Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

detect/lua/v1: add tests for detect-lua #688

Closed
wants to merge 1 commit into from

Conversation

TheKharleeci
Copy link
Contributor

Includes test for LuaMatchTest01

Link to redmine ticket: https://redmine.openinfosecfoundation.org/issues/4911

Copy link
Contributor

@jufajardini jufajardini left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please check inline comment :)

The CI failure should be fixed by adding a suricata.yaml file, to prevent S-V to looking at the default location for the lua script, I believe.

Comment on lines +17 to +21
- filter:
count: 2
match:
event_type: alert
alert.signature_id: 6677001
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Considering there are two other rules added to the test, can you add filters for those as well, or, if they're not needed for the test, considering the original ones in detect-lua, you could probably remove them.

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

friendly ping @TheKharleeci

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the friendly ping @catenacyber. I think I'm confused on how to go about this particular test

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

How can we help ?
What about the comments from Juliana ?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Currently working on it. Apologies for the late reply

@catenacyber
Copy link
Collaborator

Is this still live ?

@TheKharleeci
Copy link
Contributor Author

Is this still live ?

yes please

@TheKharleeci
Copy link
Contributor Author

Followed By: #1086

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
3 participants