Project

General

Profile

Actions
Copy link

Support #4084

closed

Is there a way to debug the lua script?

Added by Arafat Ali over 3 years ago. Updated over 3 years ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Affected Versions:
Label:

Description

I have seen this closed issue regarding to debugging lua script https://redmine.openinfosecfoundation.org/issues/3384, since it's closed I couldn't ask for clarification. My upgraded question from that previous issue is, how do I read this lua debugging script for example if syntax error is found, where can I read this log file ? I thought it would be at suricata.log but I found no entry there.

Actions
Copy link
 #1

Updated by Andreas Herz over 3 years ago

  • Priority changed from High to Normal

How does your suricata.yaml look like, escpecially the loglevel?

Actions
Copy link
 #2

Updated by Arafat Ali over 3 years ago

Is this the one ?

logging:
  # The default log level: can be overridden in an output section.
  # Note that debug level logging will only be emitted if Suricata was
  # compiled with the --enable-debug configure option.
  #
  # This value is overridden by the SC_LOG_LEVEL env var.
  default-log-level: notice
Actions
Copy link
 #3

Updated by Arafat Ali over 3 years ago

Reading from the logging instruction, it said that I need to build suricata with --enable-debug in order to see the runtime error? Normally where would the log file will be located for this runtime error.

Actions
Copy link
 #4

Updated by Arafat Ali over 3 years ago

Ok, I think I got it, the whole report will be generated only when suricata detected a new suspicious activity, so the init function there won't be running. Solved this issue.

Actions
Copy link
 #5

Updated by Andreas Herz over 3 years ago

  • Status changed from New to Closed
Actions
Copy link

Also available in: Atom PDF