dns-udp-double-request-response: v2 and v3 tests

OISF · Jul 5, 2024 · e83123e · e83123e
1 parent 9135570
commit e83123e
Show file tree

Hide file tree

Showing 6 changed files with 35 additions and 5 deletions.
diff --git a/...ns-udp-double-request-response/README.txt → ...ns-udp-double-request-response/README.txt b/...ns-udp-double-request-response/README.txt → ...ns-udp-double-request-response/README.txt
diff --git a/...udp-double-request-response/suricata.yaml → ...udp-double-request-response/suricata.yaml b/...udp-double-request-response/suricata.yaml → ...udp-double-request-response/suricata.yaml
diff --git a/tests/dns/dns-udp-double-request-response/test.yaml b/tests/dns/dns-udp-double-request-response/test.yaml
@@ -0,0 +1,16 @@
+pcap: ../../dns-udp-double-request-response-v1/dns-udp-double-request-response.pcap
+
+requires:
+  min-version: 8
+
+checks:
+  - filter:
+      count: 2
+      match:
+        event_type: dns
+        dns.type: request
+  - filter:
+      count: 2
+      match:
+        event_type: dns
+        dns.type: response
diff --git a/tests/dns/v2/dns-udp-double-request-response/README.txt b/tests/dns/v2/dns-udp-double-request-response/README.txt
@@ -0,0 +1,8 @@
+Test 2 UDP DNS requests followed back to back with no response, then
+the 2 responses being received.
+
+Prior to Suricata 3.2 the first request would be marked as having a
+reply lost when the second request was seen.
+
+Related issue:
+https://redmine.openinfosecfoundation.org/issues/1923
diff --git a/tests/dns/v2/dns-udp-double-request-response/suricata.yaml b/tests/dns/v2/dns-udp-double-request-response/suricata.yaml
@@ -0,0 +1,10 @@
+%YAML 1.1
+---
+
+outputs:
+  - eve-log:
+      enabled: yes
+      filename: eve.json
+      types:
+        - dns:
+            version: 2
diff --git a/...dns-udp-double-request-response/test.yaml → ...dns-udp-double-request-response/test.yaml b/...dns-udp-double-request-response/test.yaml → ...dns-udp-double-request-response/test.yaml
@@ -1,8 +1,4 @@
-pcap: ../dns-udp-double-request-response-v1/dns-udp-double-request-response.pcap
-
-requires:
-  features:
-    - HAVE_LIBJANSSON
+pcap: ../../../dns-udp-double-request-response-v1/dns-udp-double-request-response.pcap
 
 checks:
   - filter: