Skip to content

Commit 540763a

Browse files
catenacyberjufajardini
authored andcommitted
tls: add check for catch-all rule logging app-layer metadata
Ticket: 7530
1 parent dff1a78 commit 540763a

File tree

2 files changed

+12
-0
lines changed

2 files changed

+12
-0
lines changed

tests/firewall/firewall-06-tls-sni-enforce/suricata.yaml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -15,6 +15,10 @@ stats:
1515
# Add stream events as stats.
1616
#stream-events: false
1717

18+
detect:
19+
stream-tx-log-limit: 4
20+
guess-applayer-tx: true
21+
1822
# Configure the type of alert (and other) logging you would like.
1923
outputs:
2024
- eve-log:

tests/firewall/firewall-06-tls-sni-enforce/test.yaml

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -14,6 +14,14 @@ checks:
1414
count: 26
1515
match:
1616
event_type: alert
17+
- filter:
18+
min-version: 8
19+
# check for https://redmine.openinfosecfoundation.org/issues/7350
20+
count: 4
21+
match:
22+
event_type: alert
23+
alert.signature_id: 3
24+
tls.sni: raw.githubusercontent.com
1725
- filter:
1826
count: 1
1927
match:

0 commit comments

Comments
 (0)