sep 19, 2023
1 parent c31735b commit 1d4e327
Show file tree
Hide file tree
Showing 3 changed files with 17 additions and 0 deletions.
8 changes: 8 additions & 0 deletions tests/pop3/README.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,8 @@
# Description

Test DCE decoder
See https://redmine.openinfosecfoundation.org/issues/3637

# PCAP

The pcap comes from https://community.cisco.com/t5/switching/nexus-7000-using-data-center-ethernet-with-fabricpath-not/td-p/3341478
Binary file added tests/pop3/input.pcap
Binary file not shown.
9 changes: 9 additions & 0 deletions tests/pop3/test.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,9 @@
requires:
min-version: 7

checks:
- filter:
count: 1
match:
event_type: flow
app_proto: pop3

0 comments on commit 1d4e327

Please sign in to comment.