OISF · catenacyber · Mar 27, 2025
diff --git a/tests/http-data-after-09/README.md b/tests/http-data-after-09/README.md
@@ -0,0 +1,5 @@
+# HTTP data after 0.9
+
+Test that we do not fully error on data after HTTP/0.9
+
+The pcap file is hand crafted
diff --git a/tests/http-data-after-09/input.pcap b/tests/http-data-after-09/input.pcap
diff --git a/tests/http-data-after-09/test.yaml b/tests/http-data-after-09/test.yaml
@@ -0,0 +1,12 @@
+requires:
+  min-version: 8
+
+args: 
+- -k none
+
+checks:
+  - filter:
+      count: 1
+      match:
+        event_type: stats
+        stats.app_layer.error.http.parser: 0