Home page logo
/

snort logo Snort mailing list archives

Re: Barnyard2 problems with reputation preproc rules
From: Dave Corsello <snort-users () wintertreemedia com>
Date: Mon, 10 Feb 2014 07:46:54 -0500

On 2/9/2014 10:35 AM, beenph wrote:
Now you said it "crashed" mabey having the log would help explain and
this is something you
need to understand. It will generally exit gracefully with a error
detail because if it would really
crash, you wouln't have output to explain what is happening :)
So having those messages can help.
Yes, sorry.  Crash was the wrong word.  I got an "ERROR inserting new
signature" followed by "FATAL ERROR: [dbProcessSignatureInformation()]:
Failed, stoping processing" followed by a respawn.  Between the two
Snort systems, this is the only insert error that I've gotten since
upgrading my database server.
While you created that new database, did you ensure it was running
InnoDB as storage engine? (should be but you never know)
Yes.  In fact on this system, the acid tables were also created as
InnoDB, whereas on the old system they were MyISAM.  Maybe this
contributes to the decreased insert errors?  But the errors have all
occurred on main tables, not acid tables.
Also technically you shouldn't need to update your client libraries
and recompile against them, you could either just update them if you
feel's like it
but they should replace the old library and since they are shared lib,
you do not need to recompile unless you statically linked them
into your previous build (which i doubt) then yes you would need to
recompile for change to take effect.
I'll try updating them.

------------------------------------------------------------------------------
Managing the Performance of Cloud-Based Applications
Take advantage of what the Cloud has to offer - Avoid Common Pitfalls.
Read the Whitepaper.
http://pubads.g.doubleclick.net/gampad/clk?id=121051231&iu=/4140/ostg.clktrk
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault