September 8th, 2003, 21:44
Well, I'm having way too much fun with sguil. Some errors from the app concern me. When I try to query an event, I get the error:

WHERE event.sid=sensor.sid AND event.timestamp > '2003-09-02' AND event.status = 11 LIMIT 500

If I query the seesions table, I get:

WHERE sessions.sid=sensor.sid AND sessions.start_time > '2003-09-02' AND <Insert Query Here> LIMIT 500[/code:1:6b56c0b9e3]

and then:

mysqlsel/db server: You have an error in you SQL syntax near '<Insert Query Here> LIMIT 500' at line 1[/code:1:6b56c0b9e3]