Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add tests for packet_alert_max - v3 #743

Closed
wants to merge 2 commits into from

Conversation

jufajardini
Copy link
Contributor

@jufajardini jufajardini commented Feb 14, 2022

Previous PR: #694

Changes:

  • Add invalid config value (0) for PACKET_ALERT_MAX in suricata.yaml to test that it will fallback to defaults.

Related to https://redmine.openinfosecfoundation.org/issues/4207
and https://redmine.openinfosecfoundation.org/issues/4942

Also reworded (and changed!!) first commit a bit, (sorry, that shouldn't have been done, right).

Goes with Suricata PR OISF/suricata#7000

inashivb and others added 2 commits February 14, 2022 17:22
Since the default max alert value is 15 and we want to ensure that
value is enforced if the configuration is set with something invalid,
this test has packet-max-alert set to 0 (which will fall back to 15,
the default).

Task #4942
@jufajardini jufajardini added the requires suricata pr Depends on a PR in Suricata label Feb 15, 2022
@jufajardini
Copy link
Contributor Author

Related work still needed: test to ensure alert order doesn't change. (but the S-V tests in this PR work on its on)

@jufajardini
Copy link
Contributor Author

Followed by #782

@jufajardini jufajardini deleted the noalert-test/v4 branch July 28, 2022 14:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
requires suricata pr Depends on a PR in Suricata
Development

Successfully merging this pull request may close these issues.

2 participants