Suricata's flow_id is now a 64-bit unsigned integer, which causes an error when using the suricata_agent.tcl script due to the size of the unified_event_id and unified_event_ref columns in the MySQL database.
In my tests, changing those fields from INT to BIGINT fixed the problem although existing database tables would need to be modified or deleted/recreated.
Suricata's
flow_id
is now a 64-bit unsigned integer, which causes an error when using thesuricata_agent.tcl
script due to the size of theunified_event_id
andunified_event_ref
columns in the MySQL database.In my tests, changing those fields from INT to BIGINT fixed the problem although existing database tables would need to be modified or deleted/recreated.