DiagnosticsCrash Reporter

jc1976

Hi folks,

I dunno if this is the correct place to submit this log. I've been looking around but there doesn't seem to be a portal to upload them.

if this is the wrong place to submit the crash report, i apologize.

also, the php error log downloaded as a .txt.. i attempted to upload the file several times however this editor claims it only allowed .txt along with a bunch of others.. my point is, i was attempting to upload a .txt yet it seems to say it's not a txt.

Anywho:

[10-Aug-2023 13:23:24 US/Eastern] PHP Fatal error: Uncaught ValueError: date_create_from_format(): Argument #2 ($datetime) must not contain any null bytes in /usr/local/www/widgets/widgets/suricata_alerts.widget.php:183
Stack trace:
#0 /usr/local/www/widgets/widgets/suricata_alerts.widget.php(183): date_create_from_format('m/d/Y-H:i:s.u', '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00...')
#1 /usr/local/www/widgets/widgets/suricata_alerts.widget.php(78): suricata_widget_get_alerts()
#2 {main}
thrown in /usr/local/www/widgets/widgets/suricata_alerts.widget.php on line 183

bmeeks

That error has only been reported one other time that I am aware of, and it turned out to be a corrupted alerts.log file if I recall correctly.

That error is saying that a value read from the alerts.log was NULL, but there is no way that can happen unless the file is corrupt. One possibility is a disk read or write error.

When you go to the ALERTS tab, can you display all the alerts from all Suricata configured interfaces without any problem? The exact same code is used within the ALERTS tab and Suricata Wiget, so a corrupt file would impact both. It's also possible that the error happened some time back in the past and by now the alerts.log has been rotated out and the current file may be fine. Does the error repeat every single time the widget updates, or has it only popped up once?

Normally, issues with Snort or Suricata would be posted here: https://forum.netgate.com/category/53/ids-ips.