Skip to content

Commit

Permalink
ldap: add test for abandon request
Browse files Browse the repository at this point in the history
Ticket: #7477
  • Loading branch information
AkakiAlice committed Jan 14, 2025
1 parent 6ee4e08 commit fab3883
Show file tree
Hide file tree
Showing 5 changed files with 27 additions and 0 deletions.
3 changes: 3 additions & 0 deletions tests/ldap-abandon/Makefile
Original file line number Diff line number Diff line change
@@ -0,0 +1,3 @@
ldap.pcap: ldap.syn
flowsynth.py -f pcap -w $@ $^

7 changes: 7 additions & 0 deletions tests/ldap-abandon/README.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,7 @@
# Test Purpose

Test that LDAP Abandon operation is parsed correctly.

## PCAP

This PCAP was generated with flowsynth.
Binary file added tests/ldap-abandon/ldap.pcap
Binary file not shown.
2 changes: 2 additions & 0 deletions tests/ldap-abandon/ldap.syn
Original file line number Diff line number Diff line change
@@ -0,0 +1,2 @@
flow default tcp 1.1.1.1:5555 > 2.2.2.2:389 (tcp.initialize; mss:9000;);
default > (content:"\x30\x06\x02\x01\x06\x50\x01\x05";);
15 changes: 15 additions & 0 deletions tests/ldap-abandon/test.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,15 @@
requires:
min-version: 8

args:
- -k none

pcap: ldap.pcap

checks:
- filter:
count: 1
match:
event_type: ldap
ldap.request.message_id: 6
ldap.request.operation: abandon_request

0 comments on commit fab3883

Please sign in to comment.