diff options
Diffstat (limited to 'tests/py/any/rawpayload.t.json')
| -rw-r--r-- | tests/py/any/rawpayload.t.json | 157 |
1 files changed, 157 insertions, 0 deletions
diff --git a/tests/py/any/rawpayload.t.json b/tests/py/any/rawpayload.t.json new file mode 100644 index 00000000..b4ce0bd8 --- /dev/null +++ b/tests/py/any/rawpayload.t.json @@ -0,0 +1,157 @@ +# meta l4proto { tcp, udp, sctp} @th,16,16 { 22, 23, 80 } +[ + { + "match": { + "left": { + "meta": "l4proto" + }, + "right": { + "set": [ + "tcp", + "udp", + "sctp" + ] + } + } + }, + { + "match": { + "left": { + "payload": { + "base": "th", + "len": 16, + "name": "raw", + "offset": 16 + } + }, + "right": { + "set": [ + 22, + 23, + 80 + ] + } + } + } +] + +# meta l4proto tcp @th,16,16 { 22, 23, 80} +[ + { + "match": { + "left": { "meta": "l4proto" }, + "right": "tcp" + } + }, + { + "match": { + "left": { + "payload": { + "base": "th", + "len": 16, + "offset": 16, + "name": "raw" + } + }, + "right": { + "set": [ + 22, + 23, + 80 + ] + } + } + } +] + +# @nh,8,8 255 +[ + { + "match": { + "left": { + "payload": { + "base": "nh", + "len": 8, + "name": "raw", + "offset": 8 + } + }, + "right": 255 + } + } +] + +# @nh,8,16 0 +[ + { + "match": { + "left": { + "payload": { + "base": "nh", + "len": 16, + "name": "raw", + "offset": 8 + } + }, + "right": 0 + } + } +] + +# @ll,0,1 1 +[ + { + "match": { + "left": { + "payload": { + "base": "ll", + "len": 1, + "name": "raw", + "offset": 0 + } + }, + "right": 1 + } + } +] + +# @ll,0,8 and 0x80 eq 0x80 +[ + { + "match": { + "left": { + "&": [ + { + "payload": { + "base": "ll", + "len": 8, + "name": "raw", + "offset": 0 + } + }, + "0x80" + ] + }, + "op": "==", + "right": "0x80" + } + } +] + +# @ll,0,128 0xfedcba987654321001234567890abcde +[ + { + "match": { + "left": { + "payload": { + "base": "ll", + "len": 128, + "name": "raw", + "offset": 0 + } + }, + "right": "0xfedcba987654321001234567890abcde" + } + } +] + |