Re: Barnyard2 issue w/unified2 ?

[beenph <beenph () gmail com>]

On Fri, Aug 9, 2013 at 9:06 PM, Jeff Kell <jeff-kell () utc edu> wrote:
> Getting a rash of these recently... causes barnyard2 to abort, and only
> way to "obviously" clear is to go to the database and "delete from
> sig_reference";
>
> > Aug  9 20:55:03 snort-dorms barnyard2[11053]: FATAL ERROR: database
> > mysql_error: Duplicate entry '167807-1' for key
> > 'PRIMARY'#012#011SQL=[INSERT INTO sig_reference
> > (ref_id,sig_id,ref_seq) VALUES ('132475','167807','1');]
> > Aug  9 20:55:03 snort-dorms barnyard2[11053]: Barnyard2 exiting
>
> Have also had it recur after the "delete" reset of the table.
>
> We have 8 snort/barnyard2 instances running across multiple sensors, not
> sure if that's relevant.

Which version of barnyard2 are you running?
Are you logging to a InnoDB or MyIASM schema?

-elz

------------------------------------------------------------------------------
Get 100% visibility into Java/.NET code with AppDynamics Lite!
It's a free troubleshooting tool designed for production.
Get down to code-level detail for bottlenecks, with <2% overhead. 
Download for free and get started troubleshooting in minutes. 
http://pubads.g.doubleclick.net/gampad/clk?id=48897031&iu=/4140/ostg.clktrk
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!