Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

dns: enable test for ticket 7018 #2180

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

dns: enable test for ticket 7018 #2180

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
113 changes: 56 additions & 57 deletions tests/dns/task-7018-ids-dns-keywords/test.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,10 +1,9 @@
args:
- -k none
- --set detect.guess-applayer-tx=true

requires:
min-version: 8
features:
- NEEDS_FIX

checks:
- filter:
Expand All @@ -26,12 +25,12 @@ checks:
dest_ip: 9.9.9.9
dest_port: 53
direction: to_server
dns.query[0].id: 0
dns.query[0].opcode: 0
dns.query[0].rrname: suricata.io
dns.query[0].rrtype: A
dns.query[0].tx_id: 0
dns.query[0].type: query
dns.id: 0
dns.opcode: 0
dns.queries[0].rrname: suricata.io
dns.queries[0].rrtype: A
dns.tx_id: 0
dns.type: request
- filter:
count: 1
match:
Expand All @@ -47,17 +46,17 @@ checks:
dest_ip: 10.16.1.11
dest_port: 36926
direction: to_client
dns.answer.flags: '8180'
dns.answer.id: 0
dns.answer.opcode: 0
dns.answer.qr: true
dns.answer.ra: true
dns.answer.rcode: NOERROR
dns.answer.rd: true
dns.answer.rrname: suricata.io
dns.answer.rrtype: A
dns.answer.type: answer
dns.answer.version: 2
dns.flags: '8180'
dns.id: 0
dns.opcode: 0
dns.qr: true
dns.ra: true
dns.rcode: NOERROR
dns.rd: true
dns.answers[0].rrname: suricata.io
dns.answers[0].rrtype: A
dns.type: response
dns.version: 3
- filter:
count: 1
match:
Expand All @@ -73,12 +72,12 @@ checks:
dest_ip: 9.9.9.9
dest_port: 53
direction: to_server
dns.query[0].id: 0
dns.query[0].opcode: 0
dns.query[0].rrname: suricata.org
dns.query[0].rrtype: A
dns.query[0].tx_id: 4
dns.query[0].type: query
dns.id: 0
dns.opcode: 0
dns.queries[0].rrname: suricata.org
dns.queries[0].rrtype: A
dns.tx_id: 4
dns.type: request
- filter:
count: 1
match:
Expand All @@ -94,17 +93,17 @@ checks:
dest_ip: 10.16.1.11
dest_port: 36926
direction: to_client
dns.answer.flags: '8180'
dns.answer.id: 0
dns.answer.opcode: 0
dns.answer.qr: true
dns.answer.ra: true
dns.answer.rcode: NOERROR
dns.answer.rd: true
dns.answer.rrname: suricata.org
dns.answer.rrtype: A
dns.answer.type: answer
dns.answer.version: 2
dns.flags: '8180'
dns.id: 0
dns.opcode: 0
dns.qr: true
dns.ra: true
dns.rcode: NOERROR
dns.rd: true
dns.answers[0].rrname: suricata.org
dns.answers[0].rrtype: A
dns.type: response
dns.version: 3
- filter:
count: 1
match:
Expand All @@ -114,10 +113,10 @@ checks:
dest_port: 53
dns.id: 0
dns.opcode: 0
dns.rrname: suricata.io
dns.rrtype: A
dns.queries[0].rrname: suricata.io
dns.queries[0].rrtype: A
dns.tx_id: 0
dns.type: query
dns.type: request
proto: TCP
src_ip: 10.16.1.11
src_port: 36926
Expand All @@ -143,10 +142,10 @@ checks:
dns.ra: true
dns.rcode: NOERROR
dns.rd: true
dns.rrname: suricata.io
dns.rrtype: A
dns.type: answer
dns.version: 2
dns.queries[0].rrname: suricata.io
dns.queries[0].rrtype: A
dns.type: response
dns.version: 3
- filter:
count: 1
match:
Expand All @@ -159,10 +158,10 @@ checks:
dest_port: 53
dns.id: 0
dns.opcode: 0
dns.rrname: oisf.net
dns.rrtype: A
dns.queries[0].rrname: oisf.net
dns.queries[0].rrtype: A
dns.tx_id: 2
dns.type: query
dns.type: request
- filter:
count: 1
match:
Expand Down Expand Up @@ -190,10 +189,10 @@ checks:
dns.ra: true
dns.rcode: NOERROR
dns.rd: true
dns.rrname: oisf.net
dns.rrtype: A
dns.type: answer
dns.version: 2
dns.queries[0].rrname: oisf.net
dns.queries[0].rrtype: A
dns.type: response
dns.version: 3
- filter:
count: 1
match:
Expand All @@ -206,10 +205,10 @@ checks:
dest_port: 53
dns.id: 0
dns.opcode: 0
dns.rrname: suricata.org
dns.rrtype: A
dns.queries[0].rrname: suricata.org
dns.queries[0].rrtype: A
dns.tx_id: 4
dns.type: query
dns.type: request
- filter:
count: 1
match:
Expand Down Expand Up @@ -237,10 +236,10 @@ checks:
dns.ra: true
dns.rcode: NOERROR
dns.rd: true
dns.rrname: suricata.org
dns.rrtype: A
dns.type: answer
dns.version: 2
dns.queries[0].rrname: suricata.org
dns.queries[0].rrtype: A
dns.type: response
dns.version: 3
- filter:
count: 1
match:
Expand Down
114 changes: 57 additions & 57 deletions tests/dns/task-7018-ips-dns-keywords/test.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,11 +1,11 @@
args:
- -k none
# redundant as ips is in the test name
- --simulate-ips
- --set detect.guess-applayer-tx=true

requires:
min-version: 8
features:
- NEEDS_FIX

pcap: ../task-7018-ids-dns-keywords/input.pcap

Expand All @@ -29,12 +29,12 @@ checks:
dest_ip: 9.9.9.9
dest_port: 53
direction: to_server
dns.query[0].id: 0
dns.query[0].opcode: 0
dns.query[0].rrname: suricata.io
dns.query[0].rrtype: A
dns.query[0].tx_id: 0
dns.query[0].type: query
dns.id: 0
dns.opcode: 0
dns.tx_id: 0
dns.type: request
dns.queries[0].rrname: suricata.io
dns.queries[0].rrtype: A
- filter:
count: 1
match:
Expand All @@ -50,17 +50,17 @@ checks:
dest_ip: 10.16.1.11
dest_port: 36926
direction: to_client
dns.answer.flags: '8180'
dns.answer.id: 0
dns.answer.opcode: 0
dns.answer.qr: true
dns.answer.ra: true
dns.answer.rcode: NOERROR
dns.answer.rd: true
dns.answer.rrname: suricata.io
dns.answer.rrtype: A
dns.answer.type: answer
dns.answer.version: 2
dns.flags: '8180'
dns.id: 0
dns.opcode: 0
dns.qr: true
dns.ra: true
dns.rcode: NOERROR
dns.rd: true
dns.answers[0].rrname: suricata.io
dns.answers[0].rrtype: A
dns.type: response
dns.version: 3
- filter:
count: 1
match:
Expand All @@ -76,12 +76,12 @@ checks:
dest_ip: 9.9.9.9
dest_port: 53
direction: to_server
dns.query[0].id: 0
dns.query[0].opcode: 0
dns.query[0].rrname: suricata.org
dns.query[0].rrtype: A
dns.query[0].tx_id: 4
dns.query[0].type: query
dns.id: 0
dns.opcode: 0
dns.tx_id: 4
dns.type: request
dns.queries[0].rrname: suricata.org
dns.queries[0].rrtype: A
- filter:
count: 1
match:
Expand All @@ -97,17 +97,17 @@ checks:
dest_ip: 10.16.1.11
dest_port: 36926
direction: to_client
dns.answer.flags: '8180'
dns.answer.id: 0
dns.answer.opcode: 0
dns.answer.qr: true
dns.answer.ra: true
dns.answer.rcode: NOERROR
dns.answer.rd: true
dns.answer.rrname: suricata.org
dns.answer.rrtype: A
dns.answer.type: answer
dns.answer.version: 2
dns.flags: '8180'
dns.id: 0
dns.opcode: 0
dns.qr: true
dns.ra: true
dns.rcode: NOERROR
dns.rd: true
dns.answers[0].rrname: suricata.org
dns.answers[0].rrtype: A
dns.type: response
dns.version: 3
- filter:
count: 1
match:
Expand All @@ -117,10 +117,10 @@ checks:
dest_port: 53
dns.id: 0
dns.opcode: 0
dns.rrname: suricata.io
dns.rrtype: A
dns.queries[0].rrname: suricata.io
dns.queries[0].rrtype: A
dns.tx_id: 0
dns.type: query
dns.type: request
proto: TCP
src_ip: 10.16.1.11
src_port: 36926
Expand All @@ -146,10 +146,10 @@ checks:
dns.ra: true
dns.rcode: NOERROR
dns.rd: true
dns.rrname: suricata.io
dns.rrtype: A
dns.type: answer
dns.version: 2
dns.queries[0].rrname: suricata.io
dns.queries[0].rrtype: A
dns.type: response
dns.version: 3
- filter:
count: 1
match:
Expand All @@ -162,10 +162,10 @@ checks:
dest_port: 53
dns.id: 0
dns.opcode: 0
dns.rrname: oisf.net
dns.rrtype: A
dns.queries[0].rrname: oisf.net
dns.queries[0].rrtype: A
dns.tx_id: 2
dns.type: query
dns.type: request
- filter:
count: 1
match:
Expand Down Expand Up @@ -193,10 +193,10 @@ checks:
dns.ra: true
dns.rcode: NOERROR
dns.rd: true
dns.rrname: oisf.net
dns.rrtype: A
dns.type: answer
dns.version: 2
dns.queries[0].rrname: oisf.net
dns.queries[0].rrtype: A
dns.type: response
dns.version: 3
- filter:
count: 1
match:
Expand All @@ -209,10 +209,10 @@ checks:
dest_port: 53
dns.id: 0
dns.opcode: 0
dns.rrname: suricata.org
dns.rrtype: A
dns.queries[0].rrname: suricata.org
dns.queries[0].rrtype: A
dns.tx_id: 4
dns.type: query
dns.type: request
- filter:
count: 1
match:
Expand Down Expand Up @@ -240,10 +240,10 @@ checks:
dns.ra: true
dns.rcode: NOERROR
dns.rd: true
dns.rrname: suricata.org
dns.rrtype: A
dns.type: answer
dns.version: 2
dns.queries[0].rrname: suricata.org
dns.queries[0].rrtype: A
dns.type: response
dns.version: 3
- filter:
count: 1
match:
Expand Down
Loading