Snort mailing list archives
Drifting timestamps
From: "Jacob Roberts" <jake_roberts () byu edu>
Date: Fri, 15 Oct 2004 16:50:31 -0600
We have a snort setup with barnyard which dumps in to a MySQL database. We stop snort and barnyard each day, delete the database, re-create it, then restart snort and barnyard. As snort runs through the day we start to see the timestamps of alerts drift behind actual time. We aren't receiving an excessive amount of alerts so we ruled out Barnyard not being able to keep up with the alerts generated by Snort (I don't know if that would happen anyways) Has anyone had anything like this happen? We haven't been able to track it down and aren't sure what to do. Thanks, Jake Roberts Brigham Young University jake_roberts () byu edu ------------------------------------------------------- This SF.net email is sponsored by: IT Product Guide on ITManagersJournal Use IT products in your business? Tell us what you think of them. Give us Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more http://productguide.itmanagersjournal.com/guidepromo.tmpl _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Drifting timestamps Jacob Roberts (Oct 15)
- Re: Drifting timestamps Martin Roesch (Oct 17)
- <Possible follow-ups>
- RE: Drifting timestamps Jacob Roberts (Oct 18)
- Re: Drifting timestamps Martin Roesch (Oct 21)
- RE: Drifting timestamps M. Shirk (Oct 20)
- RE: Drifting timestamps Jacob Roberts (Oct 21)
- Re: Drifting timestamps M. Shirk (Oct 21)