Re: Barnyard woes

["David" <dwad24 () excite com>]

Thanks to everybody for their responses!  I Really appreciate the help as always!  I went ahead and fixed my 
sid-msg.map file on my acid server, so I'll see within the next few days if it the fix worked.



Thanks again everyone!



Dave









 --- On Tue 05/25, Bamm Visscher < bamm () satx rr com > wrote:

From: Bamm Visscher [mailto: bamm () satx rr com]

To: dwad24 () excite com

     Cc: snort-users () lists sourceforge net

Date: Tue, 25 May 2004 09:48:16 -0500

Subject: Re: [Snort-users] Barnyard woes



You need to make sure your sid-msg.map is updated.<br><br>Bammkkkk<br><br>On Tue, May 25, 2004 at 08:54:23AM -0400, 
David wrote:<br>> hey everybody,I was hoping somone could provide me with some insight... :)I have barnyard-0.1.0 
installed and for some reason it inputs some alerts into my DB with the sig_name as "Snort Alert [1:2416:0]" where the 
2416 is the sig_id.  It only seems to do this for a small handful of the sigs, a lot of which are ones I have written 
myself.  Has anyone seen this problem?  Is this issue fixed in 0.2.0?  I am trying to get this to work without 
upgrading if possible...TIA everyone,Dave<br><br><br>-------------------------------------------------------<br>This 
SF.Net email is sponsored by: Oracle 10g<br>Get certified on the hottest thing ever to hit the market... Oracle 10g. 
<br>Take an Oracle 10g class now, and we'll give you the exam 
FREE.<br>http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click<br>_______________________________________________<br>Snort-users
 mailing list<br>Snort-users () lists sourceforge net<br>Go to this URL to change user options or 
unsubscribe:<br>https://lists.sourceforge.net/lists/listinfo/snort-users<br>Snort-users list 
archive:<br>http://www.geocrawler.com/redir-sf.php3?list=snort-users<br>

_______________________________________________
Join Excite! - http://www.excite.com
The most personalized portal on the Web!


-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g. 
Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users