diff --git a/tests/lua/lua-base64/rule.lua b/tests/lua/lua-base64/rule.lua index 92e9c122b..d46a86085 100644 --- a/tests/lua/lua-base64/rule.lua +++ b/tests/lua/lua-base64/rule.lua @@ -8,12 +8,11 @@ local input_base64_with_spaces = "d3 d3 Ln N1 cm lj YX Rh LW lk cy 5v cm c=" function init (args) local needs = {} - needs["dns.rrname"] = tostring(true) return needs end function match(args) - rrname = tostring(args["dns.rrname"]) + rrname = DnsGetDnsRrname() encoded = base64.encode(rrname) if encoded ~= expected_base64 then diff --git a/tests/lua/lua-base64/test.rules b/tests/lua/lua-base64/test.rules index 23b702759..f50faee9b 100644 --- a/tests/lua/lua-base64/test.rules +++ b/tests/lua/lua-base64/test.rules @@ -1,3 +1,4 @@ alert dns any any -> any any (msg:"TEST DNS LUA dns.rrname"; \ + flow:to_server; \ dns.query.name; content: "www.suricata-ids.org"; \ lua:rule.lua; sid:1; rev:1;)