Does anyone know about these errors showing if the info log after a win_socket_events query?
Error casting protocol () to INTEGER
Error casting local_port () to INTEGER
Error casting remote_port () to INTEGER
04/30/2019, 12:55 PM
yes. we have seen these typecast errors from osquery but not sure why it does so..the data from extension is returned in the way defined in virtual tables (i.e. as integers). Since these errors have not come in the way of any functionality, and can easily be supprsed by downing the verbosity, these are just harmless prints..