[Dshield] Whats wrong when receiving "Sorry, no data for June 21st 2005"?
Johannes B. Ullrich
jullrich at euclidian.com
Wed Jun 22 03:03:25 GMT 2005
Somehow your logs are filtered after the parser. Most likely in your
case this would be due to a timezone issue that puts your logs in to the
The timezone looks ok for NZ, but please double check.
To run our time-check, visit the URL
http://www.dshield.org/timestamp.php from a system behind your firewall.
In response to visiting the URL, a single packet will be sent to a high
port from our system. Later, as you submit this packet, we can compare
your timestamp with the timestamp recorded by the system.
Also: Please send the next confirmation email you get to me off-list as
soon as you receive it. Or copy jullrich_at_sans.org on your e-mails
sent to the system if you can.
>I've been submitting logs for a few weeks and I'm getting confirmations
> Authorized Userid: 1234 (1234 is masking my number....)
> Format: DSHIELD
> Timezone: +12:00
> Lines in file: 1383
> Lines rejected: none
>Unique lines written to database: 1357
> identical lines are added up on import.
> rejected lines (up to 10)
>Lines written to database (up to 10):
>2005-06-21 00:00:07 +12:00 1234 1 22.214.171.124 2721 (normally
>my IP) 139 tcp syn
>...(9 more lines)
>And when I'm running the Reports Overview, I receive the message "Sorry,
>no data for June 21 2005". And I get the same message for every single
>day that I have been a member! I have emailed dshield and all I get is a
>rude single line response, "you did not submit any reports today" even
>though I sent a copy of the confirmation message above.
>Is it me, my setup or dshield that is doing something wrong?
>Thankful for any hints!
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 256 bytes
Desc: OpenPGP digital signature
Url : http://www.dshield.org/pipermail/list/attachments/20050621/37da249d/signature.bin
More information about the list