new upstream release (3.3.0); modify package compatibility for Stretch
[ossec-hids.git] / debian / ossec-hids / usr / share / doc / ossec-hids / contrib / ossec-testing / tests / dnsmasq.ini
diff --git a/debian/ossec-hids/usr/share/doc/ossec-hids/contrib/ossec-testing/tests/dnsmasq.ini b/debian/ossec-hids/usr/share/doc/ossec-hids/contrib/ossec-testing/tests/dnsmasq.ini
new file mode 100644 (file)
index 0000000..96f2236
--- /dev/null
@@ -0,0 +1,9 @@
+[dnsmasq group]
+log 1 pass = Jul 17 14:49:57 dnsmasq[15210]: 21745 10.10.10.33/59490 query[A] server.example.com from 10.10.10.33
+log 2 pass = Jul 17 14:49:57 dnsmasq[15210]: 21745 10.10.10.33/59490 forwarded server.example.com to 10.20.20.10
+log 3 pass = Jul 17 14:49:57 dnsmasq[15210]: 21745 10.10.10.33/59490 reply server.example.com is <CNAME>
+
+rule = 53551
+alert = 0
+decoder = dnsmasq
+