From 9951f01c13d38a46ae8eaa4cec5e424cb21eee4b Mon Sep 17 00:00:00 2001 From: Philippe Antoine Date: Tue, 16 Dec 2025 22:40:59 +0100 Subject: [PATCH] quic: add test for encryption-handling bypass Ticket: 8116 --- tests/bypass-quic-enabled/README.md | 11 +++++++++++ tests/bypass-quic-enabled/test.yaml | 18 ++++++++++++++++++ 2 files changed, 29 insertions(+) create mode 100644 tests/bypass-quic-enabled/README.md create mode 100644 tests/bypass-quic-enabled/test.yaml diff --git a/tests/bypass-quic-enabled/README.md b/tests/bypass-quic-enabled/README.md new file mode 100644 index 000000000..8ba197098 --- /dev/null +++ b/tests/bypass-quic-enabled/README.md @@ -0,0 +1,11 @@ +# Test Description + +Tests that the encrypted part of the quic traffic is bypassed + +## PCAP + +reused + +## Related issues + +https://redmine.openinfosecfoundation.org/issues/8116 diff --git a/tests/bypass-quic-enabled/test.yaml b/tests/bypass-quic-enabled/test.yaml new file mode 100644 index 000000000..fb6a00b7e --- /dev/null +++ b/tests/bypass-quic-enabled/test.yaml @@ -0,0 +1,18 @@ +requires: + min-version: 9 + +pcap: ../quic-v2/input.pcap + +args: +- --set app-layer.protocols.quic.encryption-handling=bypass +- --set stream.reassembly.depth=1MB +- --set stream.bypass=false + +checks: + - filter: + count: 1 + match: + event_type: stats + - stats: + flow_bypassed.local_pkts: 13 + flow_bypassed.local_bytes: 2634