Menu

#15 portscan data retrieval fails

open
nobody
None
5
2004-04-16
2004-04-16
No

I recently upgraded to SGUIL 0.3.1 and noticed that
retrieval of portscan data no longer works. I believe,
but cannot confirm, that this worked immediately after
my upgrade, but within the last few days has just
stopped working.

When I highlight an spp_portscan event in the interface
and check "Display Portscan Data" with a default max
rows of 200, nothing is returned. The following is
immediately displayed in the shell that I launched the
client from:
"Server Command Recieved: PSDataResults DONE"
Again, this is immediate, and there's no waiting at all.

This would indicate to me that there may be a problem
within sguild rather than the client, but it's
difficult to say. I went into MySQL and manually
confirmed the existence of data for that IP address /
date combination., so the data is there.

Discussion


Log in to post a comment.

MongoDB Logo MongoDB