Project

General

Profile

Actions
Copy link

Bug #513

closed

yaml parsing -- line number wrong

Added by Peter Manev over 11 years ago. Updated over 11 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Victor Julien
Target version:
1.3.1
Affected Versions:
Effort:
Difficulty:
Label:

Description

Stumbled upon an interesting situation -

@suricata:~$ sudo suricata -D  -c  /etc/suricata/peter-yaml/suricata-af-packet-mmap.yaml --af-packet=eth3
[20831] 28/7/2012 -- 15:41:18 - (suricata.c:1206) <Info> (main) -- This is Suricata version 1.3dev (rev 43fce1e)
[20831] 28/7/2012 -- 15:41:18 - (util-cpu.c:171) <Info> (UtilCpuPrintSummary) -- CPUs/cores online: 16
Failed to parse configuration file at line 558: could not find expected ':'

however the problem was with line 524 (in my yaml) where I had :

icmp:
 new: 30
 established: 300
 emergency-new: 10
 emergency-established:5 - THE problem

was that it should have been:

emergency-established: 5  ( a space after the ":")

but the line numbering in reporting the err was totally off.

Actions
Copy link
 #1

Updated by Victor Julien over 11 years ago

  • Subject changed from yaml parsing to yaml parsing -- line number wrong
  • Description updated (diff)
  • Assignee set to OISF Dev
  • Target version set to 1.3.1
  • Estimated time set to 1.00 h
Actions
Copy link
 #2

Updated by Victor Julien over 11 years ago

  • Status changed from New to Assigned
  • Assignee changed from OISF Dev to Victor Julien

I checked, and get the same error. The line number is correct though. Can you attach a yaml for which the line number is misreported?

Actions
Copy link
 #3

Updated by Victor Julien over 11 years ago

  • Status changed from Assigned to Closed

Not able to reproduce, assuming fixed. Please reopen if necessary.

Actions
Copy link

Also available in: Atom PDF