mirror of https://github.com/OISF/suricata
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
49783fa9f7
Implementing a bridge test with af-packet IPS and a routing test with iptables + nfqueue. Very helpful explanation and guidance on network namespaces can be found here: https://www.redhat.com/en/blog/net-namespaces Sets up 3 network namespaces: 1. client - for running client tools like ping, curl, wget 2. server - for running a server, currently only Caddy 3. dut - for running Suricata, this namespace connects the client and server namespaces Validate IPS operations in 3 ways: 1. check return codes of the client tools 2. check Suricata's IPS stats 3. use tshark to validate expected drops Run Suricata in AF_PACKET IPS mode for both autofp and workers mode. Do the same for NFQUEUE. Tshark's JSON output is used with JQ to validate that pings are dropped. All tests are codecov enabled. |
6 months ago | |
|---|---|---|
| .. | ||
| actions/install-cbindgen | 2 years ago | |
| workflows | 6 months ago | |
| CODEOWNERS | 3 years ago | |
| CONTRIBUTING.md | 3 years ago | |
| PULL_REQUEST_TEMPLATE.md | 1 year ago | |
| codecov.yml | 6 months ago | |
| dependabot.yml | 2 years ago | |