Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

next/78/20240919/v1 #2049

Merged
merged 4 commits into from
Sep 20, 2024
Merged

next/78/20240919/v1 #2049

merged 4 commits into from
Sep 20, 2024

Commits on Sep 19, 2024

  1. README: keep help text up-to-date w/ actual help 

    There were discrepancies between the help text shown by the createst
script and the version shown in the README file.

I've kept the bit longer explanation for some of the options where it
feels they're not so straightforward in meaning.
    @jufajardini @victorjulien
    jufajardini authored and victorjulien committed Sep 19, 2024
    Configuration menu
    Copy the full SHA
    4eb98aa View commit details
    Browse the repository at this point in the history

  2. README/help: add info on IPS mode tests creation 

    It is possible to create a test that runs in IPS mode by just adding ips
to its name. But that is not documented. This will might not work when
using the createst script, though, as when the script runs the test for
the first time to create the `test.yaml` checks, the test-name is not
taken into consideration (therefore, the checks are valid for IDS mode).

Related to
Task #7039
    @jufajardini @victorjulien
    jufajardini authored and victorjulien committed Sep 19, 2024
    Configuration menu
    Copy the full SHA
    9e2de61 View commit details
    Browse the repository at this point in the history

  3. tests: update ips-state-1 test 

    This test indicated that there were FP drops for HTTP transactions,
leading the `http` events check to fail. This is no longer the case.

flow.action is still not set to drop for tls.
    @jufajardini @victorjulien
    jufajardini authored and victorjulien committed Sep 19, 2024
    Configuration menu
    Copy the full SHA
    c9d8b08 View commit details
    Browse the repository at this point in the history

  4. tests: move pcaps to tests where they are used 

    Following removal of tests only used in 6, some directories
were left with only a pcap, that got used by other tests.

Found with command
for pcap in $(find . -name *.pcap); do if ! test -e "$(dirname $pcap)/test.yaml"; then echo "$(dirname $pcap)"; fi; done
    @catenacyber @victorjulien
    catenacyber authored and victorjulien committed Sep 19, 2024
    Configuration menu
    Copy the full SHA
    db01d56 View commit details
    Browse the repository at this point in the history