Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

tests: add more filestore tests #2111

Open
wants to merge 3 commits into
base: master
Choose a base branch
from
Open

tests: add more filestore tests #2111

wants to merge 3 commits into from

Conversation

regit
Copy link
Contributor

@regit regit commented Oct 30, 2024

Add tests exhibiting issues on filestore.

Ticket

If your pull request is related to a Suricata ticket, please provide
the full URL to the ticket here so this pull request can monitor
changes to the ticket status:

Redmine ticket:

@regit regit marked this pull request as draft October 30, 2024 09:10
regit added 3 commits November 2, 2024 10:58
Add tests exhibiting issue on filestore

Tickets: #7346 #7347
The signature was about storing on all events of the flow. After
fixing Suricata, this is really doing that. As a result the test
is failing.

By updating the signature to store on the tx only, we are now
testing what was looking like the purpose of the test which is
to only extract the file corresponding to the URL.
Make sure the result are correct with regards to filestore keyword
impact.
@catenacyber catenacyber added requires suricata fix This PR requires an issue in Suricata to be fixed first requires suricata pr Depends on a PR in Suricata and removed requires suricata fix This PR requires an issue in Suricata to be fixed first labels Nov 18, 2024
- HAVE_NSS
- MAGIC
files:
- src/output-filestore.c
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please do not put filenames because we will move them to rust one day like transforms ;-)

Put min-version: 8 rather ;-)

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good idea ! Done and pushed on this PR. Let me know if you want me to open another one.

@regit regit marked this pull request as ready for review December 14, 2024 08:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
requires suricata pr Depends on a PR in Suricata
Development

Successfully merging this pull request may close these issues.

2 participants