Closed ghost closed 7 years ago
Contents of the sensor table.
mysql> select * from sensor;
+-----+--------------------+---------------------+------------+--------+--------+----------+----------+----------------+------------+--------------+
| sid | name | hostname | interface | filter | detail | encoding | last_cid | pending_delete | updated_at | events_count |
+-----+--------------------+---------------------+------------+--------+--------+----------+----------+----------------+------------+--------------+
| 1 | Click To Change Me | firewall:bond0.1 | bond0.1 | NULL | 1 | 0 | 1 | 0 | NULL | 0 |
| 2 | Click To Change Me | firewall:bond0.1194 | bond0.1194 | NULL | 1 | 0 | 1 | 0 | NULL | 0 |
| 3 | Click To Change Me | firewall:bond0.1198 | bond0.1198 | NULL | 1 | 0 | 1 | 0 | NULL | 0 |
| 4 | Click To Change Me | firewall:bond0.1201 | bond0.1201 | NULL | 1 | 0 | 1 | 0 | NULL | 0 |
| 5 | Click To Change Me | firewall:bond0.1200 | bond0.1200 | NULL | 1 | 0 | 1 | 0 | NULL | 0 |
| 6 | Click To Change Me | firewall:bond0.1204 | bond0.1204 | NULL | 1 | 0 | 1 | 0 | NULL | 0 |
| 7 | Click To Change Me | firewall:bond0.1206 | bond0.1206 | NULL | 1 | 0 | 1 | 0 | NULL | 0 |
| 8 | Click To Change Me | firewall:bond0.1199 | bond0.1199 | NULL | 1 | 0 | 1 | 0 | NULL | 0 |
| 9 | Click To Change Me | firewall:bond0.1205 | bond0.1205 | NULL | 1 | 0 | 1 | 0 | NULL | 0 |
| 10 | Click To Change Me | firewall:bond0.100 | bond0.100 | NULL | 1 | 0 | 1 | 0 | NULL | 0 |
| 11 | Click To Change Me | firewall:bond0.1202 | bond0.1202 | NULL | 1 | 0 | 1 | 0 | NULL | 0 |
| 12 | Click To Change Me | firewall:bond0.1195 | bond0.1195 | NULL | 1 | 0 | 1 | 0 | NULL | 0 |
| 13 | Click To Change Me | firewall:bond0.1196 | bond0.1196 | NULL | 1 | 0 | 1 | 0 | NULL | 0 |
| 14 | Click To Change Me | firewall:bond0.1197 | bond0.1197 | NULL | 1 | 0 | 1 | 0 | NULL | 0 |
| 15 | Click To Change Me | firewall:bond0.1203 | bond0.1203 | NULL | 1 | 0 | 1 | 0 | NULL | 0 |
+-----+--------------------+---------------------+------------+--------+--------+----------+----------+----------------+------------+--------------+
15 rows in set (0.00 sec)
Weird, after re-naming the sensors the error has gone away. I did restart apache and passenger so, possibly a dirty or broken cache?
I've tried a hard reset on the Snorby database and it's still not working properly. It works when there are no events in the database. Once events get created it starts having this problem.
Looks like a sensor event_count is showing up as nil?
HEAD detached at v2.6.2 ruby 1.9.3p551 (2014-11-13 revision 48407) [x86_64-linux] mysqld Ver 5.5.47-0+deb8u1 for debian-linux-gnu on x86_64 ((Debian))