I would like to point out that identifiers like “_DLL_HEADER” and “_MOLOCH_LUA_” [do eventually not fit](https://www.securecoding.cert.org/conf

Topic :) Currently using a Chrome plugin, but it would be nice to have it built in..just a user specified page refresh. Thank you!

Recently I git cloned a zeek plugin, built it, and then wanted to add additional instrumentation (to understand it better) via the PLUGIN_DBG_LOG() macro mentioned here [1].

While adding the debug macros worked fine, I had difficulties switching on the debugging via the zeek --debug option. Why? Because the plugin name to be specified is case sensitive and if you get it wrong then there is

Currently, at least the values from XML tags tcpsequence and ipidsequence are not kept. The schema should be updated to store them.

See also #636.

Greetings.
Found your nice poller when I had to troubleshoot some wireless clients that were misbehaving and was very impressed.

However I also encountered a bug that made troubleshooting hard in certain cases.

When there are multiple clients with the same hostname in the unifi controller (pretty common among android phones) all data points will be bundled together based on that hostname.

The tutorial in https://github.com/chmorgan/sharppcap/tree/master/Tutorial is currently found on codeproject.com, https://www.codeproject.com/Articles/12458/SharpPcap-A-Packet-Capture-Framework-for-NET, and could use to be updated to:

• Remove mention of airpcap
• Include latest released version
• Update links to GitHub rather than sourceforge
• Mention nuget packages

(I'm sure more)

It was mentioned in the changeling for v1.1.7 but it is not in the documentation nor does it appear in the sample config generated by nsot-server init.

+----------------------------+    +----------------------------+
| SOURCE HOST                |    | DESTINATION HOST           |
| IP:   xxxxxxxxxxxxx        |    | IP:  xxxxxxxxxx            |
| ARP:  xxxxxxxxxxxxxxxxx    || ARP:  xxxxxxxxxxxxxxxxx    |    |                            |
+----------------------------+    +----------------------------+
                  |                

In the mysql config file, innodb_flush_log_at_trx_commit is set to 0.

However, the MySQL official document recommends to set it to 1, which helps keep InnoDB ACID Compliant.
"For

• what is the name of the switch for mirroring (name defined in the faucet.yaml, not dns, for example)
• the port that Poseidon uses for mirroring needs to be controlled by Faucet, therefore it needs to be an openflow port
• the port that Poseidon uses needs to be configured in faucet.yaml to be output_only: true and no native vlan (a port for mirroring from Faucet's perspective)
• Requiremen