Snort mailing list archives

Re: Barnyard2 - Phantom cid/sid?


From: beenph <beenph () gmail com>
Date: Thu, 24 Jan 2013 11:47:14 -0500

On Thu, Jan 24, 2013 at 11:38 AM, Eoin Miller
<eoin.miller () trojanedbinaries com> wrote:
On 1/24/2013 16:33, beenph wrote:
CID value comes from the sensor table.

-elz

That I get, but there are NO entries in the table, at all. I dropped the
DB, recreated and only one of the sensors complains about this. It is
really weird. I am looking for some type of client caching with mysql
libs, or anything, but can't find where it is getting this from.


There's no caching in 2-1.9.
Are you sure your pointing to the good database server?

------------------------------------------------------------------------------
Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS,
MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current
with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft
MVPs and experts. ON SALE this month only -- learn more at:
http://p.sf.net/sfu/learnnow-d2d
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!


Current thread: