Snort mailing list archives

Duplicate entry message


From: "Maetzky, Steffen (Extern)" <Steffen.Maetzky () gedas de>
Date: Fri, 26 Mar 2004 16:27:11 +0100

Hello,

I get a duplicate entry message at the start of acid.

I' ve tried to fix it by updating the last_cid (sensor) value but it doesn't
help.

Then I' ve recompiled snort-2.1.1 with the modified spo_database.c.
(data->shared->cid = event_cid changed to data->shared->cid = event_cid >
sensor_cid ? event_cid : sensor_cid) 

./configure --with-<my options> 
make 

and copied the new snort-binary to /usr/local/bin

After an reboot of my system I started acid and get the duplicate message
again.

Is it neccesary to do a full reinstallation of snort?
  



 


-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: