Re: [Sguil-users] Barnyard stop suddenly

["Bamm Visscher" <bamm.visscher () gmail com>]

This is a snort unified output problem that creeps up every couple of
months. I am not sure there has ever been a fix for it.  What version
of snort are you running?

Bammkkkk


On 10/10/06, Jesús Gálvez <jesuxgalvez () yahoo es> wrote:
> Hi, I hace installed snort+sguil+barnyard. My problem is that when some time
> pass (usually one day), barnyard is down, and  I only got raise it erasing
> waldo.file
> and restarting the service barnyard.
>
> If I try raise the service without erase waldo.dile the syslog give me the
> next error:
>
> ERROR: Invalid packet length: 171390775
> Oct  9 11:42:54 localhost barnyard[19280]: FATAL ERROR: Read error
> Oct  9 11:42:54 localhost barnyard[19280]: Exiting
>
>
> I don´t know where can be the problem.
>
>
>  ________________________________
>
> LLama Gratis a cualquier PC del Mundo.
> Llamadas a fijos y móviles desde 1 céntimo por minuto.
> http://es.voice.yahoo.com
>
>
> -------------------------------------------------------------------------
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to share your
> opinions on IT & business topics through brief surveys -- and earn cash
> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
>
> _______________________________________________
> Sguil-users mailing list
> Sguil-users () lists sourceforge net
> https://lists.sourceforge.net/lists/listinfo/sguil-users


-- 
sguil - The Analyst Console for NSM
http://sguil.sf.net

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users