Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Datasets memcap tests/v5 #1949

Closed
wants to merge 3 commits into from

Conversation

inashivb
Copy link
Member

@inashivb inashivb commented Jul 2, 2024

Ticket

If your pull request is related to a Suricata ticket, please provide
the full URL to the ticket here so this pull request can monitor
changes to the ticket status:

Redmine ticket: https://redmine.openinfosecfoundation.org/issues/3910

Previous PR: #1944

Changes since v4:

  • rebased on top of latest master

@victorjulien
Copy link
Member

Merged in #1956, thanks!

@inashivb inashivb deleted the datasets-memcap-tests/v5 branch July 4, 2024 09:00
@catenacyber
Copy link
Collaborator

This introduced a test for 7 cf lt-version: 8 in datasets-memcap-01/test.yaml and was not tested with latest Suricata 7

@inashivb
Copy link
Member Author

inashivb commented Jul 4, 2024

This introduced a test for 7 cf lt-version: 8 in datasets-memcap-01/test.yaml and was not tested with latest Suricata 7

I'm getting it passed locally. What are you seeing?

@catenacyber
Copy link
Collaborator

 - /Users/runner/work/suricata/suricata/suricata-verify/tests/datasets-memcap-01/output/stderr
Error: thash: preallocating data failed: max thash memcap reached. Memcap 88074, Memuse 88160. [THashInitConfig:util-thash.c:280]
Error: detect-dataset: failed to set up dataset 'ua-seen'. [DetectDatasetSetup:detect-dataset.c:407]
Error: detect: error parsing signature "alert http any any -> any any (http.user_agent; dataset:isset,ua-seen,type string,load datasets.csv,memcap 88074,hashsize 1; sid:1;)" from file /Users/runner/work/suricata/suricata/suricata-verify/tests/datasets-memcap-01/test.rules at line 1 [DetectLoadSigFile:detect-engine-loader.c:185]
Error: suricata: Loading signatures failed. [LoadSignatures:suricata.c:2417]

@inashivb
Copy link
Member Author

inashivb commented Jul 4, 2024

 - /Users/runner/work/suricata/suricata/suricata-verify/tests/datasets-memcap-01/output/stderr
Error: thash: preallocating data failed: max thash memcap reached. Memcap 88074, Memuse 88160. [THashInitConfig:util-thash.c:280]
Error: detect-dataset: failed to set up dataset 'ua-seen'. [DetectDatasetSetup:detect-dataset.c:407]
Error: detect: error parsing signature "alert http any any -> any any (http.user_agent; dataset:isset,ua-seen,type string,load datasets.csv,memcap 88074,hashsize 1; sid:1;)" from file /Users/runner/work/suricata/suricata/suricata-verify/tests/datasets-memcap-01/test.rules at line 1 [DetectLoadSigFile:detect-engine-loader.c:185]
Error: suricata: Loading signatures failed. [LoadSignatures:suricata.c:2417]

In that case, the os check is not working properly, I think. 41962d4
The test shouldn't have run on MacOS.

Edit: I did not add the os check to the 01 test. 🤦🏽‍♀️ nvm. PR coming up

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
requires suricata pr Depends on a PR in Suricata
Development

Successfully merging this pull request may close these issues.

3 participants