Re: [Sguil-users] [Fwd: Re: snort statistics]

[Bamm V. <bam...@gm...>]

It looks like you may have a blank line in your stats file. Can you check?

Bammkkkk

On 9/15/06, Sean Macleod <sea...@gm...> wrote:
>
>
> Here is the output from running in the foreground with DEBUG=1
>
>
> Error: expected integer but got ""
>      while executing
> "clock format [lindex $dataList 0] -gmt true -f "%Y-%m-%d %T""
>      (procedure "ProcessSnortStats" line 15)
>      invoked from within
> "ProcessSnortStats $data"
>      (procedure "ReadSnortStats" line 20)
>      invoked from within
> "ReadSnortStats file5"
>
> Bamm Visscher wrote:
> > Can you send the error that sensor_agent dies with?  Run it in the
> > foreground w/debug on if possible.
> >
> > Bammkkkk
> >
> >
> > On 9/11/06, Sean Macleod <sea...@gm...> wrote:
> >> Hello everyone
> >> I am trying to get my snort statistics to work
> >>
> >> can someone tell me the correct line for my snort.conf ?
> >> preprocessor perfmonitor: time 300 file
> >> /export/home/nsm_data/snort_data/silver-bge1/snort.stats pktcnt 10000
> >>
> >> I am running 2.4.5
> >> a lline from my snort stats currently look like this
> >>
> >> 1157425104,0.000,2.0,0.1,0.3,849,4.25,1.6,1.6,0.0,0.0,0,0,0.0,0,0,0.0,0.0,0.0,0.0,0.0,0.0,0,0,0,0,1,0.3,0.0,99.6,2.02,0.00,0.00,0.00,2.02,849,0,0,0,849,0.30,0.00,0.00,0.00,0.30,89992,0
> >>
> >>
> >> sguil_agent.tk does not like it and dies
> >>
> >> thanks for your help
> >>
> >> Sean
> >>
> >> -------------------------------------------------------------------------
> >> Using Tomcat but need to do more? Need to support web services, security?
> >> Get stuff done quickly with pre-integrated technology to make your job
> >> easier
> >> Download IBM WebSphere Application Server v.1.0.1 based on Apache
> >> Geronimo
> >> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
> >> _______________________________________________
> >> Sguil-users mailing list
> >> Sgu...@li...
> >> https://lists.sourceforge.net/lists/listinfo/sguil-users
> >>
> >
> >
>
>
>
> -------------------------------------------------------------------------
> Using Tomcat but need to do more? Need to support web services, security?
> Get stuff done quickly with pre-integrated technology to make your job easier
> Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
> _______________________________________________
> Sguil-users mailing list
> Sgu...@li...
> https://lists.sourceforge.net/lists/listinfo/sguil-users
>


-- 
sguil - The Analyst Console for NSM
http://sguil.sf.net