[Snort-openappid] Troubleshooting _errors and invalid aphid

Costas Kleopa (ckleopa) ckleopa at ...5...
Sun Oct 26 12:38:01 EDT 2014


Thanks for the update. We will bug the issue and provide a fix for it in the near future. 

Thanks,
Costas

> On Oct 26, 2014, at 10:16 AM, James <jlay at ...45...> wrote:
> 
> More errors after running for a few days:
> 
> Oct 25 19:33:11 gateway snort[6114]: client /opt/share/odp/lua/client_tds.lua: error validating [string ""]:151: attempt to call global 'getShortHostFormat' (a nil value)
> 
> I can’t see where this has made any impact.  Thanks all.
> 
> James
> 
>> On Oct 24, 2014, at 13:12, James <jlay at ...45...> wrote:
>> 
>> Yes indeed…I downloaded it this morning…thank you.
>> 
>> James
>> 
>>> On Oct 24, 2014, at 13:07, Costas Kleopa (ckleopa) <ckleopa at ...5...> wrote:
>>> 
>>> Thank you for your feedback.
>>> 
>>> I am assuming you are using the latest detectors from the
>>> snort-openappid.tar.gz
>>> https://www.snort.org/downloads/ right?
>>> 
>>> 
>>> If so, we will work on replicating it and open a bug for it for a fix on
>>> our next openappid-detectors release.
>>> 
>>> Thanks
>>> Costas
>>> 
>>> 
>>>> On 10/24/14, 2:58 PM, "James" <jlay at ...45...> wrote:
>>>> 
>>>> Hey All,
>>>> 
>>>> Subject says it..here¹s an example:
>>>> 
>>>> Oct 24 12:55:09 gateway snort[19302]: invalid appid in appStatRecord
>>>> (1112)
>>>> 
>>>> and
>>>> 
>>>> -----------
>>>>    App:__error
>>>>    bytes_out: 9492
>>>>    bytes_in: 55014
>>>> -----------  
>>>> 
>>>> Any hints on where to look for the cause of these?  Thank you.
>>>> 
>>>> James
>>>> --------------------------------------------------------------------------
>>>> ----
>>>> _______________________________________________
>>>> Snort-openappid mailing list
>>>> Snort-openappid at lists.sourceforge.net
>>>> https://lists.sourceforge.net/lists/listinfo/snort-openappid
>>>> 
>>>> Please visit http://blog.snort.org to stay current on all the latest
>>>> Snort news!
> 
> 
> ------------------------------------------------------------------------------
> _______________________________________________
> Snort-openappid mailing list
> Snort-openappid at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-openappid
> 
> Please visit http://blog.snort.org to stay current on all the latest Snort news!




More information about the Snort-openappid mailing list