[Oisf-users] Suricata : http.log is empty
khushal kaviraj
khushal08 at yahoo.com
Sat Oct 10 03:48:37 UTC 2015
-------------------------------------------------------------------Date: 10/9/2015 -- 19:33:53 (uptime: 0d, 00h 10m 34s)-------------------------------------------------------------------Counter | TM Name | Value-------------------------------------------------------------------capture.kernel_packets | RxPcapeth21 | 107465998capture.kernel_drops | RxPcapeth21 | 81620777capture.kernel_ifdrops | RxPcapeth21 | 0dns.memuse | RxPcapeth21 | 140575dns.memcap_state | RxPcapeth21 | 0dns.memcap_global | RxPcapeth21 | 0decoder.pkts | RxPcapeth21 | 25843539decoder.bytes | RxPcapeth21 | 30511123981decoder.invalid | RxPcapeth21 | 22decoder.ipv4 | RxPcapeth21 | 25889182decoder.ipv6 | RxPcapeth21 | 1691decoder.ethernet | RxPcapeth21 | 25843539decoder.raw | RxPcapeth21 | 0decoder.sll | RxPcapeth21 | 0decoder.tcp | RxPcapeth21 | 16698930decoder.udp | RxPcapeth21 | 9033417decoder.sctp | RxPcapeth21 | 0decoder.icmpv4 | RxPcapeth21 | 30011decoder.icmpv6 | RxPcapeth21 | 157decoder.ppp | RxPcapeth21 | 6036decoder.pppoe | RxPcapeth21 | 0decoder.gre | RxPcapeth21 | 6692decoder.vlan | RxPcapeth21 | 0decoder.vlan_qinq | RxPcapeth21 | 0decoder.teredo | RxPcapeth21 | 1528decoder.ipv4_in_ipv6 | RxPcapeth21 | 0decoder.ipv6_in_ipv6 | RxPcapeth21 | 0decoder.avg_pkt_size | RxPcapeth21 | 1180decoder.max_pkt_size | RxPcapeth21 | 1514defrag.ipv4.fragments | RxPcapeth21 | 103306defrag.ipv4.reassembled | RxPcapeth21 | 45039defrag.ipv4.timeouts | RxPcapeth21 | 0defrag.ipv6.fragments | RxPcapeth21 | 0defrag.ipv6.reassembled | RxPcapeth21 | 0defrag.ipv6.timeouts | RxPcapeth21 | 0defrag.max_frag_hits | RxPcapeth21 | 0tcp.sessions | Detect | 105466tcp.ssn_memcap_drop | Detect | 0tcp.pseudo | Detect | 0tcp.invalid_checksum | Detect | 0tcp.no_flow | Detect | 0tcp.reused_ssn | Detect | 0tcp.memuse | Detect | 2663074752tcp.syn | Detect | 124471tcp.synack | Detect | 110461tcp.rst | Detect | 31356dns.memuse | Detect | 0dns.memcap_state | Detect | 0dns.memcap_global | Detect | 0tcp.segment_memcap_drop | Detect | 0tcp.stream_depth_reached | Detect | 0tcp.reassembly_memuse | Detect | 0tcp.reassembly_gap | Detect | 0http.memuse | Detect | 0http.memcap | Detect | 0detect.alert | Detect | 91909flow_mgr.closed_pruned | FlowManagerThread | 352590flow_mgr.new_pruned | FlowManagerThread | 222171flow_mgr.est_pruned | FlowManagerThread | 0flow.memuse | FlowManagerThread | 40499296flow.spare | FlowManagerThread | 11106flow.emerg_mode_entered | FlowManagerThread | 0flow.emerg_mode_over | FlowManagerThread | 0-------------------------------------------------------------------Date: 10/9/2015 -- 19:34:00 (uptime: 0d, 00h 10m 41s)-------------------------------------------------------------------Counter | TM Name | Value-------------------------------------------------------------------capture.kernel_packets | RxPcapeth21 | 108588714capture.kernel_drops | RxPcapeth21 | 82477622capture.kernel_ifdrops | RxPcapeth21 | 0dns.memuse | RxPcapeth21 | 129838dns.memcap_state | RxPcapeth21 | 0dns.memcap_global | RxPcapeth21 | 0decoder.pkts | RxPcapeth21 | 26109527decoder.bytes | RxPcapeth21 | 30804214906decoder.invalid | RxPcapeth21 | 22decoder.ipv4 | RxPcapeth21 | 26155293decoder.ipv6 | RxPcapeth21 | 1695decoder.ethernet | RxPcapeth21 | 26109527decoder.raw | RxPcapeth21 | 0decoder.sll | RxPcapeth21 | 0decoder.tcp | RxPcapeth21 | 16879509decoder.udp | RxPcapeth21 | 9118134decoder.sctp | RxPcapeth21 | 0decoder.icmpv4 | RxPcapeth21 | 30334decoder.icmpv6 | RxPcapeth21 | 160decoder.ppp | RxPcapeth21 | 6062decoder.pppoe | RxPcapeth21 | 0decoder.gre | RxPcapeth21 | 6722decoder.vlan | RxPcapeth21 | 0decoder.vlan_qinq | RxPcapeth21 | 0decoder.teredo | RxPcapeth21 | 1529decoder.ipv4_in_ipv6 | RxPcapeth21 | 0decoder.ipv6_in_ipv6 | RxPcapeth21 | 0decoder.avg_pkt_size | RxPcapeth21 | 1179decoder.max_pkt_size | RxPcapeth21 | 1514defrag.ipv4.fragments | RxPcapeth21 | 103558defrag.ipv4.reassembled | RxPcapeth21 | 45158defrag.ipv4.timeouts | RxPcapeth21 | 0defrag.ipv6.fragments | RxPcapeth21 | 0defrag.ipv6.reassembled | RxPcapeth21 | 0defrag.ipv6.timeouts | RxPcapeth21 | 0defrag.max_frag_hits | RxPcapeth21 | 0tcp.sessions | Detect | 106438tcp.ssn_memcap_drop | Detect | 0tcp.pseudo | Detect | 0tcp.invalid_checksum | Detect | 0tcp.no_flow | Detect | 0tcp.reused_ssn | Detect | 0tcp.memuse | Detect | 2663795136tcp.syn | Detect | 125589tcp.synack | Detect | 111560tcp.rst | Detect | 31672dns.memuse | Detect | 0dns.memcap_state | Detect | 0dns.memcap_global | Detect | 0tcp.segment_memcap_drop | Detect | 0tcp.stream_depth_reached | Detect | 0tcp.reassembly_memuse | Detect | 0tcp.reassembly_gap | Detect | 0http.memuse | Detect | 0http.memcap | Detect | 0detect.alert | Detect | 91998flow_mgr.closed_pruned | FlowManagerThread | 356873flow_mgr.new_pruned | FlowManagerThread | 224119flow_mgr.est_pruned | FlowManagerThread | 0flow.memuse | FlowManagerThread | 40485184flow.spare | FlowManagerThread | 10833flow.emerg_mode_entered | FlowManagerThread | 0flow.emerg_mode_over | FlowManagerThread | 0-------------------------------------------------------------------Date: 10/9/2015 -- 19:34:07 (uptime: 0d, 00h 10m 48s)-------------------------------------------------------------------Counter | TM Name | Value-------------------------------------------------------------------capture.kernel_packets | RxPcapeth21 | 110081185capture.kernel_drops | RxPcapeth21 | 83601050capture.kernel_ifdrops | RxPcapeth21 | 0dns.memuse | RxPcapeth21 | 137530dns.memcap_state | RxPcapeth21 | 0dns.memcap_global | RxPcapeth21 | 0decoder.pkts | RxPcapeth21 | 26478408decoder.bytes | RxPcapeth21 | 31209814017decoder.invalid | RxPcapeth21 | 22decoder.ipv4 | RxPcapeth21 | 26524347decoder.ipv6 | RxPcapeth21 | 1701decoder.ethernet | RxPcapeth21 | 26478408decoder.raw | RxPcapeth21 | 0decoder.sll | RxPcapeth21 | 0decoder.tcp | RxPcapeth21 | 17130469decoder.udp | RxPcapeth21 | 9235279decoder.sctp | RxPcapeth21 | 0decoder.icmpv4 | RxPcapeth21 | 30653decoder.icmpv6 | RxPcapeth21 | 161decoder.ppp | RxPcapeth21 | 6110decoder.pppoe | RxPcapeth21 | 0decoder.gre | RxPcapeth21 | 6771decoder.vlan | RxPcapeth21 | 0decoder.vlan_qinq | RxPcapeth21 | 0decoder.teredo | RxPcapeth21 | 1534decoder.ipv4_in_ipv6 | RxPcapeth21 | 0decoder.ipv6_in_ipv6 | RxPcapeth21 | 0decoder.avg_pkt_size | RxPcapeth21 | 1178decoder.max_pkt_size | RxPcapeth21 | 1514defrag.ipv4.fragments | RxPcapeth21 | 103912defrag.ipv4.reassembled | RxPcapeth21 | 45330defrag.ipv4.timeouts | RxPcapeth21 | 0defrag.ipv6.fragments | RxPcapeth21 | 0defrag.ipv6.reassembled | RxPcapeth21 | 0defrag.ipv6.timeouts | RxPcapeth21 | 0defrag.max_frag_hits | RxPcapeth21 | 0tcp.sessions | Detect | 107438tcp.ssn_memcap_drop | Detect | 0tcp.pseudo | Detect | 0tcp.invalid_checksum | Detect | 0tcp.no_flow | Detect | 0tcp.reused_ssn | Detect | 0tcp.memuse | Detect | 2663069568tcp.syn | Detect | 126761tcp.synack | Detect | 112840tcp.rst | Detect | 32001dns.memuse | Detect | 0dns.memcap_state | Detect | 0dns.memcap_global | Detect | 0tcp.segment_memcap_drop | Detect | 0tcp.stream_depth_reached | Detect | 0tcp.reassembly_memuse | Detect | 0tcp.reassembly_gap | Detect | 0http.memuse | Detect | 0http.memcap | Detect | 0detect.alert | Detect | 92119flow_mgr.closed_pruned | FlowManagerThread | 362314flow_mgr.new_pruned | FlowManagerThread | 226776flow_mgr.est_pruned | FlowManagerThread | 0flow.memuse | FlowManagerThread | 40655104flow.spare | FlowManagerThread | 10995flow.emerg_mode_entered | FlowManagerThread | 0flow.emerg_mode_over | FlowManagerThread | 0-------------------------------------------------------------------Date: 10/9/2015 -- 19:34:10 (uptime: 0d, 00h 10m 51s)-------------------------------------------------------------------Counter | TM Name | Value-------------------------------------------------------------------capture.kernel_packets | RxPcapeth21 | 110610242capture.kernel_drops | RxPcapeth21 | 83990577capture.kernel_ifdrops | RxPcapeth21 | 0dns.memuse | RxPcapeth21 | 131913dns.memcap_state | RxPcapeth21 | 0dns.memcap_global | RxPcapeth21 | 0decoder.pkts | RxPcapeth21 | 26661273decoder.bytes | RxPcapeth21 | 31415016003decoder.invalid | RxPcapeth21 | 22decoder.ipv4 | RxPcapeth21 | 26707298decoder.ipv6 | RxPcapeth21 | 1702decoder.ethernet | RxPcapeth21 | 26661273decoder.raw | RxPcapeth21 | 0decoder.sll | RxPcapeth21 | 0decoder.tcp | RxPcapeth21 | 17255558decoder.udp | RxPcapeth21 | 9292725decoder.sctp | RxPcapeth21 | 0decoder.icmpv4 | RxPcapeth21 | 30799decoder.icmpv6 | RxPcapeth21 | 161decoder.ppp | RxPcapeth21 | 6144decoder.pppoe | RxPcapeth21 | 0decoder.gre | RxPcapeth21 | 6812decoder.vlan | RxPcapeth21 | 0decoder.vlan_qinq | RxPcapeth21 | 0decoder.teredo | RxPcapeth21 | 1535decoder.ipv4_in_ipv6 | RxPcapeth21 | 0decoder.ipv6_in_ipv6 | RxPcapeth21 | 0decoder.avg_pkt_size | RxPcapeth21 | 1178decoder.max_pkt_size | RxPcapeth21 | 1514defrag.ipv4.fragments | RxPcapeth21 | 104089defrag.ipv4.reassembled | RxPcapeth21 | 45409defrag.ipv4.timeouts | RxPcapeth21 | 0defrag.ipv6.fragments | RxPcapeth21 | 0defrag.ipv6.reassembled | RxPcapeth21 | 0defrag.ipv6.timeouts | RxPcapeth21 | 0defrag.max_frag_hits | RxPcapeth21 | 0tcp.sessions | Detect | 107922tcp.ssn_memcap_drop | Detect | 0tcp.pseudo | Detect | 0tcp.invalid_checksum | Detect | 0tcp.no_flow | Detect | 0tcp.reused_ssn | Detect | 0tcp.memuse | Detect | 2662526400tcp.syn | Detect | 127357tcp.synack | Detect | 113586tcp.rst | Detect | 32205dns.memuse | Detect | 0dns.memcap_state | Detect | 0dns.memcap_global | Detect | 0tcp.segment_memcap_drop | Detect | 0tcp.stream_depth_reached | Detect | 0tcp.reassembly_memuse | Detect | 0tcp.reassembly_gap | Detect | 0http.memuse | Detect | 0http.memcap | Detect | 0detect.alert | Detect | 92192flow_mgr.closed_pruned | FlowManagerThread | 364402flow_mgr.new_pruned | FlowManagerThread | 227917flow_mgr.est_pruned | FlowManagerThread | 0flow.memuse | FlowManagerThread | 40709536flow.spare | FlowManagerThread | 10000flow.emerg_mode_entered | FlowManagerThread | 0flow.emerg_mode_over | FlowManagerThread | 0
Thanks, Khushal
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20151010/38a8c2e4/attachment-0002.html>
More information about the Oisf-users
mailing list