Snort mailing list archives

Fw: Error in Postgres dbase


From: "reynald" <rtm () cybees com>
Date: Wed, 19 Jan 2005 12:10:25 +0800

fyi,

I did some research and found out that i need to configure the sensor_name in snort.conf. It indicates that i need to 
set this when i have
multiple sensors logging on the same database. The said error below was resolved, but my rules wont take effect still.

did i missed something?

thanks,
reynald

----- Original Message ----- 
From: reynald 
To: snort-users () lists sourceforge net 
Cc: Reynald Mahinay 
Sent: Tuesday, January 18, 2005 7:08 PM
Subject: Error in Postgres dbase


Hello,

Can somebody help me resolve this error;

ERROR:  Cannot insert a duplicate key into unique index event_pkey

The error occured when i tried to use this command to log alerts on my ACID using Postgres.
(snort -c /etc/snort/snort.conf -i eth1 -D). It logs the alert but some rules wont take effect (like blocking of web 
sites)

However, all of my rules works perfectly fine when i used this command "snort -c /etc/snort/snort.conf -i eth2 -A fast 
-D". 
The only problem is it wont log to ACID, the logs goes to my /var/log/snort folder instead.

Any help will be highly appreciated..thanks

-reynald

Current thread: