[Bro-Dev] [JIRA] (BIT-1390) Orphaned field addl

Josh Liburdi (JIRA) jira at bro-tracker.atlassian.net
Tue Apr 28 22:03:00 PDT 2015

    [ https://bro-tracker.atlassian.net/browse/BIT-1390?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=20505#comment-20505 ] 

Josh Liburdi commented on BIT-1390:

Ah, you're right! It's a custom script causing this. Thanks Robin. 

> Orphaned field addl
> -------------------
>                 Key: BIT-1390
>                 URL: https://bro-tracker.atlassian.net/browse/BIT-1390
>             Project: Bro Issue Tracker
>          Issue Type: Problem
>          Components: Bro
>    Affects Versions: git/master
>         Environment: I'm running master (current as of 04/21/2015) in a cluster environment and am receiving thousands of these reporter.log errors each minute: 
> orphan field "addl" in initialization ([uid=ColGFv4htljLxPq9yg, id=[orig_h=<addr>, orig_p=<port>/udp, resp_h=<addr>, resp_p=<port>/udp], history=Dd, duration=0.03419, start_time=0, addl=, hot=0]) 
> I've masked the actual connection data (addrs and ports), but the error is the same across multiple Bro deployment-- all involve orphan field "addl".  
>            Reporter: Josh Liburdi

This message was sent by Atlassian JIRA

More information about the bro-dev mailing list