[Questions and Support]

[haryisharry]

Question
Upgraded from version 0.76 to 0.81 recently and the number of events and threats decrease a lot.

Support
I have just upgraded from version 0.76 to 0.81 recently and the number of events and detected thread decrease a lot. The same traffic source. Status of sensor and server are good. Tried to tcpreplay and the threat got detected. Any steps more to check on detail for this point ?
Best regards.

[MikhailKasimov]

Hello!

Due to changelog, only one defunct feed was deleted: https://github.com/stamparm/maltrail/blob/master/CHANGELOG#L27

OPNSense is in use? Asking, because some time ago there also was quite similar issue: #19272

[stamparm]

0.76 -> 0.81 is a long way back at this point, and event counts swing with the trail set anyway. Closing as stale - if the count still looks wrong on 3.1.x, open a fresh one with the sensor's startup line (it prints how many trails it loaded).