New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ERROR: can't read "state(reply)": no such element in array #77

GoogleCodeExporter opened this Issue Mar 24, 2015 · 1 comment


None yet
1 participant
Copy link

GoogleCodeExporter commented Mar 24, 2015

What steps will reproduce the problem?
1. Using X over SSH to render on my Windows 7 machine remotely.
2. At login, selected both SGUIL or OSSEC predefined sensors. Clicked check 
3.Clicked on individual event entry to see DNS information and popup error box 

What is the expected output? What do you see instead?
Expected output is currently selected entry's IP/DNS information.
Instead, the following error (details) appear in popup box:
can't read "state(reply)": no such element in array
can't read "state(reply)": no such element in array
    while executing
"binary scan $state(reply) SSSSSS mid hdr nQD nAN nNS nAR"
    (procedure "Flags" line 13)
    invoked from within
"Flags $token flags"
    (procedure "dns::name" line 3)
    invoked from within
"dns::name $tok"
    (procedure "GetHostbyAddr" line 47)
    invoked from within
"GetHostbyAddr $srcIP"
    (procedure "ResolveHosts" line 23)
    invoked from within
    (procedure "SelectEventPane" line 105)
    invoked from within
"SelectEventPane $tablelist::W EVENT EVENT"
    (command bound to event)

What version of the product are you using? On what operating system?
Product version is Security Onion 20110116 on XUBUNTU 10.04

Please provide any additional information below.

Original issue reported on by on 20 Jan 2011 at 3:40


This comment has been minimized.

Copy link

GoogleCodeExporter commented Mar 24, 2015

Thanks for the bug report!  This issue can be resolved using the latest script.  Please see:

Original comment by on 22 Jan 2011 at 6:38

  • Changed state: Fixed
  • Added labels: ****
  • Removed labels: ****
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment