[Snort-openappid] Failed to add hash

Y M snort at ...46...
Mon Oct 27 11:22:11 EDT 2014


Sure, all of the pcaps that caused the error will be forwarded off list in a minute.

I saw the other errors posted as well just thought mentioning them may help troubleshooting.

Thanks.
YM

From: ckleopa at ...5...
To: snort at ...46...; snort-openappid at lists.sourceforge.net
Date: Mon, 27 Oct 2014 14:59:11 +0000
CC: dchahal at ...5...
Subject: Re: [Snort-openappid] Failed to add hash






YM.



Can you get us a pcap for the one that causes the error on the "Failed to add to hash”



Regarding the other issues, with the getShortHostFormat and the missing appid, we were aware of them and we will be posting them in a future release.



Thanks
Costas








From: Y M <snort at ...46...>

Date: Sunday, October 26, 2014 at 12:34 PM

To: "snort-openappid at lists.sourceforge.net" <snort-openappid at ...12...rge.net>

Subject: [Snort-openappid] Failed to add hash







Running Snort  through a set of pcaps and on some of them there is this message:




Failed to add to hash: 192.168.73.254:17:67
Add service failed to create stateFailed to add to hash: 192.168.73.254:17:67




I am also getting: invalid appid in appStatRecord (545), plus (506) and (1112).



Finally, there is this one too:



client /usr/local/snort/cisco/odp/lua/client_tds.lua: error validating [string ""]:151: attempt to call global 'getShortHostFormat' (a nil value).



Downloaded the snort-openappid.tar.gz tarball earlier today.



Thanks
YM







------------------------------------------------------------------------------
_______________________________________________
Snort-openappid mailing list
Snort-openappid at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-openappid

Please visit http://blog.snort.org to stay current on all the latest Snort news! 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-openappid/attachments/20141027/f5ad3070/attachment.html>


More information about the Snort-openappid mailing list