Snort mailing list archives

Re: Where's Waldo?


From: AllowOverride <allowoverride () gmail com>
Date: Wed, 10 Oct 2012 14:46:29 -0700

thanks waldo :) makes sense, i thought so as well since zero byte, but
the word corrupt through me

On Wed, 2012-10-10 at 14:55 -0400, waldo kitty wrote:
On 10/9/2012 01:54, AllowOverride wrote:
WARNING: Ignoring corrupt/truncated waldofile '/tmp/waldo'

i updated my barnyard2.conf, and im still getting this message.

why is it corrupt?

-rw-r--r-- 1 root root 0 Oct 8 17:42 waldo

the obvious answer is that it is zero bytes and thus has no data in it... if the 
code is looking for data in a specific format, it won't find it in /that/ file 
at this time... it is rightly emitting the warning message ;)


i still think barnyard2.conf is not working right.
someone said im not doing the research
i followed the official howtos. go figure...


suggestions now? thanks

------------------------------------------------------------------------------
Don't let slow site performance ruin your business. Deploy New Relic APM
Deploy New Relic app performance management and know exactly
what is happening inside your Ruby, Python, PHP, Java, and .NET app
Try New Relic at no cost today and get our sweet Data Nerd shirt too!
http://p.sf.net/sfu/newrelic-dev2dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!


------------------------------------------------------------------------------
Don't let slow site performance ruin your business. Deploy New Relic APM
Deploy New Relic app performance management and know exactly
what is happening inside your Ruby, Python, PHP, Java, and .NET app
Try New Relic at no cost today and get our sweet Data Nerd shirt too!
http://p.sf.net/sfu/newrelic-dev2dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!


Current thread: