search

arkime / arkime

Arkime is an open source, large scale, full packet capturing, indexing, and database system.
https://arkime.com
Apache License 2.0
6.33k stars 1.04k forks source link

a bug for interface #3007

Open zzwzds opened 2 days ago

zzwzds commented 2 days ago

Describe the bug I found a bug. After I stopped using Arkime for a while, there was often traffic but it seemed to be filtered by invisible filter conditions, resulting in no traffic on the interface. It was not until I changed the last 6 hours in the filter condition to something else and then changed it back that it became normal. ![Uploading _20241112093935.jpg…]()

Elasticsearch version: 7.17.6 Arkime/Moloch version: 5.4.0 OS name and version: ubantu22.04 How was Arkime/Moloch built/installed: (rpm, deb, easybutton, ...) deb

awick commented 2 days ago

The upload image is missing. What auth mode are you using? Any errors in the viewer.log or in the browser console log?

zzwzds commented 2 days ago

20241112093935

awick commented 2 days ago

That image just shows that there are 91k sessions in the DB, but 0 during the time frame. Doesn't look like a bug.

zzwzds commented 2 days ago

but when i modify the "last hour " to "last 6 hours" ,interface will show the data ,and then mody "last 6 hours" to "last hour ",will show the data during the last hour

awick commented 2 days ago

What if you just refresh, does that work? Are you sure that there isn't new data from the live capture? Can you provide screen shots of this and did you check the logs?