Your message dated Sat, 17 Dec 2005 13:47:09 -0800
with message-id <[EMAIL PROTECTED]>
and subject line Bug#341180: fixed in acidbase 1.2.1-3
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--------------------------------------
Received: (at submit) by bugs.debian.org; 29 Nov 2005 00:29:16 +0000
>From [EMAIL PROTECTED] Mon Nov 28 16:29:16 2005
Return-path: <[EMAIL PROTECTED]>
Received: from [216.148.227.154] (helo=rwcrmhc12.comcast.net)
by spohr.debian.org with esmtp (Exim 4.50)
id 1EgtMy-0000wu-Gv
for [EMAIL PROTECTED]; Mon, 28 Nov 2005 16:29:16 -0800
Received: from mail.rjmx.net (rjmx.net[66.31.117.150])
by comcast.net (rwcrmhc14) with ESMTP
id <20051129002840014002d6qfe>; Tue, 29 Nov 2005 00:28:44 +0000
Received: from khufu.rjmx.net ([EMAIL PROTECTED] [192.168.1.2])
by mail.rjmx.net (8.13.5/8.13.5/Debian-3) with ESMTP id jAT0SPwU025840
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT);
Mon, 28 Nov 2005 19:28:25 -0500
Received: from khufu.rjmx.net ([EMAIL PROTECTED] [127.0.0.1])
by khufu.rjmx.net (8.13.5/8.13.5/Debian-3) with ESMTP id jAT0SPX6031431
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT);
Mon, 28 Nov 2005 19:28:25 -0500
Received: (from [EMAIL PROTECTED])
by khufu.rjmx.net (8.13.5/8.13.5/Submit) id jAT0SO4P031428;
Mon, 28 Nov 2005 19:28:24 -0500
Message-Id: <[EMAIL PROTECTED]>
X-Authentication-Warning: khufu.rjmx.net: ron set sender to [EMAIL PROTECTED]
using -f
Content-Type: multipart/mixed; boundary="===============1978268101=="
MIME-Version: 1.0
From: Ron Murray <[EMAIL PROTECTED]>
To: Debian Bug Tracking System <[EMAIL PROTECTED]>
Subject: acidbase: Can't delete alerts
Reply-To: Ron Murray <[EMAIL PROTECTED]>
X-Mailer: reportbug 3.17
Date: Mon, 28 Nov 2005 19:28:24 -0500
X-Virus-Scanned: ClamAV 0.87.1/1197/Mon Nov 28 13:09:01 2005 on
tinkerbell.rjmx.net
X-Virus-Status: Clean
X-Scanned-By: MIMEDefang 2.53 on 192.168.1.7
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level:
X-Spam-Status: No, hits=-7.5 required=4.0 tests=BAYES_00,HAS_PACKAGE,
RCVD_IN_SORBS autolearn=no version=2.60-bugs.debian.org_2005_01_02
This is a multi-part MIME message sent by reportbug.
--===============1978268101==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Package: acidbase
Version: 1.2.1-2
Severity: important
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
When I try to delete alerts from the "5 most frequent alerts" page (by
selecting the checkbox next to the alerts, selecting "delete alerts"
from the dropdown box under "ACTION", and then hitting the "Selected"
button, the alerts are not deleted and I get an error message like
this:
> No alerts were selected or the Delete alert(s) was not successful
Output of debug mode is attached.
The acidlab package has the same problem (reported by me as bug
#341131).
.....Ron
- -- System Information:
Debian Release: testing/unstable
APT prefers testing
APT policy: (500, 'testing'), (500, 'stable')
Architecture: i386 (i686)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.14.1-khufu-0
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Versions of packages acidbase depends on:
ii debconf [debconf-2.0] 1.4.59 Debian configuration management sy
ii libphp-adodb 4.64-4 The 'adodb' database abstraction l
ii libwww-perl 5.803-4 WWW client/server library for Perl
ii php-image-graph 0.7.1-1 Image_Graph module for PEAR
ii php4 4:4.4.0-4 server-side, HTML-embedded scripti
ii php4-cli 4:4.4.0-4 command-line interpreter for the p
ii php4-gd 4:4.4.0-4 GD module for php4
ii php5 5.0.5-3 server-side, HTML-embedded scripti
ii php5-cli 5.0.5-3 command-line interpreter for the p
ii php5-gd 5.0.5-3 GD module for php5
acidbase recommends no packages.
- -- debconf-show failed
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
iD8DBQFDi6CoitqjxNhsdN4RAossAJ9KkkypGtl8T6YstVA9fai8wqVqmwCeO6Ym
INJecuXoBiOxqpUQujoD84U=
=Gnbi
-----END PGP SIGNATURE-----
--===============1978268101==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment; filename="acidbase-debug.txt"
Session Registered
importing SESSION var 'sig'
importing SESSION var 'sig_type'
importing SESSION var 'sig_class'
importing SESSION var 'sig_priority'
importing SESSION var 'ag'
importing SESSION var 'sensor'
importing SESSION var 'time'
importing SESSION var 'time_cnt'
importing SESSION var 'ip_addr'
importing SESSION var 'ip_addr_cnt'
importing SESSION var 'layer4'
importing SESSION var 'ip_field'
importing SESSION var 'ip_field_cnt'
importing SESSION var 'tcp_port'
importing SESSION var 'tcp_port_cnt'
importing SESSION var 'tcp_flags'
importing SESSION var 'tcp_field'
importing SESSION var 'tcp_field_cnt'
importing SESSION var 'udp_port'
importing SESSION var 'udp_port_cnt'
importing SESSION var 'udp_field'
importing SESSION var 'udp_field_cnt'
importing SESSION var 'icmp_field'
importing SESSION var 'icmp_field_cnt'
importing SESSION var 'rawip_field'
importing SESSION var 'rawip_field_cnt'
importing SESSION var 'data'
importing SESSION var 'data_cnt'
importing SESSION var 'data_encode'
Checking for DB abstraction lib in '/usr/share/php/adodb/adodb.inc.php'
Basic Analysis and Security Engine (BASE)
Home | Search
[ Back ]
URL: '/acidbase/base_stat_alerts.php' (referred by:
'http://www.rjmx.net/acidbase/base_stat_alerts.php?caller=most_frequent&sort_order=occur_d')
PARAMETERS: '
CLIENT: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US;
rv:1.7.12) Gecko/20050915 Firefox/1.0.7
SERVER: Apache
SERVER HW: Linux tinkerbell 2.6.14.2-tinkerbell-0 #1 Fri Nov 18
22:50:17 EST 2005 ppc
DATABASE TYPE: mysql DB ABSTRACTION VERSION: V4.64 20 June
2005 (c) 2000-2005 John Lim (jlim#natsoft.com.my). All rights reserved.
Released BSD & LGPL.
PHP VERSION: 5.0.5-3 PHP API: apache2handler
BASE VERSION: 1.2.1 (kris)
SESSION ID: 6bf00552e239c9930a5578463e8c4807( 2248 bytes )
Checking for DB abstraction lib in '/usr/share/php/adodb/adodb.inc.php'
sensor #1: event.cid = 0, acid_event.cid = 0
sensor #2: event.cid = 0, acid_event.cid = 0
sensor #3: event.cid = 0, acid_event.cid = 0
sensor #4: event.cid = 0, acid_event.cid = 0
sensor #5: event.cid = 0, acid_event.cid = 0
sensor #6: event.cid = 0, acid_event.cid = 0
sensor #7: event.cid = 0, acid_event.cid = 0
sensor #8: event.cid = 135761, acid_event.cid = 135761
Added 0 alert(s) to the Alert cache
Queried on : Sun November 27, 2005 22:47:47
Meta Criteria any
IP Criteria any
Layer 4 Criteria none
Payload Criteria any
Summary Statistics
# Sensors /
# Unique Alerts ( classifications )
# Unique addresses: Source | Destination
# Unique IP links
# Source Port: TCP | UDP
# Destination Port: TCP | UDP
# Time profile of alerts
==== ACTION ======
context = 2
==== Delete alert(s) Alerts ========
num_alert = 5
action_sql = FROM acid_event WHERE 1 = 1
action_op = Selected
action_arg =
action_param =
context = 2
limit_start = -1
limit_offset = -1
using_blobs = 1
Gathering elements from 1 alert blobs
0 = [using SQL 5 for blob ]: SELECT acid_event.sid, acid_event.cid FROM
acid_event WHERE 1 = 1 AND signature='-1'
1 = [using SQL 5 for blob ]: SELECT acid_event.sid, acid_event.cid FROM
acid_event WHERE 1 = 1 AND signature='-1'
2 = [using SQL 5 for blob ]: SELECT acid_event.sid, acid_event.cid FROM
acid_event WHERE 1 = 1 AND signature='-1'
3 = [using SQL 5 for blob ]: SELECT acid_event.sid, acid_event.cid FROM
acid_event WHERE 1 = 1 AND signature='-1'
4 = [using SQL 5 for blob ]: SELECT acid_event.sid, acid_event.cid FROM
acid_event WHERE 1 = 1 AND signature='-1'
No alerts were selected or the Delete alert(s) was not successful
-------------------------------------
action_cnt = 0
dup_cnt = 0
num_alert = 4
==== Delete alert(s) Alerts END ========
Valid Canned Query List
Array
(
[most_frequent] => Array
(
[0] => 5
[1] => Most Frequent Alerts
[2] => occur_d
)
[last_alerts] => Array
(
[0] => 15
[1] => Last Alerts
[2] => last_d
)
)
Query State
caller = 'most_frequent'
num_result_rows = '5'
sort_order = 'occur_d'
current_view = '0'
action_arg = ''
action = 'del_alert'
SELECT DISTINCT signature, count(signature) as sig_cnt, min(timestamp),
max(timestamp), sig_name, count(DISTINCT(sid)), count(DISTINCT(ip_src)),
count(DISTINCT(ip_dst)) FROM acid_event WHERE 1 = 1 GROUP BY signature,
sig_name ORDER BY sig_cnt DESC
--===============1978268101==--
---------------------------------------
Received: (at 341180-close) by bugs.debian.org; 17 Dec 2005 21:51:50 +0000
>From [EMAIL PROTECTED] Sat Dec 17 13:51:50 2005
Return-path: <[EMAIL PROTECTED]>
Received: from katie by spohr.debian.org with local (Exim 4.50)
id 1EnjtV-0000Jx-15; Sat, 17 Dec 2005 13:47:09 -0800
From: David Gil <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
X-Katie: $Revision: 1.65 $
Subject: Bug#341180: fixed in acidbase 1.2.1-3
Message-Id: <[EMAIL PROTECTED]>
Sender: Archive Administrator <[EMAIL PROTECTED]>
Date: Sat, 17 Dec 2005 13:47:09 -0800
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level:
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER
autolearn=no version=2.60-bugs.debian.org_2005_01_02
Source: acidbase
Source-Version: 1.2.1-3
We believe that the bug you reported is fixed in the latest version of
acidbase, which is due to be installed in the Debian FTP archive:
acidbase_1.2.1-3.diff.gz
to pool/main/a/acidbase/acidbase_1.2.1-3.diff.gz
acidbase_1.2.1-3.dsc
to pool/main/a/acidbase/acidbase_1.2.1-3.dsc
acidbase_1.2.1-3_all.deb
to pool/main/a/acidbase/acidbase_1.2.1-3_all.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
David Gil <[EMAIL PROTECTED]> (supplier of updated acidbase package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Fri, 02 Dec 2005 00:23:51 +0100
Source: acidbase
Binary: acidbase
Architecture: source all
Version: 1.2.1-3
Distribution: unstable
Urgency: low
Maintainer: David Gil <[EMAIL PROTECTED]>
Changed-By: David Gil <[EMAIL PROTECTED]>
Description:
acidbase - Basic Analysis and Security Engine
Closes: 338301 341180
Changes:
acidbase (1.2.1-3) unstable; urgency=low
.
* Fixed bug "Can't delete alerts".
Don't filter action_chk_lst and action_lst http variables
since they are arrays, not strings. (Closes: #341180)
* I missed a colon in the last changelog entry, now really Closes: #338301.
* Added debconf templates translation.
+ New spanish po file.
* Added watch file
[ Javier Fernandez-Sanguino Pen~a ]
* Reformatted debian/README.Debian and fix names that were pointing
to ACID
Files:
70c56b0fa32a12f86eacf457233b5183 676 web optional acidbase_1.2.1-3.dsc
08940697d56707e0d602b7d6fc52d805 13167 web optional acidbase_1.2.1-3.diff.gz
de089f32a110af85d92fdfa8c71c4844 347320 web optional acidbase_1.2.1-3_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
iD8DBQFDpFA0sandgtyBSwkRAoATAJ49s+5t5k5VpwA7SXJPwhC33PRTlgCeOLTx
fiq4pcpqmFyFdIZiYdLy3ms=
=2KpQ
-----END PGP SIGNATURE-----
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
