AW: snort 2.1.0 stops logging

["Pickel, Gerd - Betax-Systems GmbH (IT)" <Gerd.Pickel () betax-systems de>]

Hi,

thanks for the tip. I completely erased my databases and created the needed one new.
No events are logged either. I ran random tests and got the same answer: nothing in the db.
Does anyone have some more hints?

Gerd


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Gerd Pickel
Systemadministration
BETAX-systems GmbH
D-93059 Regensburg
Fon : +49 (0) 1805 52 38 29
Fax : +49 (0) 941  46 21 50 
mailto:gerd.pickel () betax-systems de
http://www.betax-systems.de
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~



-----Ursprüngliche Nachricht-----
Von: Jochen [mailto:dibo303 () gmx de]
Gesendet: Donnerstag, 22. Januar 2004 10:36
An: Pickel, Gerd - Betax-Systems GmbH (IT)
Betreff: Re: [Snort-users] snort 2.1.0 stops logging


Hi,

I had the same problem.
I dopped all tables of my snort-DB and create it new.
It worked then. Don't know why.
But I mist admit that there still are sometimes events snort misses,
although it catches them mostly.

Jochen

> Hi all,
>
> it could be I ask for a solution of a problem of the past, but maybe not 
> only my system is affected. I run two sensors with snort on debian 
> (kernel 2.4.20-bf2.4) machines. After updating snort from  2.0 to 2.1.0 
> (package snort-mysql 2.1.0-3) no events are loged to the mysql db. I 
> don't have a clue what happened, because the configuration of the 
> systems was not changed. After a review of the configuration of snort no 
> (obviously) failures were discovered (logins ok, stunnel ok, etc.). So 
> what happened? Does anyone have an idea where to begin the research for 
> the solution? Or is there a solution out there?
>
> Thanks in advance
>
> Gerd
>
>
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> Gerd Pickel
> Systemadministration
> BETAX-systems GmbH
> D-93059 Regensburg
> Fon : +49 (0) 1805 52 38 29
> Fax : +49 (0) 941  46 21 50 
> mailto:gerd.pickel () betax-systems de
> http://www.betax-systems.de
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>
>
>
>
> -------------------------------------------------------
> The SF.Net email is sponsored by EclipseCon 2004
> Premiere Conference on Open Tools Development and Integration
> See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
> http://www.eclipsecon.org/osdn
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:

-- 
+++ GMX - die erste Adresse für Mail, Message, More +++
Bis 31.1.: TopMail + Digicam für nur 29 EUR http://www.gmx.net/topmail



-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users