[Snort-users] Help: Piglet Test Harness

Joel Cornett (jocornet) jocornet at ...589...
Fri Sep 11 15:01:48 EDT 2015


>Hi,
>
>I test --piglet command against all piglet scripts available in
>/interface and /instance folder. Looks like raw_buffer.lua and codec.lua
>that triggered the core. Others worked perfectly fine:
>
>snort --script-path=/opt/snort3/piglet/tests/instance/raw_buffer.lua
>--piglet
>
>--------------------------------------------------
>o")~   Snort++ 3.0.0-a2-168
>--------------------------------------------------
>--------------------------------------------------
>pcap DAQ configured to passive.
>=== PIGLET (1 test)
>[0] - piglet::raw_buffer -
>/opt/snort3/piglet/tests/interface/raw_buffer.lua
>--	read_empty	/opt/snort3/piglet/tests/interface/../common.lua:113:
>/opt/snort3/piglet/tests/interface/raw_buffer.lua:77: did not throw:
>Segmentation fault (core dumped)
>
>
>snort --script-path=/opt/snort3/piglet/tests/instance/codec.lua --piglet
>
>--------------------------------------------------
>o")~   Snort++ 3.0.0-a2-168
>--------------------------------------------------
>--------------------------------------------------
>pcap DAQ configured to passive.
>=== PIGLET (1 test)
>[0] - codec::ipv4 - /opt/snort3/piglet/tests/instance/codec.lua
>--	decode	C++ exception
>0.0.0.0 -> 0.0.0.0
>	Next:0x00 TTL:104 TOS:0x0 ID:0 IpLen:0 DgmLen:00.0.0.0 -> 0.0.0.0
>	Next:0x00 TTL:104 TOS:0x0 ID:0 IpLen:0 DgmLen:0
>Segmentation fault (core dumped)

Thanks for the additional info. Can you provide some information about
your compiler/system? I was unable to reproduce this core on OSX 10.10
with clang 6.1 and gcc 5.2 as well as on Ubuntu 14.04 with gcc 4.8.

Best,

Joel Cornett, Software Engineer, Cisco





More information about the Snort-users mailing list