Actions
Task #2924
closedsuricata-verify: per check version conditions
Effort:
Difficulty:
Label:
Description
Allow 'version' and 'min-version' to be specified per check in addition to the current per test.
Goal is to allow for a single test that tests different output behaviour for different Suricata versions.
Example:
checks:
- filter:
version: 4.1.0
count: 1
match:
event_type: tls
tls.sni: "localhost"
- filter:
min-version: 5.0.0
count: 1
match:
event_type: tls
tls.new_sni: "localhost"
Reference: https://github.com/OISF/suricata/pull/3645
Actions