Re: Unified2 Missing event record

--===============1255629310211275265==
Content-Type: multipart/alternative; boundary="000000000000784240058dcf1137"

--000000000000784240058dcf1137
Content-Type: text/plain; charset="UTF-8"

UP! :)
Does someone know this issue?

On Mon, Jul 8, 2019 at 7:31 PM Ron H <[email protected]> wrote:

> Hey Snort devel,
>
> We have an issue with Snort Unified2 output.
> Snort write packet record without write event record.
> This issue happens frequently.
>
> out snort version is *2.9.11.1*
> Snort run on Ubuntu 16.04 Docker container
>
> We are would be grateful to any assistance.
> Thanks!
>
>
>
>
>
>
>

--000000000000784240058dcf1137
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">UP! :)=C2=A0<div>Does someone know this issue?=C2=A0</div>=
</div><br><div class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">=
On Mon, Jul 8, 2019 at 7:31 PM Ron H &lt;<a href=3D"mailto:ronh.work@gmail.=
com">[email protected]</a>&gt; wrote:<br></div><blockquote class=3D"gmail=
_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204=
,204);padding-left:1ex"><div dir=3D"ltr">Hey Snort devel,=C2=A0<div><br></d=
iv><div>We have an issue with Snort Unified2 output.</div><div>Snort write =
packet record without write event record.=C2=A0</div><div>This issue happen=
s=C2=A0frequently.=C2=A0</div><div><br></div><div>out snort version is <b>2=
.9.11.1</b></div><div>Snort run on Ubuntu 16.04 Docker container</div><div>=
<br></div><p style=3D"box-sizing:border-box;margin-bottom:16px;margin-top:0=
px;color:rgb(36,41,46);font-family:-apple-system,BlinkMacSystemFont,&quot;S=
egoe UI&quot;,Helvetica,Arial,sans-serif,&quot;Apple Color Emoji&quot;,&quo=
t;Segoe UI Emoji&quot;,&quot;Segoe UI Symbol&quot;;font-size:14px">We are w=
ould be grateful to any assistance.</p><div><span style=3D"color:rgb(36,41,=
46);font-family:-apple-system,BlinkMacSystemFont,&quot;Segoe UI&quot;,Helve=
tica,Arial,sans-serif,&quot;Apple Color Emoji&quot;,&quot;Segoe UI Emoji&qu=
ot;,&quot;Segoe UI Symbol&quot;;font-size:14px">Thanks!</span></div><div>=
=C2=A0</div><div><br></div><div><div><br></div><div><br><div><br></div><div=
><br></div></div></div></div>
</blockquote></div>

--000000000000784240058dcf1137--

--===============1255629310211275265==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Snort-devel mailing list
[email protected]
https://lists.snort.org/mailman/listinfo/snort-devel

Please visit http://blog.snort.org for the latest news about Snort!

--===============1255629310211275265==--