Re: Barnyard2 and dealing with mysql_error

[firnsy <firnsy () securixlive com>]

G'day James,

Just to clean up the discussion on this list.

The mysql component of the database does have the option to 
automatically reconnect on a dropped connection. It's auto discovered at 
compile time and is checked using the mysql version number.

If configured correctly and supported by your mysql server, config.h 
should yield:

#define MYSQL_HAS_OPT_RECONNECT 1

What this is supposed to do is block the barnyard2 spooler until the 
connection has re-established and then continue. Thus you would not miss 
any events.

If your config.h has this option and you are in fact missing alerts then 
that is a different story, a bug in fact and we'd be happy to here about 
it on our mailing list.

Regards,
- firnsy

On 08/08/11 06:38, James Lay wrote:
> > Greetings James,
> >
> > is your database having some issue?
> >
> > Where is your database located? On the same system on a remote system?
> >
> > Is there any network quirks that woul tear down your session?
> >
> > Are you using a SSL session?
> >
> > Do you have some timeout values set in your my.conf (server side)?
>
>
> DB is peachy
>
> Oh it's remote (and on a certain PPPoE link you may be familiar with ;))
>
> Just my ISP 8-|...sometimes my pppoe link bounces..not often, but often
> enough (twice a month?).
>
> Negative on SSL (I know...I know.. ;))
>
> Haven't set the server variables yet in my.conf.  I've seen some things
> after googling, but I'm hoping to get some recommendations here.  Thank
> you.
>
> James
>
> P.S. Joining the barnyard2 groups today so I don't drive everyone in the
> snort groups crazy ;)
>
>
>
> ------------------------------------------------------------------------------
> BlackBerry® DevCon Americas, Oct. 18-20, San Francisco, CA
> The must-attend event for mobile developers. Connect with experts.
> Get tools for creating Super Apps. See the latest technologies.
> Sessions, hands-on labs, demos&  much more. Register early&  save!
> http://p.sf.net/sfu/rim-blackberry-1
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
> Please see http://www.snort.org/docs for documentation


------------------------------------------------------------------------------
BlackBerry® DevCon Americas, Oct. 18-20, San Francisco, CA
The must-attend event for mobile developers. Connect with experts. 
Get tools for creating Super Apps. See the latest technologies.
Sessions, hands-on labs, demos & much more. Register early & save!
http://p.sf.net/sfu/rim-blackberry-1
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please see http://www.snort.org/docs for documentation