diff --git a/tests/smtp-tls-protodetect/README.md b/tests/smtp-tls-protodetect/README.md new file mode 100644 index 000000000..53113b7bb --- /dev/null +++ b/tests/smtp-tls-protodetect/README.md @@ -0,0 +1,11 @@ +# Test Description + +Test SMTP recognition from probing parser when client starts TLS + +## PCAP + +extract from QA TLPW1 + +## Related issues + +https://redmine.openinfosecfoundation.org/issues/7469 diff --git a/tests/smtp-tls-protodetect/input.pcap b/tests/smtp-tls-protodetect/input.pcap new file mode 100644 index 000000000..e584ef04c Binary files /dev/null and b/tests/smtp-tls-protodetect/input.pcap differ diff --git a/tests/smtp-tls-protodetect/test.yaml b/tests/smtp-tls-protodetect/test.yaml new file mode 100644 index 000000000..2430a559f --- /dev/null +++ b/tests/smtp-tls-protodetect/test.yaml @@ -0,0 +1,14 @@ +requires: + min-version: 8 + +# disables checksum verification +args: + - -k none + +checks: + - filter: + count: 1 + match: + event_type: flow + app_proto: tls + app_proto_tc: smtp