Snort mailing list archives

barnyard2 not updating waldo file


From: "Daniel Qian" <daniel.qian () supracanada com>
Date: Mon, 14 Sep 2009 23:46:02 -0400

Everything works for me except for the waldo file. When I start up 
barnyard2, it creates the file by itself but when I stop barnyard2, nothing 
happens. It always outputs from the same record if the waldo file is still 
there when barnyard2 starts.
My machine is an intel 64bit running on Redhadhat Fedora 1l and running 
Barnyard 2-1.6 on command line

/usr/local/bin/barnyard2 -c /etc/snort/barnyard2.conf  -d /var/log/snort -f 
snort.log -w /var/log/snort/barnyard.waldo -D


settings in /etc/snort/barnyard2.conf:

config reference-map:   /etc/snort/reference.config
config class-map:           /etc/snort/classification.config
config gen-msg-map:     /etc/snort/gen-msg.map
config sid-msg-map:         /etc/snort/sid-msg.map
config hostname:        noc
config interface:       eth1
input unified2
output database: alert, mysql, user=snort password=snortpass dbname=snort 
host=localhost

Is anyone aware of this issue?


Thanks,
Daniel 


------------------------------------------------------------------------------
Come build with us! The BlackBerry&reg; Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay 
ahead of the curve. Join us from November 9&#45;12, 2009. Register now&#33;
http://p.sf.net/sfu/devconf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: