Report totals seems off

wildgoosed · 01-12-2012, 09:56 AM

Hey everyone,

I'm noticing lately, for example, with Attack Blocker, that it may summarize that my server blocked over 1000 sessions but when reviewing the logs myself I don't see any of this.

Any ideas what I should do? I've reinstalled the Reporting App. No fix.

wildgoosed · 01-24-2012, 02:32 PM

Can anyone help out or has this happened to anyone else?

Report information under highlights, such as Attack Blocker is reporting lots of blocks, yet when I go to Attack Blocker, events I don't much.

Any ideas?

Here is an excerpt of the information from the daily report highlights.

Attack Blocker scanned 2158971 sessions, of which it limited 7154 and dropped 20137

hlarsen · 01-24-2012, 02:58 PM

i'm seeing something similar and will look into it.

jcoffin · 01-24-2012, 03:10 PM

Are you looking at the csv file event export? The web attack event only shows the last 1000 events.

hlarsen · 01-25-2012, 08:32 AM

yesterday i opened a bug for this which is now closed fixed. it should work in v9.2; sorry for the trouble!

wildgoosed · 01-30-2012, 11:42 AM

Should I have to update this manually or should it auto install?

I was looking at the PDF reports and the events on the web interface.

hlarsen · 01-30-2012, 01:55 PM

if you have the box set to do automatic updates then it'll be automatic. if not, you'll have to start the upgrade manually (when it's available, which it is not just yet)

wildgoosed · 02-01-2012, 02:42 PM

Thank you very much so far. I'm glad the bug is corrected in 9.2 , but in the mean time what I'm I supposed to do?

Was it just limited to attack blocker? Can you link me to the info regarding the bug?

hlarsen · 02-01-2012, 03:57 PM

http://bugzilla.untangle.com/show_bug.cgi?id=9780

01-12-2012, 09:56 AM	#1 (permalink)
wildgoosed Untangler Join Date: Sep 2009 Posts: 39	Report totals seems off Hey everyone, I'm noticing lately, for example, with Attack Blocker, that it may summarize that my server blocked over 1000 sessions but when reviewing the logs myself I don't see any of this. Any ideas what I should do? I've reinstalled the Reporting App. No fix.

01-24-2012, 02:58 PM	#3 (permalink)
hlarsen Join Date: Jul 2010 Location: sfba URLs submitted: 1 Posts: 1,139	i'm seeing something similar and will look into it. __________________ Attention: Support on the Untangle Forums is provided by volunteers and community members. If you need official Untangle support please call or email support@untangle.com.

01-24-2012, 03:10 PM	#4 (permalink)
jcoffin Untangler Join Date: Aug 2008 Location: Sunnyvale, CA URLs submitted: 1 Posts: 1,784	Are you looking at the csv file event export? The web attack event only shows the last 1000 events. __________________ Attention: Support and help on the Untangle Forums is provided by volunteers and community members like yourself. If you need Untangle support please call or email support@untangle.com

01-25-2012, 08:32 AM	#5 (permalink)
hlarsen Join Date: Jul 2010 Location: sfba URLs submitted: 1 Posts: 1,139	yesterday i opened a bug for this which is now closed fixed. it should work in v9.2; sorry for the trouble! __________________ Attention: Support on the Untangle Forums is provided by volunteers and community members. If you need official Untangle support please call or email support@untangle.com.

01-30-2012, 01:55 PM	#7 (permalink)
hlarsen Join Date: Jul 2010 Location: sfba URLs submitted: 1 Posts: 1,139	if you have the box set to do automatic updates then it'll be automatic. if not, you'll have to start the upgrade manually (when it's available, which it is not just yet) __________________ Attention: Support on the Untangle Forums is provided by volunteers and community members. If you need official Untangle support please call or email support@untangle.com.

Protect

Filter

Perform

Connect

Manage

Add-Ons

01-24-2012, 02:32 PM	#2 (permalink)
wildgoosed Untangler Join Date: Sep 2009 Posts: 39	Can anyone help out or has this happened to anyone else? Report information under highlights, such as Attack Blocker is reporting lots of blocks, yet when I go to Attack Blocker, events I don't much. Any ideas? Here is an excerpt of the information from the daily report highlights. Attack Blocker scanned 2158971 sessions, of which it limited 7154 and dropped 20137

01-30-2012, 11:42 AM	#6 (permalink)
wildgoosed Untangler Join Date: Sep 2009 Posts: 39	Should I have to update this manually or should it auto install? I was looking at the PDF reports and the events on the web interface.

02-01-2012, 02:42 PM	#8 (permalink)
wildgoosed Untangler Join Date: Sep 2009 Posts: 39	Thank you very much so far. I'm glad the bug is corrected in 9.2 , but in the mean time what I'm I supposed to do? Was it just limited to attack blocker? Can you link me to the info regarding the bug?

02-01-2012, 03:57 PM	#9 (permalink)
hlarsen Join Date: Jul 2010 Location: sfba URLs submitted: 1 Posts: 1,139	http://bugzilla.untangle.com/show_bug.cgi?id=9780 __________________ Attention: Support on the Untangle Forums is provided by volunteers and community members. If you need official Untangle support please call or email support@untangle.com.