Shivani Bhardwaj

Results 62 comments of Shivani Bhardwaj

> @inashivb is there a `skip` keyword for Suricata-verify ? There is one but seems like it is 1. bound to features (e.g. https://github.com/OISF/suricata-verify/blob/master/tests/filestore-v2.3-fserror/test.yaml#L7) or 2. skipping an entire test...

Replaced w #8205

All comments addressed in https://github.com/OISF/suricata/pull/10511

> It required a rule update in various QA/CI systems. Not sure what the status is. Rules in QA lab were updated.. Only after that QA started to pass..

> Seems we can gain a lot by optimizing the way the whitelist grouping is happening ![image](https://private-user-images.githubusercontent.com/32410611/305709061-1394288c-a651-45f0-8dfc-0af3434758aa.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJnaXRodWIuY29tIiwiYXVkIjoicmF3LmdpdGh1YnVzZXJjb250ZW50LmNvbSIsImtleSI6ImtleTUiLCJleHAiOjE3MDgzMTk5MzMsIm5iZiI6MTcwODMxOTYzMywicGF0aCI6Ii8zMjQxMDYxMS8zMDU3MDkwNjEtMTM5NDI4OGMtYTY1MS00NWYwLThkZmMtMGFmMzQzNDc1OGFhLnBuZz9YLUFtei1BbGdvcml0aG09QVdTNC1ITUFDLVNIQTI1NiZYLUFtei1DcmVkZW50aWFsPUFLSUFWQ09EWUxTQTUzUFFLNFpBJTJGMjAyNDAyMTklMkZ1cy1lYXN0LTElMkZzMyUyRmF3czRfcmVxdWVzdCZYLUFtei1EYXRlPTIwMjQwMjE5VDA1MTM1M1omWC1BbXotRXhwaXJlcz0zMDAmWC1BbXotU2lnbmF0dXJlPWU1ZTNlY2NkZWFkMjk3Y2UzOTE3YzJlOGFjNDI0NDE5MDY0NjkwMmJmN2IzYWYwZGIzOTMwZjI0YmViNTQyNmYmWC1BbXotU2lnbmVkSGVhZGVycz1ob3N0JmFjdG9yX2lkPTAma2V5X2lkPTAmcmVwb19pZD0wIn0.ZMvxrRhohQKt7sYDniEohFaZGhbbbnkW_awIw8yHlWU) This is with the very large test ruleset. Think I have an idea....

Replaced w https://github.com/OISF/suricata/pull/10482

> because of wrong format for SV_BRANCH in the description. Yes. You don't need to write markdown for the link to render in the format OISF/suricat..., that is done automagically...

> Hi there, I removed the link because as all checks were passing in the SV PR, it seemed to me that that PR could be merged even if its...

> I definitely missed that. Sorry for the noise! Don't worry. It was fairly hidden. Wondering if a new test is skipped that should be somehow flagged in the CI.

This one is blocked bc: - I need to make a minimal reproducer of the pcap that causes the massive stats deviations and, - confirm/deny whether this PR is correct...