Re: [Prelude Hybrid IDS] #140: Prewikka heartbeat problem

#140: Prewikka heartbeat problem
-----------------------+----------------------------------------------------
 Reporter:  anonymous  |        Owner:  yoann   
     Type:  defect     |       Status:  assigned
 Priority:  normal     |    Milestone:          
Component:  prewikka   |      Version:  0.9     
 Severity:  major      |   Resolution:          
 Keywords:             |  
-----------------------+----------------------------------------------------
Comment (by anonymous):

 Hi,


 {{{
 0.000846s SELECT name, version from _format
 0.005377s SELECT t0.analyzerid FROM Prelude_Heartbeat AS top_table LEFT
 JOIN Prelude_Analyzer AS t0 ON (t0._parent_type='H' AND
 t0._message_ident=top_table._ident AND t0._index = -1) GROUP BY 1
 0.003533s SELECT DISTINCT(top_table._ident), t0.time, t0.gmtoff, t0.usec
 FROM Prelude_Heartbeat AS top_table LEFT JOIN Prelude_CreateTime AS t0 ON
 (t0._parent_type='H' AND t0._message_ident=top_table._ident) LEFT JOIN
 Prelude_Analyzer AS t1 ON (t1._parent_type='H' AND
 t1._message_ident=top_table._ident AND t1._index = -1) WHERE t1.analyzerid
 = '2518527016165437' ORDER BY 2 DESC LIMIT 1
 0.000530s SELECT messageid, heartbeat_interval FROM Prelude_Heartbeat
 WHERE _ident = 1
 0.001615s SELECT analyzerid, name, manufacturer, model, version, class,
 ostype, osversion FROM Prelude_Analyzer WHERE _parent_type = 'H' AND
 _message_ident = 1 AND _index != -1 ORDER BY _index ASC
 0.001147s SELECT ident, category, location, name FROM Prelude_Node WHERE
 _parent_type = 'H' AND _message_ident = 1 AND _parent0_index = 0
 0.000910s SELECT ident, name, pid, path FROM Prelude_Process WHERE
 _parent_type = 'H' AND _message_ident = 1 AND _parent0_index = 0
 0.000904s SELECT arg FROM Prelude_ProcessArg WHERE _parent_type = 'H' AND
 _message_ident = 1 AND _parent0_index = 0 AND _index != -1 ORDER BY _index
 ASC
 0.000859s SELECT env FROM Prelude_ProcessEnv WHERE _parent_type = 'H' AND
 _message_ident = 1 AND _parent0_index = 0 AND _index != -1 ORDER BY _index
 ASC
 0.000519s SELECT time, gmtoff, usec FROM Prelude_CreateTime WHERE
 _parent_type = 'H' AND _message_ident = 1
 }}}

-- 
Ticket URL: <https://trac.prelude-ids.org/ticket/140>
Prelude Hybrid IDS <http://www.prelude-ids.org>
The Prelude Hybrid Intrusion Detection System suite

_______________________________________________
Prelude-devel site list
[email protected]
http://www.prelude-ids.org/mailman/listinfo/prelude-devel