Go to:
Gentoo Home
Documentation
Forums
Lists
Bugs
Planet
Store
Wiki
Get Gentoo!
Gentoo's Bugzilla – Attachment 540944 Details for
Bug 661988
app-admin/rsyslog-8.35.0-r1: test failures
Home
|
New
–
[Ex]
|
Browse
|
Search
|
Privacy Policy
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
test-suite.log
test-suite.log (text/plain), 79.60 KB, created by
Rolf Eike Beer
on 2018-07-24 18:34:49 UTC
(
hide
)
Description:
test-suite.log
Filename:
MIME Type:
Creator:
Rolf Eike Beer
Created:
2018-07-24 18:34:49 UTC
Size:
79.60 KB
patch
obsolete
>========================================== > rsyslog 8.35.0: tests/test-suite.log >========================================== > ># TOTAL: 371 ># PASS: 351 ># SKIP: 5 ># XFAIL: 0 ># FAIL: 15 ># XPASS: 0 ># ERROR: 0 > >.. contents:: :depth: 2 > >FAIL: omfwd-keepalive.sh >======================== > >------------------------------------------------------------ >Test: ./omfwd-keepalive.sh >------------------------------------------------------------ >testbench: TZ env var not set, setting it to UTC >testconf.conf is: > 1 $IncludeConfig diag-common.conf > 2 > 3 module(load="../plugins/imtcp/.libs/imtcp") > 4 input(type="imtcp" port="13514") > 5 > 6 template(name="outfmt" type="list") { > 7 property(name="msg") > 8 constant(value="\n") > 9 } > 10 :msg, contains, "x-pid" stop > 11 > 12 action(type="omfile" template="outfmt" file="rsyslog.out.log") > 13 > 14 :msg, contains, "this does not occur" action(type="omfwd" > 15 target="10.0.0.1" keepalive="on" keepalive.probes="10" > 16 keepalive.time="60" keepalive.interval="10") > 17 >rsyslogd: NOTE: RSYSLOG_DEBUG_TIMEOUTS_TO_STDERR activated >rsyslogd: getaddrinfo failed obtaining local hostname - using 'pioneer' instead; error: No address associated with hostname [v8.35.0] >rsyslogd started, start msg not yet seen, pid 20394 >rsyslogd startup msg seen, pid 20394 >starting run 1 >Sending 1 messages. > 00000001 messages sent >runtime: 0.012 >End of tcpflood Run >imdiag[13500]: mainqueue empty >- rsyslog.out.log differ: char 1, line 1 >invalid output generated, rsyslog.out.log is: >getaddrinfo failed obtaining local hostname - using 'pioneer' instead; error: No address associated with hostname [v8.35.0] > msgnum:00000000: >FAIL omfwd-keepalive.sh (exit status: 1) > >FAIL: msgdup.sh >=============== > >Linux >------------------------------------------------------------ >Test: ./msgdup.sh >------------------------------------------------------------ >testbench: TZ env var not set, setting it to UTC >testconf.conf is: > 1 $IncludeConfig diag-common.conf > 2 > 3 module(load="../plugins/imuxsock/.libs/imuxsock" sysSock.use="off") > 4 input(type="imuxsock" Socket="testbench_socket") > 5 > 6 template(name="outfmt" type="string" string="%msg%\n") > 7 > 8 ruleset(name="rs" queue.type="LinkedList") { > 9 action(type="omfile" file="rsyslog.out.log" template="outfmt") > 10 stop > 11 } > 12 > 13 *.notice call rs >rsyslogd: NOTE: RSYSLOG_DEBUG_TIMEOUTS_TO_STDERR activated >rsyslogd: getaddrinfo failed obtaining local hostname - using 'pioneer' instead; error: No address associated with hostname [v8.35.0] >rsyslogd started, start msg not yet seen, pid 3882 >rsyslogd startup msg seen, pid 3882 >imdiag[13500]: mainqueue empty >- rsyslog.out.log differ: char 1, line 1 >msgdup.sh failed >contents of rsyslog.out.log: >"getaddrinfo failed obtaining local hostname - using 'pioneer' instead; error: No address associated with hostname [v8.35.0] test 01234567890123456789012345678901234567890123456789012345" >FAIL msgdup.sh (exit status: 1) > >SKIP: daqueue-persist.sh >======================== > >=============================================================================== >[daqueue-persist.sh]: test data persisting at shutdown >TEST is currently DISABLE because it is unstable >SKIP daqueue-persist.sh (exit status: 77) > >FAIL: imuxsock_logger.sh >======================== > >[imuxsock_logger.sh]: test imuxsock >Linux >------------------------------------------------------------ >Test: ./imuxsock_logger.sh >------------------------------------------------------------ >testbench: TZ env var not set, setting it to UTC >rsyslogd: NOTE: RSYSLOG_DEBUG_TIMEOUTS_TO_STDERR activated >rsyslogd: getaddrinfo failed obtaining local hostname - using 'pioneer' instead; error: No address associated with hostname [v8.35.0] >rsyslogd started, start msg not yet seen, pid 6140 >rsyslogd startup msg seen, pid 6140 >imdiag[13500]: mainqueue empty >rsyslog.out.log ./resultdata/imuxsock_logger.log differ: char 1, line 1 >imuxsock_logger.sh failed >contents of rsyslog.out.log: >"getaddrinfo failed obtaining local hostname - using 'pioneer' instead; error: No address associated with hostname [v8.35.0] test" >FAIL imuxsock_logger.sh (exit status: 1) > >FAIL: imuxsock_logger_parserchain.sh >==================================== > >Linux >====================================================================== >[imuxsock_logger_parserchain.sh]: test imuxsock >Linux >------------------------------------------------------------ >Test: ./imuxsock_logger_parserchain.sh >------------------------------------------------------------ >testbench: TZ env var not set, setting it to UTC >rsyslogd: NOTE: RSYSLOG_DEBUG_TIMEOUTS_TO_STDERR activated >rsyslogd: getaddrinfo failed obtaining local hostname - using 'pioneer' instead; error: No address associated with hostname [v8.35.0] >rsyslogd started, start msg not yet seen, pid 7164 >rsyslogd startup msg seen, pid 7164 >imdiag[13500]: mainqueue empty >rsyslog.out.log ./resultdata/imuxsock_logger.log differ: char 1, line 1 >imuxsock_logger_parserchain.sh failed >contents of rsyslog.out.log: >"getaddrinfo failed obtaining local hostname - using 'pioneer' instead; error: No address associated with hostname [v8.35.0] test" >FAIL imuxsock_logger_parserchain.sh (exit status: 1) > >FAIL: imuxsock_logger_syssock.sh >================================ > >[imuxsock_logger_syssock.sh]: test trailing LF handling in imuxsock >Linux >------------------------------------------------------------ >Test: ./imuxsock_logger_syssock.sh >------------------------------------------------------------ >testbench: TZ env var not set, setting it to UTC >rsyslogd: NOTE: RSYSLOG_DEBUG_TIMEOUTS_TO_STDERR activated >rsyslogd: getaddrinfo failed obtaining local hostname - using 'pioneer' instead; error: No address associated with hostname [v8.35.0] >rsyslogd started, start msg not yet seen, pid 7873 >rsyslogd startup msg seen, pid 7873 >imdiag[13500]: mainqueue empty >rsyslog.out.log ./resultdata/imuxsock_logger.log differ: char 1, line 1 >imuxsock_logger_syssock.sh failed >contents of rsyslog.out.log: >"getaddrinfo failed obtaining local hostname - using 'pioneer' instead; error: No address associated with hostname [v8.35.0] test" >FAIL imuxsock_logger_syssock.sh (exit status: 1) > >SKIP: omprog-restart-terminated.sh >================================== > >------------------------------------------------------------ >Test: ./omprog-restart-terminated.sh >------------------------------------------------------------ >testbench: TZ env var not set, setting it to UTC >Testbench requires unavailable command: lsof >skipping this test >SKIP omprog-restart-terminated.sh (exit status: 77) > >SKIP: omprog-restart-terminated-outfile.sh >========================================== > >------------------------------------------------------------ >Test: ./omprog-restart-terminated-outfile.sh >------------------------------------------------------------ >testbench: TZ env var not set, setting it to UTC >Testbench requires unavailable command: lsof >skipping this test >SKIP omprog-restart-terminated-outfile.sh (exit status: 77) > >FAIL: dynstats_prevent_premature_eviction.sh >============================================ > >Linux >=============================================================================== >[dynstats_prevent_premature_eviction.sh]: test for ensuring metrics are not evicted before unused-ttl >------------------------------------------------------------ >Test: ./dynstats_prevent_premature_eviction.sh >------------------------------------------------------------ >testbench: TZ env var not set, setting it to UTC >rsyslogd: NOTE: RSYSLOG_DEBUG_TIMEOUTS_TO_STDERR activated >rsyslogd: getaddrinfo failed obtaining local hostname - using 'pioneer' instead; error: No address associated with hostname [v8.35.0] >rsyslogd started, start msg not yet seen, pid 11577 >rsyslogd startup msg seen, pid 11577 >will wait for stats push >waiting for stats file 'rsyslog.out.stats.log' to be created >waiting for stats file 'rsyslog.out.stats.log' to be created >waiting for stats file 'rsyslog.out.stats.log' to be created >waiting for stats file 'rsyslog.out.stats.log' to be created >waiting for stats file 'rsyslog.out.stats.log' to be created >waiting for stats file 'rsyslog.out.stats.log' to be created >waiting for stats file 'rsyslog.out.stats.log' to be created >waiting for stats file 'rsyslog.out.stats.log' to be created >waiting for stats file 'rsyslog.out.stats.log' to be created >waiting for stats file 'rsyslog.out.stats.log' to be created >waiting for stats file 'rsyslog.out.stats.log' to be created >waiting for stats file 'rsyslog.out.stats.log' to be created >waiting for stats file 'rsyslog.out.stats.log' to be created >waiting for stats file 'rsyslog.out.stats.log' to be created >waiting for stats file 'rsyslog.out.stats.log' to be created >waiting for stats file 'rsyslog.out.stats.log' to be created >waiting for stats file 'rsyslog.out.stats.log' to be created >waiting for stats file 'rsyslog.out.stats.log' to be created >waiting for stats file 'rsyslog.out.stats.log' to be created >waiting for stats file 'rsyslog.out.stats.log' to be created >waiting for stats file 'rsyslog.out.stats.log' to be created >waiting for stats file 'rsyslog.out.stats.log' to be created >waiting for stats file 'rsyslog.out.stats.log' to be created >stats push registered >injecting msg payload from: ./testsuites/dynstats_input_1 >imdiag[13500]: 1 messages injected >imdiag[13500]: 1 messages injected >injecting msg payload from: ./testsuites/dynstats_input_2 >imdiag[13500]: 1 messages injected >imdiag[13500]: 1 messages injected >injecting msg payload from: ./testsuites/dynstats_input_3 >imdiag[13500]: 1 messages injected >imdiag[13500]: 1 messages injected >imdiag[13500]: mainqueue empty >will wait for stats push >stats push registered >doing shutdown >imdiag[13500]: mainqueue empty >wait on shutdown >rsyslog internal message (6,-2041): dynstats: bucket 'msg_stats' is being reset [v8.35.0 try http://www.rsyslog.com/e/2041 ] >content-check failed to find 'baz=2' inside 'rsyslog.out.stats.log' >file contents: >2018-07-24T15:31:53.723907+00:00 pioneer rsyslogd-pstats: BEGIN >2018-07-24T15:31:53.724450+00:00 pioneer rsyslogd-pstats: imdiag-stats-reporting-controller: origin=imdiag potentialTotalArtificialDelayInMs=0 actualTotalArtificialDelayInMs=0 delayInvocationCount=0 >2018-07-24T15:31:53.724500+00:00 pioneer rsyslogd-pstats: global: origin=dynstats msg_stats.ops_overflow=0 msg_stats.new_metric_add=0 msg_stats.no_metric=0 msg_stats.metrics_purged=0 msg_stats.ops_ignored=0 msg_stats.purge_triggered=0 >2018-07-24T15:31:53.724518+00:00 pioneer rsyslogd-pstats: imdiag(13500): origin=imdiag submitted=0 >2018-07-24T15:31:53.724576+00:00 pioneer rsyslogd-pstats: dynafile cache startupfile: origin=omfile requests=2 level0=1 missed=1 evicted=0 maxused=1 closetimeouts=0 >2018-07-24T15:31:53.724602+00:00 pioneer rsyslogd-pstats: action 0: origin=core.action processed=2 failed=0 suspended=0 suspended.duration=0 resumed=0 >2018-07-24T15:31:53.724624+00:00 pioneer rsyslogd-pstats: action 1: origin=core.action processed=0 failed=0 suspended=0 suspended.duration=0 resumed=0 >2018-07-24T15:31:53.724636+00:00 pioneer rsyslogd-pstats: msg_stats: origin=dynstats.bucket >2018-07-24T15:31:53.724808+00:00 pioneer rsyslogd-pstats: action 2: origin=core.action processed=2 failed=0 suspended=0 suspended.duration=0 resumed=0 >2018-07-24T15:31:53.724853+00:00 pioneer rsyslogd-pstats: resource-usage: origin=impstats utime=8503 stime=42518 maxrss=3744 minflt=724 majflt=0 inblock=0 oublock=0 nvcsw=13 nivcsw=10 openfiles=10 >2018-07-24T15:31:53.724888+00:00 pioneer rsyslogd-pstats: main Q: origin=core.queue size=10 enqueued=12 full=0 discarded.full=0 discarded.nf=0 maxqsize=10 >2018-07-24T15:31:53.724899+00:00 pioneer rsyslogd-pstats: END >2018-07-24T15:31:57.727928+00:00 pioneer rsyslogd-pstats: BEGIN >2018-07-24T15:31:57.728358+00:00 pioneer rsyslogd-pstats: imdiag-stats-reporting-controller: origin=imdiag potentialTotalArtificialDelayInMs=0 actualTotalArtificialDelayInMs=0 delayInvocationCount=0 >2018-07-24T15:31:57.728401+00:00 pioneer rsyslogd-pstats: global: origin=dynstats msg_stats.ops_overflow=0 msg_stats.new_metric_add=0 msg_stats.no_metric=0 msg_stats.metrics_purged=0 msg_stats.ops_ignored=0 msg_stats.purge_triggered=1 >2018-07-24T15:31:57.728416+00:00 pioneer rsyslogd-pstats: imdiag(13500): origin=imdiag submitted=0 >2018-07-24T15:31:57.728436+00:00 pioneer rsyslogd-pstats: dynafile cache startupfile: origin=omfile requests=1 level0=1 missed=0 evicted=0 maxused=0 closetimeouts=0 >2018-07-24T15:31:57.728456+00:00 pioneer rsyslogd-pstats: action 0: origin=core.action processed=1 failed=0 suspended=0 suspended.duration=0 resumed=0 >2018-07-24T15:31:57.728476+00:00 pioneer rsyslogd-pstats: action 1: origin=core.action processed=12 failed=0 suspended=0 suspended.duration=0 resumed=0 >2018-07-24T15:31:57.728488+00:00 pioneer rsyslogd-pstats: msg_stats: origin=dynstats.bucket >2018-07-24T15:31:57.728667+00:00 pioneer rsyslogd-pstats: action 2: origin=core.action processed=1 failed=0 suspended=0 suspended.duration=0 resumed=0 >2018-07-24T15:31:57.728713+00:00 pioneer rsyslogd-pstats: resource-usage: origin=impstats utime=8919 stime=44596 maxrss=3792 minflt=745 majflt=0 inblock=0 oublock=0 nvcsw=17 nivcsw=10 openfiles=11 >2018-07-24T15:31:57.728737+00:00 pioneer rsyslogd-pstats: main Q: origin=core.queue size=10 enqueued=13 full=0 discarded.full=0 discarded.nf=0 maxqsize=12 >2018-07-24T15:31:57.728749+00:00 pioneer rsyslogd-pstats: END >2018-07-24T15:32:01.740712+00:00 pioneer rsyslogd-pstats: BEGIN >2018-07-24T15:32:01.741158+00:00 pioneer rsyslogd-pstats: imdiag-stats-reporting-controller: origin=imdiag potentialTotalArtificialDelayInMs=0 actualTotalArtificialDelayInMs=0 delayInvocationCount=0 >2018-07-24T15:32:01.741203+00:00 pioneer rsyslogd-pstats: global: origin=dynstats msg_stats.ops_overflow=0 msg_stats.new_metric_add=2 msg_stats.no_metric=0 msg_stats.metrics_purged=0 msg_stats.ops_ignored=0 msg_stats.purge_triggered=1 >2018-07-24T15:32:01.741218+00:00 pioneer rsyslogd-pstats: imdiag(13500): origin=imdiag submitted=0 >2018-07-24T15:32:01.741238+00:00 pioneer rsyslogd-pstats: dynafile cache startupfile: origin=omfile requests=1 level0=1 missed=0 evicted=0 maxused=0 closetimeouts=0 >2018-07-24T15:32:01.741258+00:00 pioneer rsyslogd-pstats: action 0: origin=core.action processed=1 failed=0 suspended=0 suspended.duration=0 resumed=0 >2018-07-24T15:32:01.741278+00:00 pioneer rsyslogd-pstats: action 1: origin=core.action processed=12 failed=0 suspended=0 suspended.duration=0 resumed=0 >2018-07-24T15:32:01.741293+00:00 pioneer rsyslogd-pstats: msg_stats: origin=dynstats.bucket foo=1 bar=1 >2018-07-24T15:32:01.741469+00:00 pioneer rsyslogd-pstats: action 2: origin=core.action processed=3 failed=0 suspended=0 suspended.duration=0 resumed=0 >2018-07-24T15:32:01.741518+00:00 pioneer rsyslogd-pstats: resource-usage: origin=impstats utime=9733 stime=48665 maxrss=3848 minflt=764 majflt=0 inblock=0 oublock=0 nvcsw=27 nivcsw=12 openfiles=11 >2018-07-24T15:32:01.741542+00:00 pioneer rsyslogd-pstats: main Q: origin=core.queue size=10 enqueued=15 full=0 discarded.full=0 discarded.nf=0 maxqsize=12 >2018-07-24T15:32:01.741553+00:00 pioneer rsyslogd-pstats: END >2018-07-24T15:32:05.744172+00:00 pioneer rsyslogd-pstats: BEGIN >2018-07-24T15:32:05.744566+00:00 pioneer rsyslogd-pstats: imdiag-stats-reporting-controller: origin=imdiag potentialTotalArtificialDelayInMs=0 actualTotalArtificialDelayInMs=0 delayInvocationCount=0 >2018-07-24T15:32:05.744625+00:00 pioneer rsyslogd-pstats: global: origin=dynstats msg_stats.ops_overflow=0 msg_stats.new_metric_add=1 msg_stats.no_metric=0 msg_stats.metrics_purged=0 msg_stats.ops_ignored=0 msg_stats.purge_triggered=1 >2018-07-24T15:32:05.744643+00:00 pioneer rsyslogd-pstats: imdiag(13500): origin=imdiag submitted=0 >2018-07-24T15:32:05.744664+00:00 pioneer rsyslogd-pstats: dynafile cache startupfile: origin=omfile requests=1 level0=1 missed=0 evicted=0 maxused=0 closetimeouts=0 >2018-07-24T15:32:05.744687+00:00 pioneer rsyslogd-pstats: action 0: origin=core.action processed=1 failed=0 suspended=0 suspended.duration=0 resumed=0 >2018-07-24T15:32:05.744713+00:00 pioneer rsyslogd-pstats: action 1: origin=core.action processed=16 failed=0 suspended=0 suspended.duration=0 resumed=0 >2018-07-24T15:32:05.744730+00:00 pioneer rsyslogd-pstats: msg_stats: origin=dynstats.bucket baz=1 foo=2 >2018-07-24T15:32:05.744905+00:00 pioneer rsyslogd-pstats: action 2: origin=core.action processed=3 failed=0 suspended=0 suspended.duration=0 resumed=0 >2018-07-24T15:32:05.744960+00:00 pioneer rsyslogd-pstats: resource-usage: origin=impstats utime=10477 stime=52386 maxrss=3860 minflt=769 majflt=0 inblock=0 oublock=0 nvcsw=36 nivcsw=12 openfiles=11 >2018-07-24T15:32:05.744984+00:00 pioneer rsyslogd-pstats: main Q: origin=core.queue size=2 enqueued=15 full=0 discarded.full=0 discarded.nf=0 maxqsize=13 >2018-07-24T15:32:05.745007+00:00 pioneer rsyslogd-pstats: END >2018-07-24T15:32:09.747936+00:00 pioneer rsyslogd-pstats: BEGIN >2018-07-24T15:32:09.748400+00:00 pioneer rsyslogd-pstats: imdiag-stats-reporting-controller: origin=imdiag potentialTotalArtificialDelayInMs=0 actualTotalArtificialDelayInMs=0 delayInvocationCount=0 >2018-07-24T15:32:09.748470+00:00 pioneer rsyslogd-pstats: global: origin=dynstats msg_stats.ops_overflow=0 msg_stats.new_metric_add=0 msg_stats.no_metric=0 msg_stats.metrics_purged=1 msg_stats.ops_ignored=0 msg_stats.purge_triggered=1 >2018-07-24T15:32:09.748494+00:00 pioneer rsyslogd-pstats: imdiag(13500): origin=imdiag submitted=0 >2018-07-24T15:32:09.748514+00:00 pioneer rsyslogd-pstats: dynafile cache startupfile: origin=omfile requests=1 level0=1 missed=0 evicted=0 maxused=0 closetimeouts=0 >2018-07-24T15:32:09.748546+00:00 pioneer rsyslogd-pstats: action 0: origin=core.action processed=1 failed=0 suspended=0 suspended.duration=0 resumed=0 >2018-07-24T15:32:09.749004+00:00 pioneer rsyslogd-pstats: action 1: origin=core.action processed=13 failed=0 suspended=0 suspended.duration=0 resumed=0 >2018-07-24T15:32:09.749452+00:00 pioneer rsyslogd-pstats: msg_stats: origin=dynstats.bucket >2018-07-24T15:32:09.749621+00:00 pioneer rsyslogd-pstats: action 2: origin=core.action processed=1 failed=0 suspended=0 suspended.duration=0 resumed=0 >2018-07-24T15:32:09.749680+00:00 pioneer rsyslogd-pstats: resource-usage: origin=impstats utime=10774 stime=53871 maxrss=3868 minflt=772 majflt=0 inblock=0 oublock=0 nvcsw=45 nivcsw=12 openfiles=11 >2018-07-24T15:32:09.749703+00:00 pioneer rsyslogd-pstats: main Q: origin=core.queue size=2 enqueued=13 full=0 discarded.full=0 discarded.nf=0 maxqsize=13 >2018-07-24T15:32:09.749714+00:00 pioneer rsyslogd-pstats: END >2018-07-24T15:32:13.757498+00:00 pioneer rsyslogd-pstats: BEGIN >2018-07-24T15:32:13.757911+00:00 pioneer rsyslogd-pstats: imdiag-stats-reporting-controller: origin=imdiag potentialTotalArtificialDelayInMs=0 actualTotalArtificialDelayInMs=0 delayInvocationCount=0 >2018-07-24T15:32:13.757971+00:00 pioneer rsyslogd-pstats: global: origin=dynstats msg_stats.ops_overflow=0 msg_stats.new_metric_add=2 msg_stats.no_metric=0 msg_stats.metrics_purged=2 msg_stats.ops_ignored=0 msg_stats.purge_triggered=1 >2018-07-24T15:32:13.757989+00:00 pioneer rsyslogd-pstats: imdiag(13500): origin=imdiag submitted=0 >2018-07-24T15:32:13.758010+00:00 pioneer rsyslogd-pstats: dynafile cache startupfile: origin=omfile requests=1 level0=1 missed=0 evicted=0 maxused=0 closetimeouts=0 >2018-07-24T15:32:13.758033+00:00 pioneer rsyslogd-pstats: action 0: origin=core.action processed=1 failed=0 suspended=0 suspended.duration=0 resumed=0 >2018-07-24T15:32:13.758057+00:00 pioneer rsyslogd-pstats: action 1: origin=core.action processed=10 failed=0 suspended=0 suspended.duration=0 resumed=0 >2018-07-24T15:32:13.758074+00:00 pioneer rsyslogd-pstats: msg_stats: origin=dynstats.bucket baz=1 foo=1 >2018-07-24T15:32:13.758350+00:00 pioneer rsyslogd-pstats: action 2: origin=core.action processed=3 failed=0 suspended=0 suspended.duration=0 resumed=0 >2018-07-24T15:32:13.758400+00:00 pioneer rsyslogd-pstats: resource-usage: origin=impstats utime=12485 stime=62429 maxrss=3872 minflt=774 majflt=0 inblock=0 oublock=0 nvcsw=73 nivcsw=12 openfiles=11 >2018-07-24T15:32:13.758424+00:00 pioneer rsyslogd-pstats: main Q: origin=core.queue size=3 enqueued=16 full=0 discarded.full=0 discarded.nf=0 maxqsize=13 >2018-07-24T15:32:13.758435+00:00 pioneer rsyslogd-pstats: END >2018-07-24T15:32:17.757010+00:00 pioneer rsyslogd-pstats: BEGIN >2018-07-24T15:32:17.757362+00:00 pioneer rsyslogd-pstats: imdiag-stats-reporting-controller: origin=imdiag potentialTotalArtificialDelayInMs=0 actualTotalArtificialDelayInMs=0 delayInvocationCount=0 >2018-07-24T15:32:17.757416+00:00 pioneer rsyslogd-pstats: global: origin=dynstats msg_stats.ops_overflow=0 msg_stats.new_metric_add=0 msg_stats.no_metric=0 msg_stats.metrics_purged=0 msg_stats.ops_ignored=0 msg_stats.purge_triggered=1 >2018-07-24T15:32:17.757432+00:00 pioneer rsyslogd-pstats: imdiag(13500): origin=imdiag submitted=0 >2018-07-24T15:32:17.757452+00:00 pioneer rsyslogd-pstats: dynafile cache startupfile: origin=omfile requests=1 level0=1 missed=0 evicted=0 maxused=0 closetimeouts=0 >2018-07-24T15:32:17.757485+00:00 pioneer rsyslogd-pstats: action 0: origin=core.action processed=1 failed=0 suspended=0 suspended.duration=0 resumed=0 >2018-07-24T15:32:17.757506+00:00 pioneer rsyslogd-pstats: action 1: origin=core.action processed=12 failed=0 suspended=0 suspended.duration=0 resumed=0 >2018-07-24T15:32:17.757525+00:00 pioneer rsyslogd-pstats: msg_stats: origin=dynstats.bucket >2018-07-24T15:32:17.757768+00:00 pioneer rsyslogd-pstats: action 2: origin=core.action processed=1 failed=0 suspended=0 suspended.duration=0 resumed=0 >2018-07-24T15:32:17.757828+00:00 pioneer rsyslogd-pstats: resource-usage: origin=impstats utime=14203 stime=71019 maxrss=4016 minflt=784 majflt=0 inblock=0 oublock=0 nvcsw=94 nivcsw=16 openfiles=11 >2018-07-24T15:32:17.757853+00:00 pioneer rsyslogd-pstats: main Q: origin=core.queue size=2 enqueued=12 full=0 discarded.full=0 discarded.nf=0 maxqsize=13 >2018-07-24T15:32:17.757903+00:00 pioneer rsyslogd-pstats: END >FAIL dynstats_prevent_premature_eviction.sh (exit status: 1) > >SKIP: omod-if-array.sh >====================== > >[omod-if-array.sh]: test omod-if-array via udp >NOTE: the interface checked with this test is currently NOT >supported. We may support it again in the future. So for now, >we just skip this test and do not remove it. >SKIP omod-if-array.sh (exit status: 77) > >FAIL: threadingmqaq.sh >====================== > >Linux >------------------------------------------------------------ >Test: ./threadingmqaq.sh >------------------------------------------------------------ >testbench: TZ env var not set, setting it to UTC >rsyslogd: NOTE: RSYSLOG_DEBUG_TIMEOUTS_TO_STDERR activated >rsyslogd: getaddrinfo failed obtaining local hostname - using 'pioneer' instead; error: No address associated with hostname [v8.35.0] >rsyslogd started, start msg not yet seen, pid 2734 >rsyslogd startup msg seen, pid 2734 >injecting 100000 messages >imdiag[13500]: 100000 messages injected >imdiag[13500]: mainqueue empty >rsyslog internal message (6,-2439): main Q:Reg: worker thread 59b488 terminated, now 4 active worker threads [v8.35.0 try http://www.rsyslog.com/e/2439 ] >rsyslog internal message (6,-2439): main Q:Reg: worker thread 59c150 terminated, now 3 active worker threads [v8.35.0 try http://www.rsyslog.com/e/2439 ] >rsyslog internal message (6,-2439): main Q:Reg: worker thread 59bae0 terminated, now 2 active worker threads [v8.35.0 try http://www.rsyslog.com/e/2439 ] >rsyslog internal message (6,-2439): main Q:Reg: worker thread 59c7c0 terminated, now 1 active worker threads [v8.35.0 try http://www.rsyslog.com/e/2439 ] >rsyslog internal message (6,-2439): action 1 queue:Reg: worker thread 597148 terminated, now 4 active worker threads [v8.35.0 try http://www.rsyslog.com/e/2439 ] >rsyslog internal message (6,-2041): action 1 queue: regular queue shutdown timed out on primary queue (this is OK, timeout was 0) [v8.35.0 try http://www.rsyslog.com/e/2041 ] >rsyslog internal message (4,-3000): action 1 queue: need to do cooperative cancellation - some data may be lost, increase timeout? [v8.35.0] >rsyslog internal message (4,-3000): action 1 queue: need to do hard cancellation [v8.35.0] >rsyslog internal message (4,-3000): action 1 queue: need to do cooperative cancellation - some data may be lost, increase timeout? [v8.35.0] >rsyslog internal message (4,-3000): action 1 queue: need to do hard cancellation [v8.35.0] >./diag.sh: line 85: 2734 Segmentation fault (core dumped) LD_PRELOAD=$RSYSLOG_PRELOAD $valgrind ../tools/rsyslogd -C -n -irsyslog$3.pid -M../runtime/.libs:../.libs -f$CONF_FILE >read value 0, but expected value 1 >sequence error detected >trying to obtain crash location info >note: this may not be the correct file, check it >./diag.sh: line 1156: gdb: command not found >FAIL threadingmqaq.sh (exit status: 1) > >FAIL: tabescape_dflt.sh >======================= > >=============================================================================== >[tabescape_dflt.sh]: test for default tab escaping >------------------------------------------------------------ >Test: ./tabescape_dflt.sh >------------------------------------------------------------ >testbench: TZ env var not set, setting it to UTC >rsyslogd: NOTE: RSYSLOG_DEBUG_TIMEOUTS_TO_STDERR activated >rsyslogd: getaddrinfo failed obtaining local hostname - using 'pioneer' instead; error: No address associated with hostname [v8.35.0] >rsyslogd: imudp: module loaded, but no listeners defined - no input will be gathered [v8.35.0 try http://www.rsyslog.com/e/2212 ] >rsyslogd started, start msg not yet seen, pid 3398 >rsyslogd startup msg seen, pid 3398 >starting run 1 >Sending 1 messages. > 00000001 messages sent >runtime: 0.011 >End of tcpflood Run >imdiag[13500]: mainqueue empty >rsyslogd: NOTE: RSYSLOG_DEBUG_TIMEOUTS_TO_STDERR activated >rsyslogd: getaddrinfo failed obtaining local hostname - using 'pioneer' instead; error: No address associated with hostname [v8.35.0] > >File ./testsuites/1.tabescape_dflt: >Expected Response: >' before HT#011after HT (do NOT remove TAB!)' >Actual Response: >' [origin software="rsyslogd" swVersion="8.35.0" x-pid="3548" x-info="http://www.rsyslog.com"] start' >test './testsuites/1.tabescape_dflt' failed! >Number of tests run: 1, number of failures: 1, test: tabescape_dflt/udp >erorr in udp run >FAIL tabescape_dflt.sh (exit status: 1) > >FAIL: tabescape_off.sh >====================== > >=============================================================================== >[tabescape_off.sh]: test for tab escaping off >------------------------------------------------------------ >Test: ./tabescape_off.sh >------------------------------------------------------------ >testbench: TZ env var not set, setting it to UTC >rsyslogd: NOTE: RSYSLOG_DEBUG_TIMEOUTS_TO_STDERR activated >rsyslogd: getaddrinfo failed obtaining local hostname - using 'pioneer' instead; error: No address associated with hostname [v8.35.0] >rsyslogd: imudp: module loaded, but no listeners defined - no input will be gathered [v8.35.0 try http://www.rsyslog.com/e/2212 ] >rsyslogd started, start msg not yet seen, pid 3638 >rsyslogd startup msg seen, pid 3638 >starting run 1 >Sending 1 messages. > 00000001 messages sent >runtime: 0.012 >End of tcpflood Run >imdiag[13500]: mainqueue empty >rsyslogd: NOTE: RSYSLOG_DEBUG_TIMEOUTS_TO_STDERR activated >rsyslogd: getaddrinfo failed obtaining local hostname - using 'pioneer' instead; error: No address associated with hostname [v8.35.0] > >File ./testsuites/1.tabescape_off: >Expected Response: >' before HT after HT (do NOT remove TAB!)' >Actual Response: >' [origin software="rsyslogd" swVersion="8.35.0" x-pid="3768" x-info="http://www.rsyslog.com"] start' >test './testsuites/1.tabescape_off' failed! >Number of tests run: 1, number of failures: 1, test: tabescape_off/udp >FAIL tabescape_off.sh (exit status: 1) > >FAIL: timestamp.sh >================== > >[timestamp.sh]: various timestamp tests >------------------------------------------------------------ >Test: ./timestamp.sh >------------------------------------------------------------ >testbench: TZ env var not set, setting it to UTC >rsyslogd: NOTE: RSYSLOG_DEBUG_TIMEOUTS_TO_STDERR activated >rsyslogd: getaddrinfo failed obtaining local hostname - using 'pioneer' instead; error: No address associated with hostname [v8.35.0] >rsyslogd: imudp: module loaded, but no listeners defined - no input will be gathered [v8.35.0 try http://www.rsyslog.com/e/2212 ] >rsyslogd started, start msg not yet seen, pid 3860 >rsyslogd startup msg seen, pid 3860 >starting run 1 >Sending 1 messages. > 00000001 messages sent >runtime: 0.011 >End of tcpflood Run >imdiag[13500]: mainqueue empty >rsyslogd: NOTE: RSYSLOG_DEBUG_TIMEOUTS_TO_STDERR activated >rsyslogd: getaddrinfo failed obtaining local hostname - using 'pioneer' instead; error: No address associated with hostname [v8.35.0] > >File ./testsuites/Apr.ts3164: >Expected Response: >'Apr 6 16:57:54' >Actual Response: >'Jul 24 15:52:43' >test './testsuites/Apr.ts3164' failed! > >File ./testsuites/Aug.ts3164: >Expected Response: >'Aug 6 16:57:54' >Actual Response: >'Apr 6 16:57:54' >test './testsuites/Aug.ts3164' failed! > >File ./testsuites/Dec.ts3164: >Expected Response: >'Dec 6 16:57:54' >Actual Response: >'Aug 6 16:57:54' >test './testsuites/Dec.ts3164' failed! > >File ./testsuites/Feb.ts3164: >Expected Response: >'Feb 6 16:57:54' >Actual Response: >'Dec 6 16:57:54' >test './testsuites/Feb.ts3164' failed! > >File ./testsuites/Jan.ts3164: >Expected Response: >'Jan 6 16:57:54' >Actual Response: >'Feb 6 16:57:54' >test './testsuites/Jan.ts3164' failed! > >File ./testsuites/Jul.ts3164: >Expected Response: >'Jul 6 16:57:54' >Actual Response: >'Jan 6 16:57:54' >test './testsuites/Jul.ts3164' failed! > >File ./testsuites/Jun.ts3164: >Expected Response: >'Jun 6 16:57:54' >Actual Response: >'Jul 6 16:57:54' >test './testsuites/Jun.ts3164' failed! > >File ./testsuites/Mar.ts3164: >Expected Response: >'Mar 6 16:57:54' >Actual Response: >'Jun 6 16:57:54' >test './testsuites/Mar.ts3164' failed! > >File ./testsuites/May.ts3164: >Expected Response: >'May 6 16:57:54' >Actual Response: >'Mar 6 16:57:54' >test './testsuites/May.ts3164' failed! > >File ./testsuites/Nov.ts3164: >Expected Response: >'Nov 6 16:57:54' >Actual Response: >'May 6 16:57:54' >test './testsuites/Nov.ts3164' failed! > >File ./testsuites/Oct.ts3164: >Expected Response: >'Oct 6 16:57:54' >Actual Response: >'Nov 6 16:57:54' >test './testsuites/Oct.ts3164' failed! > >File ./testsuites/Sep.ts3164: >Expected Response: >'Sep 6 16:57:54' >Actual Response: >'Oct 6 16:57:54' >test './testsuites/Sep.ts3164' failed! > >File ./testsuites/mon1digit.ts3164: >Expected Response: >'Jan 6 16:57:54' >Actual Response: >'Sep 6 16:57:54' >test './testsuites/mon1digit.ts3164' failed! > >File ./testsuites/mon2digit.ts3164: >Expected Response: >'Jan 16 16:57:54' >Actual Response: >'Jan 6 16:57:54' >test './testsuites/mon2digit.ts3164' failed! >Number of tests run: 14, number of failures: 14, test: ts3164/udp >FAIL timestamp.sh (exit status: 1) > >FAIL: inputname.sh >================== > >[inputname.sh]: testing directive >------------------------------------------------------------ >Test: ./inputname.sh >------------------------------------------------------------ >testbench: TZ env var not set, setting it to UTC >rsyslogd: NOTE: RSYSLOG_DEBUG_TIMEOUTS_TO_STDERR activated >rsyslogd: getaddrinfo failed obtaining local hostname - using 'pioneer' instead; error: No address associated with hostname [v8.35.0] >rsyslogd: imudp: module loaded, but no listeners defined - no input will be gathered [v8.35.0 try http://www.rsyslog.com/e/2212 ] >rsyslogd started, start msg not yet seen, pid 4113 >rsyslogd startup msg seen, pid 4113 >starting run 1 >Sending 1 messages. > 00000001 messages sent >runtime: 0.024 >End of tcpflood Run >imdiag[13500]: mainqueue empty >port 12514 >rsyslogd: NOTE: RSYSLOG_DEBUG_TIMEOUTS_TO_STDERR activated >rsyslogd: getaddrinfo failed obtaining local hostname - using 'pioneer' instead; error: No address associated with hostname [v8.35.0] > >File ./testsuites/1.inputname_imtcp_12514: >Expected Response: >'12514' >Actual Response: >'rsyslogd' >test './testsuites/1.inputname_imtcp_12514' failed! >Number of tests run: 1, number of failures: 1, test: inputname_imtcp_12514/tcp >FAIL inputname.sh (exit status: 1) > >FAIL: proprepltest.sh >===================== > >[proprepltest.sh]: various tests for the property replacer >------------------------------------------------------------ >Test: ./proprepltest.sh >------------------------------------------------------------ >testbench: TZ env var not set, setting it to UTC >rsyslogd: NOTE: RSYSLOG_DEBUG_TIMEOUTS_TO_STDERR activated >rsyslogd: getaddrinfo failed obtaining local hostname - using 'pioneer' instead; error: No address associated with hostname [v8.35.0] >rsyslogd: imudp: module loaded, but no listeners defined - no input will be gathered [v8.35.0 try http://www.rsyslog.com/e/2212 ] >rsyslogd started, start msg not yet seen, pid 4343 >rsyslogd startup msg seen, pid 4343 >starting run 1 >Sending 1 messages. > 00000001 messages sent >runtime: 0.000 >End of tcpflood Run >imdiag[13500]: mainqueue empty >rsyslogd: NOTE: RSYSLOG_DEBUG_TIMEOUTS_TO_STDERR activated >rsyslogd: getaddrinfo failed obtaining local hostname - using 'pioneer' instead; error: No address associated with hostname [v8.35.0] > >File ./testsuites/master.rfctag: >Expected Response: >'+TAG:+' >Actual Response: >'+rsyslogd:+' > >File ./testsuites/master.rfctag: >Expected Response: >'+0+' >Actual Response: >'+TAG:+' > >File ./testsuites/master.rfctag: >Expected Response: >'+01234567890123456789012345678901+' >Actual Response: >'+0+' >test './testsuites/master.rfctag' failed! >Number of tests run: 4, number of failures: 3, test: rfctag/udp >FAIL proprepltest.sh (exit status: 1) > >FAIL: parsertest.sh >=================== > >TEST: [parsertest.sh]: various parser tests >------------------------------------------------------------ >Test: ./parsertest.sh >------------------------------------------------------------ >testbench: TZ env var not set, setting it to UTC >rsyslogd: NOTE: RSYSLOG_DEBUG_TIMEOUTS_TO_STDERR activated >rsyslogd: getaddrinfo failed obtaining local hostname - using 'pioneer' instead; error: No address associated with hostname [v8.35.0] >rsyslogd: imudp: module loaded, but no listeners defined - no input will be gathered [v8.35.0 try http://www.rsyslog.com/e/2212 ] >rsyslogd started, start msg not yet seen, pid 4571 >rsyslogd startup msg seen, pid 4571 >starting run 1 >Sending 1 messages. > 00000001 messages sent >runtime: 0.000 >End of tcpflood Run >imdiag[13500]: mainqueue empty >rsyslogd: NOTE: RSYSLOG_DEBUG_TIMEOUTS_TO_STDERR activated >rsyslogd: getaddrinfo failed obtaining local hostname - using 'pioneer' instead; error: No address associated with hostname [v8.35.0] > >File ./testsuites/1.parse1: >Expected Response: >'167,local4,debug,Mar 6 16:57:54,172.20.245.8,%PIX-7-710005,%PIX-7-710005:, UDP request discarded from SERVER1/2741 to test_app:255.255.255.255/61601' >Actual Response: >'46,syslog,info,Jul 24 15:53:12,localhost,rsyslogd,rsyslogd:, [origin software="rsyslogd" swVersion="8.35.0" x-pid="4703" x-info="http://www.rsyslog.com"] start' >test './testsuites/1.parse1' failed! > >File ./testsuites/2.parse1: >Expected Response: >'38,auth,info,Mar 27 19:06:53,source_server,sshd(pam_unix),sshd(pam_unix)[12750]:, session opened for user foo by (uid=0)' >Actual Response: >'167,local4,debug,Mar 6 16:57:54,172.20.245.8,%PIX-7-710005,%PIX-7-710005:, UDP request discarded from SERVER1/2741 to test_app:255.255.255.255/61601' >test './testsuites/2.parse1' failed! > >File ./testsuites/3.parse1: >Expected Response: >'38,auth,info,Apr 6 15:07:10,lxcvs07,sshd(pam_unix),sshd(pam_unix)[31738]:, session closed for user cvsadmin' >Actual Response: >'38,auth,info,Mar 27 19:06:53,source_server,sshd(pam_unix),sshd(pam_unix)[12750]:, session opened for user foo by (uid=0)' >test './testsuites/3.parse1' failed! > >File ./testsuites/4.parse1: >Expected Response: >'29,daemon,notice,Jul 31 21:39:21,example-b,example-gw,example-gw[10538]:, disconnect host=/192.0.2.1 destination=192.0.2.2/11282 in=3274 out=1448 duration=0' >Actual Response: >'38,auth,info,Apr 6 15:07:10,lxcvs07,sshd(pam_unix),sshd(pam_unix)[31738]:, session closed for user cvsadmin' >test './testsuites/4.parse1' failed! > >File ./testsuites/8bit.parse1: >Expected Response: >'6,kern,info,Aug 10 22:18:24,host,tag,tag, This msg contains 8-bit European chars: äöü' >Actual Response: >'29,daemon,notice,Jul 31 21:39:21,example-b,example-gw,example-gw[10538]:, disconnect host=/192.0.2.1 destination=192.0.2.2/11282 in=3274 out=1448 duration=0' >test './testsuites/8bit.parse1' failed! > >File ./testsuites/date1.parse1: >Expected Response: >'38,auth,info,Mar 7 19:06:53,example,tag,tag:, testmessage (only date actually tested)' >Actual Response: >'6,kern,info,Aug 10 22:18:24,host,tag,tag, This msg contains 8-bit European chars: äöü' >test './testsuites/date1.parse1' failed! > >File ./testsuites/empty.parse1: >Expected Response: >'14,user,info,Jan 6 15:22:26,localhost,,,' >Actual Response: >'38,auth,info,Mar 7 19:06:53,example,tag,tag:, testmessage (only date actually tested)' >test './testsuites/empty.parse1' failed! > >File ./testsuites/malformed1.parse1: >Expected Response: >'131,local0,err,Oct 8 23:05:06,10.321.1.123,05",result_code=200,b,05",result_code=200,b,' >Actual Response: >'14,user,info,Jan 6 15:22:26,localhost,,,' >test './testsuites/malformed1.parse1' failed! > >File ./testsuites/mark.parse1: >Expected Response: >'6,kern,info,Feb 18 16:01:59,serverX,--,--, MARK --' >Actual Response: >'131,local0,err,Oct 8 23:05:06,10.321.1.123,05",result_code=200,b,05",result_code=200,b,' > >File ./testsuites/mark.parse1: >Expected Response: >'13,user,notice,Feb 18 16:01:59,serverX,--,--, MARK --' >Actual Response: >'6,kern,info,Feb 18 16:01:59,serverX,--,--, MARK --' >test './testsuites/mark.parse1' failed! > >File ./testsuites/oversizeTag-1.parse1: >Expected Response: >'38,auth,info,Mar 27 19:06:53,source_server,0123456789012345678901234567890123456789,0123456789012345678901234567890123456789:, MSG part' >Actual Response: >'13,user,notice,Feb 18 16:01:59,serverX,--,--, MARK --' >test './testsuites/oversizeTag-1.parse1' failed! > >File ./testsuites/reallife.parse1: >Expected Response: >'29,daemon,notice,Oct 16 20:47:24,example-p,exam-pl,exam-pl[12345]:, connect host= /192.0.2.1' >Actual Response: >'38,auth,info,Mar 27 19:06:53,source_server,0123456789012345678901234567890123456789,0123456789012345678901234567890123456789:, MSG part' >test './testsuites/reallife.parse1' failed! > >File ./testsuites/rfc3164.parse1: >Expected Response: >'34,auth,crit,Oct 11 22:14:15,mymachine,su,su:, 'su root' failed for lonvick on /dev/pts/8' >Actual Response: >'29,daemon,notice,Oct 16 20:47:24,example-p,exam-pl,exam-pl[12345]:, connect host= /192.0.2.1' >test './testsuites/rfc3164.parse1' failed! > >File ./testsuites/rfc5424-1.parse1: >Expected Response: >'34,auth,crit,Oct 11 22:14:15,mymachine.example.com,,su,BOM'su root' failed for lonvick on /dev/pts/8' >Actual Response: >'34,auth,crit,Oct 11 22:14:15,mymachine,su,su:, 'su root' failed for lonvick on /dev/pts/8' >test './testsuites/rfc5424-1.parse1' failed! > >File ./testsuites/rfc5424-2.parse1: >Expected Response: >'165,local4,notice,Aug 24 05:14:15,192.0.2.1,,myproc[8710],%% It's time to make the do-nuts.' >Actual Response: >'34,auth,crit,Oct 11 22:14:15,mymachine.example.com,,su,BOM'su root' failed for lonvick on /dev/pts/8' >test './testsuites/rfc5424-2.parse1' failed! > >File ./testsuites/rfc5424-3.parse1: >Expected Response: >'165,local4,notice,Oct 11 22:14:15,mymachine.example.com,,evntslog,' >Actual Response: >'165,local4,notice,Aug 24 05:14:15,192.0.2.1,,myproc[8710],%% It's time to make the do-nuts.' >test './testsuites/rfc5424-3.parse1' failed! > >File ./testsuites/rfc5424-4.parse1: >Expected Response: >'165,local4,notice,Oct 11 22:14:15,mymachine.example.com,,evntslog,BOMAn application event log entry...' >Actual Response: >'165,local4,notice,Oct 11 22:14:15,mymachine.example.com,,evntslog,' >test './testsuites/rfc5424-4.parse1' failed! > >File ./testsuites/snare.parse1: >Expected Response: >'141,local1,notice,Mar 10 09:30:20,zuse.xysystems.local,MSWinEventLog#0111#011Security#011563#011Wed,MSWinEventLog#0111#011Security#011563#011Wed, Mar 10 09:30:15 2010#011538#011Security#011XYWS011$#011User#011Success Audit#011ZUSE#011Logon/Logoff#011#011User Logoff: User Name: XYWS011$ Domain: XYZSYSTEMS Logon ID: (0x0,0x5984789C) Logon Type: 3 #011552' >Actual Response: >'165,local4,notice,Oct 11 22:14:15,mymachine.example.com,,evntslog,BOMAn application event log entry...' > >File ./testsuites/snare.parse1: >Expected Response: >'13,user,notice,Mar 10 09:30:20,zuse.xysystems.local,MSWinEventLog#0111#011Security#011564#011Wed,MSWinEventLog#0111#011Security#011564#011Wed, Mar 10 09:30:19 2010#011540#011Security#011BACKUP1$#011User#011Success Audit#011ZUSE#011Logon/Logoff#011#011Successful Network Logon: User Name: BACKUP1$ Domain: XYZSYSTEMS Logon ID: (0x0,0x59848DB4) Logon Type: 3 Logon Process: Kerberos Authentication Package: Kerberos Workstation Name: Logon GUID: {f6f65903-1932-d229-4b75-64816121d569} Caller User Name: - Caller Domain: - Caller Logon ID: - Caller Process ID: - Transited Services: - Source Network Address: 172.16.0.31 Source Port: 0 #011553' >Actual Response: >'141,local1,notice,Mar 10 09:30:20,zuse.xysystems.local,MSWinEventLog#0111#011Security#011563#011Wed,MSWinEventLog#0111#011Security#011563#011Wed, Mar 10 09:30:15 2010#011538#011Security#011XYWS011$#011User#011Success Audit#011ZUSE#011Logon/Logoff#011#011User Logoff: User Name: XYWS011$ Domain: XYZSYSTEMS Logon ID: (0x0,0x5984789C) Logon Type: 3 #011552' > >File ./testsuites/snare.parse1: >Expected Response: >'141,local1,notice,Mar 10 09:30:25,zuse.xysystems.local,MSWinEventLog#0111#011Security#011566#011Wed,MSWinEventLog#0111#011Security#011566#011Wed, Mar 10 09:30:21 2010#011540#011Security#011aadminps#011User#011Success Audit#011ZUSE#011Logon/Logoff#011#011Successful Network Logon: User Name: aadminps Domain: XYSYSTEMS Logon ID: (0x0,0x5984973C) Logon Type: 3 Logon Process: Authz Authentication Package: Kerberos Workstation Name: ZUSE Logon GUID: - Caller User Name: ZUSE$ Caller Domain: XYSYSTEMS Caller Logon ID: (0x0,0x3E7) Caller Process ID: 1004 Transited Services: - Source Network Address: - Source Port: - #011555' >Actual Response: >'13,user,notice,Mar 10 09:30:20,zuse.xysystems.local,MSWinEventLog#0111#011Security#011564#011Wed,MSWinEventLog#0111#011Security#011564#011Wed, Mar 10 09:30:19 2010#011540#011Security#011BACKUP1$#011User#011Success Audit#011ZUSE#011Logon/Logoff#011#011Successful Network Logon: User Name: BACKUP1$ Domain: XYZSYSTEMS Logon ID: (0x0,0x59848DB4) Logon Type: 3 Logon Process: Kerberos Authentication Package: Kerberos Workstation Name: Logon GUID: {f6f65903-1932-d229-4b75-64816121d569} Caller User Name: - Caller Domain: - Caller Logon ID: - Caller Process ID: - Transited Services: - Source Network Address: 172.16.0.31 Source Port: 0 #011553' > >File ./testsuites/snare.parse1: >Expected Response: >'141,local1,notice,Mar 10 09:30:25,zuse.xysystems.local,MSWinEventLog#0111#011Security#011567#011Wed,MSWinEventLog#0111#011Security#011567#011Wed, Mar 10 09:30:21 2010#011538#011Security#011aadminps#011User#011Success Audit#011ZUSE#011Logon/Logoff#011#011User Logoff: User Name: aadminps Domain: XYSYSTEMS Logon ID: (0x0,0x5984973C) Logon Type: 3 #011556' >Actual Response: >'141,local1,notice,Mar 10 09:30:25,zuse.xysystems.local,MSWinEventLog#0111#011Security#011566#011Wed,MSWinEventLog#0111#011Security#011566#011Wed, Mar 10 09:30:21 2010#011540#011Security#011aadminps#011User#011Success Audit#011ZUSE#011Logon/Logoff#011#011Successful Network Logon: User Name: aadminps Domain: XYSYSTEMS Logon ID: (0x0,0x5984973C) Logon Type: 3 Logon Process: Authz Authentication Package: Kerberos Workstation Name: ZUSE Logon GUID: - Caller User Name: ZUSE$ Caller Domain: XYSYSTEMS Caller Logon ID: (0x0,0x3E7) Caller Process ID: 1004 Transited Services: - Source Network Address: - Source Port: - #011555' > >File ./testsuites/snare.parse1: >Expected Response: >'141,local1,notice,Mar 10 09:30:25,zuse.xysystems.local,MSWinEventLog#0111#011Security#011568#011Wed,MSWinEventLog#0111#011Security#011568#011Wed, Mar 10 09:30:25 2010#011540#011Security#011ANONYMOUS LOGON#011Well Known Group#011Success Audit#011ZUSE#011Logon/Logoff#011#011Successful Network Logon: User Name: Domain: Logon ID: (0x0,0x5984AB6F) Logon Type: 3 Logon Process: NtLmSsp Authentication Package: NTLM Workstation Name: XYWS083 Logon GUID: - Caller User Name: - Caller Domain: - Caller Logon ID: - Caller Process ID: - Transited Services: - Source Network Address: 172.16.3.91 Source Port: 0 #011557' >Actual Response: >'141,local1,notice,Mar 10 09:30:25,zuse.xysystems.local,MSWinEventLog#0111#011Security#011567#011Wed,MSWinEventLog#0111#011Security#011567#011Wed, Mar 10 09:30:21 2010#011538#011Security#011aadminps#011User#011Success Audit#011ZUSE#011Logon/Logoff#011#011User Logoff: User Name: aadminps Domain: XYSYSTEMS Logon ID: (0x0,0x5984973C) Logon Type: 3 #011556' > >File ./testsuites/snare.parse1: >Expected Response: >'141,local1,notice,Mar 10 09:30:25,zuse.xysystems.local,MSWinEventLog#0111#011Security#011569#011Wed,MSWinEventLog#0111#011Security#011569#011Wed, Mar 10 09:30:25 2010#011540#011Security#011SYSTEM#011User#011Success Audit#011ZUSE#011Logon/Logoff#011#011Successful Network Logon: User Name: ZUSE$ Domain: XYSYSTEMS Logon ID: (0x0,0x5984ACA7) Logon Type: 3 Logon Process: Kerberos Authentication Package: Kerberos Workstation Name: Logon GUID: {20014d9a-ce6c-6834-d1ed-607c08f0b6a7} Caller User Name: - Caller Domain: - Caller Logon ID: - Caller Process ID: - Transited Services: - Source Network Address: 172.16.0.15 Source Port: 2318 #011558' >Actual Response: >'141,local1,notice,Mar 10 09:30:25,zuse.xysystems.local,MSWinEventLog#0111#011Security#011568#011Wed,MSWinEventLog#0111#011Security#011568#011Wed, Mar 10 09:30:25 2010#011540#011Security#011ANONYMOUS LOGON#011Well Known Group#011Success Audit#011ZUSE#011Logon/Logoff#011#011Successful Network Logon: User Name: Domain: Logon ID: (0x0,0x5984AB6F) Logon Type: 3 Logon Process: NtLmSsp Authentication Package: NTLM Workstation Name: XYWS083 Logon GUID: - Caller User Name: - Caller Domain: - Caller Logon ID: - Caller Process ID: - Transited Services: - Source Network Address: 172.16.3.91 Source Port: 0 #011557' > >File ./testsuites/snare.parse1: >Expected Response: >'141,local1,notice,Mar 10 09:30:25,zuse.xysystems.local,MSWinEventLog#0111#011Security#011570#011Wed,MSWinEventLog#0111#011Security#011570#011Wed, Mar 10 09:30:25 2010#011538#011Security#011SYSTEM#011User#011Success Audit#011ZUSE#011Logon/Logoff#011#011User Logoff: User Name: ZUSE$ Domain: XYSYSTEMS Logon ID: (0x0,0x5984ACA7) Logon Type: 3 #011559' >Actual Response: >'141,local1,notice,Mar 10 09:30:25,zuse.xysystems.local,MSWinEventLog#0111#011Security#011569#011Wed,MSWinEventLog#0111#011Security#011569#011Wed, Mar 10 09:30:25 2010#011540#011Security#011SYSTEM#011User#011Success Audit#011ZUSE#011Logon/Logoff#011#011Successful Network Logon: User Name: ZUSE$ Domain: XYSYSTEMS Logon ID: (0x0,0x5984ACA7) Logon Type: 3 Logon Process: Kerberos Authentication Package: Kerberos Workstation Name: Logon GUID: {20014d9a-ce6c-6834-d1ed-607c08f0b6a7} Caller User Name: - Caller Domain: - Caller Logon ID: - Caller Process ID: - Transited Services: - Source Network Address: 172.16.0.15 Source Port: 2318 #011558' > >File ./testsuites/snare.parse1: >Expected Response: >'141,local1,notice,Mar 10 09:30:25,zuse.xysystems.local,MSWinEventLog#0111#011Security#011571#011Wed,MSWinEventLog#0111#011Security#011571#011Wed, Mar 10 09:30:25 2010#011540#011Security#011SYSTEM#011User#011Success Audit#011ZUSE#011Logon/Logoff#011#011Successful Network Logon: User Name: ZUSE$ Domain: XYSYSTEMS Logon ID: (0x0,0x5984AD7C) Logon Type: 3 Logon Process: Kerberos Authentication Package: Kerberos Workstation Name: Logon GUID: {20014d9a-ce6c-6834-d1ed-607c08f0b6a7} Caller User Name: - Caller Domain: - Caller Logon ID: - Caller Process ID: - Transited Services: - Source Network Address: 172.16.0.15 Source Port: 2319 #011560' >Actual Response: >'141,local1,notice,Mar 10 09:30:25,zuse.xysystems.local,MSWinEventLog#0111#011Security#011570#011Wed,MSWinEventLog#0111#011Security#011570#011Wed, Mar 10 09:30:25 2010#011538#011Security#011SYSTEM#011User#011Success Audit#011ZUSE#011Logon/Logoff#011#011User Logoff: User Name: ZUSE$ Domain: XYSYSTEMS Logon ID: (0x0,0x5984ACA7) Logon Type: 3 #011559' > >File ./testsuites/snare.parse1: >Expected Response: >'141,local1,notice,Mar 10 09:30:25,zuse.xysystems.local,MSWinEventLog#0111#011Security#011572#011Wed,MSWinEventLog#0111#011Security#011572#011Wed, Mar 10 09:30:25 2010#011538#011Security#011SYSTEM#011User#011Success Audit#011ZUSE#011Logon/Logoff#011#011User Logoff: User Name: ZUSE$ Domain: XYSYSTEMS Logon ID: (0x0,0x5984AD7C) Logon Type: 3 #011561' >Actual Response: >'141,local1,notice,Mar 10 09:30:25,zuse.xysystems.local,MSWinEventLog#0111#011Security#011571#011Wed,MSWinEventLog#0111#011Security#011571#011Wed, Mar 10 09:30:25 2010#011540#011Security#011SYSTEM#011User#011Success Audit#011ZUSE#011Logon/Logoff#011#011Successful Network Logon: User Name: ZUSE$ Domain: XYSYSTEMS Logon ID: (0x0,0x5984AD7C) Logon Type: 3 Logon Process: Kerberos Authentication Package: Kerberos Workstation Name: Logon GUID: {20014d9a-ce6c-6834-d1ed-607c08f0b6a7} Caller User Name: - Caller Domain: - Caller Logon ID: - Caller Process ID: - Transited Services: - Source Network Address: 172.16.0.15 Source Port: 2319 #011560' > >File ./testsuites/snare.parse1: >Expected Response: >'141,local1,notice,Mar 10 09:30:25,zuse.xysystems.local,MSWinEventLog#0111#011Security#011573#011Wed,MSWinEventLog#0111#011Security#011573#011Wed, Mar 10 09:30:25 2010#011680#011Security#011ettore.trezzani#011User#011Success Audit#011ZUSE#011Account Logon#011#011Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 Logon account: ettore.trezzani Source Workstation: XYWS083 Error Code: 0x0 #011562' >Actual Response: >'141,local1,notice,Mar 10 09:30:25,zuse.xysystems.local,MSWinEventLog#0111#011Security#011572#011Wed,MSWinEventLog#0111#011Security#011572#011Wed, Mar 10 09:30:25 2010#011538#011Security#011SYSTEM#011User#011Success Audit#011ZUSE#011Logon/Logoff#011#011User Logoff: User Name: ZUSE$ Domain: XYSYSTEMS Logon ID: (0x0,0x5984AD7C) Logon Type: 3 #011561' > >File ./testsuites/snare.parse1: >Expected Response: >'141,local1,notice,Mar 10 09:30:25,zuse.xysystems.local,MSWinEventLog#0111#011Security#011574#011Wed,MSWinEventLog#0111#011Security#011574#011Wed, Mar 10 09:30:25 2010#011540#011Security#011ettore.trezzani#011User#011Success Audit#011ZUSE#011Logon/Logoff#011#011Successful Network Logon: User Name: ettore.trezzani Domain: XYSYSTEMS Logon ID: (0x0,0x5984ADD5) Logon Type: 3 Logon Process: NtLmSsp Authentication Package: NTLM Workstation Name: XYWS083 Logon GUID: - Caller User Name: - Caller Domain: - Caller Logon ID: - Caller Process ID: - Transited Services: - Source Network Address: 172.16.3.91 Source Port: 0 #011563' >Actual Response: >'141,local1,notice,Mar 10 09:30:25,zuse.xysystems.local,MSWinEventLog#0111#011Security#011573#011Wed,MSWinEventLog#0111#011Security#011573#011Wed, Mar 10 09:30:25 2010#011680#011Security#011ettore.trezzani#011User#011Success Audit#011ZUSE#011Account Logon#011#011Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 Logon account: ettore.trezzani Source Workstation: XYWS083 Error Code: 0x0 #011562' > >File ./testsuites/snare.parse1: >Expected Response: >'141,local1,notice,Mar 10 09:30:25,zuse.xysystems.local,MSWinEventLog#0111#011Security#011575#011Wed,MSWinEventLog#0111#011Security#011575#011Wed, Mar 10 09:30:25 2010#011540#011Security#011SYSTEM#011User#011Success Audit#011ZUSE#011Logon/Logoff#011#011Successful Network Logon: User Name: ZUSE$ Domain: XYSYSTEMS Logon ID: (0x0,0x5984AE49) Logon Type: 3 Logon Process: Kerberos Authentication Package: Kerberos Workstation Name: Logon GUID: {20014d9a-ce6c-6834-d1ed-607c08f0b6a7} Caller User Name: - Caller Domain: - Caller Logon ID: - Caller Process ID: - Transited Services: - Source Network Address: 172.16.0.15 Source Port: 2320 #011564' >Actual Response: >'141,local1,notice,Mar 10 09:30:25,zuse.xysystems.local,MSWinEventLog#0111#011Security#011574#011Wed,MSWinEventLog#0111#011Security#011574#011Wed, Mar 10 09:30:25 2010#011540#011Security#011ettore.trezzani#011User#011Success Audit#011ZUSE#011Logon/Logoff#011#011Successful Network Logon: User Name: ettore.trezzani Domain: XYSYSTEMS Logon ID: (0x0,0x5984ADD5) Logon Type: 3 Logon Process: NtLmSsp Authentication Package: NTLM Workstation Name: XYWS083 Logon GUID: - Caller User Name: - Caller Domain: - Caller Logon ID: - Caller Process ID: - Transited Services: - Source Network Address: 172.16.3.91 Source Port: 0 #011563' > >File ./testsuites/snare.parse1: >Expected Response: >'141,local1,notice,Mar 10 09:30:25,zuse.xysystems.local,MSWinEventLog#0111#011Security#011576#011Wed,MSWinEventLog#0111#011Security#011576#011Wed, Mar 10 09:30:25 2010#011538#011Security#011SYSTEM#011User#011Success Audit#011ZUSE#011Logon/Logoff#011#011User Logoff: User Name: ZUSE$ Domain: XYSYSTEMS Logon ID: (0x0,0x5984AE49) Logon Type: 3 #011565' >Actual Response: >'141,local1,notice,Mar 10 09:30:25,zuse.xysystems.local,MSWinEventLog#0111#011Security#011575#011Wed,MSWinEventLog#0111#011Security#011575#011Wed, Mar 10 09:30:25 2010#011540#011Security#011SYSTEM#011User#011Success Audit#011ZUSE#011Logon/Logoff#011#011Successful Network Logon: User Name: ZUSE$ Domain: XYSYSTEMS Logon ID: (0x0,0x5984AE49) Logon Type: 3 Logon Process: Kerberos Authentication Package: Kerberos Workstation Name: Logon GUID: {20014d9a-ce6c-6834-d1ed-607c08f0b6a7} Caller User Name: - Caller Domain: - Caller Logon ID: - Caller Process ID: - Transited Services: - Source Network Address: 172.16.0.15 Source Port: 2320 #011564' > >File ./testsuites/snare.parse1: >Expected Response: >'141,local1,notice,Mar 10 09:30:25,zuse.xysystems.local,MSWinEventLog#0111#011Security#011577#011Wed,MSWinEventLog#0111#011Security#011577#011Wed, Mar 10 09:30:25 2010#011540#011Security#011SYSTEM#011User#011Success Audit#011ZUSE#011Logon/Logoff#011#011Successful Network Logon: User Name: ZUSE$ Domain: XYSYSTEMS Logon ID: (0x0,0x5984AF00) Logon Type: 3 Logon Process: Kerberos Authentication Package: Kerberos Workstation Name: Logon GUID: {20014d9a-ce6c-6834-d1ed-607c08f0b6a7} Caller User Name: - Caller Domain: - Caller Logon ID: - Caller Process ID: - Transited Services: - Source Network Address: 172.16.0.15 Source Port: 2321 #011566' >Actual Response: >'141,local1,notice,Mar 10 09:30:25,zuse.xysystems.local,MSWinEventLog#0111#011Security#011576#011Wed,MSWinEventLog#0111#011Security#011576#011Wed, Mar 10 09:30:25 2010#011538#011Security#011SYSTEM#011User#011Success Audit#011ZUSE#011Logon/Logoff#011#011User Logoff: User Name: ZUSE$ Domain: XYSYSTEMS Logon ID: (0x0,0x5984AE49) Logon Type: 3 #011565' > >File ./testsuites/snare.parse1: >Expected Response: >'141,local1,notice,Mar 10 09:30:25,zuse.xysystems.local,MSWinEventLog#0111#011Security#011578#011Wed,MSWinEventLog#0111#011Security#011578#011Wed, Mar 10 09:30:25 2010#011538#011Security#011SYSTEM#011User#011Success Audit#011ZUSE#011Logon/Logoff#011#011User Logoff: User Name: ZUSE$ Domain: XYSYSTEMS Logon ID: (0x0,0x5984AF00) Logon Type: 3 #011567' >Actual Response: >'141,local1,notice,Mar 10 09:30:25,zuse.xysystems.local,MSWinEventLog#0111#011Security#011577#011Wed,MSWinEventLog#0111#011Security#011577#011Wed, Mar 10 09:30:25 2010#011540#011Security#011SYSTEM#011User#011Success Audit#011ZUSE#011Logon/Logoff#011#011Successful Network Logon: User Name: ZUSE$ Domain: XYSYSTEMS Logon ID: (0x0,0x5984AF00) Logon Type: 3 Logon Process: Kerberos Authentication Package: Kerberos Workstation Name: Logon GUID: {20014d9a-ce6c-6834-d1ed-607c08f0b6a7} Caller User Name: - Caller Domain: - Caller Logon ID: - Caller Process ID: - Transited Services: - Source Network Address: 172.16.0.15 Source Port: 2321 #011566' > >File ./testsuites/snare.parse1: >Expected Response: >'141,local1,notice,Mar 10 09:30:25,zuse.xysystems.local,MSWinEventLog#0111#011Security#011579#011Wed,MSWinEventLog#0111#011Security#011579#011Wed, Mar 10 09:30:25 2010#011538#011Security#011ANONYMOUS LOGON#011Well Known Group#011Success Audit#011ZUSE#011Logon/Logoff#011#011User Logoff: User Name: ANONYMOUS LOGON Domain: NT AUTHORITY Logon ID: (0x0,0x5984AB6F) Logon Type: 3 #011568' >Actual Response: >'141,local1,notice,Mar 10 09:30:25,zuse.xysystems.local,MSWinEventLog#0111#011Security#011578#011Wed,MSWinEventLog#0111#011Security#011578#011Wed, Mar 10 09:30:25 2010#011538#011Security#011SYSTEM#011User#011Success Audit#011ZUSE#011Logon/Logoff#011#011User Logoff: User Name: ZUSE$ Domain: XYSYSTEMS Logon ID: (0x0,0x5984AF00) Logon Type: 3 #011567' > >File ./testsuites/snare.parse1: >Expected Response: >'141,local1,notice,Mar 10 09:30:30,zuse.xysystems.local,MSWinEventLog#0111#011Security#011580#011Wed,MSWinEventLog#0111#011Security#011580#011Wed, Mar 10 09:30:29 2010#011540#011Security#011XYWSBADGE$#011User#011Success Audit#011ZUSE#011Logon/Logoff#011#011Successful Network Logon: User Name: XYWSBADGE$ Domain: XYSYSTEMS Logon ID: (0x0,0x59852D73) Logon Type: 3 Logon Process: Kerberos Authentication Package: Kerberos Workstation Name: Logon GUID: {4bc3c075-5a77-4648-5822-bfdf88b4c211} Caller User Name: - Caller Domain: - Caller Logon ID: - Caller Process ID: - Transited Services: - Source Network Address: 172.16.3.18 Source Port: 0 #011569' >Actual Response: >'141,local1,notice,Mar 10 09:30:25,zuse.xysystems.local,MSWinEventLog#0111#011Security#011579#011Wed,MSWinEventLog#0111#011Security#011579#011Wed, Mar 10 09:30:25 2010#011538#011Security#011ANONYMOUS LOGON#011Well Known Group#011Success Audit#011ZUSE#011Logon/Logoff#011#011User Logoff: User Name: ANONYMOUS LOGON Domain: NT AUTHORITY Logon ID: (0x0,0x5984AB6F) Logon Type: 3 #011568' >test './testsuites/snare.parse1' failed! > >File ./testsuites/weird.parse1: >Expected Response: >'14,user,info,Aug 30 23:00:05,X4711,AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA,AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA,' >Actual Response: >'141,local1,notice,Mar 10 09:30:30,zuse.xysystems.local,MSWinEventLog#0111#011Security#011580#011Wed,MSWinEventLog#0111#011Security#011580#011Wed, Mar 10 09:30:29 2010#011540#011Security#011XYWSBADGE$#011User#011Success Audit#011ZUSE#011Logon/Logoff#011#011Successful Network Logon: User Name: XYWSBADGE$ Domain: XYSYSTEMS Logon ID: (0x0,0x59852D73) Logon Type: 3 Logon Process: Kerberos Authentication Package: Kerberos Workstation Name: Logon GUID: {4bc3c075-5a77-4648-5822-bfdf88b4c211} Caller User Name: - Caller Domain: - Caller Logon ID: - Caller Process ID: - Transited Services: - Source Network Address: 172.16.3.18 Source Port: 0 #011569' > >File ./testsuites/weird.parse1: >Expected Response: >'14,user,info,Aug 30 23:00:05,X4711,,,' >Actual Response: >'14,user,info,Aug 30 23:00:05,X4711,AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA,AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA,' > >File ./testsuites/weird.parse1: >Expected Response: >'14,user,info,Aug 30 23:00:05,localhost,,,' >Actual Response: >'14,user,info,Aug 30 23:00:05,X4711,,,' > >File ./testsuites/weird.parse1: >Expected Response: >'14,user,info,Aug 30 23:00:05,X4711,AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA,AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA,' >Actual Response: >'14,user,info,Aug 30 23:00:05,localhost,,,' > >File ./testsuites/weird.parse1: >Expected Response: >'14,user,info,Aug 30 23:00:05,X4711,,,' >Actual Response: >'14,user,info,Aug 30 23:00:05,X4711,AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA,AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA,' > >File ./testsuites/weird.parse1: >Expected Response: >'14,user,info,Aug 30 23:00:05,localhost,,,' >Actual Response: >'14,user,info,Aug 30 23:00:05,X4711,,,' >test './testsuites/weird.parse1' failed! >Number of tests run: 48, number of failures: 40, test: parse1/udp >FAIL parsertest.sh (exit status: 1) > >FAIL: fieldtest.sh >================== > >[fieldtest.sh]: test fieldtest via udp >------------------------------------------------------------ >Test: ./fieldtest.sh >------------------------------------------------------------ >testbench: TZ env var not set, setting it to UTC >rsyslogd: NOTE: RSYSLOG_DEBUG_TIMEOUTS_TO_STDERR activated >rsyslogd: getaddrinfo failed obtaining local hostname - using 'pioneer' instead; error: No address associated with hostname [v8.35.0] >rsyslogd: imudp: module loaded, but no listeners defined - no input will be gathered [v8.35.0 try http://www.rsyslog.com/e/2212 ] >rsyslogd started, start msg not yet seen, pid 4808 >rsyslogd startup msg seen, pid 4808 >starting run 1 >Sending 1 messages. > 00000001 messages sent >runtime: 0.001 >End of tcpflood Run >imdiag[13500]: mainqueue empty >rsyslogd: NOTE: RSYSLOG_DEBUG_TIMEOUTS_TO_STDERR activated >rsyslogd: getaddrinfo failed obtaining local hostname - using 'pioneer' instead; error: No address associated with hostname [v8.35.0] > >File ./testsuites/1.field1: >Expected Response: >'DROP_url_www.sina.com.cn:IN=eth1' >Actual Response: >'[origin' >test './testsuites/1.field1' failed! >Number of tests run: 1, number of failures: 1, test: field1/udp >FAIL fieldtest.sh (exit status: 1) > >FAIL: pmsnare.sh >================ > >TEST: [pmsnare.sh]: test snare parser module >------------------------------------------------------------ >Test: ./pmsnare.sh >------------------------------------------------------------ >testbench: TZ env var not set, setting it to UTC >rsyslogd: NOTE: RSYSLOG_DEBUG_TIMEOUTS_TO_STDERR activated >rsyslogd: getaddrinfo failed obtaining local hostname - using 'pioneer' instead; error: No address associated with hostname [v8.35.0] >rsyslogd: imudp: module loaded, but no listeners defined - no input will be gathered [v8.35.0 try http://www.rsyslog.com/e/2212 ] >rsyslogd started, start msg not yet seen, pid 5573 >rsyslogd startup msg seen, pid 5573 >starting run 1 >Sending 1 messages. > 00000001 messages sent >runtime: 0.035 >End of tcpflood Run >imdiag[13500]: mainqueue empty >rsyslogd: NOTE: RSYSLOG_DEBUG_TIMEOUTS_TO_STDERR activated >rsyslogd: getaddrinfo failed obtaining local hostname - using 'pioneer' instead; error: No address associated with hostname [v8.35.0] > >File ./testsuites/sample.pmsnare_default: >Expected Response: >'14,user,info,,, 05/21/2017:00:00:00 GMT HOSTNAME 1-ABC-2 : default SSLLOG SSL_HANDSHAKE_SUCCESS 39672436 0 : SPCBId 6377757 - ClientIP 192.168.0.11 - ClientPort 55073 - VserverServiceIP 192.168.0.11 - VserverServicePort 443 - ClientVersion TLSv1.0 - CipherSuite "AES-256-CBC-SHA TLSv1 Non-Export 256-bit" - Session Reuse The authenti' >Actual Response: >'46,syslog,info,rsyslogd,rsyslogd:, [origin software="rsyslogd" swVersion="8.35.0" x-pid="5720" x-info="http://www.rsyslog.com"] start' > >File ./testsuites/sample.pmsnare_default: >Expected Response: >'14,user,info,123456789,123456789:, HOSTNAME: May 21 12:00:01.123 gmt: %IOSXE-6-PLATFORM: F0: cpp_cp: QFP:0.0 Thread:105 TS:00000000000000 %NAT-6-LOG_TRANSLATION: Created Translation UDP 192.168.0.11:44593 192.168.0.11:21129 192.168.0.11:53 192.168.0.11:53 0................' >Actual Response: >'14,user,info,,, 05/21/2017:00:00:00 GMT HOSTNAME 1-ABC-2 : default SSLLOG SSL_HANDSHAKE_SUCCESS 39672436 0 : SPCBId 6377757 - ClientIP 192.168.0.11 - ClientPort 55073 - VserverServiceIP 192.168.0.11 - VserverServicePort 443 - ClientVersion TLSv1.0 - CipherSuite "AES-256-CBC-SHA TLSv1 Non-Export 256-bit" - Session Reuse The authenti' > >File ./testsuites/sample.pmsnare_default: >Expected Response: >'14,user,info,%ASA-4-102030,%ASA-4-102030:, Deny udp src vlan_12302:192.168.0.11/514 dst vlan_1233:192.168.0.11/514 by access-group "local_in" [0x0, 0x0]' >Actual Response: >'14,user,info,123456789,123456789:, HOSTNAME: May 21 12:00:01.123 gmt: %IOSXE-6-PLATFORM: F0: cpp_cp: QFP:0.0 Thread:105 TS:00000000000000 %NAT-6-LOG_TRANSLATION: Created Translation UDP 192.168.0.11:44593 192.168.0.11:21129 192.168.0.11:53 192.168.0.11:53 0................' > >File ./testsuites/sample.pmsnare_default: >Expected Response: >'14,user,info,%ASA-6-102030,%ASA-6-102030:, SFR requested ASA to bypass further packet redirection and process TCP flow from vlan_1233:192.168.0.11/10469 to vlan_12323:192.168.0.11/443 locally' >Actual Response: >'14,user,info,%ASA-4-102030,%ASA-4-102030:, Deny udp src vlan_12302:192.168.0.11/514 dst vlan_1233:192.168.0.11/514 by access-group "local_in" [0x0, 0x0]' > >File ./testsuites/sample.pmsnare_default: >Expected Response: >'14,user,info,Hostd,Hostd:, verbose hostd[81480B70] [Originator@6876 sub=Hostsvc.StorageSystem] SendStorageInfoEvent: Notify: StorageSystemMsg{HBAs=[vmhba0, vmhba1, vmhba2, vmhba3, vmhba32, vmhba4, ]};' >Actual Response: >'14,user,info,%ASA-6-102030,%ASA-6-102030:, SFR requested ASA to bypass further packet redirection and process TCP flow from vlan_1233:192.168.0.11/10469 to vlan_12323:192.168.0.11/443 locally' > >File ./testsuites/sample.pmsnare_default: >Expected Response: >'14,user,info,Rhttpproxy,Rhttpproxy:, verbose rhttpproxy[479C1B70] [Originator@6876 sub=Proxy Req 69725] Resolved endpoint : [N7Vmacore4Http16LocalServiceSpecE:0x00000000] _serverNamespace = /vpxa _isRedirect = false _port = 0000000000' >Actual Response: >'14,user,info,Hostd,Hostd:, verbose hostd[81480B70] [Originator@6876 sub=Hostsvc.StorageSystem] SendStorageInfoEvent: Notify: StorageSystemMsg{HBAs=[vmhba0, vmhba1, vmhba2, vmhba3, vmhba32, vmhba4, ]};' > >File ./testsuites/sample.pmsnare_default: >Expected Response: >'14,user,info,CROND,CROND[12393]:, pam_unix(crond:session): session closed for user root................' >Actual Response: >'14,user,info,Rhttpproxy,Rhttpproxy:, verbose rhttpproxy[479C1B70] [Originator@6876 sub=Proxy Req 69725] Resolved endpoint : [N7Vmacore4Http16LocalServiceSpecE:0x00000000] _serverNamespace = /vpxa _isRedirect = false _port = 0000000000' > >File ./testsuites/sample.pmsnare_default: >Expected Response: >'14,user,info,snmpd,snmpd[1199]:, Connection from UDP: [192.168.0.11]:41763->[192.168.0.11]:161979 to vlan_12323:' >Actual Response: >'14,user,info,CROND,CROND[12393]:, pam_unix(crond:session): session closed for user root................' > >File ./testsuites/sample.pmsnare_default: >Expected Response: >'14,user,info,MSWinEventLog#0111#011N,MSWinEventLog#0111#011N/A#011113977#011Sun, May 21 12:00:01.123#011N/A#011nxlog#011N/A#011N/A#011N/A#011hostname#011N/A#011#011reconnecting to agent manager in 200 seconds#011N/A' >Actual Response: >'14,user,info,snmpd,snmpd[1199]:, Connection from UDP: [192.168.0.11]:41763->[192.168.0.11]:161979 to vlan_12323:' > >File ./testsuites/sample.pmsnare_default: >Expected Response: >'14,user,info,MSWinEventLog#0111#011Security#01100000000#011Sun,MSWinEventLog#0111#011Security#01100000000#011Sun, May 21 12:00:01.123#0114624#011Microsoft-Windows-Security-Auditing#011N/A#011N/A#011Success Audit#011hostname.domain#011Logon#011#011An account was successfully logged on. Subject: Security ID: 0x000000000 Account Name: first.last Account Domain: domain Logon ID: 0x000000000 Logon Type: 3 New Logon: Security ID: 0x000000000 Account Name: first.last Account Domain: domain Logon ID: 0x000000000 Logon GUID: 0x000000000 Process Information: Process ID: 0x000000000 Process Name: first.last Network Information: Workstation Name: Source Network Address: 192.168.0.11 Source Port: 51542 Detailed Authentication Information: Logon Process: Kerberos Authentication Package: Kerberos Transited Services: - Package Name (NTLM only): - Key Length: 0 This event is generated when a logon session is created. It is generated on the computer that was accessed. The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe. The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network). The New Logon fields indicate the account for whom the new logon was created, i.e. the account that wa................' >Actual Response: >'14,user,info,MSWinEventLog#0111#011N,MSWinEventLog#0111#011N/A#011113977#011Sun, May 21 12:00:01.123#011N/A#011nxlog#011N/A#011N/A#011N/A#011hostname#011N/A#011#011reconnecting to agent manager in 200 seconds#011N/A' > >File ./testsuites/sample.pmsnare_default: >Expected Response: >'14,user,info,MSWinEventLog#0111#011Security#01100000000#011Sun,MSWinEventLog#0111#011Security#01100000000#011Sun, May 21 12:00:01.123#0115061#011Microsoft-Windows-Security-Auditing#011N/A#011N/A#011Success Audit#011hostname.domain#011System Integrity#011#011Cryptographic operation. Subject: Security ID: 0x000000000 Account Name: first.last Account Domain: domain Logon ID: 0x000000000 Cryptographic Parameters: Provider Name: Microsoft Software Key Storage Provider Algorithm Name: RSA Key Name: le-c6bdb786-1851-4159-b5ea-5e3966571698 Key Type: Machine key. Cryptographic Operation: Operation: Open Key. Return Code: 0x0#011-0000000000' >Actual Response: >'14,user,info,MSWinEventLog#0111#011Security#01100000000#011Sun,MSWinEventLog#0111#011Security#01100000000#011Sun, May 21 12:00:01.123#0114624#011Microsoft-Windows-Security-Auditing#011N/A#011N/A#011Success Audit#011hostname.domain#011Logon#011#011An account was successfully logged on. Subject: Security ID: 0x000000000 Account Name: first.last Account Domain: domain Logon ID: 0x000000000 Logon Type: 3 New Logon: Security ID: 0x000000000 Account Name: first.last Account Domain: domain Logon ID: 0x000000000 Logon GUID: 0x000000000 Process Information: Process ID: 0x000000000 Process Name: first.last Network Information: Workstation Name: Source Network Address: 192.168.0.11 Source Port: 51542 Detailed Authentication Information: Logon Process: Kerberos Authentication Package: Kerberos Transited Services: - Package Name (NTLM only): - Key Length: 0 This event is generated when a logon session is created. It is generated on the computer that was accessed. The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe. The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network). The New Logon fields indicate the account for whom the new logon was created, i.e. the account that wa................' > >File ./testsuites/sample.pmsnare_default: >Expected Response: >'14,user,info,MSWinEventLog#0113#011Security#01100000000#011Sun,MSWinEventLog#0113#011Security#01100000000#011Sun, May 21 12:00:01.123#0114771#011Microsoft-Windows-Security-Auditing#011N/A#011N/A#011Failure Audit#011hostname.domain#011Kerberos Authentication Service#011#011Kerberos pre-authentication failed. Account Information: Security ID: 0x000000000 Account Name: first.last Service Information: Service Name: first.last Network Information: Client Address: ::ffff:192.168.0.11 Client Port: 59355 Additional Information: Ticket Options: 0x40810010 Failure Code: 0x18 Pre-Authentication Type: 2 Certificate Information: Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: Certificate information is only provided if a certificate was used for pre-authentication. Pre-authentication types, ticket options and failure codes are defined in RFC 4120. If the ticket was malformed or damaged during transit and could not be decrypted, then many fields in this event might not be present.#011-0000000000' >Actual Response: >'14,user,info,MSWinEventLog#0111#011Security#01100000000#011Sun,MSWinEventLog#0111#011Security#01100000000#011Sun, May 21 12:00:01.123#0115061#011Microsoft-Windows-Security-Auditing#011N/A#011N/A#011Success Audit#011hostname.domain#011System Integrity#011#011Cryptographic operation. Subject: Security ID: 0x000000000 Account Name: first.last Account Domain: domain Logon ID: 0x000000000 Cryptographic Parameters: Provider Name: Microsoft Software Key Storage Provider Algorithm Name: RSA Key Name: le-c6bdb786-1851-4159-b5ea-5e3966571698 Key Type: Machine key. Cryptographic Operation: Operation: Open Key. Return Code: 0x0#011-0000000000' > >File ./testsuites/sample.pmsnare_default: >Expected Response: >'13,user,notice,hostname.domain#011MSWinEventLog#0111#011Security#01100000000#011Sun,hostname.domain#011MSWinEventLog#0111#011Security#01100000000#011Sun, May 21 12:00:01.123#0114624#011Microsoft-Windows-Security-Auditing#011N/A#011N/A#011Success Audit#011hostname.domain#011Logon#011#011An account was successfully logged on. Subject: Security ID: 0x000000000 Account Name: first.last Account Domain: domain Logon ID: 0x000000000 Logon Type: 3 New Logon: Security ID: 0x000000000 Account Name: first.last Account Domain: domain Logon ID: 0x000000000 Logon GUID: 0x000000000 Process Information: Process ID: 0x000000000 Process Name: first.last Network Information: Workstation Name: Source Network Address: 192.168.0.11 Source Port: 51542 Detailed Authentication Information: Logon Process: Kerberos Authentication Package: Kerberos Transited Services: - Package Name (NTLM only): - Key Length: 0 This event is generated when a logon session is created. It is generated on the computer that was accessed. The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe. The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network). The New Logon fields indicate the account for whom the new logon was created, i.e. the account that wa................' >Actual Response: >'14,user,info,MSWinEventLog#0113#011Security#01100000000#011Sun,MSWinEventLog#0113#011Security#01100000000#011Sun, May 21 12:00:01.123#0114771#011Microsoft-Windows-Security-Auditing#011N/A#011N/A#011Failure Audit#011hostname.domain#011Kerberos Authentication Service#011#011Kerberos pre-authentication failed. Account Information: Security ID: 0x000000000 Account Name: first.last Service Information: Service Name: first.last Network Information: Client Address: ::ffff:192.168.0.11 Client Port: 59355 Additional Information: Ticket Options: 0x40810010 Failure Code: 0x18 Pre-Authentication Type: 2 Certificate Information: Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: Certificate information is only provided if a certificate was used for pre-authentication. Pre-authentication types, ticket options and failure codes are defined in RFC 4120. If the ticket was malformed or damaged during transit and could not be decrypted, then many fields in this event might not be present.#011-0000000000' > >File ./testsuites/sample.pmsnare_default: >Expected Response: >'13,user,notice,hostname.domain#011MSWinEventLog#0111#011Security#01100000000#011Sun,hostname.domain#011MSWinEventLog#0111#011Security#01100000000#011Sun, May 21 12:00:01.123#0115061#011Microsoft-Windows-Security-Auditing#011N/A#011N/A#011Success Audit#011hostname.domain#011System Integrity#011#011Cryptographic operation. Subject: Security ID: 0x000000000 Account Name: first.last Account Domain: domain Logon ID: 0x000000000 Cryptographic Parameters: Provider Name: Microsoft Software Key Storage Provider Algorithm Name: RSA Key Name: le-c6bdb786-1851-4159-b5ea-5e3966571698 Key Type: Machine key. Cryptographic Operation: Operation: Open Key. Return Code: 0x0#011-0000000000' >Actual Response: >'13,user,notice,hostname.domain#011MSWinEventLog#0111#011Security#01100000000#011Sun,hostname.domain#011MSWinEventLog#0111#011Security#01100000000#011Sun, May 21 12:00:01.123#0114624#011Microsoft-Windows-Security-Auditing#011N/A#011N/A#011Success Audit#011hostname.domain#011Logon#011#011An account was successfully logged on. Subject: Security ID: 0x000000000 Account Name: first.last Account Domain: domain Logon ID: 0x000000000 Logon Type: 3 New Logon: Security ID: 0x000000000 Account Name: first.last Account Domain: domain Logon ID: 0x000000000 Logon GUID: 0x000000000 Process Information: Process ID: 0x000000000 Process Name: first.last Network Information: Workstation Name: Source Network Address: 192.168.0.11 Source Port: 51542 Detailed Authentication Information: Logon Process: Kerberos Authentication Package: Kerberos Transited Services: - Package Name (NTLM only): - Key Length: 0 This event is generated when a logon session is created. It is generated on the computer that was accessed. The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe. The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network). The New Logon fields indicate the account for whom the new logon was created, i.e. the account that wa................' > >File ./testsuites/sample.pmsnare_default: >Expected Response: >'13,user,notice,hostname.domain#011MSWinEventLog#0113#011Security#01100000000#011Sun,hostname.domain#011MSWinEventLog#0113#011Security#01100000000#011Sun, May 21 12:00:01.123#0114771#011Microsoft-Windows-Security-Auditing#011N/A#011N/A#011Failure Audit#011hostname.domain#011Kerberos Authentication Service#011#011Kerberos pre-authentication failed. Account Information: Security ID: 0x000000000 Account Name: first.last Service Information: Service Name: first.last Network Information: Client Address: ::ffff:192.168.0.11 Client Port: 59355 Additional Information: Ticket Options: 0x40810010 Failure Code: 0x18 Pre-Authentication Type: 2 Certificate Information: Certificate Issuer Name: Certificate Serial Number: Certificate Thumbprint: Certificate information is only provided if a certificate was used for pre-authentication. Pre-authentication types, ticket options and failure codes are defined in RFC 4120. If the ticket was malformed or damaged during transit and could not be decrypted, then many fields in this event might not be present.#011-0000000000' >Actual Response: >'13,user,notice,hostname.domain#011MSWinEventLog#0111#011Security#01100000000#011Sun,hostname.domain#011MSWinEventLog#0111#011Security#01100000000#011Sun, May 21 12:00:01.123#0115061#011Microsoft-Windows-Security-Auditing#011N/A#011N/A#011Success Audit#011hostname.domain#011System Integrity#011#011Cryptographic operation. Subject: Security ID: 0x000000000 Account Name: first.last Account Domain: domain Logon ID: 0x000000000 Cryptographic Parameters: Provider Name: Microsoft Software Key Storage Provider Algorithm Name: RSA Key Name: le-c6bdb786-1851-4159-b5ea-5e3966571698 Key Type: Machine key. Cryptographic Operation: Operation: Open Key. Return Code: 0x0#011-0000000000' >test './testsuites/sample.pmsnare_default' failed! >Number of tests run: 15, number of failures: 15, test: pmsnare_default/udp >FAIL pmsnare.sh (exit status: 1) > >SKIP: glbl-oversizeMsg-truncate-imfile.sh >========================================= > >------------------------------------------------------------ >Test: ./glbl-oversizeMsg-truncate-imfile.sh >------------------------------------------------------------ >testbench: TZ env var not set, setting it to UTC >imrelp parameter oversizeMode not available. Test stopped >SKIP glbl-oversizeMsg-truncate-imfile.sh (exit status: 77) >
<b>You cannot view the attachment while viewing its details because your browser does not support IFRAMEs. <a href="attachment.cgi?id=540944">View the attachment on a separate page</a>.</b>
View Attachment As Raw
Actions:
View
Attachments on
bug 661988
:
540724
| 540944
