Re: Help: Piglet Test Harness

["Joel Cornett (jocornet)" <jocornet () cisco com>]

> Hi,
>
> I test --piglet command against all piglet scripts available in
> /interface and /instance folder. Looks like raw_buffer.lua and codec.lua
> that triggered the core. Others worked perfectly fine:
>
> snort --script-path=/opt/snort3/piglet/tests/instance/raw_buffer.lua
> --piglet
>
> --------------------------------------------------
> o")~   Snort++ 3.0.0-a2-168
> --------------------------------------------------
> --------------------------------------------------
> pcap DAQ configured to passive.
> === PIGLET (1 test)
> [0] - piglet::raw_buffer -
> /opt/snort3/piglet/tests/interface/raw_buffer.lua
> --     read_empty      /opt/snort3/piglet/tests/interface/../common.lua:113:
> /opt/snort3/piglet/tests/interface/raw_buffer.lua:77: did not throw:
> Segmentation fault (core dumped)
>
>
> snort --script-path=/opt/snort3/piglet/tests/instance/codec.lua --piglet
>
> --------------------------------------------------
> o")~   Snort++ 3.0.0-a2-168
> --------------------------------------------------
> --------------------------------------------------
> pcap DAQ configured to passive.
> === PIGLET (1 test)
> [0] - codec::ipv4 - /opt/snort3/piglet/tests/instance/codec.lua
> --     decode  C++ exception
> 0.0.0.0 -> 0.0.0.0
>       Next:0x00 TTL:104 TOS:0x0 ID:0 IpLen:0 DgmLen:00.0.0.0 -> 0.0.0.0
>       Next:0x00 TTL:104 TOS:0x0 ID:0 IpLen:0 DgmLen:0
> Segmentation fault (core dumped)

Thanks for the additional info. Can you provide some information about
your compiler/system? I was unable to reproduce this core on OSX 10.10
with clang 6.1 and gcc 5.2 as well as on Ubuntu 14.04 with gcc 4.8.

Best,

Joel Cornett, Software Engineer, Cisco


------------------------------------------------------------------------------
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!