Snort mailing list archives
Barnyard snorts, but no Alerts cached
From: Michael Miller <michael.miller () state co us>
Date: Fri, 2 Apr 2004 12:15:06 -0700
I had everything up and running smoothly but ran into a snag when trying to configure barnyard for a second sensor. Left with a database that had an extra 500,000 events I couldn't see, I dropped and recreated the database with the scripts from the controb folder in snort 2.1.0. Now barnyard sees new logs, says it imports them, and ACID's Total Events log climbs, but when I press Update Alert Cache, no alerts get added to the cache. I've dropped and recreated the database, recompiled barnyard, reinstalled Acid..., poked around the database with mysqlcc and am at an impasse.
Current thread:
- Barnyard snorts, but no Alerts cached Michael Miller (Apr 02)
- Re: Barnyard snorts, but no Alerts cached Andrew R. Baker (Apr 03)