snort, mysql Duplicate entry

[Clay Caviness <clay () boobah com>]

I'm getting a "Duplicate entry 'blah' for key 1" message for every snort 
event.

This started after I ran out of space in the filesystem the snort db is on. 
After moving it to a larger filesystem and running myisamchk and friends, I 
started getting these errors. I'm running snort from current CVS checkouts 
on OpenBSD 3.1(-current) and MySQL 3.23.47.

Are there any fixes for this problem?


May  9 18:14:46 scootch snort: database: mysql_error: Duplicate entry 
'1-1518280' for key 1 SQL=INSERT INTO iphdr (sid, cid, ip_src, ip_dst, 
ip_ver,ip_hlen, ip_tos, ip_len, ip_id, ip_flags, ip_off,ip_ttl, ip_proto, 
ip_csum) VALUES 
('1','1518280','3499900692','2393286869','4','5','0','1500','48889','0','0'
,'64','6','12022')
May  9 18:14:46 scootch snort: database: mysql_error: Duplicate entry 
'1-1518280' for key 1 SQL=INSERT INTO data (sid,cid,data_payload) VALUES 
('1','1518280','3D617269616C2073697A653D323E3C423EA04E4F54453A3C42523E54686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--
Clay Caviness
mailto:clay () boobah com   Use GPG!
http://boobah.com/clay/



_______________________________________________________________

Have big pipes? SourceForge.net is looking for download mirrors. We supply
the hardware. You get the recognition. Email Us: bandwidth () sourceforge net
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users