blob: 1dfd0769d266536664fe6bfd7ce5694ef3990be8 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
|
#!/usr/bin/env bash
set -xeuo pipefail
# Remove output of previous run
rm -rf shadow.data
# Run the simulation
shadow \
--model-unblocked-syscall-latency=true \
--log-level=debug \
--strace-logging-mode=standard \
--parallelism="$(nproc)" \
--template-directory=./shadow.data.template \
--progress=true \
--use-memory-manager=false \
shadow.yaml \
> shadow.log
# Check whether file transfers via arti inside the simulation succeeded
successes="$(grep -c stream-success shadow.data/hosts/articlient/articlient.tgen.1001.stdout || true)"
if [ "$successes" = 10 ]
then
echo "Simulation successful"
else
echo "Failed. Only got $successes successful streams."
fi
pushd shadow.data/hosts/articlient_bridge/
for PCAP in *.pcap; do
# verify all connection are either from/to the bridge, or local.
LEAK=$(tshark -r "$PCAP" 'ip.src != 100.0.0.2 && ip.dst != 100.0.0.2 && ip.dst != 127.0.0.0/8')
if [ "$LEAK" ]; then
echo "Found tcp leaks in PCAP: $PCAP"
echo "$LEAK"
exit 1
fi
done
DNS_LEAK=$(grep -l shadow_hostname_to_addr_ipv4 articlient_bridge.arti.*.strace || true)
if [ "$DNS_LEAK" ]; then
echo "Found DNS leaks in $DNS_LEAK"
exit 1
fi
popd
|
