mirror of https://github.com/MISP/MISP
chg: [test] Test snort rule without msg
parent
5f8d979877
commit
009a1bcf6f
|
@ -925,8 +925,9 @@ class TestComprehensive(unittest.TestCase):
|
||||||
event = create_simple_event()
|
event = create_simple_event()
|
||||||
event.add_attribute('ip-src', '8.8.8.8', to_ids=True)
|
event.add_attribute('ip-src', '8.8.8.8', to_ids=True)
|
||||||
event.add_attribute('snort', 'alert tcp 192.168.1.0/24 any -> 131.171.127.1 25 (content: "hacking"; msg: "malicious packet"; sid:2000001;)', to_ids=True)
|
event.add_attribute('snort', 'alert tcp 192.168.1.0/24 any -> 131.171.127.1 25 (content: "hacking"; msg: "malicious packet"; sid:2000001;)', to_ids=True)
|
||||||
event = self.user_misp_connector.add_event(event)
|
# Snort rule without msg, test for #9515
|
||||||
check_response(event)
|
event.add_attribute('snort', 'alert tcp 192.168.1.0/24 any -> 131.171.127.1 25 (content: "hacking"; sid:2000001;)', to_ids=True)
|
||||||
|
event = check_response(self.user_misp_connector.add_event(event))
|
||||||
|
|
||||||
publish_immediately(self.admin_misp_connector, event)
|
publish_immediately(self.admin_misp_connector, event)
|
||||||
|
|
||||||
|
|
Loading…
Reference in New Issue