Snort mailing list archives

Re: Barnyard2 issue w/unified2 ?


From: Jeff Kell <jeff-kell () utc edu>
Date: Fri, 9 Aug 2013 22:34:25 -0400

It's a classic BASE MySQL instance.  BASE is using adodb5.  As for the
schema...  umm...  I've slept a few times since creating the DB :)

Jeff

On 8/9/2013 10:26 PM, beenph wrote:
On Fri, Aug 9, 2013 at 9:06 PM, Jeff Kell <jeff-kell () utc edu> wrote:
Getting a rash of these recently... causes barnyard2 to abort, and only
way to "obviously" clear is to go to the database and "delete from
sig_reference";

Aug  9 20:55:03 snort-dorms barnyard2[11053]: FATAL ERROR: database
mysql_error: Duplicate entry '167807-1' for key
'PRIMARY'#012#011SQL=[INSERT INTO sig_reference
(ref_id,sig_id,ref_seq) VALUES ('132475','167807','1');]
Aug  9 20:55:03 snort-dorms barnyard2[11053]: Barnyard2 exiting
Have also had it recur after the "delete" reset of the table.

We have 8 snort/barnyard2 instances running across multiple sensors, not
sure if that's relevant.

Which version of barnyard2 are you running?
Are you logging to a InnoDB or MyIASM schema?

-elz




------------------------------------------------------------------------------
Get 100% visibility into Java/.NET code with AppDynamics Lite!
It's a free troubleshooting tool designed for production.
Get down to code-level detail for bottlenecks, with <2% overhead. 
Download for free and get started troubleshooting in minutes. 
http://pubads.g.doubleclick.net/gampad/clk?id=48897031&iu=/4140/ostg.clktrk
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!


Current thread: