Snort mailing list archives

Re: stats file format changed?


From: "Jefferson, Shawn" <Shawn.Jefferson () bcferries com>
Date: Wed, 11 Apr 2012 15:22:44 -0600

Thanks!  The problem is the extra comment line.  There is code in pmgraph.pl at line 684 in my version, that skips the 
line:

next if ($num_fields < 2);

changed it to:

next if ($num_fields < 2 || $line =~ m/#/);

and it seems to work now.


From: Russ Combs [mailto:rcombs () sourcefire com]
Sent: Wednesday, April 11, 2012 11:50 AM
To: Jefferson, Shawn
Cc: snort-users () lists sourceforge net
Subject: Re: [Snort-users] stats file format changed?


On Tue, Apr 10, 2012 at 7:46 PM, Jefferson, Shawn <Shawn.Jefferson () bcferries com<mailto:Shawn.Jefferson () bcferries 
com>> wrote:
Did the stats file format change from 2.9.0.5 to 2.9.2.2?  I have upgraded and notice that 
pmgraph.pl<http://pmgraph.pl> no longer is working.

Yes, I think it changed a few times.  In addition to new fields, it now has updated comment lines that specify the 
names of all the csv fields.




------------------------------------------------------------------------------
Better than sec? Nothing is better than sec when it comes to
monitoring Big Data applications. Try Boundary one-second
resolution app monitoring today. Free.
http://p.sf.net/sfu/Boundary-dev2dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net<mailto:Snort-users () lists sourceforge net>
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

------------------------------------------------------------------------------
Better than sec? Nothing is better than sec when it comes to
monitoring Big Data applications. Try Boundary one-second 
resolution app monitoring today. Free.
http://p.sf.net/sfu/Boundary-dev2dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Current thread: