sebek scp log problems

[Jochen Vogel <jvogel () it-sec de>]

hi,

i do an sebeksniff after an scp transfer but the files are 0 bytes.

[root@snolin sebek]# /opt/packages/sebeksniff-2.0.1/sbdump.pl -s
192.168.0.163 
09:01:21-2003/04/08 SCP (remote)->local 1012207504 0 bytes
09:01:21-2003/04/08 SCP (remote)->local 1012207504 0 bytes
09:01:21-2003/04/08 SCP (remote)->local 1012207504 0 bytes
09:02:58-2003/04/08 SCP (remote)->local 1040139386 0 bytes
09:02:58-2003/04/08 SCP (remote)->local 1040139386 0 bytes
09:02:58-2003/04/08 SCP (remote)->local 1040139386 0 bytes
09:04:18-2003/04/08 SCP (remote)->local 1048065100 0 bytes
09:04:18-2003/04/08 SCP (remote)->local 1048065100 0 bytes
09:04:20-2003/04/08 SCP (remote)->local 1048065100 0 bytes
[root@snolin sebek]# ls -la
total 1380
drwxr-xr-x    2 root     root         4096 Apr  8 11:03 .
drwxr-xr-x    6 root     root         4096 Apr  8 10:42 ..
-rw-r--r--    1 root     root            0 Apr  8 11:09 1012207504
-rw-r--r--    1 root     root            0 Apr  8 11:09 1040139386
-rw-r--r--    1 root     root            0 Apr  8 11:09 1048065100
-rw-r--r--    1 root     root      1397937 Apr  8 11:03 192.168.0.163

whats wrong?

thx for help
jo