You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@metron.apache.org by "Michael Miklavcic (JIRA)" <ji...@apache.org> on 2016/08/25 17:59:20 UTC
[jira] [Created] (METRON-395) Metron Bro parser not parsing some
timestamp values
Michael Miklavcic created METRON-395:
----------------------------------------
Summary: Metron Bro parser not parsing some timestamp values
Key: METRON-395
URL: https://issues.apache.org/jira/browse/METRON-395
Project: Metron
Issue Type: Bug
Reporter: Michael Miklavcic
Assignee: Michael Miklavcic
The bro parser fails to parse the following type of event:
{"http": {"ts":1467657279.0,"uid":"CMYLzP3PKiwZAgBa51","id.orig_h":"192.168.138.158","id.orig_p":49206,"id.resp_h":"95.163.121.204",
"id.resp_p":80,"trans_depth":2,"method":"GET","host":"7oqnsnzwwnm6zb7y.gigapaysun.com","uri":"/img/flags/it.png","referrer":"http://7oqnsnzwwnm6zb7y.gigapaysun.com/11iQmfg","user_agent":"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)","request_body_len":0,"response_body_len":552,"status_code":200,"status_msg":"OK","tags":[],"resp_fuids":["F3m7vB2RjUe4n01aqj"],"resp_mime_types":["image/png"]}}
In the current code, timestamps are converted to millis as a long and performing the substring(0, 13) operation on a Double value such as 1467657279.0 as a string will cause an index out of bounds exception.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)