Snort mailing list archives
Re: Help: Piglet Test Harness
From: "Joel Cornett (jocornet)" <jocornet () cisco com>
Date: Fri, 11 Sep 2015 19:01:48 +0000
Hi, I test --piglet command against all piglet scripts available in /interface and /instance folder. Looks like raw_buffer.lua and codec.lua that triggered the core. Others worked perfectly fine: snort --script-path=/opt/snort3/piglet/tests/instance/raw_buffer.lua --piglet -------------------------------------------------- o")~ Snort++ 3.0.0-a2-168 -------------------------------------------------- -------------------------------------------------- pcap DAQ configured to passive. === PIGLET (1 test) [0] - piglet::raw_buffer - /opt/snort3/piglet/tests/interface/raw_buffer.lua -- read_empty /opt/snort3/piglet/tests/interface/../common.lua:113: /opt/snort3/piglet/tests/interface/raw_buffer.lua:77: did not throw: Segmentation fault (core dumped) snort --script-path=/opt/snort3/piglet/tests/instance/codec.lua --piglet -------------------------------------------------- o")~ Snort++ 3.0.0-a2-168 -------------------------------------------------- -------------------------------------------------- pcap DAQ configured to passive. === PIGLET (1 test) [0] - codec::ipv4 - /opt/snort3/piglet/tests/instance/codec.lua -- decode C++ exception 0.0.0.0 -> 0.0.0.0 Next:0x00 TTL:104 TOS:0x0 ID:0 IpLen:0 DgmLen:00.0.0.0 -> 0.0.0.0 Next:0x00 TTL:104 TOS:0x0 ID:0 IpLen:0 DgmLen:0 Segmentation fault (core dumped)
Thanks for the additional info. Can you provide some information about your compiler/system? I was unable to reproduce this core on OSX 10.10 with clang 6.1 and gcc 5.2 as well as on Ubuntu 14.04 with gcc 4.8. Best, Joel Cornett, Software Engineer, Cisco ------------------------------------------------------------------------------ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- Help: Piglet Test Harness Siti Farhana Binti Lokman (Sep 02)
- <Possible follow-ups>
- Re: Help: Piglet Test Harness Joel Cornett (jocornet) (Sep 09)
- Re: Help: Piglet Test Harness Joel Cornett (jocornet) (Sep 09)
- Re: Help: Piglet Test Harness Joel Cornett (jocornet) (Sep 11)