Project

General

Profile

Actions

Feature #4060

closed

createst: Commandline param to specify minimum required version of Suricata

Added by Shivani Bhardwaj over 3 years ago. Updated over 1 year ago.

Status:
Closed
Priority:
Normal
Target version:
Effort:
Difficulty:
Label:
Beginner, Outreachy, Python

Description

Current createst script generates only the filter blocks as per eve.json, extend its functionality to add a global minimum required version of Suricata as mentioned on command line.

Expectation

createst.py mytest mypcap --add-min-version 5.0

The final generated test.yaml should have a min suricata version defined globally. e.g. https://github.com/OISF/suricata-verify/blob/master/tests/flowbit-oring/test.yaml

Actions #1

Updated by Shivani Bhardwaj over 3 years ago

  • Description updated (diff)
Actions #2

Updated by Shivani Bhardwaj over 3 years ago

  • Target version set to QA
Actions #3

Updated by Anuradha jha over 3 years ago

  • Assignee changed from Community Ticket to Anuradha jha
Actions #4

Updated by Anuradha jha over 3 years ago

  • Assignee changed from Anuradha jha to Community Ticket
Actions #5

Updated by Tharushi Jayasekara over 3 years ago

  • Assignee changed from Community Ticket to Tharushi Jayasekara
Actions #6

Updated by Tharushi Jayasekara over 3 years ago

Shivani Bhardwaj wrote:

Current createst script generates only the filter blocks as per eve.json, extend its functionality to add a global minimum required version of Suricata as mentioned on command line.

Expectation

[...]

The final generated test.yaml should have a min suricata version defined globally. e.g. https://github.com/OISF/suricata-verify/blob/master/tests/flowbit-oring/test.yaml

Hi Shivani,

Just a small question regarding the wording of the commandline param. Could I change it to "min-version" so that the it is consistent with the existing params, or should I use "add-min-version" as given in the text?

Actions #7

Updated by Tharushi Jayasekara over 3 years ago

  • Status changed from New to In Review
Actions #8

Updated by Juliana Fajardini Reichow over 1 year ago

  • Status changed from In Review to Closed

PR was merged.

Actions

Also available in: Atom PDF