RE: barnyard beta 4

["neal " <ntimm () austin rr com>]

Can you send me the link to the cvs.

-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of Andrew R.
Baker
Sent: Wednesday, November 14, 2001 12:22 PM
To: ntimm () stingrey com
Cc: snort-users () lists sourceforge net
Subject: Re: [Snort-users] barnyard beta 4



The "Unable to find SID" messages appear when the Signature ID (loaded
from sid-msg.map) for an alert cannot be located.  I would suggest
updating to the CVS version of barnyard and making sure you are running
at least build 84 of snort.

-Andrew


> Neal Timm wrote:
>
> receiving these error messages when trying to start
> Unable to find SID (1, 2)
> Unable to find SID (1, 2)
> Rotating file [read 2 records from 
> /var/log/snort/snort.alert.1004954881]
> Unable to find SID (1, 2)
> Unable to find SID (1, 2)
> Unable to find SID (2, 3)
> Unable to find SID (2, 3)
> Unable to find SID (0, 1004957390)
> Unable to find SID (0, 1004957390)
> Unable to find SID (119221, -210996264)
>
> Then it seg faults
> Running redhat 7.2 snort version 1.8.2 build 86
>
> Any help would be appreciated just trying to log it to syslog.

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users