From 1ded30f173f9a2325663e9dfd0fa669392871601 Mon Sep 17 00:00:00 2001 From: Leonardo Di Donato Date: Mon, 22 Mar 2021 13:51:09 +0000 Subject: [PATCH] update(test): tighten the condition to test the drops thresholds Signed-off-by: Leonardo Di Donato --- test/falco_tests.yaml | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) diff --git a/test/falco_tests.yaml b/test/falco_tests.yaml index 79555c88..c4b37100 100644 --- a/test/falco_tests.yaml +++ b/test/falco_tests.yaml @@ -1233,6 +1233,12 @@ trace_files: !mux - rules/single_rule.yaml conf_file: confs/drops_ignore_log.yaml trace_file: trace_files/ping_sendto.scap + stderr_not_contains: + - "event drop detected: 9 occurrences" + - "num times actions taken: 9" + - "Falco internal: syscall event drop" + stdout_not_contains: + - "Falco internal: syscall event drop" stderr_contains: - "syscall event drop action \"log\" does not make sense with the \"ignore\" action" @@ -1242,6 +1248,12 @@ trace_files: !mux - rules/single_rule.yaml conf_file: confs/drops_threshold_oor.yaml trace_file: trace_files/ping_sendto.scap + stderr_not_contains: + - "event drop detected: 9 occurrences" + - "num times actions taken: 9" + - "Falco internal: syscall event drop" + stdout_not_contains: + - "Falco internal: syscall event drop" stderr_contains: - "syscall event drops threshold must be a double in the range" @@ -1251,6 +1263,12 @@ trace_files: !mux - rules/single_rule.yaml conf_file: confs/drops_threshold_neg.yaml trace_file: trace_files/ping_sendto.scap + stderr_not_contains: + - "event drop detected: 9 occurrences" + - "num times actions taken: 9" + - "Falco internal: syscall event drop" + stdout_not_contains: + - "Falco internal: syscall event drop" stderr_contains: - "syscall event drops threshold must be a double in the range"