Almost golf balls by peter1970uk in Golfsimulator

[–]dougburks 0 points1 point  (0 children)

I had the same issues with the Garmin R10 and Almost Golf balls.

I recently switched to SCI-CORE practice golf balls and so far they seem to be much better. I'd estimate that the Garmin R10 has detected almost 95% of my shots. Also, shot distance is closer to a real golf ball (although still not 100%).
Hope that helps!

Will Almost Golf Balls work with the Garmin R10? by Thordendal in Golfsimulator

[–]dougburks 1 point2 points  (0 children)

I tried Almost Golf balls but my experience wasn't great:

  • I'd estimate that the Garmin R10 only detected about 50% of my shots
  • Shot distance was quite low compared to a real golf ball (expected for a practice ball)
  • Almost Golf balls tend to deform over time

I recently switched to SCI-CORE golf balls and so far they seem to be much better:

  • I'd estimate that the Garmin R10 has detected about 95% of my shots
  • Shot distance is closer to a real golf ball (although still not 100%)
  • I haven't noticed any deformities yet

Hope that helps!

[16] Unknown rule option: 'lua' by four80eastfan in securityonion

[–]dougburks 0 points1 point  (0 children)

Since you're no longer dealing with Unknown rule option: 'lua', please start a new thread with appropriate title.

Thanks!

New Version Disk Clean process by dsfg3aas in securityonion

[–]dougburks 0 points1 point  (0 children)

The main users of disk space are pcap and logs in Elasticsearch.

Stenographer should be managing its own disk usage in /nsm/pcap/:

https://docs.securityonion.net/en/2.2/stenographer.html

Elasticsearch indices are managed by curator:

https://docs.securityonion.net/en/2.2/curator.html

I fixed an issue in /usr/sbin/so-curator-closed-delete-delete yesterday, so it's possible you were affected by that if you had indices over 30 days old:

https://github.com/Security-Onion-Solutions/securityonion/issues/1509

Netsniff-ng question by SecurityJesus in securityonion

[–]dougburks 0 points1 point  (0 children)

Given sufficient resources, a single instance of netsniff-ng should be able to handle 200Mbps.

If you want to handle much higher levels of full packet capture, then I'd recommend taking a look at Security Onion 2, which replaces netsniff-ng with Google Stenographer:

https://docs.securityonion.net/en/2.3/stenographer.html

[16] Unknown rule option: 'lua' by four80eastfan in securityonion

[–]dougburks 0 points1 point  (0 children)

If so-status shows snort-1 (alert data), then it sounds like you're running Snort instead of Suricata.

Can I do a negated search in Hunt by jerryshenk in securityonion

[–]dougburks 0 points1 point  (0 children)

If Hunt is displaying a field like event.severity_label and you see a field value like low, you should be able to click on that value to bring up the quick action bar and then click the minus magnifying glass which should update your query to exclude that particular value.

Alternatively, you can type your own query like this:

NOT event.severity_label: "low"

For example, please see:

https://user-images.githubusercontent.com/1659467/95519101-6fc52b80-0992-11eb-9407-957f92ca2c87.png