[Bro] Long lived MySQL session stops generating events

Jon Siwek jsiwek at corelight.com
Fri Oct 12 15:03:55 PDT 2018


On Thu, Oct 11, 2018 at 7:52 PM Bruce Kao <brucekao at heliosdata.com> wrote:

> I am running Bro version 2.5.2, and encountering an issue where an established MySQL session after idling for some time (approximately 10 minutes), the MySQL analyzer events are no longer generated.

I'd first suggest trying with the latest release of Bro (2.5.5) if you
can because the MySQL analyzer had some general changes/fixes in
2.5.4.

Otherwise, it would be most helpful if you could provide a pcap that
reproduces the issue.

- Jon


More information about the Bro mailing list