Skip to content

Commit da584d5

Browse files
victorjulieninashivb
authored andcommitted
tests: bug 7638 flowbit rule order test
1 parent 066b7a4 commit da584d5

File tree

2 files changed

+37
-0
lines changed

2 files changed

+37
-0
lines changed
Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
alert http any any -> any any (http.uri; content:"down"; flowbits:set,uritest; sid:11;)
2+
alert http any any -> any any (http.user_agent; content:"Mozilla"; flowbits:isset, headtest; flowbits:set,moz; sid:10;)
3+
alert http any any -> any any (http.method; content:"GET"; flowbits:isset,uritest; flowbits:set,headtest; sid:12;)
4+
alert http any any -> any any (http.host; content:"ether"; flowbits:isset,moz; sid:14;)
Lines changed: 33 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,33 @@
1+
requires:
2+
min-version: 8.0
3+
4+
pcap: false
5+
6+
args:
7+
- --engine-analysis
8+
9+
checks:
10+
- filter:
11+
filename: rules.json
12+
count: 1
13+
match:
14+
__lineno: 1
15+
id: 11
16+
- filter:
17+
filename: rules.json
18+
count: 1
19+
match:
20+
__lineno: 2
21+
id: 12
22+
- filter:
23+
filename: rules.json
24+
count: 1
25+
match:
26+
__lineno: 3
27+
id: 10
28+
- filter:
29+
filename: rules.json
30+
count: 1
31+
match:
32+
__lineno: 4
33+
id: 14

0 commit comments

Comments
 (0)