===> smtp-url-schemes-bug-5174: Sub test #1: FAIL : expected 1 matches; got 0 for filter {'count': 1, 'match': {'event_type': 'smtp', 'email.url[0]': 'test-site.org/blah/123/', 'email.url[1]': 'google.com'}}
===> smtp-file-data-01: Sub test #2: FAIL : expected 1 matches; got 0 for filter {'count': 1, 'match': {'alert.action': 'allowed', 'alert.category': '', 'alert.gid': 1, 'alert.rev': 0, 'alert.severity': 3, 'alert.signature': 'file_data smtp test', 'alert.signature_id': 1, 'app_proto': 'smtp', 'dest_ip': '1.2.190.250', 'dest_port': 25, 'email.attachment[0]': 'J.txt', 'email.from': '<sender@example.com>', 'email.status': 'PARSE_DONE', 'email.to[0]': '<recipient@example.com>', 'event_type': 'alert', 'files[0].filename': 'J.txt', 'files[0].gaps': False, 'files[0].size': 16386, 'files[0].state': 'CLOSED', 'files[0].stored': False, 'files[0].tx_id': 0, 'flow.bytes_toclient': 2928, 'flow.bytes_toserver': 21322, 'flow.pkts_toclient': 34, 'flow.pkts_toserver': 57, 'pcap_cnt': 91, 'proto': 'TCP', 'smtp.helo': 'client-1016363.example.int', 'smtp.mail_from': '<sender@example.com>', 'smtp.rcpt_to[0]': '<recipient@example.com>', 'src_ip': '1.1.205.22', 'src_port': 4053, 'tx_id': 0}}
===> smtp-extract-url-schemes: Sub test #1: FAIL : expected 1 matches; got 0 for filter {'count': 1, 'match': {'event_type': 'smtp', 'email.url[0]': 'ftp://172.42.48.124', 'email.url[1]': 'https://facebook.com', 'email.url[2]': 'http://test-site.org/blah/123/', 'email.url[3]': 'http://google.com'}}