Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

--version3 and libmodsecurity 3 parsing exceptions #32

Open
matteocostantini opened this issue May 12, 2023 · 1 comment
Open

--version3 and libmodsecurity 3 parsing exceptions #32

matteocostantini opened this issue May 12, 2023 · 1 comment
Labels
duplicate This issue or pull request already exists

Comments

@matteocostantini
Copy link

Hy,
've compile libmodsecurity3 (3.0.9) and apache-connector.
How resolve it?

----- modsec_audit events processed: 68 -----
----- modsec_audit events skipped by INCLUDED/EXCLUDED options or INVALID: 0 -----
Exception in Graph TOP 10 IP source addresses: 'messages'
Exception in Graph TOP 10 Attacks intercepted 'messages'
Exception in Graph TOP 10 IP source addresses: 'messages'
Exception in Graph TOP 10 Attacks intercepted 'messages'
Exception in Graph TOP 10 IP source addresses: 'messages'
Exception in Graph TOP 10 Attacks intercepted 'messages'
Exception in Graph TOP 10 IP source addresses: 'messages'
Exception in Graph TOP 10 Attacks intercepted 'messages'
Exception in Graph TOP 10 IP source addresses: 'messages'
Exception in Graph TOP 10 Attacks intercepted 'messages'
Exception in Graph TOP 10 IP source addresses: 'messages'
Exception in Graph TOP 10 Attacks intercepted 'messages'
Exception in Graph TOP 10 IP source addresses: 'messages'
Exception in Graph TOP 10 Attacks intercepted 'messages'
Exception in Graph TOP 10 IP source addresses: 'messages'
Exception in Graph TOP 10 Attacks intercepted 'messages'
Exception in Graph TOP 10 IP source addresses: 'messages'
Exception in Graph TOP 10 Attacks intercepted 'messages'
Exception in Graph TOP 10 IP source addresses: 'messages'
Exception in Graph TOP 10 Attacks intercepted 'messages'
Exception in Graph TOP 10 IP source addresses: 'messages'
Exception in Graph TOP 10 Attacks intercepted 'messages'
Exception in Graph TOP 10 IP source addresses: 'messages'
Exception in Graph TOP 10 Attacks intercepted 'messages'
Exception in Graph TOP 10 IP source addresses: 'messages'
Exception in Graph TOP 10 Attacks intercepted 'messages'
Exception in Graph TOP 10 IP source addresses: 'messages'
Exception in Graph TOP 10 Attacks intercepted 'messages'
Exception in Graph TOP 10 IP source addresses: 'messages'
Exception in Graph TOP 10 Attacks intercepted 'messages'
Exception in Graph TOP 10 IP source addresses: 'messages'
Exception in Graph TOP 10 Attacks intercepted 'messages'
Exception in Graph TOP 10 IP source addresses: 'messages'
Exception in Graph TOP 10 Attacks intercepted 'messages'
Exception in Graph TOP 10 IP source addresses: 'messages'
Exception in Graph TOP 10 Attacks intercepted 'messages'
Exception in Graph TOP 10 IP source addresses: 'messages'
Exception in Graph TOP 10 Attacks intercepted 'messages'
Exception in Graph TOP 10 IP source addresses: 'remote_address'
Exception in TOP 20 rule hits: 'audit_data'
for transaction_id : -
Exception in Graph TOP 10 Attacks intercepted 'audit_data'
Exception in Graph TOP 10 IP source addresses: 'remote_address'
Exception in TOP 20 rule hits: 'audit_data'
for transaction_id : -
Exception in Graph TOP 10 Attacks intercepted 'audit_data'
Exception in Graph TOP 10 IP source addresses: 'remote_address'
Exception in TOP 20 rule hits: 'audit_data'
for transaction_id : -
Exception in Graph TOP 10 Attacks intercepted 'audit_data'
Exception in Graph TOP 10 IP source addresses: 'remote_address'
Exception in TOP 20 rule hits: 'audit_data'
for transaction_id : -
Exception in Graph TOP 10 Attacks intercepted 'audit_data'
Exception in Graph TOP 10 IP source addresses: 'remote_address'
Exception in TOP 20 rule hits: 'audit_data'
for transaction_id : -
Exception in Graph TOP 10 Attacks intercepted 'audit_data'
Exception in Graph TOP 10 IP source addresses: 'remote_address'
Exception in TOP 20 rule hits: 'audit_data'
for transaction_id : -
Exception in Graph TOP 10 Attacks intercepted 'audit_data'
Exception in Graph TOP 10 IP source addresses: 'remote_address'
Exception in TOP 20 rule hits: 'audit_data'
for transaction_id : -
Exception in Graph TOP 10 Attacks intercepted 'audit_data'
Exception in Graph TOP 10 IP source addresses: 'remote_address'
Exception in TOP 20 rule hits: 'audit_data'
for transaction_id : -
Exception in Graph TOP 10 Attacks intercepted 'audit_data'
Exception in Graph TOP 10 IP source addresses: 'remote_address'
Exception in TOP 20 rule hits: 'audit_data'
for transaction_id : -
Exception in Graph TOP 10 Attacks intercepted 'audit_data'
Exception in Graph TOP 10 IP source addresses: 'remote_address'
Exception in TOP 20 rule hits: 'audit_data'
for transaction_id : -
Exception in Graph TOP 10 Attacks intercepted 'audit_data'
Exception in Graph TOP 10 IP source addresses: 'remote_address'
Exception in TOP 20 rule hits: 'audit_data'
for transaction_id : -
Exception in Graph TOP 10 Attacks intercepted 'audit_data'
Exception in Graph TOP 10 IP source addresses: 'remote_address'
Exception in TOP 20 rule hits: 'audit_data'
for transaction_id : -
Exception in Graph TOP 10 Attacks intercepted 'audit_data'
Exception in Graph TOP 10 IP source addresses: 'remote_address'
Exception in TOP 20 rule hits: 'audit_data'
for transaction_id : -
Exception in Graph TOP 10 Attacks intercepted 'audit_data'
Exception in Graph TOP 10 IP source addresses: 'remote_address'
Exception in TOP 20 rule hits: 'audit_data'
for transaction_id : -
Exception in Graph TOP 10 Attacks intercepted 'audit_data'
Exception in Graph TOP 10 IP source addresses: 'remote_address'
Exception in TOP 20 rule hits: 'audit_data'
for transaction_id : -
Exception in Graph TOP 10 Attacks intercepted 'audit_data'
Exception in Graph TOP 10 IP source addresses: 'remote_address'
Exception in TOP 20 rule hits: 'audit_data'
for transaction_id : -
Exception in Graph TOP 10 Attacks intercepted 'audit_data'
Exception in Graph TOP 10 IP source addresses: 'remote_address'
Exception in TOP 20 rule hits: 'audit_data'
for transaction_id : -
Exception in Graph TOP 10 Attacks intercepted 'audit_data'
Exception in Graph TOP 10 IP source addresses: 'remote_address'
Exception in TOP 20 rule hits: 'audit_data'
for transaction_id : -
Exception in Graph TOP 10 Attacks intercepted 'audit_data'
Exception in Graph TOP 10 IP source addresses: 'remote_address'
Exception in TOP 20 rule hits: 'audit_data'
for transaction_id : -
Exception in Graph TOP 10 Attacks intercepted 'audit_data'
Exception in Graph TOP 10 IP source addresses: 'remote_address'
Exception in TOP 20 rule hits: 'audit_data'
for transaction_id : -
Exception in Graph TOP 10 Attacks intercepted 'audit_data'
Exception in Graph TOP 10 IP source addresses: 'remote_address'
Exception in TOP 20 rule hits: 'audit_data'
for transaction_id : -
Exception in Graph TOP 10 Attacks intercepted 'audit_data'
Exception in Graph TOP 10 IP source addresses: 'remote_address'
Exception in TOP 20 rule hits: 'audit_data'
for transaction_id : -
Exception in Graph TOP 10 Attacks intercepted 'audit_data'
Exception in Graph TOP 10 IP source addresses: 'remote_address'
Exception in TOP 20 rule hits: 'audit_data'
for transaction_id : -
Exception in Graph TOP 10 Attacks intercepted 'audit_data'
Exception in Graph TOP 10 IP source addresses: 'remote_address'
Exception in TOP 20 rule hits: 'audit_data'
for transaction_id : -
Exception in Graph TOP 10 Attacks intercepted 'audit_data'
Exception in Graph TOP 10 IP source addresses: 'remote_address'
Exception in TOP 20 rule hits: 'audit_data'
for transaction_id : -
Exception in Graph TOP 10 Attacks intercepted 'audit_data'
Exception at modsec_save_xlsx() :'transaction_id', transaction_id :ZF3-elttbGFBrieJDfTmbQAAAAc
Exception at modsec_save_xlsx() :'transaction_id', transaction_id :ZF3-elttbGFBrieJDfTmbQAAAAc
Exception at modsec_save_xlsx() :'transaction_id', transaction_id :ZF3-elttbGFBrieJDfTmbQAAAAc
Exception at modsec_save_xlsx() :'transaction_id', transaction_id :ZF3-elttbGFBrieJDfTmbQAAAAc
Exception at modsec_save_xlsx() :'transaction_id', transaction_id :ZF3-elttbGFBrieJDfTmbQAAAAc
Exception at modsec_save_xlsx() :'transaction_id', transaction_id :ZF3-elttbGFBrieJDfTmbQAAAAc
Exception at modsec_save_xlsx() :'transaction_id', transaction_id :ZF3-elttbGFBrieJDfTmbQAAAAc
Exception at modsec_save_xlsx() :'transaction_id', transaction_id :ZF3-elttbGFBrieJDfTmbQAAAAc
Exception at modsec_save_xlsx() :'transaction_id', transaction_id :ZF3-elttbGFBrieJDfTmbQAAAAc
Exception at modsec_save_xlsx() :'transaction_id', transaction_id :ZF3-elttbGFBrieJDfTmbQAAAAc
Exception at modsec_save_xlsx() :'transaction_id', transaction_id :ZF3-elttbGFBrieJDfTmbQAAAAc
Exception at modsec_save_xlsx() :'transaction_id', transaction_id :ZF3-elttbGFBrieJDfTmbQAAAAc
Exception at modsec_save_xlsx() :'transaction_id', transaction_id :ZF3-elttbGFBrieJDfTmbQAAAAc
Exception at modsec_save_xlsx() :'transaction_id', transaction_id :ZF3-elttbGFBrieJDfTmbQAAAAc
Exception at modsec_save_xlsx() :'transaction_id', transaction_id :ZF3-elttbGFBrieJDfTmbQAAAAc
Exception at modsec_save_xlsx() :'transaction_id', transaction_id :ZF3-elttbGFBrieJDfTmbQAAAAc
Exception at modsec_save_xlsx() :'transaction_id', transaction_id :ZF3-elttbGFBrieJDfTmbQAAAAc
Exception at modsec_save_xlsx() :'transaction_id', transaction_id :ZF3-elttbGFBrieJDfTmbQAAAAc
Exception at modsec_save_xlsx() :'transaction_id', transaction_id :ZF3-elttbGFBrieJDfTmbQAAAAc
Exception at modsec_save_xlsx() :'transaction_id', transaction_id :ZF3-elttbGFBrieJDfTmbQAAAAc
Exception at modsec_save_xlsx() :'transaction_id', transaction_id :ZF3-elttbGFBrieJDfTmbQAAAAc
Exception at modsec_save_xlsx() :'transaction_id', transaction_id :ZF3-elttbGFBrieJDfTmbQAAAAc
Exception at modsec_save_xlsx() :'transaction_id', transaction_id :ZF3-elttbGFBrieJDfTmbQAAAAc
Exception at modsec_save_xlsx() :'transaction_id', transaction_id :ZF3-elttbGFBrieJDfTmbQAAAAc
Exception at modsec_save_xlsx() :'transaction_id', transaction_id :ZF3-elttbGFBrieJDfTmbQAAAAc

@molu8bits
Copy link
Owner

I would need an example of audit log. Please anonymize at least few log entries and attach here to let me check.

@molu8bits molu8bits added the duplicate This issue or pull request already exists label May 24, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
duplicate This issue or pull request already exists
Projects
None yet
Development

No branches or pull requests

2 participants