Snort mailing list archives

Drifting timestamps


From: "Jacob Roberts" <jake_roberts () byu edu>
Date: Fri, 15 Oct 2004 16:50:31 -0600

We have a snort setup with barnyard which dumps in to a MySQL database.
We stop snort and barnyard each day, delete the database, re-create it,
then restart snort and barnyard.

As snort runs through the day we start to see the timestamps of alerts
drift behind actual time.  We aren't receiving an excessive amount of
alerts so we ruled out Barnyard not being able to keep up with the
alerts generated by Snort (I don't know if that would happen anyways)

Has anyone had anything like this happen?  We haven't been able to track
it down and aren't sure what to do.

Thanks,
Jake Roberts
Brigham Young University
jake_roberts () byu edu


-------------------------------------------------------
This SF.net email is sponsored by: IT Product Guide on ITManagersJournal
Use IT products in your business? Tell us what you think of them. Give us
Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more
http://productguide.itmanagersjournal.com/guidepromo.tmpl
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: