Snort mailing list archives
Re: Barnyard2 database failures
From: beenph <beenph () gmail com>
Date: Wed, 2 Jan 2013 16:42:12 -0500
On Wed, Jan 2, 2013 at 4:24 PM, Dave Corsello <snort-users () wintertreemedia com> wrote:
The errors happen at random times throughout the day, and they don't correlate to any other scheduled activity.
Again, the only factor that has changed is that Snort has been upgraded.
Well as stated before and this should have no incidence on the logging, so there must be something else that is involved. What type of mysql storage do you use (MyIASM or InnoDB) Do you have mysql logs?
Is there any significance in the fact that all failed transactions contain the following string: WARNING database: [Database()] Failed transaction with current query transaction #012
This message is generic and indicate that the following row's where not inserted since the involved transaction failed. This is what i would do: 1- stop all barnyard2 process 2- stop your database 3- restart your database and enable logging query logging 4- start one barnyard2 process and let it run for a while in console so when it will fail it will not restart. Send the mysql logs of the event when this occur. Personaly i think it could be two things. 1: mysql using MyIASM storage instead of InnoDB. (Should be InnoDB) 2: ressource exaustion on the database server that could kill the client thread. -elz ------------------------------------------------------------------------------ Master Java SE, Java EE, Eclipse, Spring, Hibernate, JavaScript, jQuery and much more. Keep your Java skills current with LearnJavaNow - 200+ hours of step-by-step video tutorials by Java experts. SALE $49.99 this month only -- learn more at: http://p.sf.net/sfu/learnmore_122612 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- Re: Barnyard2 database failures Dave Corsello (Jan 02)
- Re: Barnyard2 database failures beenph (Jan 02)
- Re: Barnyard2 database failures waldo kitty (Jan 03)
- Re: Barnyard2 database failures beenph (Jan 04)
- Re: Barnyard2 database failures waldo kitty (Jan 06)
- Re: Barnyard2 database failures beenph (Jan 06)
- Re: Barnyard2 database failures waldo kitty (Jan 03)
- Re: Barnyard2 database failures beenph (Jan 02)