Column headers hidden from view for PCAP in SOC, and mismatch between PCAP job number and the actual contents

[Ximalas]

Version

2.4.120

Installation Method

Security Onion ISO image

Description

other (please provide detail below)

Installation Type

Distributed

Location

on-prem with Internet access

Hardware Specs

Exceeds minimum requirements

CPU

32

RAM

384 GB

Storage for /

155 GB (manager)

Storage for /nsm

312 GB (manager)

Network Traffic Collection

tap

Network Traffic Speeds

1Gbps to 10Gbps

Status

Yes, all services on all nodes are running OK

Salt Status

No, there are no failures

Logs

No, there are no additional clues

Detail

I upgraded our fleet to 2.4.120 this morning, around 09:00 UTC. No issues of any kind, except:

The column headers for PCAP are briefly shown, then hidden by the PCAP banner, with the plus button on the left, making it impossible to sort on any columns. Maybe this is intended, but I would argue it's handy to sort the table using any of the available columns.

Also, the contents of each PCAP no longer corresponds to the metadata shown in the pull down.

I didn't have any use for the previously generated PCAPs, so I deleted everything and repeated the latest one. At least the contents of this PCAP matches the metadata shown in the pull down.

Guidelines

• I have read the discussion guidelines at Read before posting! #1720 and assert that I have followed the guidelines.

[dougburks]

@Ximalas Thanks for reporting this. I've converted it to an issue: #14234