OISF · victorjulien · Dec 12, 2024 · Dec 11, 2024 · Dec 11, 2024
diff --git a/tests/bug-7199/test.yaml b/tests/bug-7199/test.yaml
@@ -14,7 +14,6 @@ checks:
             event_type: alert
             alert.signature_id: 1
     - filter:
-        min-version: 8
         count: 1
         match:
             event_type: alert

diff --git a/tests/dns/task-7018-dns-ips-stream-rule/test.yaml b/tests/dns/task-7018-dns-ips-stream-rule/test.yaml
@@ -4,6 +4,8 @@ requires:
 
 args:
 - -k none
+- --set detect.guess-applayer-tx=true
+
 pcap: ../task-7018-ids-dns-keywords/input.pcap
 
 checks:

diff --git a/tests/dns/task-7018-ids-dns-stream-rule/test.yaml b/tests/dns/task-7018-ids-dns-stream-rule/test.yaml
@@ -3,6 +3,7 @@ requires:
    lt-version: 8
 args:
 - -k none
+- --set detect.guess-applayer-tx=true
 
 pcap: ../task-7018-ids-dns-keywords/input.pcap
 checks:

diff --git a/tests/firewall/firewall-06-tls-sni-enforce/test.yaml b/tests/firewall/firewall-06-tls-sni-enforce/test.yaml
@@ -6,31 +6,27 @@ args:
 
 checks:
 - filter:
-    min-version: 8
     count: 24
     match:
       event_type: alert
       alert.signature_id: 3
+      pkt_src: "wire/pcap"
 - filter:
-    min-version: 8
     count: 24
     match:
       event_type: alert
 - filter:
-    lt-version: 7
-    count: 26
+    # check for https://redmine.openinfosecfoundation.org/issues/7350
+    min-version: 8
+    count: 4
     match:
       event_type: alert
       alert.signature_id: 3
+      tls.sni: raw.githubusercontent.com
 - filter:
-    lt-version: 7
-    count: 26
-    match:
-      event_type: alert
-- filter:
-    min-version: 8
-    # check for https://redmine.openinfosecfoundation.org/issues/7350
-    count: 4
+    # version 7 does not use suricata.yaml stream-tx-log-limit
+    lt-version: 8
+    count: 24
     match:
       event_type: alert
       alert.signature_id: 3
@@ -51,18 +47,6 @@ checks:
     count: 26
     match:
       event_type: drop
-- filter:
-    min-version: 8
-    count: 0
-    match:
-      event_type: alert
-      pkt_src: "stream (flow timeout)"
-- filter:
-    lt-version: 7
-    count: 2
-    match:
-      event_type: alert
-      pkt_src: "stream (flow timeout)"
 - filter:
     count: 1
     match:

diff --git a/tests/pgsql/pgsql-7000-ids/test.yaml b/tests/pgsql/pgsql-7000-ids/test.yaml
@@ -1,5 +1,3 @@
-requires:
-    min-version: 8
 args:
 - -k none
 

diff --git a/tests/pgsql/pgsql-bug-6983-ips/test.yaml b/tests/pgsql/pgsql-bug-6983-ips/test.yaml
@@ -1,6 +1,3 @@
-requires:
-  min-version: 8.0
-
 pcap: ../pgsql-ssl-rejected-md5-auth-simple-query/input.pcap
 
 args:

diff --git a/tests/tls-extra-alert-engine-analysis/README.md b/tests/tls-extra-alert-engine-analysis/README.md
@@ -4,4 +4,4 @@ engine analysis complementary test for tls-extra-alert.
 
 ## Related issues
 
-None so far. State: Trying to establish what's the issue.
+https://redmine.openinfosecfoundation.org/issues/7318
diff --git a/tests/tls-extra-alert-engine-analysis/test.yaml b/tests/tls-extra-alert-engine-analysis/test.yaml
@@ -1,3 +1,4 @@
+# starting version 8 with engine analysis for flowbits
 requires:
   min-version: 8
 

diff --git a/tests/tls-extra-alert/README.md b/tests/tls-extra-alert/README.md
@@ -9,4 +9,4 @@ Internal.
 
 ## Related issues
 
-None so far. State: Trying to establish what's the issue.
+https://redmine.openinfosecfoundation.org/issues/7318
diff --git a/tests/tls-extra-alert/test.yaml b/tests/tls-extra-alert/test.yaml
@@ -1,6 +1,3 @@
-requires:
-  min-version: 8
-
 args:
 - -k none
 - --simulate-ips
-Original file line number
+Diff line change
@@ Expand Up / @@ -4,6 +4,8 @@ requires: @@
     args:
     - -k none
+    - --set detect.guess-applayer-tx=true
     pcap: ../task-7018-ids-dns-keywords/input.pcap
     checks:
@@ Expand Down @@
Original file line number	Diff line number	Diff line change
Expand Up		@@ -4,4 +4,4 @@ engine analysis complementary test for tls-extra-alert.

		## Related issues

		None so far. State: Trying to establish what's the issue.
		https://redmine.openinfosecfoundation.org/issues/7318
Original file line number	Diff line number	Diff line change
Expand Up		@@ -9,4 +9,4 @@ Internal.

		## Related issues

		None so far. State: Trying to establish what's the issue.
		https://redmine.openinfosecfoundation.org/issues/7318