[prev in list] [next in list] [prev in thread] [next in thread]
List: security-onion
Subject: Re: [security-onion] [Elsa] indexed logs
From: Martin Holste <mcholste () gmail ! com>
Date: 2013-06-28 4:56:09
Message-ID: CANpnLHgL9Q4OrDO1YOSV0AghvKaMa0NS99C1+oDcoaW9p7T-Ag () mail ! gmail ! com
[Download RAW message or body]
Yes, it should. I suppose the problem is that the IP is the same for each
of the nodes but the port is different because of how SO does things. This
would be a non-issue in the current version of ELSA which uses web services
for transit instead of database handles, so the actual "_node_stats_x" gets
abstracted.
On Wed, Jun 26, 2013 at 7:12 AM, Giedrius Ramas <giedrius.ramas@gmail.com>wrote:
> Just checked also web.log and noticed the following :
>
> 'charts' => [
> {
> 'query' => 'datasource:_node_stats_2130706433',
> 'chart_options' =>
> $VAR1->{'node_charts'}[0]{'chart_options'},
> 'x' => 0,
> 'chart_id' => 1,
> 'y' => 0,
> 'chart_type' => 'ColumnChart',
> 'query_id' => 1,
> 'label' => 'Events elsa_node_002'
> },
> {
> 'query' => 'datasource:_node_stats_2130706433',
> 'chart_options' =>
> $VAR1->{'node_charts'}[0]{'chart_options'},
> 'x' => 0,
> 'chart_id' => 2,
> 'y' => 0,
> 'chart_type' => 'ColumnChart',
> 'query_id' => 2,
> 'label' => 'Events 127.0.0.1'
> },
> {
> 'query' => 'datasource:_node_stats_2130706433',
> 'chart_options' =>
> $VAR1->{'node_charts'}[0]{'chart_options'},
> 'x' => 0,
> 'chart_id' => 3,
> 'y' => 0,
> 'chart_type' => 'ColumnChart',
> 'query_id' => 3,
> 'label' => 'Events elsa_node_001'
> },
>
> I wonder if it is fine that datasource 'datasource:_node_stats_2130706433'
> for all nodes are equal ? Should not be differren _node_stats_* param for
> individual node ?
>
>
> On Fri, Jun 21, 2013 at 10:57 PM, Martin Holste <mcholste@gmail.com>wrote:
>
> > Sorry, I looked again and the stats page actually makes raw SQL queries
> > for those numbers and uses the stats table, not the host_stats table which
> > sources the _node_stats datasource. That said, I'm not sure why they would
> > all appear the same. You might find the answer by checking
> > /nsm/data/elsa/log/web.log after looking at the stats page, which should
> > have a debug line for "got stats:" showing exactly what it pulled.
> >
> >
> > On Fri, Jun 21, 2013 at 4:11 AM, Giedrius Ramas <giedrius.ramas@gmail.com
> > > wrote:
> >
> > > Just wanted to add some more details I found.
> > >
> > > Run the following queries :
> > >
> > > datasource:_node_stats groupby:day node:elsa_node_002
> > > datasource:_node_stats groupby:day node:elsa_node_001
> > >
> > > and I got the same results.
> > >
> > > Here is my elsa_web.conf
> > >
> > > "nodes": {
> > > "127.0.0.1": {
> > > "db": "syslog",
> > > "username": "elsa",
> > > "password": "biglog",
> > > "port": 3306,
> > > "sphinx_port": 9306
> > > },
> > > "elsa_node_001": {
> > > "db": "syslog",
> > > "username": "elsa",
> > > "password": "biglog",
> > > "port": 50000,
> > > "sphinx_port": 50001
> > > },
> > > "elsa_node_002": {
> > > "db": "syslog",
> > > "username": "elsa",
> > > "password": "biglog",
> > > "port": 50002,
> > > "sphinx_port": 50003
> > > },
> > > Could you shed some light on this.
> > >
> > >
> > >
> > >
> > >
> > > On Wed, Jun 19, 2013 at 10:13 AM, Giedrius Ramas <
> > > giedrius.ramas@gmail.com> wrote:
> > >
> > > > I have just counted also on 3 sensors syslog.host_stats tables and got
> > > > the following:
> > > > > count(*) |
> > > > +----------+
> > > > > 182048 |
> > > >
> > > > > count(*) |
> > > > +----------+
> > > > > 121849 |
> > > > +----------+
> > > > > count(*) |
> > > > +----------+
> > > > > 22960 |
> > > > It seems that else just sum up them and shows on stats dashboard.
> > > >
> > > >
> > > >
> > > >
> > > > On Wed, Jun 19, 2013 at 9:40 AM, Giedrius Ramas <
> > > > giedrius.ramas@gmail.com> wrote:
> > > >
> > > > > just checked stats page under the admin menu. In stats page, all node
> > > > > event counts are equal. Nodes monitor different amount of traffic
> > > > > additionally on of the nodes is getting firewal syslog. How could it be ?
> > > > >
> > > > >
> > > > > On Tue, Jun 18, 2013 at 6:18 PM, Martin Holste <mcholste@gmail.com>wrote:
> > > > >
> > > > > > If you're asking how to find out how many logs are available, check
> > > > > > the Stats page under the Admin menu. It calculates them by looking at \
> > > > > > the MySQL table syslog.host_stats.
> > > > > >
> > > > > >
> > > > > > On Mon, Jun 17, 2013 at 5:35 AM, Giedrius Ramas <
> > > > > > giedrius.ramas@gmail.com> wrote:
> > > > > >
> > > > > > > From where Elsa calculate the number of available indexed logs.
> > > > > > > Where can I find them on the Elsa server/node ?
> > > > > > >
> > > > > > >
> > > > > > > On Sat, Jun 15, 2013 at 11:41 PM, Martin Holste \
> > > > > > > <mcholste@gmail.com>wrote:
> > > > > > > > That probably means that you only have enough disk to handle about
> > > > > > > > 30 million logs, and the chunks of indexes that get dropped are \
> > > > > > > > around 10 million in size, so you might fluctuate between those two \
> > > > > > > > (15 and 30 million) with about 5 million in the smaller chunks. The \
> > > > > > > > thing to watch for would be if it drops to near zero or you run out \
> > > > > > > > of disk for some reason. That would indicate there's a problem \
> > > > > > > > somewhere, otherwise, this might be expected behavior.
> > > > > > > >
> > > > > > > >
> > > > > > > > On Fri, Jun 14, 2013 at 3:04 AM, Giedrius Ramas <
> > > > > > > > giedrius.ramas@gmail.com> wrote:
> > > > > > > >
> > > > > > > > > Hi everyone,
> > > > > > > > >
> > > > > > > > > I have noticed that number of indexed logs shown on Elsa's right
> > > > > > > > > corner is changing. Number of archived logs is stable.
> > > > > > > > > For example in the morning I had 15 millions of them after some
> > > > > > > > > time 30 millions and again 15 millions. Can someone explain such \
> > > > > > > > > behavior?
> > > > > > > > > Thanks.
> > > > > > > > >
> > > > > > > > > --
> > > > > > > > > You received this message because you are subscribed to the Google
> > > > > > > > > Groups "security-onion" group.
> > > > > > > > > To unsubscribe from this group and stop receiving emails from it,
> > > > > > > > > send an email to security-onion+unsubscribe@googlegroups.com.
> > > > > > > > > To post to this group, send email to
> > > > > > > > > security-onion@googlegroups.com.
> > > > > > > > > Visit this group at http://groups.google.com/group/security-onion.
> > > > > > > > > For more options, visit https://groups.google.com/groups/opt_out.
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > >
> > > > > > > > --
> > > > > > > > You received this message because you are subscribed to the Google
> > > > > > > > Groups "security-onion" group.
> > > > > > > > To unsubscribe from this group and stop receiving emails from it,
> > > > > > > > send an email to security-onion+unsubscribe@googlegroups.com.
> > > > > > > > To post to this group, send email to
> > > > > > > > security-onion@googlegroups.com.
> > > > > > > > Visit this group at http://groups.google.com/group/security-onion.
> > > > > > > > For more options, visit https://groups.google.com/groups/opt_out.
> > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > >
> > > > > > > --
> > > > > > > You received this message because you are subscribed to the Google
> > > > > > > Groups "security-onion" group.
> > > > > > > To unsubscribe from this group and stop receiving emails from it,
> > > > > > > send an email to security-onion+unsubscribe@googlegroups.com.
> > > > > > > To post to this group, send email to security-onion@googlegroups.com
> > > > > > > .
> > > > > > > Visit this group at http://groups.google.com/group/security-onion.
> > > > > > > For more options, visit https://groups.google.com/groups/opt_out.
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > >
> > > > > > --
> > > > > > You received this message because you are subscribed to the Google
> > > > > > Groups "security-onion" group.
> > > > > > To unsubscribe from this group and stop receiving emails from it,
> > > > > > send an email to security-onion+unsubscribe@googlegroups.com.
> > > > > > To post to this group, send email to security-onion@googlegroups.com.
> > > > > > Visit this group at http://groups.google.com/group/security-onion.
> > > > > > For more options, visit https://groups.google.com/groups/opt_out.
> > > > > >
> > > > > >
> > > > > >
> > > > >
> > > > >
> > > >
> > > --
> > > You received this message because you are subscribed to the Google
> > > Groups "security-onion" group.
> > > To unsubscribe from this group and stop receiving emails from it, send
> > > an email to security-onion+unsubscribe@googlegroups.com.
> > > To post to this group, send email to security-onion@googlegroups.com.
> > > Visit this group at http://groups.google.com/group/security-onion.
> > > For more options, visit https://groups.google.com/groups/opt_out.
> > >
> > >
> > >
> >
> > --
> > You received this message because you are subscribed to the Google Groups
> > "security-onion" group.
> > To unsubscribe from this group and stop receiving emails from it, send an
> > email to security-onion+unsubscribe@googlegroups.com.
> > To post to this group, send email to security-onion@googlegroups.com.
> > Visit this group at http://groups.google.com/group/security-onion.
> > For more options, visit https://groups.google.com/groups/opt_out.
> >
> >
> >
>
> --
> You received this message because you are subscribed to the Google Groups
> "security-onion" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to security-onion+unsubscribe@googlegroups.com.
> To post to this group, send email to security-onion@googlegroups.com.
> Visit this group at http://groups.google.com/group/security-onion.
> For more options, visit https://groups.google.com/groups/opt_out.
>
>
>
--
You received this message because you are subscribed to the Google Groups \
"security-onion" group. To unsubscribe from this group and stop receiving emails from \
it, send an email to security-onion+unsubscribe@googlegroups.com. To post to this \
group, send email to security-onion@googlegroups.com. Visit this group at \
http://groups.google.com/group/security-onion. For more options, visit \
https://groups.google.com/groups/opt_out.
[Attachment #3 (text/html)]
<div dir="ltr">Yes, it should. I suppose the problem is that the IP is the same for \
each of the nodes but the port is different because of how SO does things. This \
would be a non-issue in the current version of ELSA which uses web services for \
transit instead of database handles, so the actual "_node_stats_x" gets \
abstracted.</div>
<div class="gmail_extra"><br><br><div class="gmail_quote">On Wed, Jun 26, 2013 at \
7:12 AM, Giedrius Ramas <span dir="ltr"><<a href="mailto:giedrius.ramas@gmail.com" \
target="_blank">giedrius.ramas@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc \
solid;padding-left:1ex"><div dir="ltr"><div>Just checked also web.log and noticed the \
following :</div><div> </div><div> 'charts' => [<br>
{<br> 'query' => \
'datasource:_node_stats_2130706433',<br> 'chart_options' => \
$VAR1->{'node_charts'}[0]{'chart_options'},<br> \
'x' => 0,<br> 'chart_id' => 1,<br>
'y' => 0,<br> \
'chart_type' => 'ColumnChart',<br> \
'query_id' => 1,<br> 'label' => \
'Events elsa_node_002'<br>
},<br> {<br> \
'query' => 'datasource:_node_stats_2130706433',<br> \
'chart_options' => \
$VAR1->{'node_charts'}[0]{'chart_options'},<br>
'x' => 0,<br> \
'chart_id' => 2,<br> 'y' => 0,<br> \
'chart_type' => 'ColumnChart',<br>
'query_id' => 2,<br> \
'label' => 'Events 127.0.0.1'<br> },<br> \
{<br> 'query' => \
'datasource:_node_stats_2130706433',<br>
'chart_options' => \
$VAR1->{'node_charts'}[0]{'chart_options'},<br> \
'x' => 0,<br> 'chart_id' => 3,<br>
'y' => 0,<br> \
'chart_type' => 'ColumnChart',<br> \
'query_id' => 3,<br> 'label' => \
'Events elsa_node_001'<br>
},<br></div><div> </div><div>I wonder if it is fine that \
datasource 'datasource:_node_stats_2130706433' for all nodes are equal ? \
Should not be differren _node_stats_* param for individual node ?</div>
</div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><br><div \
class="gmail_quote">On Fri, Jun 21, 2013 at 10:57 PM, Martin Holste <span \
dir="ltr"><<a href="mailto:mcholste@gmail.com" \
target="_blank">mcholste@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc \
solid;padding-left:1ex"><div dir="ltr">Sorry, I looked again and the stats page \
actually makes raw SQL queries for those numbers and uses the stats table, not the \
host_stats table which sources the _node_stats datasource. That said, I'm not \
sure why they would all appear the same. You might find the answer by checking \
/nsm/data/elsa/log/web.log after looking at the stats page, which should have a debug \
line for "got stats:" showing exactly what it pulled.</div>
<div><div>
<div class="gmail_extra"><br><br><div class="gmail_quote">On Fri, Jun 21, 2013 at \
4:11 AM, Giedrius Ramas <span dir="ltr"><<a href="mailto:giedrius.ramas@gmail.com" \
target="_blank">giedrius.ramas@gmail.com</a>></span> wrote:<br>
<blockquote style="margin:0px 0px 0px \
0.8ex;padding-left:1ex;border-left-color:rgb(204,204,204);border-left-width:1px;border-left-style:solid" \
class="gmail_quote"><div dir="ltr"><div>Just wanted to add some more details I found. \
</div>
<div> </div><div>Run the following queries :</div>
<div> </div><div> datasource:_node_stats groupby:day \
node:elsa_node_002</div><div>datasource:_node_stats groupby:day \
node:elsa_node_001<br>
</div><div><br></div><div>and I got the same results.</div><div><br>Here is my \
elsa_web.conf</div><div> </div><div>"nodes": {<br> \
"127.0.0.1": {<br> "db": "syslog",<br> \
"username": "elsa",<br>
"password": "biglog",<br> "port": 3306,<br> \
"sphinx_port": 9306<br> },<br> "elsa_node_001": {<br> \
"db": "syslog",<br> "username": \
"elsa",<br>
"password": "biglog",<br> "port": 50000,<br> \
"sphinx_port": 50001<br> },<br> "elsa_node_002": {<br> \
"db": "syslog",<br> "username": \
"elsa",<br>
"password": "biglog",<br> "port": 50002,<br> \
"sphinx_port": 50003<br> },<br></div><div>Could you shed some light on \
this.<br></div><div><br></div><div><br> </div>
</div><div><div><div class="gmail_extra"><br><br><div class="gmail_quote">On Wed, Jun \
19, 2013 at 10:13 AM, Giedrius Ramas <span dir="ltr"><<a \
href="mailto:giedrius.ramas@gmail.com" \
target="_blank">giedrius.ramas@gmail.com</a>></span> wrote:<br>
<blockquote style="margin:0px 0px 0px \
0.8ex;padding-left:1ex;border-left-color:rgb(204,204,204);border-left-width:1px;border-left-style:solid" \
class="gmail_quote"><div dir="ltr"><div>I have just counted also on 3 sensors \
syslog.host_stats tables and got the following:</div>
<div>| count(*) |<br>
+----------+<br>| 182048 |</div><div> </div><div>| count(*) |<br>+----------+<br>| \
121849 |<br>
</div><div>+----------+<br>| count(*) |<br>+----------+<br>| 22960 \
|<br></div><div>It seems that else just sum up them and shows on stats \
dashboard.</div><div> </div><div> </div></div><div><div> <div \
class="gmail_extra"><br><br> <div class="gmail_quote">On Wed, Jun 19, 2013 at 9:40 \
AM, Giedrius Ramas <span dir="ltr"><<a href="mailto:giedrius.ramas@gmail.com" \
target="_blank">giedrius.ramas@gmail.com</a>></span> wrote:<br><blockquote \
style="margin:0px 0px 0px \
0.8ex;padding-left:1ex;border-left-color:rgb(204,204,204);border-left-width:1px;border-left-style:solid" \
class="gmail_quote">
<div dir="ltr">just checked stats page under the admin menu. In stats page, all node \
event counts are equal. Nodes monitor different amount of traffic additionally on of \
the nodes is getting firewal syslog. How could it be ?</div>
<div><div>
<div class="gmail_extra"><br><br><div class="gmail_quote">On Tue, Jun 18, 2013 at \
6:18 PM, Martin Holste <span dir="ltr"><<a href="mailto:mcholste@gmail.com" \
target="_blank">mcholste@gmail.com</a>></span> wrote:<br>
<blockquote style="margin:0px 0px 0px \
0.8ex;padding-left:1ex;border-left-color:rgb(204,204,204);border-left-width:1px;border-left-style:solid" \
class="gmail_quote"><div dir="ltr">If you're asking how to find out how many logs \
are available, check the Stats page under the Admin menu. It calculates them by \
looking at the MySQL table syslog.host_stats.</div>
<div><div><div class="gmail_extra">
<br><br><div class="gmail_quote">On Mon, Jun 17, 2013 at 5:35 AM, Giedrius Ramas \
<span dir="ltr"><<a href="mailto:giedrius.ramas@gmail.com" \
target="_blank">giedrius.ramas@gmail.com</a>></span> wrote:<br><blockquote \
style="margin:0px 0px 0px \
0.8ex;padding-left:1ex;border-left-color:rgb(204,204,204);border-left-width:1px;border-left-style:solid" \
class="gmail_quote">
<div dir="ltr">From where Elsa calculate the number of available indexed logs. Where \
can I find them on the Elsa server/node ? </div><div><div><div \
class="gmail_extra"><br><br><div class="gmail_quote">
On Sat, Jun 15, 2013 at 11:41 PM, Martin Holste <span dir="ltr"><<a \
href="mailto:mcholste@gmail.com" target="_blank">mcholste@gmail.com</a>></span> \
wrote:<br> <blockquote style="margin:0px 0px 0px \
0.8ex;padding-left:1ex;border-left-color:rgb(204,204,204);border-left-width:1px;border-left-style:solid" \
class="gmail_quote"><div dir="ltr">That probably means that you only have enough disk \
to handle about 30 million logs, and the chunks of indexes that get dropped are \
around 10 million in size, so you might fluctuate between those two (15 and 30 \
million) with about 5 million in the smaller chunks. The thing to watch for would be \
if it drops to near zero or you run out of disk for some reason. That would indicate \
there's a problem somewhere, otherwise, this might be expected behavior.</div>
<div class="gmail_extra"><br><br><div class="gmail_quote"><div><div>On Fri, Jun 14, \
2013 at 3:04 AM, Giedrius Ramas <span dir="ltr"><<a \
href="mailto:giedrius.ramas@gmail.com" \
target="_blank">giedrius.ramas@gmail.com</a>></span> wrote:<br>
</div></div><blockquote style="margin:0px 0px 0px \
0.8ex;padding-left:1ex;border-left-color:rgb(204,204,204);border-left-width:1px;border-left-style:solid" \
class="gmail_quote"><div><div><div dir="ltr"><div>Hi everyone, </div>
<div> </div><div><div dir="ltr"><span \
style="font-family:arial,sans-serif;font-size:10pt;float:right;direction:ltr;word-wrap:break-word" \
dir="ltr"><table cellspacing="0" cellpadding="3">
<tbody><tr><td style="font-family:arial,sans-serif"><table cellspacing="0" \
cellpadding="3"><tbody><tr><td style="font-family:arial,sans-serif"><div><table \
cellspacing="0" cellpadding="3"><tbody><tr><td style="font-family:arial,sans-serif">
<div>I have <span style="background-color:yellow">noticed </span>that number of \
indexed logs shown on Elsa's right corner is changing. Number of archived logs is \
stable. </div></td></tr></tbody></table></div><span \
style="font-family:arial,sans-serif;font-size:10pt;float:right;direction:ltr" \
dir="ltr"><table cellspacing="0" cellpadding="3">
<tbody><tr><td style="font-family:arial,sans-serif"><table cellspacing="0" \
cellpadding="3"><tbody><tr><td style="font-family:arial,sans-serif"><div><table \
cellspacing="0" cellpadding="3"><tbody><tr><td style="font-family:arial,sans-serif">
<div>For example in the morning I had 15 millions of them after some time 30 millions \
and again 15 millions. Can someone explain such \
behavior?</div></td></tr></tbody></table></div></td></tr></tbody></table></td></tr> \
</tbody></table></span></td></tr></tbody></table></td></tr></tbody></table></span></div></div><div> \
</div><div>Thanks. </div></div></div></div><span><font color="#888888"><span><font \
color="#888888">
<p></p>
-- <br>
You received this message because you are subscribed to the Google Groups \
"security-onion" group.<br> To unsubscribe from this group and stop \
receiving emails from it, send an email to <a \
href="mailto:security-onion%2Bunsubscribe@googlegroups.com" \
target="_blank">security-onion+unsubscribe@googlegroups.com</a>.<br> To post to this \
group, send email to <a href="mailto:security-onion@googlegroups.com" \
target="_blank">security-onion@googlegroups.com</a>.<br> Visit this group at <a \
href="http://groups.google.com/group/security-onion" \
target="_blank">http://groups.google.com/group/security-onion</a>.<br> For more \
options, visit <a href="https://groups.google.com/groups/opt_out" \
target="_blank">https://groups.google.com/groups/opt_out</a>.<br> <br>
<br>
</font></span></font></span></blockquote></div><span><font \
color="#888888"><br></font></span></div><span><font color="#888888">
<p></p>
-- <br>
You received this message because you are subscribed to the Google Groups \
"security-onion" group.<br> To unsubscribe from this group and stop \
receiving emails from it, send an email to <a \
href="mailto:security-onion%2Bunsubscribe@googlegroups.com" \
target="_blank">security-onion+unsubscribe@googlegroups.com</a>.<br> To post to this \
group, send email to <a href="mailto:security-onion@googlegroups.com" \
target="_blank">security-onion@googlegroups.com</a>.<br> Visit this group at <a \
href="http://groups.google.com/group/security-onion" \
target="_blank">http://groups.google.com/group/security-onion</a>.<br> For more \
options, visit <a href="https://groups.google.com/groups/opt_out" \
target="_blank">https://groups.google.com/groups/opt_out</a>.<br> <br>
<br>
</font></span></blockquote></div><br></div>
<p></p>
-- <br>
You received this message because you are subscribed to the Google Groups \
"security-onion" group.<br> To unsubscribe from this group and stop \
receiving emails from it, send an email to <a \
href="mailto:security-onion%2Bunsubscribe@googlegroups.com" \
target="_blank">security-onion+unsubscribe@googlegroups.com</a>.<br> To post to this \
group, send email to <a href="mailto:security-onion@googlegroups.com" \
target="_blank">security-onion@googlegroups.com</a>.<br> Visit this group at <a \
href="http://groups.google.com/group/security-onion" \
target="_blank">http://groups.google.com/group/security-onion</a>.<br> For more \
options, visit <a href="https://groups.google.com/groups/opt_out" \
target="_blank">https://groups.google.com/groups/opt_out</a>.<br> <br>
<br>
</div></div></blockquote></div><br></div>
<p></p>
-- <br>
You received this message because you are subscribed to the Google Groups \
"security-onion" group.<br> To unsubscribe from this group and stop \
receiving emails from it, send an email to <a \
href="mailto:security-onion%2Bunsubscribe@googlegroups.com" \
target="_blank">security-onion+unsubscribe@googlegroups.com</a>.<br> To post to this \
group, send email to <a href="mailto:security-onion@googlegroups.com" \
target="_blank">security-onion@googlegroups.com</a>.<br> Visit this group at <a \
href="http://groups.google.com/group/security-onion" \
target="_blank">http://groups.google.com/group/security-onion</a>.<br> For more \
options, visit <a href="https://groups.google.com/groups/opt_out" \
target="_blank">https://groups.google.com/groups/opt_out</a>.<br> <br>
<br>
</div></div></blockquote></div><br></div>
</div></div></blockquote></div><br></div>
</div></div></blockquote></div><br></div>
<p></p>
-- <br>
You received this message because you are subscribed to the Google Groups \
"security-onion" group.<br> To unsubscribe from this group and stop \
receiving emails from it, send an email to <a \
href="mailto:security-onion%2Bunsubscribe@googlegroups.com" \
target="_blank">security-onion+unsubscribe@googlegroups.com</a>.<br> To post to this \
group, send email to <a href="mailto:security-onion@googlegroups.com" \
target="_blank">security-onion@googlegroups.com</a>.<br> Visit this group at <a \
href="http://groups.google.com/group/security-onion" \
target="_blank">http://groups.google.com/group/security-onion</a>.<br> For more \
options, visit <a href="https://groups.google.com/groups/opt_out" \
target="_blank">https://groups.google.com/groups/opt_out</a>.<br> <br>
<br>
</div></div></blockquote></div><br></div>
<p></p>
-- <br>
You received this message because you are subscribed to the Google Groups \
"security-onion" group.<br> To unsubscribe from this group and stop \
receiving emails from it, send an email to <a \
href="mailto:security-onion%2Bunsubscribe@googlegroups.com" \
target="_blank">security-onion+unsubscribe@googlegroups.com</a>.<br> To post to this \
group, send email to <a href="mailto:security-onion@googlegroups.com" \
target="_blank">security-onion@googlegroups.com</a>.<br> Visit this group at <a \
href="http://groups.google.com/group/security-onion" \
target="_blank">http://groups.google.com/group/security-onion</a>.<br> For more \
options, visit <a href="https://groups.google.com/groups/opt_out" \
target="_blank">https://groups.google.com/groups/opt_out</a>.<br> <br>
<br>
</div></div></blockquote></div><br></div>
<p></p>
-- <br>
You received this message because you are subscribed to the Google Groups \
"security-onion" group.<br> To unsubscribe from this group and stop \
receiving emails from it, send an email to <a \
href="mailto:security-onion%2Bunsubscribe@googlegroups.com" \
target="_blank">security-onion+unsubscribe@googlegroups.com</a>.<br> To post to this \
group, send email to <a href="mailto:security-onion@googlegroups.com" \
target="_blank">security-onion@googlegroups.com</a>.<br> Visit this group at <a \
href="http://groups.google.com/group/security-onion" \
target="_blank">http://groups.google.com/group/security-onion</a>.<br> For more \
options, visit <a href="https://groups.google.com/groups/opt_out" \
target="_blank">https://groups.google.com/groups/opt_out</a>.<br> <br>
<br>
</div></div></blockquote></div><br></div>
<p></p>
-- <br />
You received this message because you are subscribed to the Google Groups \
"security-onion" group.<br /> To unsubscribe from this group and stop \
receiving emails from it, send an email to \
security-onion+unsubscribe@googlegroups.com.<br /> To post to this group, send email \
to security-onion@googlegroups.com.<br /> Visit this group at <a \
href="http://groups.google.com/group/security-onion">http://groups.google.com/group/security-onion</a>.<br \
/> For more options, visit <a \
href="https://groups.google.com/groups/opt_out">https://groups.google.com/groups/opt_out</a>.<br \
/> <br />
<br />
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic