Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

FIX: Intermittent pcap retrieval #10750

Closed
dougburks opened this issue Jul 11, 2023 · 2 comments
Closed

FIX: Intermittent pcap retrieval #10750

dougburks opened this issue Jul 11, 2023 · 2 comments
Assignees

Comments

@dougburks
Copy link
Contributor

My normal workflow:

  • go to our SOC Alerts page
  • drill into an alert aggregation to see individual alerts
  • pick an individual alert and click to get Action menu
  • right-click PCAP and open in new tab
  • while that PCAP is retrieving, go back to step 1

This allows me to investigate several alerts while PCAP retrieval happens in the background. However, most of the time, there will be at least one PCAP retrieval that hangs here:
image

I've tried waiting many minutes but it never displays on its own. Refreshing the page usually results in the pcap displaying.

@coreyogburn coreyogburn self-assigned this Jul 12, 2023
@coreyogburn
Copy link

This was caused by a race condition between when we request the job and when we subscribe to job updates sometimes letting those updates slip through. Manual testing was done to verify the completion of the ticket.

@dougburks
Copy link
Contributor Author

Tested and verified.

@github-actions github-actions bot locked as resolved and limited conversation to collaborators Feb 25, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

3 participants