===================================================
   liblognorm 2.0.7.master: tests/test-suite.log
===================================================

# TOTAL: 122
# PASS:  89
# SKIP:  28
# XFAIL: 0
# FAIL:  5
# XPASS: 0
# ERROR: 0

.. contents:: :depth: 2

FAIL: usrdef_nested_segfault.sh
===============================

Using valgrind: no
===============================================================================
[usrdef_nested_segfault.sh]: test for nested user-defined types
./exec.sh: line 34: 13499 Done                    echo "$1"
     13500 Bus Error               (core dumped) | $cmd $ln_opts -r tmp.rulebase -e json > test.out
FAIL usrdef_nested_segfault.sh (exit status: 138)

SKIP: parser_whitespace.sh
==========================

Using valgrind: no
platform: SunOS unstable10s 5.10 Generic_150400-17 sun4v sparc SUNW,SPARC-Enterprise-T5220 Solaris
This looks like solaris 10, we disable known-failing tests to
permit OpenCSW to build packages. However, this are real failures
and so a fix should be done as soon as time permits.
SKIP parser_whitespace.sh (exit status: 77)

SKIP: parser_LF.sh
==================

Using valgrind: no
platform: SunOS unstable10s 5.10 Generic_150400-17 sun4v sparc SUNW,SPARC-Enterprise-T5220 Solaris
This looks like solaris 10, we disable known-failing tests to
permit OpenCSW to build packages. However, this are real failures
and so a fix should be done as soon as time permits.
SKIP parser_LF.sh (exit status: 77)

SKIP: field_string.sh
=====================

Using valgrind: no
platform: SunOS unstable10s 5.10 Generic_150400-17 sun4v sparc SUNW,SPARC-Enterprise-T5220 Solaris
This looks like solaris 10, we disable known-failing tests to
permit OpenCSW to build packages. However, this are real failures
and so a fix should be done as soon as time permits.
SKIP field_string.sh (exit status: 77)

SKIP: field_string_perm_chars.sh
================================

Using valgrind: no
platform: SunOS unstable10s 5.10 Generic_150400-17 sun4v sparc SUNW,SPARC-Enterprise-T5220 Solaris
This looks like solaris 10, we disable known-failing tests to
permit OpenCSW to build packages. However, this are real failures
and so a fix should be done as soon as time permits.
SKIP field_string_perm_chars.sh (exit status: 77)

SKIP: field_string_lazy_matching.sh
===================================

Using valgrind: no
platform: SunOS unstable10s 5.10 Generic_150400-17 sun4v sparc SUNW,SPARC-Enterprise-T5220 Solaris
This looks like solaris 10, we disable known-failing tests to
permit OpenCSW to build packages. However, this are real failures
and so a fix should be done as soon as time permits.
SKIP field_string_lazy_matching.sh (exit status: 77)

SKIP: field_string_doc_sample_lazy.sh
=====================================

Using valgrind: no
platform: SunOS unstable10s 5.10 Generic_150400-17 sun4v sparc SUNW,SPARC-Enterprise-T5220 Solaris
This looks like solaris 10, we disable known-failing tests to
permit OpenCSW to build packages. However, this are real failures
and so a fix should be done as soon as time permits.
SKIP field_string_doc_sample_lazy.sh (exit status: 77)

SKIP: field_whitespace.sh
=========================

Using valgrind: no
platform: SunOS unstable10s 5.10 Generic_150400-17 sun4v sparc SUNW,SPARC-Enterprise-T5220 Solaris
This looks like solaris 10, we disable known-failing tests to
permit OpenCSW to build packages. However, this are real failures
and so a fix should be done as soon as time permits.
SKIP field_whitespace.sh (exit status: 77)

SKIP: rule_last_str_long.sh
===========================

Using valgrind: no
platform: SunOS unstable10s 5.10 Generic_150400-17 sun4v sparc SUNW,SPARC-Enterprise-T5220 Solaris
This looks like solaris 10, we disable known-failing tests to
permit OpenCSW to build packages. However, this are real failures
and so a fix should be done as soon as time permits.
SKIP rule_last_str_long.sh (exit status: 77)

SKIP: field_whitespace_jsoncnf.sh
=================================

Using valgrind: no
platform: SunOS unstable10s 5.10 Generic_150400-17 sun4v sparc SUNW,SPARC-Enterprise-T5220 Solaris
This looks like solaris 10, we disable known-failing tests to
permit OpenCSW to build packages. However, this are real failures
and so a fix should be done as soon as time permits.
SKIP field_whitespace_jsoncnf.sh (exit status: 77)

FAIL: field_cef.sh
==================

Using valgrind: no
===============================================================================
[field_cef.sh]: test for CEF parser
Out:
{ "f": { "DeviceVendor": "Vendor", "DeviceProduct": "Product", "DeviceVersion": "Version", "SignatureID": "Signature ID", "Name": "some name", "Severity": "Severity", "Extensions": { "aa": "field1", "bb": "this is a value", "cc": "field 3" } } }
Out:
{ "f": { "DeviceVendor": "Vendor", "DeviceProduct": "Product|1|\\", "DeviceVersion": "Version", "SignatureID": "Signature ID", "Name": "some name", "Severity": "Severity", "Extensions": { "aa": "field1", "bb": "this is a name=value", "cc": "field 3" } } }
Out:
{ "f": { "DeviceVendor": "Vendor", "DeviceProduct": "Product", "DeviceVersion": "Version", "SignatureID": "Signature ID", "Name": "some name", "Severity": "Severity", "Extensions": { "aa": "field1", "bb": "this is a = value", "cc": "field 3" } } }
Out:
{ "f": { "DeviceVendor": "Vendor", "DeviceProduct": "Product", "DeviceVersion": "Version", "SignatureID": "Signature ID", "Name": "some name", "Severity": "Severity", "Extensions": { } } }
Out:
{ "f": { "DeviceVendor": "Vendor", "DeviceProduct": "Product", "DeviceVersion": "Version", "SignatureID": "Signature ID", "Name": "some name", "Severity": "Severity", "Extensions": { "name": "value" } } }
Out:
{ "f": { "DeviceVendor": "Vendor", "DeviceProduct": "Product", "DeviceVersion": "Version", "SignatureID": "Signature ID", "Name": "some name", "Severity": "Severity", "Extensions": { "name": "val\nue" } } }
Out:
{ "originalmsg": "CEF:0|Vendor|Product|Version|Signature ID|some name|Severity| n,me=value", "unparsed-data": "CEF:0|Vendor|Product|Version|Signature ID|some name|Severity| n,me=value" }
Out:
{ "originalmsg": "CEF:0|Vendor|Product|Version|Signature ID|some name|Severity| name=v\\alue", "unparsed-data": "CEF:0|Vendor|Product|Version|Signature ID|some name|Severity| name=v\\alue" }
Out:
{ "originalmsg": "CEF:0|V\\endor|Product|Version|Signature ID|some name|Severity| name=value", "unparsed-data": "CEF:0|V\\endor|Product|Version|Signature ID|some name|Severity| name=value" }
Out:
{ "f": { "DeviceVendor": "Vendor", "DeviceProduct": "Product", "DeviceVersion": "Version", "SignatureID": "Signature ID", "Name": "some name", "Severity": "Severity", "Extensions": { } } }
Out:
{ "originalmsg": "CEF:0|Vendor|Product|Version|Signature ID|some name|Severity|   ", "unparsed-data": "CEF:0|Vendor|Product|Version|Signature ID|some name|Severity|   " }
JSONs weren't equal. 
	Expected: 
		{ "f": { "DeviceVendor": "Vendor", "DeviceProduct": "Product", "DeviceVersion": "Version", "SignatureID": "Signature ID", "Name": "some name", "Severity": "Severity", "Extensions": { } } }
	Actual: 
		{ "originalmsg": "CEF:0|Vendor|Product|Version|Signature ID|some name|Severity|   ", "unparsed-data": "CEF:0|Vendor|Product|Version|Signature ID|some name|Severity|   " }
FAIL field_cef.sh (exit status: 1)

FAIL: field_cef_jsoncnf.sh
==========================

Using valgrind: no
===============================================================================
[field_cef_jsoncnf.sh]: test for CEF parser
Out:
{ "f": { "DeviceVendor": "Vendor", "DeviceProduct": "Product", "DeviceVersion": "Version", "SignatureID": "Signature ID", "Name": "some name", "Severity": "Severity", "Extensions": { "aa": "field1", "bb": "this is a value", "cc": "field 3" } } }
Out:
{ "f": { "DeviceVendor": "Vendor", "DeviceProduct": "Product|1|\\", "DeviceVersion": "Version", "SignatureID": "Signature ID", "Name": "some name", "Severity": "Severity", "Extensions": { "aa": "field1", "bb": "this is a name=value", "cc": "field 3" } } }
Out:
{ "f": { "DeviceVendor": "Vendor", "DeviceProduct": "Product", "DeviceVersion": "Version", "SignatureID": "Signature ID", "Name": "some name", "Severity": "Severity", "Extensions": { "aa": "field1", "bb": "this is a = value", "cc": "field 3" } } }
Out:
{ "f": { "DeviceVendor": "Vendor", "DeviceProduct": "Product", "DeviceVersion": "Version", "SignatureID": "Signature ID", "Name": "some name", "Severity": "Severity", "Extensions": { } } }
Out:
{ "f": { "DeviceVendor": "Vendor", "DeviceProduct": "Product", "DeviceVersion": "Version", "SignatureID": "Signature ID", "Name": "some name", "Severity": "Severity", "Extensions": { "name": "value" } } }
Out:
{ "f": { "DeviceVendor": "Vendor", "DeviceProduct": "Product", "DeviceVersion": "Version", "SignatureID": "Signature ID", "Name": "some name", "Severity": "Severity", "Extensions": { "name": "val\nue" } } }
Out:
{ "originalmsg": "CEF:0|Vendor|Product|Version|Signature ID|some name|Severity| n,me=value", "unparsed-data": "CEF:0|Vendor|Product|Version|Signature ID|some name|Severity| n,me=value" }
Out:
{ "originalmsg": "CEF:0|Vendor|Product|Version|Signature ID|some name|Severity| name=v\\alue", "unparsed-data": "CEF:0|Vendor|Product|Version|Signature ID|some name|Severity| name=v\\alue" }
Out:
{ "originalmsg": "CEF:0|V\\endor|Product|Version|Signature ID|some name|Severity| name=value", "unparsed-data": "CEF:0|V\\endor|Product|Version|Signature ID|some name|Severity| name=value" }
Out:
{ "f": { "DeviceVendor": "Vendor", "DeviceProduct": "Product", "DeviceVersion": "Version", "SignatureID": "Signature ID", "Name": "some name", "Severity": "Severity", "Extensions": { } } }
Out:
{ "originalmsg": "CEF:0|Vendor|Product|Version|Signature ID|some name|Severity|   ", "unparsed-data": "CEF:0|Vendor|Product|Version|Signature ID|some name|Severity|   " }
JSONs weren't equal. 
	Expected: 
		{ "f": { "DeviceVendor": "Vendor", "DeviceProduct": "Product", "DeviceVersion": "Version", "SignatureID": "Signature ID", "Name": "some name", "Severity": "Severity", "Extensions": { } } }
	Actual: 
		{ "originalmsg": "CEF:0|Vendor|Product|Version|Signature ID|some name|Severity|   ", "unparsed-data": "CEF:0|Vendor|Product|Version|Signature ID|some name|Severity|   " }
FAIL field_cef_jsoncnf.sh (exit status: 1)

FAIL: field_checkpoint-lea-terminator.sh
========================================

Using valgrind: no
===============================================================================
[field_checkpoint-lea-terminator.sh]: test for Checkpoint LEA parser
Out:
{ "originalmsg": "[ tcp_flags: RST-ACK; src: 192.168.0.1; ]", "unparsed-data": "tcp_flags: RST-ACK; src: 192.168.0.1; ]" }
JSONs weren't equal. 
	Expected: 
		{ "f": { "tcp_flags": "RST-ACK", "src": "192.168.0.1" } }
	Actual: 
		{ "originalmsg": "[ tcp_flags: RST-ACK; src: 192.168.0.1; ]", "unparsed-data": "tcp_flags: RST-ACK; src: 192.168.0.1; ]" }
FAIL field_checkpoint-lea-terminator.sh (exit status: 1)

SKIP: field_float-fmt_number.sh
===============================

Using valgrind: no
platform: SunOS unstable10s 5.10 Generic_150400-17 sun4v sparc SUNW,SPARC-Enterprise-T5220 Solaris
This looks like solaris 10, we disable known-failing tests to
permit OpenCSW to build packages. However, this are real failures
and so a fix should be done as soon as time permits.
SKIP field_float-fmt_number.sh (exit status: 77)

SKIP: field_hexnumber_v1.sh
===========================

Using valgrind: no
platform: SunOS unstable10s 5.10 Generic_150400-17 sun4v sparc SUNW,SPARC-Enterprise-T5220 Solaris
This looks like solaris 10, we disable known-failing tests to
permit OpenCSW to build packages. However, this are real failures
and so a fix should be done as soon as time permits.
SKIP field_hexnumber_v1.sh (exit status: 77)

SKIP: field_kernel_timestamp_v1.sh
==================================

Using valgrind: no
platform: SunOS unstable10s 5.10 Generic_150400-17 sun4v sparc SUNW,SPARC-Enterprise-T5220 Solaris
This looks like solaris 10, we disable known-failing tests to
permit OpenCSW to build packages. However, this are real failures
and so a fix should be done as soon as time permits.
SKIP field_kernel_timestamp_v1.sh (exit status: 77)

SKIP: field_whitespace_v1.sh
============================

Using valgrind: no
platform: SunOS unstable10s 5.10 Generic_150400-17 sun4v sparc SUNW,SPARC-Enterprise-T5220 Solaris
This looks like solaris 10, we disable known-failing tests to
permit OpenCSW to build packages. However, this are real failures
and so a fix should be done as soon as time permits.
SKIP field_whitespace_v1.sh (exit status: 77)

SKIP: field_rest_v1.sh
======================

Using valgrind: no
platform: SunOS unstable10s 5.10 Generic_150400-17 sun4v sparc SUNW,SPARC-Enterprise-T5220 Solaris
This looks like solaris 10, we disable known-failing tests to
permit OpenCSW to build packages. However, this are real failures
and so a fix should be done as soon as time permits.
SKIP field_rest_v1.sh (exit status: 77)

SKIP: field_duration_v1.sh
==========================

Using valgrind: no
platform: SunOS unstable10s 5.10 Generic_150400-17 sun4v sparc SUNW,SPARC-Enterprise-T5220 Solaris
This looks like solaris 10, we disable known-failing tests to
permit OpenCSW to build packages. However, this are real failures
and so a fix should be done as soon as time permits.
SKIP field_duration_v1.sh (exit status: 77)

SKIP: field_float_v1.sh
=======================

Using valgrind: no
platform: SunOS unstable10s 5.10 Generic_150400-17 sun4v sparc SUNW,SPARC-Enterprise-T5220 Solaris
This looks like solaris 10, we disable known-failing tests to
permit OpenCSW to build packages. However, this are real failures
and so a fix should be done as soon as time permits.
SKIP field_float_v1.sh (exit status: 77)

SKIP: field_tokenized.sh
========================

Using valgrind: no
platform: SunOS unstable10s 5.10 Generic_150400-17 sun4v sparc SUNW,SPARC-Enterprise-T5220 Solaris
This looks like solaris 10, we disable known-failing tests to
permit OpenCSW to build packages. However, this are real failures
and so a fix should be done as soon as time permits.
SKIP field_tokenized.sh (exit status: 77)

SKIP: field_recursive.sh
========================

Using valgrind: no
platform: SunOS unstable10s 5.10 Generic_150400-17 sun4v sparc SUNW,SPARC-Enterprise-T5220 Solaris
This looks like solaris 10, we disable known-failing tests to
permit OpenCSW to build packages. However, this are real failures
and so a fix should be done as soon as time permits.
SKIP field_recursive.sh (exit status: 77)

SKIP: field_tokenized_recursive.sh
==================================

Using valgrind: no
platform: SunOS unstable10s 5.10 Generic_150400-17 sun4v sparc SUNW,SPARC-Enterprise-T5220 Solaris
This looks like solaris 10, we disable known-failing tests to
permit OpenCSW to build packages. However, this are real failures
and so a fix should be done as soon as time permits.
SKIP field_tokenized_recursive.sh (exit status: 77)

SKIP: field_interpret.sh
========================

Using valgrind: no
platform: SunOS unstable10s 5.10 Generic_150400-17 sun4v sparc SUNW,SPARC-Enterprise-T5220 Solaris
This looks like solaris 10, we disable known-failing tests to
permit OpenCSW to build packages. However, this are real failures
and so a fix should be done as soon as time permits.
SKIP field_interpret.sh (exit status: 77)

SKIP: field_descent.sh
======================

Using valgrind: no
platform: SunOS unstable10s 5.10 Generic_150400-17 sun4v sparc SUNW,SPARC-Enterprise-T5220 Solaris
This looks like solaris 10, we disable known-failing tests to
permit OpenCSW to build packages. However, this are real failures
and so a fix should be done as soon as time permits.
SKIP field_descent.sh (exit status: 77)

SKIP: field_descent_with_invalid_ruledef.sh
===========================================

Using valgrind: no
platform: SunOS unstable10s 5.10 Generic_150400-17 sun4v sparc SUNW,SPARC-Enterprise-T5220 Solaris
This looks like solaris 10, we disable known-failing tests to
permit OpenCSW to build packages. However, this are real failures
and so a fix should be done as soon as time permits.
SKIP field_descent_with_invalid_ruledef.sh (exit status: 77)

SKIP: field_suffixed.sh
=======================

Using valgrind: no
platform: SunOS unstable10s 5.10 Generic_150400-17 sun4v sparc SUNW,SPARC-Enterprise-T5220 Solaris
This looks like solaris 10, we disable known-failing tests to
permit OpenCSW to build packages. However, this are real failures
and so a fix should be done as soon as time permits.
SKIP field_suffixed.sh (exit status: 77)

FAIL: field_cisco-interface-spec-at-EOL.sh
==========================================

Using valgrind: no
===============================================================================
[field_cisco-interface-spec-at-EOL.sh]: test for cisco-interface-spec-at-EOL syntax
Out:
{ "r": " end", "field": { "interface": "outside", "ip": "192.0.2.1", "port": "50349" } }
Out:
{ "r": "", "field": null }
JSONs weren't equal. 
	Expected: 
		{ "r": "", "field": { "interface": "outside", "ip": "192.0.2.1", "port": "50349" } }
	Actual: 
		{ "r": "", "field": null }
FAIL field_cisco-interface-spec-at-EOL.sh (exit status: 1)

SKIP: field_regex_default_group_parse_and_return.sh
===================================================

Using valgrind: no
platform: SunOS unstable10s 5.10 Generic_150400-17 sun4v sparc SUNW,SPARC-Enterprise-T5220 Solaris
This looks like solaris 10, we disable known-failing tests to
permit OpenCSW to build packages. However, this are real failures
and so a fix should be done as soon as time permits.
SKIP field_regex_default_group_parse_and_return.sh (exit status: 77)

SKIP: field_regex_with_consume_group.sh
=======================================

Using valgrind: no
platform: SunOS unstable10s 5.10 Generic_150400-17 sun4v sparc SUNW,SPARC-Enterprise-T5220 Solaris
This looks like solaris 10, we disable known-failing tests to
permit OpenCSW to build packages. However, this are real failures
and so a fix should be done as soon as time permits.
SKIP field_regex_with_consume_group.sh (exit status: 77)

SKIP: field_regex_with_consume_group_and_return_group.sh
========================================================

Using valgrind: no
platform: SunOS unstable10s 5.10 Generic_150400-17 sun4v sparc SUNW,SPARC-Enterprise-T5220 Solaris
This looks like solaris 10, we disable known-failing tests to
permit OpenCSW to build packages. However, this are real failures
and so a fix should be done as soon as time permits.
SKIP field_regex_with_consume_group_and_return_group.sh (exit status: 77)

SKIP: field_regex_with_negation.sh
==================================

Using valgrind: no
platform: SunOS unstable10s 5.10 Generic_150400-17 sun4v sparc SUNW,SPARC-Enterprise-T5220 Solaris
This looks like solaris 10, we disable known-failing tests to
permit OpenCSW to build packages. However, this are real failures
and so a fix should be done as soon as time permits.
SKIP field_regex_with_negation.sh (exit status: 77)

SKIP: field_tokenized_with_regex.sh
===================================

Using valgrind: no
platform: SunOS unstable10s 5.10 Generic_150400-17 sun4v sparc SUNW,SPARC-Enterprise-T5220 Solaris
This looks like solaris 10, we disable known-failing tests to
permit OpenCSW to build packages. However, this are real failures
and so a fix should be done as soon as time permits.
SKIP field_tokenized_with_regex.sh (exit status: 77)