Bug #63
closedEngine fails to work properly on ppc platform.
Description
The following rule causes the engine to hang for 15 minutes at initialization. The problem appears to be in the ip address grouping.
alert tcp any any -> any any (msg:"ppc Test Rule"; sid:2031337;)
You can also reproduce the behavior by running the following unittest.
src/suricata -u -U "SigTestBidirec03" -c suricata.yaml -l ./
Each sample counts as 0.01 seconds.
% cumulative self self total
time seconds seconds calls s/call s/call name
51.49 116.66 116.66 4294901808 0.00 0.00 DetectAddressCmp
27.96 180.01 63.35 131130 0.00 0.00 HashListTableLookup
8.82 199.99 19.98 4294901776 0.00 0.00 DetectAddressCmpIPv4
8.13 218.42 18.43 4294901760 0.00 0.00 IPOnlyCompareFunc
3.55 226.46 8.04 call___do_global_ctors_aux
0.03 226.52 0.06 262257 0.00 0.00 SigGroupHeadAppendSig
0.00 226.53 0.01 262144 0.00 0.00 IPOnlyHashFunc16
0.00 226.54 0.01 131164 0.00 0.00 SigGroupHeadInitDataFree
0.00 226.55 0.01 131120 0.00 0.00 DetectAddressCopy
0.00 226.56 0.01 21 0.00 0.00 HashListTableFree
0.00 226.57 0.01 10 0.00 0.00 PoolFree
0.00 226.58 0.01 1 0.01 0.02 IPOnlyPrepare
0.00 226.59 0.01 1 0.01 0.01 TmThreadWaitOnThreadInit
Updated by Victor Julien over 14 years ago
- Status changed from New to Closed
Big endian fixes are applied, should work now. Please reopen if there are still issues.
Updated by Will Metcalf over 14 years ago
- Status changed from Closed to New
Getting closer but it appears as if we still have some failing unit tests.
==== TEST RESULTS ====
PASSED: 1279
FAILED: 47
======================
Test SigTest19B2g -- IP-ONLY test (1) : signature didn't match, but should have: FAILED
Test SigTest19B3g -- IP-ONLY test (1) : signature didn't match, but should have: FAILED
Test SigTest19Wm -- IP-ONLY test (1) : signature didn't match, but should have: FAILED
Test SigTest20B2g -- IP-ONLY test (2) : signature didn't match, but should have: FAILED
Test SigTest20B3g -- IP-ONLY test (2) : signature didn't match, but should have: FAILED
Test SigTest20Wm -- IP-ONLY test (2) : signature didn't match, but should have: FAILED
Test SigTestSgh03 : no sgh: FAILED
Test SigTestSgh04 : no sgh: FAILED
Test SigTestSgh05 : no sgh: FAILED
Test DetectIcmpIdMatchTest01 : sid 1 did not alert, but should have: FAILED
Test AddressTestParse02 : FAILED
Test AddressTestParse04 : FAILED
Test AddressTestParse06 : FAILED
Test AddressTestParse08 : FAILED
Test AddressTestParse10 : FAILED
Test AddressTestParse12 : FAILED
Test AddressTestParse14 : FAILED
Test AddressTestParse18 : FAILED
Test AddressTestParse21 : FAILED
Test AddressTestParse28 : FAILED
Test AddressTestParse30 : FAILED
Test AddressTestParse33 : FAILED
Test AddressTestParse35 : FAILED
Test AddressTestAddressGroupSetup11 : FAILED
Test AddressTestAddressGroupSetup12 : FAILED
Test AddressTestAddressGroupSetup13 : FAILED
Test AddressTestAddressGroupSetupIPv414 : unexpected addresses: FAILED
Test AddressTestAddressGroupSetupIPv415 : FAILED
Test AddressTestAddressGroupSetupIPv416 : FAILED
Test AddressTestAddressGroupSetup24 : FAILED
Test AddressTestAddressGroupSetup25 : FAILED
Test AddressTestAddressGroupSetup26 : FAILED
Test AddressTestCutIPv403 : FAILED
Test AddressTestCutIPv404 : FAILED
Test AddressTestCutIPv405 : FAILED
Test AddressTestCutIPv406 : FAILED
Test AddressTestCutIPv407 : FAILED
Test AddressTestCutIPv408 : FAILED
Test AddressTestCutIPv409 : FAILED
Test AddressTestCutIPv410 : FAILED
Test BloomFilterCountingTestFull01 : FAILED
Test SCPerfTestCounterValues11 : FAILED
Test DecodeICMPV4test03 : FAILED
Test DecodeICMPV4test04 : FAILED
Test ICMPV6EchoReqTest01 (Valid) : FAILED
Test ICMPV6EchoRepTest01 (Valid) : FAILED
Updated by Victor Julien over 14 years ago
- Due date changed from 01/25/2010 to 03/13/2010
- Target version changed from 0.8.1 to 0.8.2
Updated by Victor Julien over 14 years ago
- Due date changed from 03/13/2010 to 04/30/2010
- Target version changed from 0.8.2 to 0.9.0
Updated by Victor Julien over 14 years ago
- Target version changed from 0.9.0 to 0.9.1
Updated by Victor Julien over 14 years ago
- Target version changed from 0.9.1 to 0.9.2
Updated by Victor Julien over 14 years ago
- Target version changed from 0.9.2 to 0.9.3
Updated by Victor Julien over 14 years ago
- Due date deleted (
04/30/2010) - Target version changed from 0.9.3 to TBD
We have no hardware to test this on. Need to get hardware or outside help.
Updated by Victor Julien over 13 years ago
- Status changed from New to Closed
- Assignee changed from OISF Dev to Victor Julien
- Target version changed from TBD to 1.1beta2
- % Done changed from 0 to 100
- Estimated time changed from 2.50 h to 0.00 h
Current git master should fully work. I fixed and tested on a MIPS Big Endian VM.